https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 13:03:25 +0000 https://cve.radiocsirt.org/vuln/cve-2026-73507 <p><strong>Affected:</strong> netty</p> <p>Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Final and 4.2.16.Final, io.netty.handler.codec.xml.XmlFrameDecoder.decode() failed to preserve closing-tag parser state across invocations, so an unauthenticated remote attacker could trickle-feed repeated &lt;/ sequences that repeatedly rescanned the accumulated buffer and exhausted an EventLoop thread&#39;s CPU, causing denial of service with a maxFrameLength of 1 MB. This issue is fixed in versions 4.1.136.Final and 4.2.16.Final.</p> <p><strong>Affected:</strong> netty</p> <p>Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Final and 4.2.16.Final, io.netty.handler.codec.xml.XmlFrameDecoder.decode() failed to preserve closing-tag parser state across invocations, so an unauthenticated remote attacker could trickle-feed repeated &lt;/ sequences that repeatedly rescanned the accumulated buffer and exhausted an EventLoop thread&#39;s CPU, causing denial of service with a maxFrameLength of 1 MB. This issue is fixed in versions 4.1.136.Final and 4.2.16.Final.</p> https://cve.radiocsirt.org/vuln/cve-2026-73507