netty-incubator-codec-ohttp vulnerabilities
4 known vulnerabilities in netty-incubator-codec-ohttp from Netty. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.7 High severity
netty-incubator-codec-ohttp: Improper Control of a Resource Through its Lifetime
netty-incubator-codec-ohttp implements Oblivious HTTP (OHTTP) gateway and client functionality using Netty. Prior to 0.0.23.Final, the OHTTP gateway decryption path in codec-ohttp/src/main/java/io/netty/incubator/codec/ohttp/OHttpRequestResponseContext.java al
- 9.1 Critical severity
netty-incubator-codec-ohttp: Out-of-bounds Read
The netty incubator codec.bhttp is a java language binary http parser. The library implements Oblivious HTTP (RFC 9458) using BoringSSL's HPKE C library via JNI. When deriving native memory addresses for cryptographic operations versions prior to 0.0.22.Final
- 8.1 High severity
The netty incubator codec.bhttp is a java language binary http parser.
The netty incubator codec.bhttp is a java language binary http parser. In affected versions the `BinaryHttpParser` class does not properly validate input values thus giving attackers almost complete control over the HTTP requests constructed from the parsed ou
- 9.1 Critical severity
netty-incubator-codec-ohttp: Integer Overflow or Wraparound
netty-incubator-codec-ohttp is the OHTTP implementation for netty. BoringSSLAEADContext keeps track of how many OHTTP responses have been sent and uses this sequence number to calculate the appropriate nonce to use with the encryption algorithm. Unfortunately,