CPE

Cpe:2.3:a:netty:netty::::::::

1 brief RSS

Netty SPDY SETTINGS Frame Denial of Service Vulnerability

A high-severity vulnerability, CVE-2026-55831, in Netty's SPDY SETTINGS decoder allows a remote unauthenticated attacker to trigger a denial of service by sending a crafted SPDY/3.1 SETTINGS frame that leads to excessive heap growth and CPU consumption due to unbounded map entries in `DefaultSpdySettingsFrame`.

netty-codec-http +3 denial-of-service vulnerability netty spdy java memory-leak DoS

3t 1c 1i 1h ago

Cpe:2.3:a:netty:netty:*:*:*:*:*:*:*:*

Netty SPDY SETTINGS Frame Denial of Service Vulnerability

Cpe:2.3:a:netty:netty::::::::