Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-41881
5.3
MEDIUMCVSS v3
Published
December 12, 2022
Affected
4 projects
Assigned by
GitHub
Severity scale
010
Description
Netty project is an event-driven asynchronous network application framework. In versions prior to 4.1.86.Final, a StackOverflowError can be raised when parsing a malformed crafted message due to an infinite recursion. This issue is patched in version 4.1.86.Final. There is no workaround, except using a custom HaProxyMessageDecoder.
netty/netty
GitHubNetty project - an event-driven asynchronous network application framework
GitHubNetty project - an event-driven asynchronous network application framework< 4.1.86NVD
nettyPython Package IndexA simple python library for networking. Not extremely complex, but allows for simple game servers and chat rooms to be hosted.
Python Package IndexA simple python library for networking. Not extremely complex, but allows for simple game servers and chat rooms to be hosted.< 4.1.86NVD
netty
NPM
RubyGems