CVE-2026-42587
HIGH SEVERITYCVSS Score & Metrics
Base Score
7.5 / 10
Vulnerability Description
Netty: HttpContentDecompressor maxAllocation bypass when Content-Encoding set to br/zstd/snappy leads to decompression bomb DoS
Vulnerability Details
Published Date
Last Modified
Source
GitHub
Vendor
maven
Product
io.netty:netty-codec-http
Discussion (0)
Add Comment
No comments yet. Be the first!