io.netty.incubator:netty-incubator-codec-bhttp
Maven5 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting io.netty.incubator:netty-incubator-codec-bhttppage 1 of 1
- CVE-2024-40642HIGHCVSS 8.1EG 8.1fixed in 0.0.13.Final2024-07-18
vulnerable: 0.0.1.Final ... 0.0.9.Final (12 versions)
The netty incubator codec.bhttp is a java language binary http parser. In affected versions the `BinaryHttpParser` class does not properly validate input values thus giving attackers almost complete control over the HTTP requests construct…
- CVE-2026-61799MEDIUMCVSS 5.3EG 5.3fixed in 0.0.23.Final2026-08-20
vulnerable: 0.0.1.Final ... 0.0.9.Final (22 versions)
netty-incubator-codec-ohttp: Binary HTTP parser unchecked varint length overflow causes decoder crash ## Summary `io.netty.incubator:netty-incubator-codec-bhttp` uses attacker-controlled Binary HTTP variable-length integers as `long` val…
- CVE-2026-61827HIGHEG not assessedfixed in 0.0.23.Final2026-08-20
vulnerable: 0.0.1.Final ... 0.0.9.Final (22 versions)
netty-incubator-codec-ohttp: BinaryHttpParser should enforce limits for variable lengths fields We don't enforce any limits for the encoded variable lengths that are used for fields. As the remote peer controls these it's easy for the rem…
- CVE-2026-63124HIGHCVSS 7.5EG 7.5fixed in 0.0.23.Final2026-08-20
vulnerable: 0.0.1.Final ... 0.0.9.Final (22 versions)
netty-incubator-codec-ohttp: Binary HTTP parser infinite loop on known-length field section boundary ## Summary `io.netty.incubator:netty-incubator-codec-bhttp` can enter a non-terminating parse loop when a known-length Binary HTTP field…
- CVE-2026-63202HIGHCVSS 7.5EG 7.5fixed in 0.0.23.Final2026-08-20
vulnerable: 0.0.1.Final ... 0.0.9.Final (22 versions)
netty-incubator-codec-ohttp BinaryHttpParser: Unauthenticated CPU-exhaustion DoS via infinite loop in field-section decoding # BinaryHttpParser: Unauthenticated CPU-exhaustion DoS via infinite loop in field-section decoding - **ID:** BHT…
Check whether io.netty.incubator:netty-incubator-codec-bhttp is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for io.netty.incubator:netty-incubator-codec-bhttp CVEs against the assets you own.
Book a Demo →