DNA View

CVE-2025-67735

Medium

Low Medium High Critical

6.5

CVSS Score

Published: Dec 16, 2025

Last Modified: Jan 02, 2026

CWE: CWE-93

Vulnerability Description

Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.129.Final and 4.2.8.Final, the `io.netty.handler.codec.http.HttpRequestEncoder` has a CRLF injection with the request URI when constructing a request. This leads to request smuggling when `HttpRequestEncoder` is used without proper sanitization of the URI. Any application / framework using `HttpRequestEncoder` can be subject to be abused to perform request smuggling using CRLF injection. Versions 4.1.129.Final and 4.2.8.Final fix the issue.

CVSS Metrics

Common Vulnerability Scoring System

Vector String:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Known Affected Software

255 configuration(s) from 1 vendor(s)

netty

Version:

4.1.108

CPE:

cpe:2.3:a:netty:netty:4.1.108:*:*:*:*:*:*:*

netty

Version:

4.2.1

CPE:

cpe:2.3:a:netty:netty:4.2.1:*:*:*:*:*:*:*

netty

Version:

3.9.7

CPE:

cpe:2.3:a:netty:netty:3.9.7:*:*:*:*:*:*:*

netty

Version:

3.5.8

CPE:

cpe:2.3:a:netty:netty:3.5.8:*:*:*:*:*:*:*

netty

Version:

4.1.66

CPE:

cpe:2.3:a:netty:netty:4.1.66:*:*:*:*:*:*:*

netty

Version:

4.1.55

CPE:

cpe:2.3:a:netty:netty:4.1.55:*:*:*:*:*:*:*

netty

Version:

4.1.63

CPE:

cpe:2.3:a:netty:netty:4.1.63:*:*:*:*:*:*:*

netty

Version:

4.1.14

CPE:

cpe:2.3:a:netty:netty:4.1.14:*:*:*:*:*:*:*

netty

Version:

3.9.5

CPE:

cpe:2.3:a:netty:netty:3.9.5:*:*:*:*:*:*:*

netty

Version:

4.1.70

CPE:

cpe:2.3:a:netty:netty:4.1.70:*:*:*:*:*:*:*

netty

Version:

4.0.39

CPE:

cpe:2.3:a:netty:netty:4.0.39:*:*:*:*:*:*:*

netty

Version:

4.1.87

CPE:

cpe:2.3:a:netty:netty:4.1.87:*:*:*:*:*:*:*

netty

Version:

3.8.1

CPE:

cpe:2.3:a:netty:netty:3.8.1:*:*:*:*:*:*:*

netty

Version:

3.5.5

CPE:

cpe:2.3:a:netty:netty:3.5.5:*:*:*:*:*:*:*

netty

Version:

4.1.56

CPE:

cpe:2.3:a:netty:netty:4.1.56:*:*:*:*:*:*:*

netty

Version:

3.8.2

CPE:

cpe:2.3:a:netty:netty:3.8.2:*:*:*:*:*:*:*

netty

Version:

4.1.104

CPE:

cpe:2.3:a:netty:netty:4.1.104:*:*:*:*:*:*:*

netty

Version:

4.1.26

CPE:

cpe:2.3:a:netty:netty:4.1.26:*:*:*:*:*:*:*

netty

Version:

4.0.33

CPE:

cpe:2.3:a:netty:netty:4.0.33:*:*:*:*:*:*:*

netty

Version:

4.0.17

CPE:

cpe:2.3:a:netty:netty:4.0.17:*:*:*:*:*:*:*

netty

Version:

3.4.0

CPE:

cpe:2.3:a:netty:netty:3.4.0:-:*:*:*:*:*:*

netty

Version:

3.6.8

CPE:

cpe:2.3:a:netty:netty:3.6.8:*:*:*:*:*:*:*

netty

Version:

4.1.120

CPE:

cpe:2.3:a:netty:netty:4.1.120:*:*:*:*:*:*:*

netty

Version:

4.1.100

CPE:

cpe:2.3:a:netty:netty:4.1.100:*:*:*:*:*:*:*

netty

Version:

4.0.53

CPE:

cpe:2.3:a:netty:netty:4.0.53:*:*:*:*:*:*:*

netty

Version:

4.1.88

CPE:

cpe:2.3:a:netty:netty:4.1.88:*:*:*:*:*:*:*

netty

Version:

4.0.51

CPE:

cpe:2.3:a:netty:netty:4.0.51:*:*:*:*:*:*:*

netty

Version:

4.0.50

CPE:

cpe:2.3:a:netty:netty:4.0.50:*:*:*:*:*:*:*

netty

Version:

