`io.netty:netty-codec`

Ecosystem:
maven

Package URL:
pkg:maven/io.netty:netty-codec

Total PRs:
113 Dependabot PRs

Latest PR:
9 days ago

Unique Repositories:
76 repositories

Unique Repos (30 days):
5 repositories

Security Advisories

Netty Lz4FrameDecoder is vulnerable to resource exhaustion

GHSA-mj4r-2hfc-f8p6 CVE-2026-42583 HIGH published about 1 month ago • updated 18 days ago

### Summary Lz4FrameDecoder allocates a ByteBuf of size `decompressedLength` (up to 32 MB per block) before LZ4 runs. A peer only needs a 21-byte h...

SnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way

GHSA-9vjp-v76f-g363 CVE-2021-37137 HIGH published over 4 years ago • updated 20 days ago

### Impact The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may bu...

4.2.12.Final → 4.2.14.Final Patch PR

Closed 9 days ago 1 comment

build(deps): bump io.netty:netty-codec from 4.1.125.Final to 4.1.133.Final in /extensions/open-mysql-db

4paradigm/OpenMLDB #4115

4.1.125.Final → 4.1.133.Final Patch PR

Open 27 days ago 1 comment

chore(deps): bump the gradle-dependencies group across 1 directory with 8 updates

AndroidIRCx/NULVEX #53

4.2.12.Final → 4.2.13.Final Patch PR

Closed about 1 month ago 1 comment

Bump the maven group across 3 directories with 21 updates

idgrou/sakai #10

4.1.112.Final → 4.1.125.Final Patch PR

Closed 2 months ago 2 comments

Bump the dependencies group with 3 updates

Olsc/DroidGit #19

4.2.10.Final → 4.2.11.Final Patch PR

Open 3 months ago 1 comment

Bump the netty group with 11 updates

IBM/ibm-cos-sdk-java-v2 #39

4.2.9.Final → 4.2.10.Final Patch PR

Closed 3 months ago 1 comment

Bump io.netty:netty-codec from 4.1.87.Final to 4.1.125.Final

52North/SOS #1585

4.1.87.Final → 4.1.125.Final Patch PR

Closed 4 months ago 1 comment

Bump the dependencies group across 1 directory with 5 updates

Olsc/DroidGit #14

4.2.9.Final → 4.2.10.Final Patch PR

Closed 4 months ago 2 comments

chore(deps): bump the low-risk group with 9 updates

Ensono/stacks-java-module-parent #346

4.2.9.Final → 4.2.10.Final Patch PR

Open 4 months ago 6 comments

build(deps): bump the maven group across 18 directories with 13 updates

pallakartheekreddy/knowledge-platform #5

4.1.68.Final → 4.1.125.Final Patch PR

Closed 4 months ago 1 comment

build(deps): bump io.netty:netty-codec from 4.1.108.Final to 4.1.125.Final

millenniumsingha/Safelink #73

4.1.108.Final → 4.1.125.Final Patch PR

Closed 5 months ago 2 comments

build(deps): bump io.netty:netty-codec from 4.1.68.Final to 4.1.125.Final in /extensions/open-mysql-db

