Spring Reactor Netty
2 CVEs affecting Spring Reactor Netty. Latest disclosed: 2026-06-09. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-41715 | Medium | 6.1 | 2026-06-09 | In specific scenarios involving HTTP redirects from a secure to an insecure endpoint, the Reactor Netty HTTP client may leak credentials. In order for this to… |
CVE-2023-34054 | Medium | 5.3 | 2023-11-28 | In Reactor Netty HTTP Server, versions 1.1.x prior to 1.1.13 and versions 1.0.x prior to 1.0.39, it is possible for a user to provide specially crafted HTTP r… |