4.2.0

CPE:

cpe:2.3:a:netty:netty:4.2.0:-:*:*:*:*:*:*

netty

Version:

3.9.9

CPE:

cpe:2.3:a:netty:netty:3.9.9:*:*:*:*:*:*:*

netty

Version:

4.1.18

CPE:

cpe:2.3:a:netty:netty:4.1.18:*:*:*:*:*:*:*

netty

Version:

4.0.8

CPE:

cpe:2.3:a:netty:netty:4.0.8:*:*:*:*:*:*:*

netty

Version:

3.9.1

CPE:

cpe:2.3:a:netty:netty:3.9.1:*:*:*:*:*:*:*

netty

Version:

4.0.25

CPE:

cpe:2.3:a:netty:netty:4.0.25:*:*:*:*:*:*:*

netty

Version:

4.0.52

CPE:

cpe:2.3:a:netty:netty:4.0.52:*:*:*:*:*:*:*

netty

Version:

4.1.103

CPE:

cpe:2.3:a:netty:netty:4.1.103:*:*:*:*:*:*:*

netty

Version:

4.1.4

CPE:

cpe:2.3:a:netty:netty:4.1.4:*:*:*:*:*:*:*

netty

Version:

4.1.121

CPE:

cpe:2.3:a:netty:netty:4.1.121:*:*:*:*:*:*:*

netty

Version:

4.1.21

CPE:

cpe:2.3:a:netty:netty:4.1.21:*:*:*:*:*:*:*

netty

Version:

3.3.1

CPE:

cpe:2.3:a:netty:netty:3.3.1:*:*:*:*:*:*:*

netty

Version:

4.0.44

CPE:

cpe:2.3:a:netty:netty:4.0.44:*:*:*:*:*:*:*

netty

Version:

4.1.114

CPE:

cpe:2.3:a:netty:netty:4.1.114:*:*:*:*:*:*:*

netty

Version:

4.1.106

CPE:

cpe:2.3:a:netty:netty:4.1.106:*:*:*:*:*:*:*

netty

Version:

4.0.9

CPE:

cpe:2.3:a:netty:netty:4.0.9:*:*:*:*:*:*:*

netty

Version:

4.1.5

CPE:

cpe:2.3:a:netty:netty:4.1.5:*:*:*:*:*:*:*

netty

Version:

4.1.109

CPE:

cpe:2.3:a:netty:netty:4.1.109:*:*:*:*:*:*:*

netty

Version:

4.1.34

CPE:

cpe:2.3:a:netty:netty:4.1.34:*:*:*:*:*:*:*

netty

Version:

4.0.29

CPE:

cpe:2.3:a:netty:netty:4.0.29:*:*:*:*:*:*:*

netty

Version:

3.6.0

CPE:

cpe:2.3:a:netty:netty:3.6.0:-:*:*:*:*:*:*

netty

Version:

4.1.78

CPE:

cpe:2.3:a:netty:netty:4.1.78:*:*:*:*:*:*:*

netty

Version:

4.0.35

CPE:

cpe:2.3:a:netty:netty:4.0.35:*:*:*:*:*:*:*

netty

Version:

4.0.1

CPE:

cpe:2.3:a:netty:netty:4.0.1:*:*:*:*:*:*:*

netty

Version:

4.1.98

CPE:

cpe:2.3:a:netty:netty:4.1.98:*:*:*:*:*:*:*

netty

Version:

4.1.6

CPE:

cpe:2.3:a:netty:netty:4.1.6:*:*:*:*:*:*:*

netty

Version:

3.2.9

CPE:

cpe:2.3:a:netty:netty:3.2.9:*:*:*:*:*:*:*

netty

Version:

4.1.22

CPE:

cpe:2.3:a:netty:netty:4.1.22:*:*:*:*:*:*:*

netty

Version:

4.1.58

CPE:

cpe:2.3:a:netty:netty:4.1.58:*:*:*:*:*:*:*

netty

Version:

4.1.33

CPE:

cpe:2.3:a:netty:netty:4.1.33:*:*:*:*:*:*:*

netty

Version:

4.1.61

CPE:

cpe:2.3:a:netty:netty:4.1.61:*:*:*:*:*:*:*

netty

Version:

3.6.1

CPE:

cpe:2.3:a:netty:netty:3.6.1:*:*:*:*:*:*:*

netty

Version:

4.1.31

CPE:

cpe:2.3:a:netty:netty:4.1.31:*:*:*:*:*:*:*

netty

Version:

4.1.54

CPE:

cpe:2.3:a:netty:netty:4.1.54:*:*:*:*:*:*:*

netty

Version:

