{"action":"Upgrade io.netty.incubator:netty-incubator-codec-bhttp to 0.0.13.Final or later.","affected":[{"fixed":"0.0.13.Final","introduced":"0"}],"component":"io.netty.incubator:netty-incubator-codec-bhttp","cve_ids":["CVE-2024-40642"],"ecosystem":"Maven","epss":0.00677,"exploited":false,"fixed_versions":["0.0.13.Final"],"ghsa_id":"GHSA-q8f2-hxq5-cp4h","id":"tcs_01M5N992NB3ZMD6GHVSRBB46Y9","modified_at":"2026-09-10T03:50:16.884277807Z","published_at":"2024-07-18T22:14:28Z","references":["https://osv.dev/vulnerability/GHSA-q8f2-hxq5-cp4h","https://github.com/netty/netty-incubator-codec-ohttp/security/advisories/GHSA-q8f2-hxq5-cp4h","https://nvd.nist.gov/vuln/detail/CVE-2024-40642","https://github.com/netty/netty-incubator-codec-ohttp/commit/b687a0cf6ea1030232ea204d73bce82f2698e571","https://github.com/netty/netty-incubator-codec-ohttp"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-q8f2-hxq5-cp4h","url":"https://osv.dev/vulnerability/GHSA-q8f2-hxq5-cp4h"}],"summary":"Absent Input Validation in BinaryHttpParser"}