Verified Advisories
Concise advisories for CRITICAL/HIGH vulnerabilities – affected and fixed versions confirmed against the vendor's own advisory before publishing. 2 total.
CVE-2026-55833
HIGH
CVSS 7.5
Verified Advisory
Jul 20, 2026
SPDY zlib header decompression amplification DoS in Netty (CVE-2026-55833)
Netty's SPDY header decoding continues inflating zlib-compressed header blocks after the raw header parser has exceeded `maxHeaderSize` and marked the frame truncated. A remote unauthenticated peer can send a small co...
Fixed in 4.2.16.Final; 4.1.136.Final
Denial Of Service
Netty
CVE-2026-55831
HIGH
CVSS 7.5
Verified Advisory
Jul 20, 2026
Resource exhaustion via unbounded SPDY SETTINGS map in Netty (CVE-2026-55831)
Netty's SPDY SETTINGS decoder accepts a peer-declared entry count up to the 24-bit frame-length limit and materializes every unique setting ID into a TreeMap-backed DefaultSpdySettingsFrame without an implementation-l...
Fixed in 4.2.16.Final; 4.1.136.Final
Denial Of Service
Netty