3.2.8

CPE:

cpe:2.3:a:netty:netty:3.2.8:*:*:*:*:*:*:*

netty

Version:

4.1.65

CPE:

cpe:2.3:a:netty:netty:4.1.65:*:*:*:*:*:*:*

netty

Version:

3.10.6

CPE:

cpe:2.3:a:netty:netty:3.10.6:*:*:*:*:*:*:*

netty

Version:

4.2.5

CPE:

cpe:2.3:a:netty:netty:4.2.5:*:*:*:*:*:*:*

netty

Version:

4.1.8

CPE:

cpe:2.3:a:netty:netty:4.1.8:*:*:*:*:*:*:*

netty

Version:

4.1.64

CPE:

cpe:2.3:a:netty:netty:4.1.64:*:*:*:*:*:*:*

netty

Version:

4.0.40

CPE:

cpe:2.3:a:netty:netty:4.0.40:*:*:*:*:*:*:*

netty

Version:

4.1.68

CPE:

cpe:2.3:a:netty:netty:4.1.68:*:*:*:*:*:*:*

netty

Version:

3.7.1

CPE:

cpe:2.3:a:netty:netty:3.7.1:*:*:*:*:*:*:*

netty

Version:

4.0.45

CPE:

cpe:2.3:a:netty:netty:4.0.45:*:*:*:*:*:*:*

netty

Version:

4.1.10

CPE:

cpe:2.3:a:netty:netty:4.1.10:*:*:*:*:*:*:*

netty

Version:

4.1.71

CPE:

cpe:2.3:a:netty:netty:4.1.71:*:*:*:*:*:*:*

netty

Version:

4.1.15

CPE:

cpe:2.3:a:netty:netty:4.1.15:*:*:*:*:*:*:*

netty

Version:

4.1.96

CPE:

cpe:2.3:a:netty:netty:4.1.96:*:*:*:*:*:*:*

netty

Version:

4.1.122

CPE:

cpe:2.3:a:netty:netty:4.1.122:*:*:*:*:*:*:*

netty

Version:

3.5.13

CPE:

cpe:2.3:a:netty:netty:3.5.13:*:*:*:*:*:*:*

netty

Version:

4.1.49

CPE:

cpe:2.3:a:netty:netty:4.1.49:*:*:*:*:*:*:*

netty

Version:

4.1.125

CPE:

cpe:2.3:a:netty:netty:4.1.125:*:*:*:*:*:*:*

netty

Version:

4.2.3

CPE:

cpe:2.3:a:netty:netty:4.2.3:*:*:*:*:*:*:*

netty

Version:

4.1.48

CPE:

cpe:2.3:a:netty:netty:4.1.48:*:*:*:*:*:*:*

netty

Version:

4.1.126

CPE:

cpe:2.3:a:netty:netty:4.1.126:*:*:*:*:*:*:*

netty

Version:

4.1.23

CPE:

cpe:2.3:a:netty:netty:4.1.23:*:*:*:*:*:*:*

netty

Version:

3.6.4

CPE:

cpe:2.3:a:netty:netty:3.6.4:*:*:*:*:*:*:*

netty

Version:

4.1.76

CPE:

cpe:2.3:a:netty:netty:4.1.76:*:*:*:*:*:*:*

netty

Version:

4.1.116

CPE:

cpe:2.3:a:netty:netty:4.1.116:*:*:*:*:*:*:*

netty

Version:

4.1.112

CPE:

cpe:2.3:a:netty:netty:4.1.112:*:*:*:*:*:*:*

netty

Version:

4.0.41

CPE:

cpe:2.3:a:netty:netty:4.0.41:*:*:*:*:*:*:*

netty

Version:

4.0.32

CPE:

cpe:2.3:a:netty:netty:4.0.32:*:*:*:*:*:*:*

netty

Version:

4.1.86

CPE:

cpe:2.3:a:netty:netty:4.1.86:*:*:*:*:*:*:*

netty

Version:

4.1.81

CPE:

cpe:2.3:a:netty:netty:4.1.81:*:*:*:*:*:*:*

netty

Version:

4.1.79

CPE:

cpe:2.3:a:netty:netty:4.1.79:*:*:*:*:*:*:*

netty

Version:

4.0.2

CPE:

cpe:2.3:a:netty:netty:4.0.2:*:*:*:*:*:*:*

netty

Version:

3.5.3

CPE:

cpe:2.3:a:netty:netty:3.5.3:*:*:*:*:*:*:*

netty

Version:

