netty-codec vulnerabilities

1 known vulnerability in netty-codec from Io.netty. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  netty: Uncontrolled Resource Consumption

  CVE-2026-42583May 13, 2026Netty

  Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Lz4FrameDecoder allocates a ByteBuf of size decompressedLength (up to 32 MB per block) before LZ4 runs. A peer only needs a 21-byte header plus compr