Maven/io.netty:netty-codec-http2: high 7.5
io.netty:netty-codec-http2 vulnerable to HTTP/2 Rapid Reset Attack
Action: Upgrade io.netty:netty-codec-http2 to 4.1.100.Final or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.1.100.Final | - |
Fixed versions
| 4.1.100.Final |
Sources
- osv: GHSA-xpw8-rcwv-8f8p
- https://github.com/apple/swift-nio-http2/security/advisories/GHSA-qppj-fm5r-hxr3
- https://github.com/netty/netty/security/advisories/GHSA-xpw8-rcwv-8f8p
- https://nvd.nist.gov/vuln/detail/CVE-2023-44487
- https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61
- https://github.com/netty/netty
- https://www.cve.org/CVERecord?id=CVE-2023-44487
published · modified · JSON