4.0.43

CPE:

cpe:2.3:a:netty:netty:4.0.43:*:*:*:*:*:*:*

netty

Version:

4.1.80

CPE:

cpe:2.3:a:netty:netty:4.1.80:*:*:*:*:*:*:*

netty

Version:

4.1.20

CPE:

cpe:2.3:a:netty:netty:4.1.20:*:*:*:*:*:*:*

netty

Version:

4.0.42

CPE:

cpe:2.3:a:netty:netty:4.0.42:*:*:*:*:*:*:*

netty

Version:

3.2.7

CPE:

cpe:2.3:a:netty:netty:3.2.7:*:*:*:*:*:*:*

netty

Version:

4.1.40

CPE:

cpe:2.3:a:netty:netty:4.1.40:*:*:*:*:*:*:*

netty

Version:

3.2.5

CPE:

cpe:2.3:a:netty:netty:3.2.5:*:*:*:*:*:*:*

netty

Version:

3.9.8

CPE:

cpe:2.3:a:netty:netty:3.9.8:*:*:*:*:*:*:*

netty

Version:

4.1.28

CPE:

cpe:2.3:a:netty:netty:4.1.28:*:*:*:*:*:*:*

netty

Version:

3.9.4

CPE:

cpe:2.3:a:netty:netty:3.9.4:*:*:*:*:*:*:*

netty

Version:

4.1.2

CPE:

cpe:2.3:a:netty:netty:4.1.2:*:*:*:*:*:*:*

netty

Version:

4.0.21

CPE:

cpe:2.3:a:netty:netty:4.0.21:*:*:*:*:*:*:*

netty

Version:

3.3.0

CPE:

cpe:2.3:a:netty:netty:3.3.0:*:*:*:*:*:*:*

netty

Version:

4.1.39

CPE:

cpe:2.3:a:netty:netty:4.1.39:*:*:*:*:*:*:*

netty

Version:

4.1.92

CPE:

cpe:2.3:a:netty:netty:4.1.92:*:*:*:*:*:*:*

netty

Version:

4.0.13

CPE:

cpe:2.3:a:netty:netty:4.0.13:*:*:*:*:*:*:*

netty

Version:

3.5.7

CPE:

cpe:2.3:a:netty:netty:3.5.7:*:*:*:*:*:*:*

netty

Version:

3.6.10

CPE:

cpe:2.3:a:netty:netty:3.6.10:*:*:*:*:*:*:*

netty

Version:

3.5.12

CPE:

cpe:2.3:a:netty:netty:3.5.12:*:*:*:*:*:*:*

netty

Version:

4.0.31

CPE:

cpe:2.3:a:netty:netty:4.0.31:*:*:*:*:*:*:*

netty

Version:

3.7.0

CPE:

cpe:2.3:a:netty:netty:3.7.0:*:*:*:*:*:*:*

netty

Version:

4.1.1

CPE:

cpe:2.3:a:netty:netty:4.1.1:*:*:*:*:*:*:*

netty

Version:

3.5.6

CPE:

cpe:2.3:a:netty:netty:3.5.6:*:*:*:*:*:*:*

netty

Version:

3.6.7

CPE:

cpe:2.3:a:netty:netty:3.6.7:*:*:*:*:*:*:*

netty

Version:

4.1.105

CPE:

cpe:2.3:a:netty:netty:4.1.105:*:*:*:*:*:*:*

netty

Version:

4.2.2

CPE:

cpe:2.3:a:netty:netty:4.2.2:*:*:*:*:*:*:*

netty

Version:

3.2.6

CPE:

cpe:2.3:a:netty:netty:3.2.6:*:*:*:*:*:*:*

netty

Version:

3.5.9

CPE:

cpe:2.3:a:netty:netty:3.5.9:*:*:*:*:*:*:*

netty

Version:

4.1.42

CPE:

cpe:2.3:a:netty:netty:4.1.42:*:*:*:*:*:*:*

netty

Version:

4.1.37

CPE:

cpe:2.3:a:netty:netty:4.1.37:*:*:*:*:*:*:*

netty

Version:

4.2.4

CPE:

cpe:2.3:a:netty:netty:4.2.4:*:*:*:*:*:*:*

netty

Version:

4.1.119

CPE:

cpe:2.3:a:netty:netty:4.1.119:*:*:*:*:*:*:*

netty

Version:

4.1.30

CPE:

cpe:2.3:a:netty:netty:4.1.30:*:*:*:*:*:*:*

netty

Version:

4.0.23

CPE:

cpe:2.3:a:netty:netty:4.0.23:*:*:*:*:*:*:*

netty

Version:

