Beveiligingsadvies

CVE-2026-42585

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-13 18:12:39
Laatst bijgewerkt 2026-05-15 20:34:21
Toegewezen door GitHub_M
CVSS-score 6.5
Status PUBLISHED

Beschrijving

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty incorrectly parses malformed Transfer-Encoding, enabling request smuggling attacks. This vulnerability is fixed in 4.2.13.Final and 4.1.133.Final.