Moderate severity6.5NVD Advisory· Published Jul 9, 2026
io.netty/netty-codec-http2: Netty: Improper header neutralization in netty-codec-http2
CVE-2026-59900
Description
io.netty/netty-codec-http2: Netty: Improper header neutralization in netty-codec-http2
Affected products
41- osv-coords39 versionspkg:apk/chainguard/airbyte-serverpkg:apk/chainguard/apache-hop-fipspkg:apk/chainguard/apache-pulsar-4.0pkg:apk/chainguard/apicurio-registrypkg:apk/chainguard/apicurio-registry-3-operatorpkg:apk/chainguard/apicurio-registry-3-operator-fipspkg:apk/chainguard/apicurio-registry-fipspkg:apk/chainguard/camunda-8.9pkg:apk/chainguard/camunda-zeebe-8.8pkg:apk/chainguard/cloudwatch-exporterpkg:apk/chainguard/floci-azpkg:apk/chainguard/flywaypkg:apk/chainguard/flyway-fipspkg:apk/chainguard/infinispan-15.2pkg:apk/chainguard/infinispan-16.0pkg:apk/chainguard/infinispan-16.1pkg:apk/chainguard/infinispan-16.2pkg:apk/chainguard/kafbat-uipkg:apk/chainguard/kayenta-2025.2pkg:apk/chainguard/kayenta-fips-2026.0pkg:apk/chainguard/keycloak-fips-26.7pkg:apk/chainguard/keycloak-fips-26.7-iamguarded-fipspkg:apk/chainguard/keycloak-fips-26.7-operatorpkg:apk/chainguard/knative-kafka-broker-fips-1.21-dispatcher-loompkg:apk/chainguard/knative-kafka-broker-fips-1.21-receiver-loompkg:apk/chainguard/knative-kafka-broker-fips-1.22-dispatcher-loompkg:apk/chainguard/knative-kafka-broker-fips-1.22-receiver-loompkg:apk/chainguard/pinot-fipspkg:apk/chainguard/reposilitepkg:apk/chainguard/request-9047-keycloak-fips-26.5pkg:apk/chainguard/request-9047-keycloak-fips-26.5-iamguarded-fipspkg:apk/chainguard/request-9047-keycloak-fips-26.5-operatorpkg:apk/wolfi/apicurio-registrypkg:apk/wolfi/cloudwatch-exporterpkg:apk/wolfi/flywaypkg:apk/wolfi/infinispan-15.2pkg:apk/wolfi/infinispan-16.0pkg:apk/wolfi/infinispan-16.1pkg:apk/wolfi/infinispan-16.2
< 2.0.0-r8+ 38 more
- (no CPE)range: < 2.0.0-r8
- (no CPE)range: < 2.18.1-r6
- (no CPE)range: < 4.0.12-r2
- (no CPE)range: < 3.3.0-r11
- (no CPE)range: < 3.3.0-r11
- (no CPE)range: < 3.3.0-r8
- (no CPE)range: < 3.3.0-r8
- (no CPE)range: < 8.9.13-r2
- (no CPE)range: < 8.8.32-r1
- (no CPE)range: < 0.18.0-r1
- (no CPE)range: < 0.9.0-r3
- (no CPE)range: < 13.0.0-r1
- (no CPE)range: < 13.0.0-r3
- (no CPE)range: < 15.2.6-r23
- (no CPE)range: < 16.0.14-r2
- (no CPE)range: < 16.1.4-r7
- (no CPE)range: < 16.2.1-r2
- (no CPE)range: < 1.5.0-r10
- (no CPE)range: < 2025.2.4-r6
- (no CPE)range: < 2026.0.4-r11
- (no CPE)range: < 26.7.0-r5
- (no CPE)range: < 26.7.0-r5
- (no CPE)range: < 26.7.0-r5
- (no CPE)range: < 1.21.4-r9
- (no CPE)range: < 1.21.4-r9
- (no CPE)range: < 1.22.2-r12
- (no CPE)range: < 1.22.2-r12
- (no CPE)range: < 1.5.1-r6
- (no CPE)range: < 3.5.28-r7
- (no CPE)range: < 26.5.7-r17
- (no CPE)range: < 26.5.7-r17
- (no CPE)range: < 26.5.7-r17
- (no CPE)range: < 3.3.0-r11
- (no CPE)range: < 0.18.0-r1
- (no CPE)range: < 13.0.0-r1
- (no CPE)range: < 15.2.6-r23
- (no CPE)range: < 16.0.14-r2
- (no CPE)range: < 16.1.4-r7
- (no CPE)range: < 16.2.1-r2
Patches
Vulnerability mechanics
News mentions
0No linked articles in our index yet.