4.1.25

CPE:

cpe:2.3:a:netty:netty:4.1.25:*:*:*:*:*:*:*

netty

Version:

4.1.69

CPE:

cpe:2.3:a:netty:netty:4.1.69:*:*:*:*:*:*:*

netty

Version:

4.0.54

CPE:

cpe:2.3:a:netty:netty:4.0.54:*:*:*:*:*:*:*

netty

Version:

4.0.15

CPE:

cpe:2.3:a:netty:netty:4.0.15:*:*:*:*:*:*:*

netty

Version:

4.0.0

CPE:

cpe:2.3:a:netty:netty:4.0.0:candidate_release1:*:*:*:*:*:*

netty

Version:

4.1.107

CPE:

cpe:2.3:a:netty:netty:4.1.107:*:*:*:*:*:*:*

netty

Version:

4.0.48

CPE:

cpe:2.3:a:netty:netty:4.0.48:*:*:*:*:*:*:*

netty

Version:

4.1.101

CPE:

cpe:2.3:a:netty:netty:4.1.101:*:*:*:*:*:*:*

netty

Version:

4.1.95

CPE:

cpe:2.3:a:netty:netty:4.1.95:*:*:*:*:*:*:*

netty

Version:

4.1.57

CPE:

cpe:2.3:a:netty:netty:4.1.57:*:*:*:*:*:*:*

netty

Version:

3.6.2

CPE:

cpe:2.3:a:netty:netty:3.6.2:*:*:*:*:*:*:*

netty

Version:

3.9.6

CPE:

cpe:2.3:a:netty:netty:3.9.6:*:*:*:*:*:*:*

netty

Version:

4.1.102

CPE:

cpe:2.3:a:netty:netty:4.1.102:*:*:*:*:*:*:*

netty

Version:

4.1.117

CPE:

cpe:2.3:a:netty:netty:4.1.117:*:*:*:*:*:*:*

netty

Version:

4.1.111

CPE:

cpe:2.3:a:netty:netty:4.1.111:*:*:*:*:*:*:*

netty

Version:

3.4.4

CPE:

cpe:2.3:a:netty:netty:3.4.4:*:*:*:*:*:*:*

netty

Version:

3.5.11

CPE:

cpe:2.3:a:netty:netty:3.5.11:*:*:*:*:*:*:*

netty

Version:

4.0.16

CPE:

cpe:2.3:a:netty:netty:4.0.16:*:*:*:*:*:*:*

netty

Version:

4.1.47

CPE:

cpe:2.3:a:netty:netty:4.1.47:*:*:*:*:*:*:*

netty

Version:

3.6.3

CPE:

cpe:2.3:a:netty:netty:3.6.3:*:*:*:*:*:*:*

netty

Version:

4.1.36

CPE:

cpe:2.3:a:netty:netty:4.1.36:*:*:*:*:*:*:*

netty

Version:

4.0.5

CPE:

cpe:2.3:a:netty:netty:4.0.5:*:*:*:*:*:*:*

netty

Version:

4.1.82

CPE:

cpe:2.3:a:netty:netty:4.1.82:*:*:*:*:*:*:*

netty

Version:

3.6.6

CPE:

cpe:2.3:a:netty:netty:3.6.6:*:*:*:*:*:*:*

netty

Version:

3.8.3

CPE:

cpe:2.3:a:netty:netty:3.8.3:*:*:*:*:*:*:*

netty

Version:

4.1.73

CPE:

cpe:2.3:a:netty:netty:4.1.73:*:*:*:*:*:*:*

netty

Version:

3.4.6

CPE:

cpe:2.3:a:netty:netty:3.4.6:*:*:*:*:*:*:*

netty

Version:

3.10.1

CPE:

cpe:2.3:a:netty:netty:3.10.1:*:*:*:*:*:*:*

netty

Version:

4.1.74

CPE:

cpe:2.3:a:netty:netty:4.1.74:*:*:*:*:*:*:*

netty

Version:

4.1.35

CPE:

cpe:2.3:a:netty:netty:4.1.35:*:*:*:*:*:*:*

netty

Version:

4.1.75

CPE:

cpe:2.3:a:netty:netty:4.1.75:*:*:*:*:*:*:*

netty

Version:

4.0.10

CPE:

cpe:2.3:a:netty:netty:4.0.10:*:*:*:*:*:*:*

netty

Version:

4.0.7

CPE:

cpe:2.3:a:netty:netty:4.0.7:*:*:*:*:*:*:*

netty

Version:

3.5.0

CPE:

cpe:2.3:a:netty:netty:3.5.0:-:*:*:*:*:*:*

netty

Version:

