{"action":"Upgrade io.netty:netty-handler to 4.1.45 or later.","affected":[{"fixed":"4.1.45","introduced":"4.1.43"}],"component":"io.netty:netty-handler","cve_ids":["CVE-2020-7238"],"ecosystem":"Maven","epss":0.03647,"exploited":false,"fixed_versions":["4.1.45"],"ghsa_id":"GHSA-ff2w-cq2g-wv5f","id":"tcs_01M5N8VTSNBY5Y7B9X8QB0RR58","modified_at":"2024-03-14T05:20:05.937087Z","published_at":"2020-02-21T18:55:50Z","references":["https://osv.dev/vulnerability/GHSA-ff2w-cq2g-wv5f","https://nvd.nist.gov/vuln/detail/CVE-2020-7238","https://github.com/jdordonezn/CVE-2020-72381/issues/1","https://github.com/netty/netty/issues/9861","https://github.com/netty/netty/pull/9865","https://www.debian.org/security/2021/dsa-4885","https://netty.io/news","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TS6VX7OMXPDJIU5LRGUAHRK6MENAVJ46","https://lists.debian.org/debian-lts-announce/2020/09/msg00003.html","https://lists.debian.org/debian-lts-announce/2020/02/msg00018.html","https://lists.debian.org/debian-lts-announce/2020/02/msg00017.html","https://lists.apache.org/thread.html/rc8d554aad889d12b140d9fd7d2d6fc2e8716e9792f6f4e4b2cdc2d05@%3Ccommits.cassandra.apache.org%3E","https://lists.apache.org/thread.html/r131e572d003914843552fa45c4398b9903fb74144986e8b107c0a3a7@%3Ccommits.cassandra.apache.org%3E","https://access.redhat.com/errata/RHSA-2020:0811","https://access.redhat.com/errata/RHSA-2020:0806","https://access.redhat.com/errata/RHSA-2020:0805","https://access.redhat.com/errata/RHSA-2020:0804","https://access.redhat.com/errata/RHSA-2020:0606","https://access.redhat.com/errata/RHSA-2020:0605","https://access.redhat.com/errata/RHSA-2020:0601","https://access.redhat.com/errata/RHSA-2020:0567","https://access.redhat.com/errata/RHSA-2020:0497"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-ff2w-cq2g-wv5f","url":"https://osv.dev/vulnerability/GHSA-ff2w-cq2g-wv5f"}],"summary":"HTTP Request Smuggling in Netty"}