`io.netty:netty-codec`

Ecosystem:
maven

Package URL:
pkg:maven/io.netty:netty-codec

Total PRs:
113 Dependabot PRs

Latest PR:
9 days ago

Unique Repositories:
76 repositories

Unique Repos (30 days):
5 repositories

Security Advisories

Netty Lz4FrameDecoder is vulnerable to resource exhaustion

GHSA-mj4r-2hfc-f8p6 CVE-2026-42583 HIGH published about 1 month ago • updated 18 days ago

### Summary Lz4FrameDecoder allocates a ByteBuf of size `decompressedLength` (up to 32 MB per block) before LZ4 runs. A peer only needs a 21-byte h...

SnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way

GHSA-9vjp-v76f-g363 CVE-2021-37137 HIGH published over 4 years ago • updated 20 days ago

### Impact The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may bu...

4.2.12.Final → 4.2.14.Final Patch PR

Closed 9 days ago 1 comment

Bump the gradle group across 0 directory with 2 updates

MihaiCristianCondrea/App-Toolkit-for-Android #671

4.1.132.Final → 4.2.14.Final Minor PR

Closed 17 days ago 1 comment

build(deps): bump io.netty:netty-codec from 4.1.125.Final to 4.1.133.Final in /extensions/open-mysql-db

4paradigm/OpenMLDB #4115

4.1.125.Final → 4.1.133.Final Patch PR

Open 27 days ago 1 comment

chore(deps): bump the gradle-dependencies group across 1 directory with 8 updates

AndroidIRCx/NULVEX #53

4.2.12.Final → 4.2.13.Final Patch PR

Closed about 1 month ago 1 comment

chore(deps): bump the all-backend-non-major-dependencies group in /backend with 3 updates

digitalservicebund/ris-norms #2312

4.1.133.Final → 4.2.13.Final Minor PR

Closed about 1 month ago 1 comment

Bump the maven group across 3 directories with 21 updates

idgrou/sakai #10

4.1.112.Final → 4.1.125.Final Patch PR

Closed 2 months ago 2 comments

Bump the dependencies group with 3 updates

Olsc/DroidGit #19

4.2.10.Final → 4.2.11.Final Patch PR

Open 3 months ago 1 comment

Bump the netty group with 11 updates

IBM/ibm-cos-sdk-java-v2 #39

4.2.9.Final → 4.2.10.Final Patch PR

Closed 3 months ago 1 comment

Bump io.netty:netty-codec from 4.1.87.Final to 4.1.125.Final

52North/SOS #1585

4.1.87.Final → 4.1.125.Final Patch PR

Closed 4 months ago 1 comment

Bump the dependencies group across 1 directory with 5 updates

Olsc/DroidGit #14

4.2.9.Final → 4.2.10.Final Patch PR

Closed 4 months ago 2 comments

chore(deps): bump the low-risk group with 9 updates

Ensono/stacks-java-module-parent #346

4.2.9.Final → 4.2.10.Final Patch PR

Open 4 months ago 6 comments

build(deps): bump the maven group across 18 directories with 13 updates

pallakartheekreddy/knowledge-platform #5

4.1.68.Final → 4.1.125.Final Patch PR

Closed 4 months ago 1 comment

build(deps): bump io.netty:netty-codec from 4.1.108.Final to 4.1.125.Final

millenniumsingha/Safelink #73

4.1.108.Final → 4.1.125.Final Patch PR

Closed 5 months ago 2 comments

Bump io.netty:netty-codec from 4.1.125.Final to 4.2.9.Final

wsdfafw/Wurst7 #267

4.1.125.Final → 4.2.9.Final Minor PR

Open 5 months ago 1 comment

build(deps): bump io.netty:netty-codec from 4.1.68.Final to 4.1.125.Final in /extensions/open-mysql-db