4.0.34

CPE:

cpe:2.3:a:netty:netty:4.0.34:*:*:*:*:*:*:*

netty

Version:

3.5.1

CPE:

cpe:2.3:a:netty:netty:3.5.1:*:*:*:*:*:*:*

netty

Version:

4.1.46

CPE:

cpe:2.3:a:netty:netty:4.1.46:*:*:*:*:*:*:*

netty

Version:

3.4.1

CPE:

cpe:2.3:a:netty:netty:3.4.1:*:*:*:*:*:*:*

netty

Version:

4.1.52

CPE:

cpe:2.3:a:netty:netty:4.1.52:*:*:*:*:*:*:*

netty

Version:

4.0.12

CPE:

cpe:2.3:a:netty:netty:4.0.12:*:*:*:*:*:*:*

netty

Version:

3.8.0

CPE:

cpe:2.3:a:netty:netty:3.8.0:*:*:*:*:*:*:*

netty

Version:

4.0.37

CPE:

cpe:2.3:a:netty:netty:4.0.37:*:*:*:*:*:*:*

netty

Version:

4.1.62

CPE:

cpe:2.3:a:netty:netty:4.1.62:*:*:*:*:*:*:*

netty

Version:

3.9.3

CPE:

cpe:2.3:a:netty:netty:3.9.3:*:*:*:*:*:*:*

netty

Version:

3.9.2

CPE:

cpe:2.3:a:netty:netty:3.9.2:*:*:*:*:*:*:*

netty

Version:

4.0.46

CPE:

cpe:2.3:a:netty:netty:4.0.46:*:*:*:*:*:*:*

netty

Version:

4.1.45

CPE:

cpe:2.3:a:netty:netty:4.1.45:*:*:*:*:*:*:*

netty

Version:

4.0.47

CPE:

cpe:2.3:a:netty:netty:4.0.47:*:*:*:*:*:*:*

netty

Version:

4.1.51

CPE:

cpe:2.3:a:netty:netty:4.1.51:*:*:*:*:*:*:*

netty

Version:

3.4.3

CPE:

cpe:2.3:a:netty:netty:3.4.3:*:*:*:*:*:*:*

netty

Version:

4.1.113

CPE:

cpe:2.3:a:netty:netty:4.1.113:*:*:*:*:*:*:*

netty

Version:

4.0.26

CPE:

cpe:2.3:a:netty:netty:4.0.26:*:*:*:*:*:*:*

netty

Version:

4.0.28

CPE:

cpe:2.3:a:netty:netty:4.0.28:*:*:*:*:*:*:*

netty

Version:

3.2.10

CPE:

cpe:2.3:a:netty:netty:3.2.10:*:*:*:*:*:*:*

netty

Version:

4.0.30

CPE:

cpe:2.3:a:netty:netty:4.0.30:*:*:*:*:*:*:*

netty

Version:

4.1.7

CPE:

cpe:2.3:a:netty:netty:4.1.7:*:*:*:*:*:*:*

netty

Version:

4.0.11

CPE:

cpe:2.3:a:netty:netty:4.0.11:*:*:*:*:*:*:*

netty

Version:

4.1.27

CPE:

cpe:2.3:a:netty:netty:4.1.27:*:*:*:*:*:*:*

netty

Version:

3.10.3

CPE:

cpe:2.3:a:netty:netty:3.10.3:*:*:*:*:*:*:*

netty

Version:

4.1.38

CPE:

cpe:2.3:a:netty:netty:4.1.38:*:*:*:*:*:*:*

netty

Version:

3.5.4

CPE:

cpe:2.3:a:netty:netty:3.5.4:*:*:*:*:*:*:*

netty

Version:

4.1.83

CPE:

cpe:2.3:a:netty:netty:4.1.83:*:*:*:*:*:*:*

netty

Version:

4.1.94

CPE:

cpe:2.3:a:netty:netty:4.1.94:*:*:*:*:*:*:*

netty

Version:

4.1.11

CPE:

cpe:2.3:a:netty:netty:4.1.11:*:*:*:*:*:*:*

netty

Version:

4.1.124

CPE:

cpe:2.3:a:netty:netty:4.1.124:*:*:*:*:*:*:*

netty

Version:

4.1.84

CPE:

cpe:2.3:a:netty:netty:4.1.84:*:*:*:*:*:*:*

netty

Version:

4.1.110

CPE:

cpe:2.3:a:netty:netty:4.1.110:*:*:*:*:*:*:*

netty

Version:

4.1.13

CPE:

cpe:2.3:a:netty:netty:4.1.13:*:*:*:*:*:*:*

netty

Version:

