Maven/io.netty.incubator:netty-incubator-codec-ohttp CVE-2026-48480: medium 6.6, EPSS 0.17%
OHttpVersionChunkDraft: Missing Final-Chunk Enforcement Leads to Undetected Stream Truncation
Action: Upgrade io.netty.incubator:netty-incubator-codec-ohttp to 0.0.22.Final or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.0.22.Final | - |
Fixed versions
| 0.0.22.Final |
Sources
- osv: GHSA-r6fj-869h-4f6q
- nvd: CVE-2026-48480
- https://github.com/netty/netty-incubator-codec-ohttp/security/advisories/GHSA-r6fj-869h-4f6q
- https://github.com/netty/netty-incubator-codec-ohttp/commit/28f977f293591a4e837bd59ceb441f9f70349915
- https://github.com/netty/netty-incubator-codec-ohttp
CVE-2026-48480 · published · modified · JSON