This CVE has been withdrawn by MITRE
MITRE marked CVE-2026-100657 as REJECTED on . There is no longer a valid blast radius to assess. Any historical package or vendor data shown below is preserved for audit reference only.
Reason given by MITRE
This CVE ID has been rejected as a duplicate.
CVE-2026-100657 Blast Radius
✕ WITHDRAWN — HISTORICAL DATANetty's STOMP codec (io.netty:netty-codec-stomp) contains a ByteBuf leak in StompSubframeDecoder. Once a frame's declared content-length has been full…