Reactor Netty
Approved changes feed: RSS · Atom
cpe:2.3:a:spring:reactor_netty:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Spring (4c7a31af-cbd7-516f-b1ce-2d5f574797bc) |
|---|---|
| Product | Reactor Netty (6d35be83-8cd8-5aa4-8cca-81522f733a1b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-41715 |
vulnerable | 2026-07-29 00:49:31.461112 |
Reactor Netty HTTP Client Leaks Credentials On Protocol Downgrade Redirect
MEDIUM (6.1)
In specific scenarios involving HTTP redirects from a secure to an insecure endpoint, the Reactor Netty HTTP client may leak credentials. In order for this to happen, the HTTP client must have been explicitly configured to follow redirects.
Affected versions:
Reactor Netty 1.0.0 through 1.0.51; 1.1.0 through 1.1.35; 1.2.0 through 1.2.17; 1.3.0 through 1.3.5.
Published: 2026-06-09T03:48:41.439Z
Updated: 2026-06-23T20:46:09.111Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34054 |
vulnerable | 2026-06-08 06:06:24.329506 |
Reactor Netty HTTP Server Metrics DoS Vulnerability
MEDIUM (5.3)
In Reactor Netty HTTP Server, versions 1.1.x prior to 1.1.13 and versions 1.0.x prior to 1.0.39, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition.
Specifically, an application is vulnerable if Reactor Netty HTTP Server built-in integration with Micrometer is enabled.
Published: 2023-11-28T08:16:14.361Z
Updated: 2024-08-02T16:01:52.415Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.