4paradigm/OpenMLDB #4073

4.1.68.Final → 4.1.125.Final Patch PR

Open 5 months ago 1 comment

chore(deps): bump the low-risk group with 7 updates

Ensono/stacks-java-module-parent #336

4.2.8.Final → 4.2.9.Final Patch PR

Closed 6 months ago 1 comment

chore(deps): bump the low-risk group with 10 updates

Ensono/stacks-java-module-parent #334

4.2.7.Final → 4.2.8.Final Patch PR

Open 6 months ago 4 comments

Bump io.netty:netty-codec from 4.1.124.Final to 4.1.125.Final

Opetushallitus/ehoks #733

4.1.124.Final → 4.1.125.Final Patch PR

Closed 6 months ago 3 comments

Bump io.netty:netty-codec from 4.2.6.Final to 4.2.7.Final

DataSQRL/sqrl #1649

4.2.6.Final → 4.2.7.Final Patch PR

Open 8 months ago 1 comment

Bump the test-tools group across 1 directory with 7 updates

chinchorobador/Dspace8.1Back #99

4.2.0.Final → 4.2.6.Final Patch PR

Open 8 months ago

Bump io.netty:netty-codec from 4.1.118.Final to 4.1.125.Final in /hadoop-project

apache/hadoop #7972

4.1.118.Final → 4.1.125.Final Patch PR

Open 9 months ago

Bump io.netty:netty-codec from 4.2.5.Final to 4.2.6.Final in /src/jvm/knet

masesgroup/KNet #1146

4.2.5.Final → 4.2.6.Final Patch PR

Open 9 months ago

chore(deps): bump io.netty:netty-codec from 4.1.118.Final to 4.1.125.Final

Ensono/stacks-java-module-parent #269

4.1.118.Final → 4.1.125.Final Patch PR

Open 9 months ago 3 comments

build(deps): bump io.netty:netty-codec from 4.2.5.Final to 4.2.6.Final

apache/myfaces-tobago #6699

4.2.5.Final → 4.2.6.Final Patch PR

Closed 9 months ago 2 comments

Bump the test-tools group with 6 updates

DSpace/DSpace #11274

4.2.4.Final → 4.2.6.Final Patch PR

Merged 9 months ago

Build(deps): bump io.netty:netty-codec from 4.2.5.Final to 4.2.6.Final

navikt/syfobrukertilgang #229

4.2.5.Final → 4.2.6.Final Patch PR

Open 9 months ago

Bump io.netty:netty-codec from 4.2.5.Final to 4.2.6.Final

bennesp/json-schema-generator #220

4.2.5.Final → 4.2.6.Final Patch PR

Open 9 months ago

Bump io.netty:netty-codec from 4.2.4.Final to 4.2.5.Final

DataSQRL/sqrl #1545

4.2.4.Final → 4.2.5.Final Patch PR

Open 9 months ago 1 comment

build(deps): bump io.netty:netty-codec from 4.1.68.Final to 4.1.125.Final in /hu.bme.bigdata.homework.spark.flight2

benedekh/bigdata-projects #86

4.1.68.Final → 4.1.125.Final Patch PR

Open 9 months ago

Bump io.netty:netty-codec from 4.1.105.Final to 4.1.125.Final in /dependabot

threatgrid/ctia #1481

4.1.105.Final → 4.1.125.Final Patch PR

Merged 9 months ago

Bump io.netty:netty-codec from 4.1.124.Final to 4.1.125.Final in /dev/cnf/dependabot/check_this_in_if_it_changes

OpenLiberty/open-liberty #32736

4.1.124.Final → 4.1.125.Final Patch PR

Closed 9 months ago 1 comment

Bump the maven group across 2 directories with 5 updates

matthewtckr/hop #13

4.1.122.Final → 4.1.125.Final Patch PR

Closed 9 months ago 1 comment

Bump io.netty:netty-codec from 4.1.91.Final to 4.1.125.Final

umjammer/ACD-JAPI #6

4.1.91.Final → 4.1.125.Final Patch PR

Closed 9 months ago 1 comment

Bump io.netty:netty-codec from 4.1.122.Final to 4.1.125.Final in /mvn/dependencies/redis

link-it/govway #243

4.1.122.Final → 4.1.125.Final Patch PR

Open 9 months ago

Bump io.netty:netty-codec from 4.1.118.Final to 4.1.125.Final

rapid7/strimzi-kafka-operator #7

4.1.118.Final → 4.1.125.Final Patch PR

Open 9 months ago

Bump io.netty:netty-codec from 4.1.68.Final to 4.1.125.Final

leonchen83/redis-cluster-watchdog #7

4.1.68.Final → 4.1.125.Final Patch PR

Open 9 months ago

Bump io.netty:netty-codec from 4.1.119.Final-redhat-00002 to 4.1.125.Final in /modules/testcases/jdkAll/EapJakarta

