netty-codec-http2 vulnerabilities

1 known vulnerability in netty-codec-http2 from Io.netty. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  netty: Uncontrolled Resource Consumption

  CVE-2026-42587May 13, 2026Netty

  Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, HttpContentDecompressor accepts a maxAllocation parameter to limit decompression buffer size and prevent decompression bomb attacks. This limit is co