GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
7 advisories
Netty Vulnerable to Cache Poisoning and Information Disclosure via CORS Vary Header Overwrite
Moderate
CVE-2026-59903
was published
for
io.netty:netty-codec-http
(Maven)
Aug 17, 2026
Netty: Memory Leak in DNS Record Decoder via Malformed Domain Names
Moderate
CVE-2026-73508
was published
for
io.netty:netty-codec-dns
(Maven)
Jul 24, 2026
Netty: Security Control Bypass via CORS Short-Circuit Failure
Moderate
CVE-2026-56746
was published
for
io.netty:netty-codec-http
(Maven)
Jul 22, 2026
Netty: QUIC stateless reset token material exposed through header-visible connection IDs
Moderate
CVE-2026-50009
was published
for
io.netty:netty-codec-classes-quic
(Maven)
Jun 15, 2026
Netty: DNS Cache Poisoning due to Predictable PRNG and Default Static Source Port
Moderate
CVE-2026-45673
was published
for
io.netty:netty-resolver-dns
(Maven)
Jun 8, 2026
Netty vulnerable to HTTP Request Smuggling due to malformed Transfer-Encoding
Moderate
CVE-2026-42585
was published
for
io.netty:netty-codec-http
(Maven)
May 7, 2026
Netty vulnerable to HTTP Request Smuggling due to incorrect chunk size parsing
Moderate
CVE-2026-42580
was published
for
io.netty:netty-codec-http
(Maven)
May 7, 2026
ProTip!
Advisories are also available from the
GraphQL API