Spring / Reactor Netty
7 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-47874 | Reactor Netty HTTP Server Denial of Service With Pipelined Requests | MEDIUM | 5.3 | Aug 26, 2026 |
| CVE-2026-47845 | Reactor Netty HTTP Server may incorrectly evaluate proxy addresses | MEDIUM | 5.3 | Aug 26, 2026 |
| CVE-2026-47848 | Reactor Netty WebSocket Client Leaks Credentials On Redirect | MEDIUM | 6.1 | Aug 26, 2026 |
| CVE-2026-47844 | Reactor Netty HTTP Server Leaks Exception Details | MEDIUM | 5.3 | Aug 26, 2026 |
| CVE-2026-47843 | Reactor Netty may incorrectly route traffic due to DNS resolver reuse | LOW | 3.7 | Aug 26, 2026 |
| CVE-2026-41715 | Reactor Netty HTTP Client Leaks Credentials On Protocol Downgrade Redirect | MEDIUM | 6.5 | Jun 9, 2026 |
| CVE-2023-34054 | Reactor Netty HTTP Server Metrics DoS Vulnerability | HIGH | 7.5 | Nov 28, 2023 |
Showing 1 to 7 of 7 CVEs