Critical
CVE-2026-75595
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 16
Reset filters
Medium
CVE-2026-75596
Netty: Fragmented ClientHello records trigger quadratic pre-handshake reassembly in default SNI parsing
High
CVE-2026-56822
Netty: TOCTOU in OcspServerCertificateValidator
High
CVE-2026-56821
Netty: Out-of-date OCSP Responses Accepted by OcspServerCertificateValidator
High
CVE-2026-56820
Netty: Missing CertificateID Validation in OCSP Response Allows Replay Attacks
High
CVE-2026-50010
Netty: Wrapping plain trust manager silently disables hostname verification
High
CVE-2026-45416
Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes
High
CVE-2026-44249
Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking
Low
CVE-2026-42578
Netty has HTTP Header Injection via HttpProxyHandler Disabled Validation (Incomplete Fix CVE-2025-67735)
High
CVE-2025-24970
SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine
Medium
CVE-2023-34462
netty-handler SniHandler 16MB allocation
High
CVE-2016-4970
Loop with Unreachable Exit Condition in Netty
Medium
CVE-2014-3488
Denial of service in Netty
High
CVE-2020-11612
Denial of Service in Netty
High
CVE-2020-7238
HTTP Request Smuggling in Netty
Medium
CVE-2019-20445
HTTP Request Smuggling in Netty
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.