CVE-2026-56816
1 advisory.
Maven/io.netty:netty-codec-http3 CVE-2026-56816: high 7.5
Netty: Memory Exhaustion via HTTP/3 Reserved Frame Types
Action: Upgrade io.netty:netty-codec-http3 to 4.2.16.Final or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.2.16.Final | - |
Fixed versions
| 4.2.16.Final |
Sources
- osv: GHSA-hpcc-26xq-25fv
- https://github.com/netty/netty/security/advisories/GHSA-hpcc-26xq-25fv
- https://nvd.nist.gov/vuln/detail/CVE-2026-56816
- https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b
- https://github.com/netty/netty
- https://github.com/netty/netty/releases/tag/netty-4.2.16.Final
CVE-2026-56816 · published · modified · JSON