4paradigm/OpenMLDB #4073

4.1.68.Final → 4.1.125.Final Patch PR

Open 5 months ago 1 comment

chore(deps): bump the low-risk group with 7 updates

Ensono/stacks-java-module-parent #336

4.2.8.Final → 4.2.9.Final Patch PR

Closed 6 months ago 1 comment

chore(deps): bump the low-risk group with 10 updates

Ensono/stacks-java-module-parent #334

4.2.7.Final → 4.2.8.Final Patch PR

Open 6 months ago 4 comments

Bump io.netty:netty-codec from 4.1.119.Final to 4.2.8.Final in /src/jvm/knet

masesgroup/KNet #1272

4.1.119.Final → 4.2.8.Final Minor PR

Closed 6 months ago 1 comment

Bump io.netty:netty-codec from 4.1.124.Final to 4.1.125.Final

Opetushallitus/ehoks #733

4.1.124.Final → 4.1.125.Final Patch PR

Closed 6 months ago 3 comments

Bump the core-dependencies group in /workflow-core with 27 updates

danielscholl-osdu/workflow #10

4.1.118.Final → 4.2.7.Final Minor PR

Open 7 months ago 7 comments

Bump the netty group with 6 updates

BisonSchweizAG/jython #30

4.1.119.Final → 4.2.7.Final Minor PR

Open 8 months ago 1 comment

Bump io.netty:netty-codec from 4.2.6.Final to 4.2.7.Final

DataSQRL/sqrl #1649

4.2.6.Final → 4.2.7.Final Patch PR

Open 8 months ago 1 comment

Bump io.netty:netty-codec from 4.1.125.Final to 4.2.7.Final

buiawpkgew1/Wurst7 #203

4.1.125.Final → 4.2.7.Final Minor PR

Open 8 months ago 1 comment

build(deps): bump the gradle group across 1 directory with 59 updates

ricekot/zap-extensions #5

4.1.100.Final → 4.2.6.Final Minor PR

Closed 8 months ago 1 comment

Bump the test-tools group across 1 directory with 7 updates

chinchorobador/Dspace8.1Back #99

4.2.0.Final → 4.2.6.Final Patch PR

Open 8 months ago

Bump io.netty:netty-codec from 4.1.125.Final to 4.2.6.Final in /backend

digitalservicebund/ris-adm-vwv #1316

4.1.125.Final → 4.2.6.Final Minor PR

Merged 9 months ago

Bump io.netty:netty-codec from 4.1.125.Final to 4.2.6.Final

cev-api/wurst7-fork #2

4.1.125.Final → 4.2.6.Final Minor PR

Open 9 months ago

Bump io.netty:netty-codec from 4.1.118.Final to 4.1.125.Final in /hadoop-project

apache/hadoop #7972

4.1.118.Final → 4.1.125.Final Patch PR

Open 9 months ago

Bump io.netty:netty-codec from 4.2.5.Final to 4.2.6.Final in /src/jvm/knet

masesgroup/KNet #1146

4.2.5.Final → 4.2.6.Final Patch PR

Open 9 months ago

chore(deps): bump io.netty:netty-codec from 4.1.118.Final to 4.1.125.Final

Ensono/stacks-java-module-parent #269

4.1.118.Final → 4.1.125.Final Patch PR

Open 9 months ago 3 comments

build(deps): bump io.netty:netty-codec from 4.2.5.Final to 4.2.6.Final

apache/myfaces-tobago #6699

4.2.5.Final → 4.2.6.Final Patch PR

Closed 9 months ago 2 comments

Bump io.netty:netty-codec from 4.1.125.Final to 4.2.6.Final

buiawpkgew1/Wurst7 #183

4.1.125.Final → 4.2.6.Final Minor PR

Open 9 months ago 2 comments

Bump io.netty:netty-codec from 4.1.92.Final to 4.2.6.Final

jenkinsci/openstack-cloud-plugin #458

4.1.92.Final → 4.2.6.Final Minor PR

Closed 9 months ago 1 comment

Bump the test-tools group with 6 updates

DSpace/DSpace #11274

4.2.4.Final → 4.2.6.Final Patch PR

Merged 9 months ago

Build(deps): bump io.netty:netty-codec from 4.2.5.Final to 4.2.6.Final

navikt/syfobrukertilgang #229

4.2.5.Final → 4.2.6.Final Patch PR

Open 9 months ago

Bump io.netty:netty-codec from 4.2.5.Final to 4.2.6.Final

bennesp/json-schema-generator #220

4.2.5.Final → 4.2.6.Final Patch PR