4.1.97

CPE:

cpe:2.3:a:netty:netty:4.1.97:*:*:*:*:*:*:*

netty

Version:

4.0.19

CPE:

cpe:2.3:a:netty:netty:4.0.19:*:*:*:*:*:*:*

netty

Version:

4.1.29

CPE:

cpe:2.3:a:netty:netty:4.1.29:*:*:*:*:*:*:*

netty

Version:

4.1.59

CPE:

cpe:2.3:a:netty:netty:4.1.59:*:*:*:*:*:*:*

netty

Version:

4.0.49

CPE:

cpe:2.3:a:netty:netty:4.0.49:*:*:*:*:*:*:*

netty

Version:

4.0.36

CPE:

cpe:2.3:a:netty:netty:4.0.36:*:*:*:*:*:*:*

netty

Version:

3.9.1.1

CPE:

cpe:2.3:a:netty:netty:3.9.1.1:*:*:*:*:*:*:*

netty

Version:

4.0.56

CPE:

cpe:2.3:a:netty:netty:4.0.56:*:*:*:*:*:*:*

netty

Version:

4.1.90

CPE:

cpe:2.3:a:netty:netty:4.1.90:*:*:*:*:*:*:*

netty

Version:

4.0.14

CPE:

cpe:2.3:a:netty:netty:4.0.14:-:*:*:*:*:*:*

netty

Version:

4.0.3

CPE:

cpe:2.3:a:netty:netty:4.0.3:*:*:*:*:*:*:*

netty

Version:

4.0.6

CPE:

cpe:2.3:a:netty:netty:4.0.6:*:*:*:*:*:*:*

netty

Version:

4.1.41

CPE:

cpe:2.3:a:netty:netty:4.1.41:*:*:*:*:*:*:*

netty

Version:

3.10.0

CPE:

cpe:2.3:a:netty:netty:3.10.0:*:*:*:*:*:*:*

netty

Version:

3.9.0

CPE:

cpe:2.3:a:netty:netty:3.9.0:*:*:*:*:*:*:*

netty

Version:

4.0.38

CPE:

cpe:2.3:a:netty:netty:4.0.38:*:*:*:*:*:*:*

netty

Version:

3.5.10

CPE:

cpe:2.3:a:netty:netty:3.5.10:*:*:*:*:*:*:*

netty

Version:

4.1.24

CPE:

cpe:2.3:a:netty:netty:4.1.24:*:*:*:*:*:*:*

netty

Version:

4.1.44

CPE:

cpe:2.3:a:netty:netty:4.1.44:*:*:*:*:*:*:*

netty

Version:

4.1.3

CPE:

cpe:2.3:a:netty:netty:4.1.3:*:*:*:*:*:*:*

netty

Version:

4.0.20

CPE:

cpe:2.3:a:netty:netty:4.0.20:*:*:*:*:*:*:*

netty

Version:

4.0.55

CPE:

cpe:2.3:a:netty:netty:4.0.55:*:*:*:*:*:*:*

netty

Version:

4.1.67

CPE:

cpe:2.3:a:netty:netty:4.1.67:*:*:*:*:*:*:*

netty

Version:

4.1.89

CPE:

cpe:2.3:a:netty:netty:4.1.89:*:*:*:*:*:*:*

netty

Version:

3.10.2

CPE:

cpe:2.3:a:netty:netty:3.10.2:*:*:*:*:*:*:*

netty

Version:

4.1.91

CPE:

cpe:2.3:a:netty:netty:4.1.91:*:*:*:*:*:*:*

netty

Version:

4.1.118

CPE:

cpe:2.3:a:netty:netty:4.1.118:*:*:*:*:*:*:*

netty

Version:

4.1.115

CPE:

cpe:2.3:a:netty:netty:4.1.115:*:*:*:*:*:*:*

netty

Version:

4.1.123

CPE:

cpe:2.3:a:netty:netty:4.1.123:*:*:*:*:*:*:*

netty

Version:

4.1.93

CPE:

cpe:2.3:a:netty:netty:4.1.93:*:*:*:*:*:*:*

netty

Version:

4.0.24

CPE:

cpe:2.3:a:netty:netty:4.0.24:*:*:*:*:*:*:*

netty

Version:

4.1.16

CPE:

cpe:2.3:a:netty:netty:4.1.16:*:*:*:*:*:*:*

netty

Version:

4.1.32

CPE:

cpe:2.3:a:netty:netty:4.1.32:*:*:*:*:*:*:*

netty

Version:

