pkg:Maven/io.netty:netty-codec-compression

2 total CVEsHIGH2

✅ Check your installed version

All known vulnerabilities

  • HIGH7.5CVE-2026-42583Netty Lz4FrameDecoder is vulnerable to resource exhaustion
    from 0, < 4.2.13.Final
  • HIGH7.5CVE-2025-58057Netty's decoders vulnerable to DoS via zip bomb style attack
    >= 4.2.0.Alpha1, < 4.2.5.Final