How many Netty netty-incubator-codec-ohttp CVEs are in CISA KEV?

None of Netty netty-incubator-codec-ohttp's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Netty netty-incubator-codec-ohttp are affected?

20 distinct Netty netty-incubator-codec-ohttp versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Netty netty-incubator-codec-ohttp CVEs?

Netty netty-incubator-codec-ohttp's CVEs most often map to these CWE weakness types: CWE-125 (Out-of-bounds Read), CWE-190 (Integer Overflow or Wraparound), CWE-20 (Improper Input Validation), CWE-325 (Missing Cryptographic Step).

How many critical Netty netty-incubator-codec-ohttp vulnerabilities are there?

Netty netty-incubator-codec-ohttp has 1 critical and 1 high-severity CVEs.

What is the average severity of Netty netty-incubator-codec-ohttp CVEs?

The average CVSS base score across Netty netty-incubator-codec-ohttp's scored CVEs is 7.5.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

Netty

5 CVEs

Netty netty-incubator-codec-ohttp Vulnerabilities

Name: Netty netty-incubator-codec-ohttp vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for netty-incubator-codec-ohttp by Netty.

5

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.5

Avg CVSS

2024–2026

Last updated June 4, 2026

Overview

Netty netty-incubator-codec-ohttp has 5 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Netty netty-incubator-codec-ohttp, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Netty netty-incubator-codec-ohttp's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High1

Medium3

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Netty netty-incubator-codec-ohttp's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No Netty netty-incubator-codec-ohttp CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Netty netty-incubator-codec-ohttp version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 0.0.22.Final2 CVEs
< 0.0.131 CVE
< 0.0.13.Final1 CVE
< 0.0.211 CVE
< 0.0.21.Final1 CVE
< 0.0.221 CVE
>= 0.0.3.Final, < 0.0.11.Final1 CVE
0.0.3 <= v < 0.0.111 CVE

Fixed in

0.0.111 CVE
0.0.131 CVE
0.0.13.Final1 CVE
0.0.211 CVE
0.0.221 CVE
1e13447342d7d8174fb2c6b015d7db7e822fd5311 CVE
28f977f293591a4e837bd59ceb441f9f703499151 CVE
3d3b4e527fc82ad0fe3db1af951ffd0ec9a106801 CVE
7ad38d5cc2827af7e067e5c1e1ac37cd4566dad91 CVE
80defe2fbb66a4b88e1198415809718388a315d81 CVE
9a01c310081b2f3f3a4fa10fe874936ab0f7c6771 CVE
b7476c33786e8d1aab58edd54f9220901c47b3f01 CVE

Find a version

5 CVEs

Sort

netty-incubator-codec-ohttp OHttpVersionChunkDraft's Missing Final-Chunk Enforcement Leads to Undetected Stream Truncation
CVE-2026-48480
Patch
CWE-325
Medium · CVSS 6.6
EPSS 0.2% (6th pct)2026-06-04
netty-incubator-codec-ohttp's Incorrect Native Pointer Derivation in Pooled Direct ByteBuf Fallback Leads to Out-of-Bounds Native Memory Access
CVE-2026-48040
Patch
CWE-125
Medium · CVSS 6.8
EPSS 0.2% (7th pct)2026-06-04
netty-incubator-codec-ohttp's HPKEContext operations may produce empty byte[] on failures
CVE-2026-41207
Patch
CWE-330
Medium · CVSS 6.9
EPSS 0.2% (9th pct)2026-06-04
Absent Input Validation in BinaryHttpParser in the netty incubator codec.bhttp
CVE-2024-40642
Patch
CWE-20
High · CVSS 8.1
EPSS 0.7% (48th pct)2024-07-18
Critical vulnerability · 2024-06-04
CVE-2024-36121
Patch
CWE-190
Critical · CVSS 9.1
EPSS 0.3% (19th pct)2024-06-04

Common weakness types

The CWE weakness categories most often found in Netty netty-incubator-codec-ohttp CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Netty netty-incubator-codec-ohttp CVEs were published each year.

2024

2

2026

3

Other Netty products

Browse vulnerabilities for other products by Netty.

netty76 CVEs io.netty:netty-codec-http23 CVEs io.netty:netty11 CVEs org.jboss.netty:netty10 CVEs io.netty:netty-codec-http29 CVEs io.netty:netty-handler8 CVEs io.netty:netty-codec5 CVEs io.netty:netty-codec-haproxy5 CVEs

All Netty vulnerabilities

Frequently asked questions

Common questions about Netty netty-incubator-codec-ohttp vulnerabilities.

How many CVEs does Netty netty-incubator-codec-ohttp have?: Netty netty-incubator-codec-ohttp has 5 published CVE records since 2024.
How many Netty netty-incubator-codec-ohttp CVEs are in CISA KEV?: None of Netty netty-incubator-codec-ohttp's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Netty netty-incubator-codec-ohttp vulnerabilities?: No Netty netty-incubator-codec-ohttp CVEs currently have a tracked public exploit in this dataset.
Which versions of Netty netty-incubator-codec-ohttp are affected?: 20 distinct Netty netty-incubator-codec-ohttp versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Netty netty-incubator-codec-ohttp CVEs?: Netty netty-incubator-codec-ohttp's CVEs most often map to these CWE weakness types: CWE-125 (Out-of-bounds Read), CWE-190 (Integer Overflow or Wraparound), CWE-20 (Improper Input Validation), CWE-325 (Missing Cryptographic Step).
How many critical Netty netty-incubator-codec-ohttp vulnerabilities are there?: Netty netty-incubator-codec-ohttp has 1 critical and 1 high-severity CVEs.
What is the average severity of Netty netty-incubator-codec-ohttp CVEs?: The average CVSS base score across Netty netty-incubator-codec-ohttp's scored CVEs is 7.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Netty netty-incubator-codec-ohttp vulnerabilities

Monitor new Netty netty-incubator-codec-ohttp vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing