`io.netty:netty-codec`

Ecosystem:
maven

Package URL:
pkg:maven/io.netty:netty-codec

Total PRs:
115 Dependabot PRs

Latest PR:
about 1 month ago

Unique Repositories:
78 repositories

Unique Repos (30 days):
2 repositories

Security Advisories

Netty's decoders vulnerable to DoS via zip bomb style attack

GHSA-3p8m-j85q-pgmj CVE-2025-58057 MODERATE published 11 months ago • updated 28 days ago

### Summary With specially crafted input, `BrotliDecoder` and some other decompressing decoders will allocate a large number of reachable byte buf...

Netty: [Bzip2Decoder] Infinite Loop in RLE State Machine Leads to Event-Loop Thread Hang

GHSA-558v-64gr-wgg4 CVE-2026-59901 HIGH published 8 days ago • updated about 7 hours ago

The `Bzip2Decoder` handler in Netty's compression codec pipeline is vulnerable to a denial-of-service attack through a malformed bzip2 stream that ...

Netty Lz4FrameDecoder is vulnerable to resource exhaustion

GHSA-mj4r-2hfc-f8p6 CVE-2026-42583 HIGH published 3 months ago • updated 4 days ago

### Summary Lz4FrameDecoder allocates a ByteBuf of size `decompressedLength` (up to 32 MB per block) before LZ4 runs. A peer only needs a 21-byte h...

Bzip2Decoder doesn't allow setting size restrictions for decompressed data

GHSA-grg4-wf29-r9vv CVE-2021-37136 HIGH published almost 5 years ago • updated about 1 month ago

### Impact The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allo...

SnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way

GHSA-9vjp-v76f-g363 CVE-2021-37137 HIGH published almost 5 years ago • updated about 4 hours ago

### Impact The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may bu...

Recent PRs

RSS Feed

chore(deps): bump the all-dependencies group across 15 directories with 49 updates

walt-id/waltid-identity #1825

4.1.135.Final → 4.2.15.Final Minor PR

Open about 1 month ago 1 comment

Bump the test-tools group with 6 updates

DSpace/DSpace #12566

4.2.12.Final → 4.2.14.Final Patch PR

Closed 2 months ago 1 comment

Bump the gradle group across 0 directory with 2 updates

MihaiCristianCondrea/App-Toolkit-for-Android #671

4.1.132.Final → 4.2.14.Final Minor PR

Closed 2 months ago 1 comment

build(deps): bump io.netty:netty-codec from 4.1.125.Final to 4.1.133.Final in /extensions/open-mysql-db

4paradigm/OpenMLDB #4115

4.1.125.Final → 4.1.133.Final Patch PR

Open 3 months ago 1 comment

Bump io.netty:netty-codec from 4.0.44.Final to 4.1.133.Final

pentaho/pentaho-cassandra-plugin #198

4.0.44.Final → 4.1.133.Final Minor PR

Closed 3 months ago 1 comment

chore(deps): bump the gradle-dependencies group across 1 directory with 8 updates

AndroidIRCx/NULVEX #53

4.2.12.Final → 4.2.13.Final Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the all-backend-non-major-dependencies group in /backend with 3 updates

