Vulnerability in Netty

CVE-2026-59901

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the `Bzip2Decoder` handler in Netty's compression codec pipeline is vulnerable to a denial-of-service attack through a…

Affected products

  • Netty — versions >=4.2.0.Final, < 4.2.16.Final, < 4.1.136.Final

Weakness classification (CWE)

References