This CVE has been withdrawn by MITRE
MITRE marked CVE-2026-100656 as REJECTED on . There is no longer a valid blast radius to assess. Any historical package or vendor data shown below is preserved for audit reference only.
Reason given by MITRE
This CVE ID has been rejected as a duplicate.
CVE-2026-100656 Blast Radius
✕ WITHDRAWN — HISTORICAL DATANetty (io.netty:netty-codec-http) contains an unbounded per-connection queue growth flaw in HttpServerCodec. The codec tracks the HTTP method of each …