Known vulnerabilities in Netty 4.1.125

Software: Netty
Version: 4.1.125
Software CPE: cpe:2.3:a:netty:netty:*:*:*:*:*:*:*:*
Total vulnerabilities: 68
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Netty version 4.1.125 Netty 4.1.125 is affected by 68 vulnerabilities: 5 high, 58 medium, 5 low Critical High Medium Low

Vulnerabilities (68)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU148885 - Signed to Unsigned Conversion Error
CWE-195 High
No
No
4.1.138, 4.2.18 10.09.2026 SB2026091030
#VU148884 - Incorrect Conversion between Numeric Types
CWE-681 Medium
No
No
4.1.138, 4.2.18 10.09.2026 SB2026091030
#VU148882 - Resource exhaustion
CWE-400 Medium
No
No
4.1.138, 4.2.18 10.09.2026 SB2026091030
#VU148881 - Missing Release of Resource after Effective Lifetime
CWE-772 Medium
No
No
4.1.138, 4.2.18 10.09.2026 SB2026091030
#VU148880 - Improper Check for Certificate Revocation
CWE-299 Medium
No
No
4.1.138, 4.2.18 10.09.2026 SB2026091030
#VU148879 - Resource exhaustion
CWE-400 Medium
No
No
4.1.138, 4.2.18 10.09.2026 SB2026091030
#VU148878 - Allocation of Resources Without Limits or Throttling
CWE-770 Medium
No
No
4.1.138, 4.2.18 10.09.2026 SB2026091030
#VU148877 - Allocation of Resources Without Limits or Throttling
CWE-770 Medium
No
No
4.1.138, 4.2.18 10.09.2026 SB2026091030
#VU141323 - Improper input validation
CVE-2026-76816
CWE-20 Low
No
No
4.1.137, 4.2.17 08.08.2026 SB2026080807
#VU141322 - Null Byte Interaction Error (Poison Null Byte)
CWE-626 Medium
No
No
4.1.137, 4.2.17 08.08.2026 SB2026080807
#VU141321 - Use of Cache Containing Sensitive Information
CVE-2026-59903
CWE-524 Medium
No
No
4.1.137, 4.2.17 08.08.2026 SB2026080807
#VU141320 - Resource exhaustion
CVE-2026-59902
CWE-400 Medium
No
No
4.1.137, 4.2.17 08.08.2026 SB2026080807
#VU141319 - Improper input validation
CVE-2026-75595
CWE-20 Medium
No
No
4.1.137, 4.2.17 08.08.2026 SB2026080807
#VU141318 - Inefficient Algorithmic Complexity
CVE-2026-75596
CWE-407 Medium
No
No
4.1.137, 4.2.17 08.08.2026 SB2026080807
#VU141317 - Improper Validation of Certificate with Host Mismatch
CWE-297 Medium
No
No
4.1.137, 4.2.17 08.08.2026 SB2026080807
#VU139253 - Missing Release of Resource after Effective Lifetime
CVE-2026-73508
CWE-772 Medium
No
No
4.1.136, 4.2.16 24.07.2026 SB2026072404
#VU139252 - Resource exhaustion
CVE-2026-73507
CWE-400 Medium
No
No
4.1.136, 4.2.16 24.07.2026 SB2026072404
#VU138902 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-59919
CWE-93 Low
Public exploit available
No
4.1.136, 4.2.16 21.07.2026 SB2026072182
SB2026080509
#VU138901 - Improper Access Control
CVE-2026-56746
CWE-284 Medium
No
No
4.1.136, 4.2.16 21.07.2026 SB2026072182
SB2026080509
SB2026091105
#VU137572 - Resource exhaustion
CVE-2026-55831
CWE-400 Medium
No
No
4.1.136, 4.2.16 15.07.2026 SB2026071505
SB2026080509
SB2026083172
and 4 more


Showing elements 1 - 20 out of 68