Medium
Netty 4.2.0 through 4.2.17 HTTP/3 Request Routing Bypass
Type: advisorySource: Official CVE List
Netty's HTTP/3 codec (io.netty:netty-codec-http3) in versions 4.2.0.Final through 4.2.17.Final does not enforce the RFC 9114 requirement that the :authority pseudo-header field and a literal host header field, when bo…
Products: nettyCVEs: CVE-2026-100659