Approved changes feed: RSS · Atom

cpe:2.3:a:netty:netty:4.1.43:*:*:*:*:*:*:*

part: a version: 4.1.43 update: *

VendorNetty (cbedf89d-28d5-506c-890d-fdc641011f07)
ProductNetty (f166b599-df6d-574f-a8ca-25e707bb6596)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/netty/netty purl2cpe 2026-06-01 10:13:45.711515
pkg:maven/io.netty/netty purl2cpe 2026-06-01 10:13:45.711516
pkg:maven/io.netty/netty-all purl2cpe 2026-06-01 10:13:45.711517
pkg:rpm/opensuse/netty purl2cpe 2026-06-01 10:13:45.711519
pkg:sonatype/netty purl2cpe 2026-06-01 10:13:45.711520

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-7238 vulnerable 2026-06-08 05:27:12.659866 Details available
Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Transfer-Encoding:chunked line) and a later Content-Length header. This issue exists because of an incomplete fix for CVE-2019-16869.
Published: 2020-01-27T16:43:44.000Z
Updated: 2024-08-04T09:25:48.271Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.