<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: netty</title><description>Every new CVE for netty.</description><link>https://agentprime.io/</link><item><title>CVE-2026-100666: Netty 4.2.0 through 4.2.16 Response Desynchronization via HttpServerCodec</title><link>https://agentprime.io/advisories/CVE-2026-100666/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-100666/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 26 Sep 2026 13:23:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-100665: Netty 4.2.11 through 4.2.17 QUIC Hostname Verification Bypass</title><link>https://agentprime.io/advisories/CVE-2026-100665/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-100665/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 26 Sep 2026 13:23:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-100664: Netty 4.2.2 through 4.2.17 HTTP/1 Host Header Authority Confusion</title><link>https://agentprime.io/advisories/CVE-2026-100664/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-100664/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 26 Sep 2026 13:23:30 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-100663: Netty HTTP/1 CONNECT authority-form mistranslated to malformed HTTP/3</title><link>https://agentprime.io/advisories/CVE-2026-100663/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-100663/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 26 Sep 2026 13:23:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-100662: Netty HTTP/3 QPACK encoder-stream unbounded memory exhaustion DoS</title><link>https://agentprime.io/advisories/CVE-2026-100662/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-100662/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 26 Sep 2026 13:23:28 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-100661: Netty HTTP/3 QPACK Prefixed Integer DoS via Unbounded Accumulation</title><link>https://agentprime.io/advisories/CVE-2026-100661/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-100661/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 26 Sep 2026 13:23:28 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-100660: Netty before 4.2.18.Final QpackEncoder Unbounded Memory Retention</title><link>https://agentprime.io/advisories/CVE-2026-100660/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-100660/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 26 Sep 2026 13:23:27 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-100659: Netty 4.2.0 through 4.2.17 HTTP/3 Request Routing Bypass</title><link>https://agentprime.io/advisories/CVE-2026-100659/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-100659/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 26 Sep 2026 13:23:26 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-89044: Netty 4.1.133.Final through 4.1.137.Final and 4.2.13.Final through 4.2.17.Final HTTP Request Smuggling via Transfer-Encoding</title><link>https://agentprime.io/advisories/CVE-2026-89044/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-89044/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 10 Sep 2026 17:39:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-76816: Netty: MQTT Topic Name and Client ID Validation Bypass</title><link>https://agentprime.io/advisories/CVE-2026-76816/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-76816/</guid><description>CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 24 Aug 2026 19:53:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-62380: Netty before 4.2.16.Final SOCKS Proxy Null Byte Injection</title><link>https://agentprime.io/advisories/CVE-2026-62380/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-62380/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 22 Aug 2026 12:26:43 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-62243: Netty 4.2.0 through 4.2.16 TLS Hostname Verification Bypass</title><link>https://agentprime.io/advisories/CVE-2026-62243/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-62243/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 22 Aug 2026 12:26:43 GMT</pubDate><category>CVE</category></item></channel></rss>