digitalservicebund/ris-norms #2312

4.1.133.Final → 4.2.13.Final Minor PR

Closed 3 months ago 1 comment

Bump the maven group across 3 directories with 21 updates

idgrou/sakai #10

4.1.112.Final → 4.1.125.Final Patch PR

Closed 4 months ago 2 comments

Bump the dependencies group with 3 updates

Olsc/DroidGit #19

4.2.10.Final → 4.2.11.Final Patch PR

Open 4 months ago 1 comment

Bump the netty group with 11 updates

IBM/ibm-cos-sdk-java-v2 #39

4.2.9.Final → 4.2.10.Final Patch PR

Closed 4 months ago 1 comment

Bump io.netty:netty-codec from 4.1.87.Final to 4.1.125.Final

52North/SOS #1585

4.1.87.Final → 4.1.125.Final Patch PR

Closed 5 months ago 1 comment

Bump the dependencies group across 1 directory with 5 updates

Olsc/DroidGit #14

4.2.9.Final → 4.2.10.Final Patch PR

Closed 6 months ago 2 comments

chore(deps): bump the low-risk group with 9 updates

Ensono/stacks-java-module-parent #346

4.2.9.Final → 4.2.10.Final Patch PR

Open 6 months ago 6 comments

build(deps): bump the maven group across 18 directories with 13 updates

pallakartheekreddy/knowledge-platform #5

4.1.68.Final → 4.1.125.Final Patch PR

Closed 6 months ago 1 comment

build(deps): bump io.netty:netty-codec from 4.1.108.Final to 4.1.125.Final

millenniumsingha/Safelink #73

4.1.108.Final → 4.1.125.Final Patch PR

Closed 6 months ago 2 comments

Bump io.netty:netty-codec from 4.1.125.Final to 4.2.9.Final

wsdfafw/Wurst7 #267

4.1.125.Final → 4.2.9.Final Minor PR

Open 7 months ago 1 comment

build(deps): bump io.netty:netty-codec from 4.1.68.Final to 4.1.125.Final in /extensions/open-mysql-db

