N
Vendor security profile
Netty
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs75
Critical0
CISA KEV0
Public exploit0
Patch rate—
Avg. CVSS—
12-month vulnerability rate
CVE KEV
CVE severity distribution
75toplam CVE
Uncertain75 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
75Unknown
Latest vulnerabilities
6.9
CVE-2026-100666Netty 4.2.0 through 4.2.16 Response Desynchronization via HttpServerCodec
Patch status unknownEPSS %0
8.7
8.7
CVE-2026-100664Netty 4.2.2 through 4.2.17 HTTP/1 Host Header Authority Confusion
Patch status unknownEPSS %0
8.7
CVE-2026-100663Netty HTTP/1 CONNECT authority-form mistranslated to malformed HTTP/3
Patch status unknownEPSS %0
8.7
CVE-2026-100662Netty HTTP/3 QPACK encoder-stream unbounded memory exhaustion DoS
Patch status unknownEPSS %0
8.7
CVE-2026-100661Netty HTTP/3 QPACK Prefixed Integer DoS via Unbounded Accumulation
Patch status unknownEPSS %0
8.7
CVE-2026-100660Netty before 4.2.18.Final QpackEncoder Unbounded Memory Retention
Patch status unknownEPSS %0
6.9
CVE-2026-100659Netty 4.2.0 through 4.2.17 HTTP/3 Request Routing Bypass
Patch status unknownEPSS %0