EAT-JBCOMMUNITY/EAT #468

4.1.119.Final-redhat-00002 → 4.1.125.Final Patch PR

Closed 9 months ago

Bump io.netty:netty-codec from 4.1.122.Final to 4.1.125.Final in /lib

apache/hop #5679

4.1.122.Final → 4.1.125.Final Patch PR

Closed 9 months ago

Bump io.netty:netty-codec from 4.1.92.Final to 4.1.125.Final in /ui-tests

jenkinsci/openstack-cloud-plugin #455

4.1.92.Final → 4.1.125.Final Patch PR

Open 9 months ago

Bump io.netty:netty-codec from 4.1.68.Final to 4.1.125.Final

apache/helix #3068

4.1.68.Final → 4.1.125.Final Patch PR

Open 9 months ago

⬆️ Bump io.netty:netty-codec from 4.1.86.Final to 4.1.125.Final

rymcu/forest #196

4.1.86.Final → 4.1.125.Final Patch PR

Open 9 months ago

Bump io.netty:netty-codec from 4.1.50.Final to 4.1.125.Final

hixio-mh/netty-socketio #45

4.1.50.Final → 4.1.125.Final Patch PR

Open 9 months ago

Bump io.netty:netty-codec from 4.1.100.1.dse to 4.1.125.Final in /coordinator/persistence-dse-6.8

stargate/stargate #3132

4.1.100.1.dse → 4.1.125.Final Patch PR

Closed 9 months ago 1 comment

build(deps): bump io.netty:netty-codec from 4.1.68.Final to 4.1.125.Final in /hu.bme.bigdata.homework.spark.flight3

benedekh/bigdata-projects #85

4.1.68.Final → 4.1.125.Final Patch PR

Merged 9 months ago

Bump io.netty:netty-codec from 4.1.118.Final to 4.1.125.Final

oracle/nosql #67

4.1.118.Final → 4.1.125.Final Patch PR

Open 9 months ago

Bump io.netty:netty-codec from 4.1.118.Final to 4.1.125.Final

maartenbosteels/monocator #22

4.1.118.Final → 4.1.125.Final Patch PR

Open 9 months ago

chore(deps): Bump io.netty:netty-codec from 4.1.124.Final to 4.1.125.Final in /explainability-connectors

opendatahub-io/trustyai-explainability #10

4.1.124.Final → 4.1.125.Final Patch PR

Open 9 months ago 1 comment

Bump io.netty:netty-codec from 4.1.94.Final to 4.1.125.Final in /master

Western-OWL/sakai #111

4.1.94.Final → 4.1.125.Final Patch PR

Open 9 months ago

Bump the maven group across 2 directories with 15 updates

idgrou/sakai #1

4.1.112.Final → 4.1.125.Final Patch PR

Open 9 months ago

Bump io.netty:netty-codec from 4.1.49.Final to 4.1.125.Final

peintune/netty-mqtt-codec-for-v3-and-v5 #2

4.1.49.Final → 4.1.125.Final Patch PR

Open 9 months ago

Bump io.netty:netty-codec from 4.1.124.Final to 4.1.125.Final

Ericsson/ecchronos #1092

4.1.124.Final → 4.1.125.Final Patch PR

Open 9 months ago

chore(deps): Bump io.netty:netty-codec from 4.1.124.Final to 4.1.125.Final in /explainability-connectors

trustyai-explainability/trustyai-explainability #687

4.1.124.Final → 4.1.125.Final Patch PR

Open 9 months ago

Bump io.netty:netty-codec from 4.1.118.Final to 4.1.125.Final in /hadoop-project

pjfanning/hadoop #43

4.1.118.Final → 4.1.125.Final Patch PR

Closed 9 months ago 2 comments

Package Details

Name:	`io.netty:netty-codec`
Ecosystem:	maven
PURL Type:	maven
Package URL:	`pkg:maven/io.netty:netty-codec`
JSON API:	View JSON

Security Advisories

4

Active advisories

HIGH 3

MODERATE 1

View All maven Advisories

Package Information

Description:

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.

Repository:	https://github.com/netty/netty
Homepage:	http://netty.io/
Latest Release:	`4.2.0.RC1` over 1 year ago
Dependent Repos:	4,698
Dependent Packages:	1,302
Ranking:	Top 0.1367% by dependent repos Top 0.0619% by dependent pkgs

PR Status

Open 66 (58.4%)

Merged 13 (11.5%)

Closed 30 (26.5%)

PR Types

Minor 34 (30.1%)

Patch 75 (66.4%)

io.netty:netty-codec

Security Advisories

Netty Lz4FrameDecoder is vulnerable to resource exhaustion

SnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way

Netty's decoders vulnerable to DoS via zip bomb style attack

Bzip2Decoder doesn't allow setting size restrictions for decompressed data

Recent PRs (filtered by: Patch PRs )

Package Details

Security Advisories

4

Package Information

PR Status

PR Types

`io.netty:netty-codec`