Open 9 months ago

Bump io.netty:netty-codec from 4.1.125.Final to 4.2.5.Final

Wurst-Imperium/ChestESP #38

4.1.125.Final → 4.2.5.Final Minor PR

Open 9 months ago

Bump io.netty:netty-codec from 4.1.125.Final to 4.2.5.Final

Wurst-Imperium/Wurst7 #1209

4.1.125.Final → 4.2.5.Final Minor PR

Open 9 months ago 1 comment

Bump io.netty:netty-codec from 4.1.125.Final to 4.2.5.Final

Wurst-Imperium/Mo-Glass #77

4.1.125.Final → 4.2.5.Final Minor PR

Closed 9 months ago 1 comment

Bump io.netty:netty-codec from 4.1.125.Final to 4.2.5.Final

Wurst-Imperium/WI-Zoom #79

4.1.125.Final → 4.2.5.Final Minor PR

Open 9 months ago

Bump io.netty:netty-codec from 4.1.125.Final to 4.2.5.Final

buiawpkgew1/Wurst7 #182

4.1.125.Final → 4.2.5.Final Minor PR

Closed 9 months ago 2 comments

Bump io.netty:netty-codec from 4.2.4.Final to 4.2.5.Final

DataSQRL/sqrl #1545

4.2.4.Final → 4.2.5.Final Patch PR

Open 9 months ago 1 comment

Bump io.netty:netty-codec from 4.1.119.Final to 4.2.5.Final in /src/jvm/knet

masesgroup/KNet #1122

4.1.119.Final → 4.2.5.Final Minor PR

Open 9 months ago

build(deps): bump io.netty:netty-codec from 4.1.68.Final to 4.1.125.Final in /hu.bme.bigdata.homework.spark.flight2

benedekh/bigdata-projects #86

4.1.68.Final → 4.1.125.Final Patch PR

Open 9 months ago

Bump io.netty:netty-codec from 4.1.105.Final to 4.1.125.Final in /dependabot

threatgrid/ctia #1481

4.1.105.Final → 4.1.125.Final Patch PR

Merged 9 months ago

Bump io.netty:netty-codec from 4.1.124.Final to 4.1.125.Final in /dev/cnf/dependabot/check_this_in_if_it_changes

OpenLiberty/open-liberty #32736

4.1.124.Final → 4.1.125.Final Patch PR

Closed 9 months ago 1 comment

Bump the maven group across 2 directories with 5 updates

matthewtckr/hop #13

4.1.122.Final → 4.1.125.Final Patch PR

Closed 9 months ago 1 comment

Bump io.netty:netty-codec from 4.1.91.Final to 4.1.125.Final

umjammer/ACD-JAPI #6

4.1.91.Final → 4.1.125.Final Patch PR

Closed 9 months ago 1 comment

Bump io.netty:netty-codec from 4.1.122.Final to 4.1.125.Final in /mvn/dependencies/redis

link-it/govway #243

4.1.122.Final → 4.1.125.Final Patch PR

Open 9 months ago

Bump io.netty:netty-codec from 4.1.115.Final to 4.2.0.Final

wso2/carbon-data #327

4.1.115.Final → 4.2.0.Final Minor PR

Open 9 months ago

Package Details

Name:	`io.netty:netty-codec`
Ecosystem:	maven
PURL Type:	maven
Package URL:	`pkg:maven/io.netty:netty-codec`
JSON API:	View JSON

Security Advisories

4

Active advisories

HIGH 3

MODERATE 1

View All maven Advisories

Package Information

Description:

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.

Repository:	https://github.com/netty/netty
Homepage:	http://netty.io/
Latest Release:	`4.2.0.RC1` over 1 year ago
Dependent Repos:	4,698
Dependent Packages:	1,302
Ranking:	Top 0.1367% by dependent repos Top 0.0619% by dependent pkgs

PR Status

Open 66 (58.4%)

Merged 13 (11.5%)

Closed 30 (26.5%)

PR Types

Minor 34 (30.1%)

Patch 75 (66.4%)

io.netty:netty-codec

Security Advisories

Netty Lz4FrameDecoder is vulnerable to resource exhaustion

SnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way

Netty's decoders vulnerable to DoS via zip bomb style attack

Bzip2Decoder doesn't allow setting size restrictions for decompressed data

Recent PRs

Package Details

Security Advisories

4

Package Information

PR Status

PR Types

`io.netty:netty-codec`