Most recent entries from all

bdu:2022-00314

2026-10-03T07:05:17.083998+00:00

bdu:2022-00314

certfr-2022-avi-113 — De multiples vulnérabilités ont été découvertes dans les produits NetApp. Elles permettent à un attaquant de provoquer…

2026-10-03T07:05:17.084049+00:00

certfr-2022-avi-113

EUVD-2026-59929

2026-10-03T07:05:17.084070+00:00

EUVD-2026-59929

fkie_cve-2019-20445

2026-10-03T07:05:17.084091+00:00

HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.

GHSA-p2v9-g2qv-p635 — HTTP Request Smuggling in Netty

2026-10-03T07:05:17.084120+00:00

Affected: Maven: io.netty:netty-handler, Maven: org.jboss.netty:netty, Maven: io.netty:netty

HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.

gsd-2019-20445

2026-10-03T07:05:17.084148+00:00

gsd-2019-20445

OESA-2024-2066 — netty3 security update

2026-10-03T07:05:17.084160+00:00

Affected: openEuler:20.03-LTS-SP4: netty3

Netty is a NIO client server framework which enables quick and easy development of network applications such as protocol servers and clients. It greatly simplifies and streamlines network programming such as TCP and UDP socket server. Security Fix(es): Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding : chunked" line), which leads to HTTP request smuggling.(CVE-2019-16869) HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a colon, which might be interpreted as a separate header with an incorrect syntax, or might be interpreted as an "invalid fold."(CVE-2019-20444) HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.(CVE-2019-20445)

RHSA-2020:0497 — Red Hat Security Advisory: AMQ Online security update

2026-10-03T07:05:17.084187+00:00

netty: HTTP request smuggling netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header netty: HTTP Request Smuggling due to Transfer-Encoding whitespace mishandling

UBUNTU-CVE-2019-20445

2026-10-03T07:05:17.084207+00:00

Affected: Ubuntu:Pro:14.04:LTS: netty, Ubuntu:16.04:LTS: netty-3.9, Ubuntu:Pro:16.04:LTS: netty, Ubuntu:18.04:LTS: netty, Ubuntu:18.04:LTS: netty-3.9

HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.

WID-SEC-W-2022-2133 — JFrog Artifactory: Mehrere Schwachstellen in Drittanbieter-Komponenten

2026-10-03T07:05:17.084232+00:00

JFrog Artifactory nutzt verschiedene Komponenten von Drittanbietern. Diese enthalten mehrere Schwachstellen. Neuen Informationen von JFrog zufolge sind diese Schwachstellen jedoch nicht in Produkten von JFrog ausnutzbar.