Maven/io.projectreactor.netty:reactor-netty-http CVE-2022-31684: medium 4.3, EPSS 0.76%
Invalid HTTP requests in Reactor Netty HTTP Server may reveal access tokens
Action: Upgrade io.projectreactor.netty:reactor-netty-http to 1.0.24 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.11 | 1.0.24 | - |
Fixed versions
| 1.0.24 |
Sources
- osv: GHSA-7w4x-4h67-pgmv
- https://nvd.nist.gov/vuln/detail/CVE-2022-31684
- https://search.maven.org/artifact/io.projectreactor.netty/reactor-netty-http
- https://tanzu.vmware.com/security/cve-2022-31684
CVE-2022-31684 · published · modified · JSON