An open index of dependabot pull requests across open source projects.

io.netty:netty-handler

Ecosystem:
maven
Package URL:
pkg:maven/io.netty:netty-handler
Total PRs:
222 Dependabot PRs
Latest PR:
about 2 months ago
Unique Repositories:
76 repositories
Unique Repos (30 days):
7 repositories
Security Advisories
Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking
GHSA-3qp7-7mw8-wx86 CVE-2026-44249 HIGH published about 2 months ago • updated 13 days ago
### Summary An attacker can bypass IPv6 subnet rules due to an incorrect masking operation in IpSubnetFilterRule.compareTo(). Valid public IP addre...
SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine
GHSA-4g8c-wm8x-jfhw CVE-2025-24970 HIGH published over 1 year ago • updated 21 days ago
### Impact When a special crafted packet is received via SslHandler it doesn't correctly handle validation of such a packet in all cases which can ...
HTTP Request Smuggling in Netty
GHSA-p2v9-g2qv-p635 CVE-2019-20445 MODERATE published over 6 years ago • updated 22 days ago
HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-...
Loop with Unreachable Exit Condition in Netty
GHSA-rv63-gqm8-9w8q CVE-2016-4970 HIGH published about 4 years ago • updated 8 days ago
handler/ssl/OpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and 4.1.x before 4.1.1.Final allows remote attackers to cause a denial of service...
netty-handler SniHandler 16MB allocation
GHSA-6mjq-h674-j845 CVE-2023-34462 MODERATE published about 3 years ago • updated 17 days ago
### Summary The `SniHandler` can allocate up to 16MB of heap for each channel during the TLS handshake. When the handler or the channel does not ha...
Recent PRs
Bump the test-tools group with 6 updates

DSpace/DSpace #12566

4.2.12.Final → 4.2.14.Final Patch PR
Closed 2 months ago 1 comment
DSpace
Bump the netty group with 6 updates

ohumbel/jython #18

4.2.13.Final → 4.2.14.Final Patch PR
Open 2 months ago 1 comment
ohumbel
Bump the dependencies group with 3 updates

Olsc/DroidGit #19

4.2.10.Final → 4.2.11.Final Patch PR
Open 4 months ago 1 comment
Olsc
build(deps): bump the all group in /java with 2 updates

vitessio/vitess #19700

4.2.10.Final → 4.2.11.Final Patch PR
Open 4 months ago 1 comment
vitessio
Bump the netty group with 11 updates

IBM/ibm-cos-sdk-java-v2 #39

4.2.9.Final → 4.2.10.Final Patch PR
Closed 4 months ago 1 comment
IBM
Bump the minor group with 2 updates

navikt/aap-api #579

4.2.8.Final → 4.2.9.Final Patch PR
Closed 7 months ago 1 comment
navikt
Bump the netty group with 6 updates

BisonSchweizAG/jython #30

4.1.119.Final → 4.2.7.Final Minor PR
Open 9 months ago 1 comment
BisonSchweizAG
Package Details
Name: io.netty:netty-handler
Ecosystem: maven
PURL Type: maven
Package URL: pkg:maven/io.netty:netty-handler
JSON API: View JSON
Security Advisories

10

Active advisories
HIGH 7
MODERATE 3
View All maven Advisories
Package Information
Description:

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.

Repository: https://github.com/netty/netty
Homepage: http://netty.io/
Latest Release: 4.2.2.Final
about 1 year ago
Dependent Repos: 7,905
Dependent Packages: 1,984
Ranking: Top 0.0962% by dependent repos Top 0.0383% by dependent pkgs
PR Status
Open 95 (42.8%)
Merged 28 (12.6%)
Closed 76 (34.2%)
PR Types
Minor 61 (27.5%)
Patch 138 (62.2%)