4.1.72

CPE:

cpe:2.3:a:netty:netty:4.1.72:*:*:*:*:*:*:*

netty

Version:

4.0.22

CPE:

cpe:2.3:a:netty:netty:4.0.22:*:*:*:*:*:*:*

netty

Version:

4.0.27

CPE:

cpe:2.3:a:netty:netty:4.0.27:*:*:*:*:*:*:*

netty

Version:

3.4.5

CPE:

cpe:2.3:a:netty:netty:3.4.5:*:*:*:*:*:*:*

netty

Version:

4.1.85

CPE:

cpe:2.3:a:netty:netty:4.1.85:*:*:*:*:*:*:*

netty

Version:

3.6.5

CPE:

cpe:2.3:a:netty:netty:3.6.5:*:*:*:*:*:*:*

netty

Version:

3.2.4

CPE:

cpe:2.3:a:netty:netty:3.2.4:*:*:*:*:*:*:*

netty

Version:

4.1.53

CPE:

cpe:2.3:a:netty:netty:4.1.53:*:*:*:*:*:*:*

netty

Version:

3.6.9

CPE:

cpe:2.3:a:netty:netty:3.6.9:*:*:*:*:*:*:*

netty

Version:

4.1.60

CPE:

cpe:2.3:a:netty:netty:4.1.60:*:*:*:*:*:*:*

netty

Version:

3.10.5

CPE:

cpe:2.3:a:netty:netty:3.10.5:*:*:*:*:*:*:*

netty

Version:

4.1.77

CPE:

cpe:2.3:a:netty:netty:4.1.77:*:*:*:*:*:*:*

netty

Version:

4.0.4

CPE:

cpe:2.3:a:netty:netty:4.0.4:*:*:*:*:*:*:*

netty

Version:

4.1.17

CPE:

cpe:2.3:a:netty:netty:4.1.17:*:*:*:*:*:*:*

netty

Version:

4.1.9

CPE:

cpe:2.3:a:netty:netty:4.1.9:*:*:*:*:*:*:*

netty

Version:

4.1.19

CPE:

cpe:2.3:a:netty:netty:4.1.19:*:*:*:*:*:*:*

netty

Version:

4.1.12

CPE:

cpe:2.3:a:netty:netty:4.1.12:*:*:*:*:*:*:*

netty

Version:

3.10.4

CPE:

cpe:2.3:a:netty:netty:3.10.4:*:*:*:*:*:*:*

netty

Version:

4.0.18

CPE:

cpe:2.3:a:netty:netty:4.0.18:*:*:*:*:*:*:*

netty

Version:

4.1.0

CPE:

cpe:2.3:a:netty:netty:4.1.0:candidate_release1:*:*:*:*:*:*

netty

Version:

4.1.99

CPE:

cpe:2.3:a:netty:netty:4.1.99:*:*:*:*:*:*:*

netty

Version:

4.1.50

CPE:

cpe:2.3:a:netty:netty:4.1.50:*:*:*:*:*:*:*

netty

Version:

3.5.2

CPE:

cpe:2.3:a:netty:netty:3.5.2:*:*:*:*:*:*:*

netty

Version:

3.4.2

CPE:

cpe:2.3:a:netty:netty:3.4.2:*:*:*:*:*:*:*

netty

Version:

4.1.43

CPE:

cpe:2.3:a:netty:netty:4.1.43:*:*:*:*:*:*:*

This vulnerability affects 255 software configuration(s). Ensure you patch all affected systems.

Available Security Patches

3 patches available from vendors

View All Patches

Oracle

CPUAPR2026

Oracle Critical Patch Update Advisory - April 2026

Severity

Critical

Released

Apr 21, 2026

Restart Required

Security Update

View Details Vendor Page

Oracle

CPUJAN2026

Oracle Critical Patch Update Advisory - January 2026

Severity

Critical

Released

Jan 20, 2026

Restart Required

Security Update

View Details Vendor Page

SUSE

CVE-2025-67735

Severity

Unknown

Released

Dec 23, 2025

Security Update

View Details Vendor Page

Browse All Security Patches

References & Resources

https://github.com/netty/netty/security/advisories/GHSA-84h7-rjj3-6jx4
security-advisories@github.com Exploit Vendor Advisory

Severity Details

6.5

out of 10.0

Medium

Weakness Type (CWE)

CWE-93

Improper Neutralization of CRLF Sequences ('CRLF Injection')

Description: The product uses CRLF (carriage return line feeds) as a special element, e.g. to separate lines or records, but it does not neutralize or incorrectly neutralizes CRLF sequences from inputs.
Typical Severity: Medium
Abstraction Level: Base