4paradigm/OpenMLDB #4073

4.1.68.Final → 4.1.125.Final Patch PR

Open 7 months ago 1 comment

chore(deps): bump the low-risk group with 7 updates

Ensono/stacks-java-module-parent #336

4.2.8.Final → 4.2.9.Final Patch PR

Closed 7 months ago 1 comment

chore(deps): bump the low-risk group with 10 updates

Ensono/stacks-java-module-parent #334

4.2.7.Final → 4.2.8.Final Patch PR

Open 8 months ago 4 comments

Bump io.netty:netty-codec from 4.1.119.Final to 4.2.8.Final in /src/jvm/knet

masesgroup/KNet #1272

4.1.119.Final → 4.2.8.Final Minor PR

Closed 8 months ago 1 comment

Bump io.netty:netty-codec from 4.1.124.Final to 4.1.125.Final

Opetushallitus/ehoks #733

4.1.124.Final → 4.1.125.Final Patch PR

Closed 8 months ago 3 comments

Bump the core-dependencies group in /workflow-core with 27 updates

danielscholl-osdu/workflow #10

4.1.118.Final → 4.2.7.Final Minor PR

Open 9 months ago 7 comments

Bump the netty group with 6 updates

BisonSchweizAG/jython #30

4.1.119.Final → 4.2.7.Final Minor PR

Open 9 months ago 1 comment

Bump io.netty:netty-codec from 4.2.6.Final to 4.2.7.Final

DataSQRL/sqrl #1649

4.2.6.Final → 4.2.7.Final Patch PR

Open 9 months ago 1 comment

Bump io.netty:netty-codec from 4.1.125.Final to 4.2.7.Final

buiawpkgew1/Wurst7 #203

4.1.125.Final → 4.2.7.Final Minor PR

Open 10 months ago 1 comment

build(deps): bump the gradle group across 1 directory with 59 updates

ricekot/zap-extensions #5

4.1.100.Final → 4.2.6.Final Minor PR

Closed 10 months ago 1 comment

Bump the test-tools group across 1 directory with 7 updates

chinchorobador/Dspace8.1Back #99

4.2.0.Final → 4.2.6.Final Patch PR

Open 10 months ago

Bump io.netty:netty-codec from 4.1.125.Final to 4.2.6.Final in /backend

digitalservicebund/ris-adm-vwv #1316

4.1.125.Final → 4.2.6.Final Minor PR

Merged 10 months ago

Bump io.netty:netty-codec from 4.1.125.Final to 4.2.6.Final

cev-api/wurst7-fork #2

4.1.125.Final → 4.2.6.Final Minor PR

Open 10 months ago

Bump io.netty:netty-codec from 4.1.118.Final to 4.1.125.Final in /hadoop-project

apache/hadoop #7972

4.1.118.Final → 4.1.125.Final Patch PR

Open 11 months ago

Bump io.netty:netty-codec from 4.2.5.Final to 4.2.6.Final in /src/jvm/knet

masesgroup/KNet #1146

4.2.5.Final → 4.2.6.Final Patch PR

Open 11 months ago

chore(deps): bump io.netty:netty-codec from 4.1.118.Final to 4.1.125.Final

Ensono/stacks-java-module-parent #269

4.1.118.Final → 4.1.125.Final Patch PR

Open 11 months ago 3 comments

build(deps): bump io.netty:netty-codec from 4.2.5.Final to 4.2.6.Final

apache/myfaces-tobago #6699

4.2.5.Final → 4.2.6.Final Patch PR

Closed 11 months ago 2 comments

Bump io.netty:netty-codec from 4.1.125.Final to 4.2.6.Final

buiawpkgew1/Wurst7 #183

4.1.125.Final → 4.2.6.Final Minor PR

Open 11 months ago 2 comments

Bump io.netty:netty-codec from 4.1.92.Final to 4.2.6.Final

jenkinsci/openstack-cloud-plugin #458

4.1.92.Final → 4.2.6.Final Minor PR

Closed 11 months ago 1 comment

Bump the test-tools group with 6 updates

DSpace/DSpace #11274

4.2.4.Final → 4.2.6.Final Patch PR

Merged 11 months ago

Build(deps): bump io.netty:netty-codec from 4.2.5.Final to 4.2.6.Final

navikt/syfobrukertilgang #229

4.2.5.Final → 4.2.6.Final Patch PR

Open 11 months ago

Bump io.netty:netty-codec from 4.2.5.Final to 4.2.6.Final

bennesp/json-schema-generator #220

4.2.5.Final → 4.2.6.Final Patch PR

Open 11 months ago

Bump io.netty:netty-codec from 4.1.125.Final to 4.2.5.Final

Wurst-Imperium/ChestESP #38

4.1.125.Final → 4.2.5.Final Minor PR

Open 11 months ago

Bump io.netty:netty-codec from 4.1.125.Final to 4.2.5.Final

Wurst-Imperium/Wurst7 #1209

4.1.125.Final → 4.2.5.Final Minor PR

Open 11 months ago 1 comment

Bump io.netty:netty-codec from 4.1.125.Final to 4.2.5.Final

Wurst-Imperium/Mo-Glass #77

4.1.125.Final → 4.2.5.Final Minor PR

Closed 11 months ago 1 comment

Bump io.netty:netty-codec from 4.1.125.Final to 4.2.5.Final

Wurst-Imperium/WI-Zoom #79

4.1.125.Final → 4.2.5.Final Minor PR

Open 11 months ago

Bump io.netty:netty-codec from 4.1.125.Final to 4.2.5.Final

buiawpkgew1/Wurst7 #182

4.1.125.Final → 4.2.5.Final Minor PR

Closed 11 months ago 2 comments

Bump io.netty:netty-codec from 4.2.4.Final to 4.2.5.Final

DataSQRL/sqrl #1545

4.2.4.Final → 4.2.5.Final Patch PR

Open 11 months ago 1 comment

Bump io.netty:netty-codec from 4.1.119.Final to 4.2.5.Final in /src/jvm/knet

masesgroup/KNet #1122

4.1.119.Final → 4.2.5.Final Minor PR

Open 11 months ago

build(deps): bump io.netty:netty-codec from 4.1.68.Final to 4.1.125.Final in /hu.bme.bigdata.homework.spark.flight2

benedekh/bigdata-projects #86

4.1.68.Final → 4.1.125.Final Patch PR

Open 11 months ago

Bump io.netty:netty-codec from 4.1.105.Final to 4.1.125.Final in /dependabot

threatgrid/ctia #1481

4.1.105.Final → 4.1.125.Final Patch PR

Merged 11 months ago

Bump io.netty:netty-codec from 4.1.124.Final to 4.1.125.Final in /dev/cnf/dependabot/check_this_in_if_it_changes

OpenLiberty/open-liberty #32736

4.1.124.Final → 4.1.125.Final Patch PR

Closed 11 months ago 1 comment

Bump the maven group across 2 directories with 5 updates

matthewtckr/hop #13

4.1.122.Final → 4.1.125.Final Patch PR

Closed 11 months ago 1 comment

Bump io.netty:netty-codec from 4.1.91.Final to 4.1.125.Final

umjammer/ACD-JAPI #6

4.1.91.Final → 4.1.125.Final Patch PR

Closed 11 months ago 1 comment

Package Details

Name:	`io.netty:netty-codec`
Ecosystem:	maven
PURL Type:	maven
Package URL:	`pkg:maven/io.netty:netty-codec`
JSON API:	View JSON

Security Advisories

5

Active advisories

HIGH 4

MODERATE 1

View All maven Advisories

Package Information

Description:

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.

Repository:	https://github.com/netty/netty
Homepage:	http://netty.io/
Latest Release:	`4.2.0.RC1` over 1 year ago
Dependent Repos:	4,698
Dependent Packages:	1,302
Ranking:	Top 0.1367% by dependent repos Top 0.0619% by dependent pkgs

PR Status

Open 67 (58.3%)

Merged 13 (11.3%)

Closed 31 (27.0%)

PR Types

Minor 36 (31.3%)

Patch 75 (65.2%)