CWE-284 (3086) CWE-79 (3002) CWE-416 (2584) CWE-862 (1959) CWE-125 (1763) CWE-122 (1674) CWE-89 (1560) CWE-22 (1479) CWE-787 (1325) CWE-200 (1256) CWE-20 (1136) CWE-863 (1129) CWE-306 (1104) CWE-918 (1033) CWE-78 (991) CWE-476 (948) CWE-639 (925) CWE-94 (871) CWE-400 (787) CWE-121 (731) CWE-190 (697) CWE-269 (689) CWE-119 (676) CWE-74 (675) CWE-770 (673) CWE-287 (664) CWE-362 (654) CWE-502 (618) CWE-77 (551) CWE-401 (467)

CWE-1035

7 CVEs View on MITRE →
CVE Severity CVSS EPSS Published Description Flags
CVE-2026-93558 high 7.5 0.0122 2026-09-18 A flaw was found in Netty's WebSocketServerExtensionHandler. A remote, unauthenticated attacker can
CVE-2026-93564 high 7.5 0.0106 2026-09-18 A flaw was found in Netty. A reference-count leak in the HAProxy PROXY-v2 message decoder allows a r
CVE-2026-93565 high 7.5 0.0086 2026-09-18 A flaw was found in Netty RtspDecoder. The `RtspMethods.valueOf()` function incorrectly strips trail
CVE-2026-93579 medium 6.5 0.0108 2026-09-18 A flaw was found in Netty's HTTP/2 stack. This vulnerability allows a remote attacker to inject proh
CVE-2026-93562 medium 6.5 0.0049 2026-09-18 A flaw was found in Netty's HTTP/1 decoder. Incomplete validation of malformed Transfer-Encoding hea
CVE-2026-93566 medium 6.5 0.0058 2026-09-18 A flaw was found in Netty. A remote attacker could exploit this by sending a specially crafted HTTP
CVE-2026-93492 medium 5.3 0.0048 2026-09-18 A flaw was found in Netty's HTTP/2 HpackEncoder. A remote attacker can exploit this by sending HTTP/