NE
Product
netty-incubator-codec-ohttp
by netty · last CVE Sep 15, 2026
6
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 2High 2Medium 2Low 0
Watch

Add netty-incubator-codec-ohttp to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-48040
9.1
0%
Jun 4
netty-incubator-codec-ohttp's Incorrect Native Pointer Derivation in Pooled Direct ByteBuf Fallback Leads to Out-of-Bounds Native Memory Access
Affected: < 0.0.22.Final
CVE-2024-36121
9.1
0%
Jun 4
netty-incubator-codec-ohttp's BoringSSLAEADContext Repeats Nonces
Affected: >= 0.0.3.Final, < 0.0.11.Final
Showing 2