This CVE has been withdrawn by MITRE
MITRE marked CVE-2026-100658 as REJECTED on . There is no longer a valid blast radius to assess. Any historical package or vendor data shown below is preserved for audit reference only.
Reason given by MITRE
This CVE ID has been rejected as a duplicate.
CVE-2026-100658 Blast Radius
✕ WITHDRAWN — HISTORICAL DATANetty (io.netty:netty-codec-http) contains an unbounded per-connection queue in WebSocketServerExtensionHandler. The handler offers an entry to its pe…