CVE-2026-48480
1 advisory.
Maven/io.netty.incubator:netty-incubator-codec-ohttp CVE-2026-48480: medium, EPSS 0.27%
OHttpVersionChunkDraft: Missing Final-Chunk Enforcement Leads to Undetected Stream Truncation
Action: Upgrade io.netty.incubator:netty-incubator-codec-ohttp to 0.0.22.Final or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.0.22.Final | - |
Fixed versions
| 0.0.22.Final |
Sources
- osv: GHSA-r6fj-869h-4f6q
- https://github.com/netty/netty-incubator-codec-ohttp/security/advisories/GHSA-r6fj-869h-4f6q
- https://nvd.nist.gov/vuln/detail/CVE-2026-48480
- https://github.com/netty/netty-incubator-codec-ohttp/commit/28f977f293591a4e837bd59ceb441f9f70349915
- https://github.com/netty/netty-incubator-codec-ohttp
CVE-2026-48480 · published · modified · JSON