Security Advisory

CVE-2026-33870

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-03-27 19:54:15

Last updated 2026-07-15 02:48:53

Assigner GitHub_M

CVSS score 7.5

State PUBLISHED

Description

Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.132.Final and 4.2.10.Final, Netty incorrectly parses quoted strings in HTTP/1.1 chunked transfer encoding extension values, enabling request smuggling attacks. Versions 4.1.132.Final and 4.2.10.Final fix the issue.

← Browse all CVEs View on cve.org ↗