This CVE has been withdrawn by MITRE
MITRE marked CVE-2026-100655 as REJECTED on . There is no longer a valid blast radius to assess. Any historical package or vendor data shown below is preserved for audit reference only.
Reason given by MITRE
This CVE ID has been rejected as a duplicate.
CVE-2026-100655 Blast Radius
✕ WITHDRAWN — HISTORICAL DATANetty (io.netty:netty-codec-http) versions up to and including 4.1.137.Final and from 4.2.0.Final through 4.2.17.Final accept an unlimited number of c…