Beveiligingsadvies

CVE-2026-42580

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-13 18:04:03
Laatst bijgewerkt 2026-05-14 18:21:13
Toegewezen door GitHub_M
CVSS-score 6.5
Status PUBLISHED

Beschrijving

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's chunk size parser silently overflows int, enabling request smuggling attacks. This vulnerability is fixed in 4.2.13.Final and 4.1.133.Final.