Moderate severity5.7NVD Advisory· Published Jul 9, 2026
io.netty/netty-codec-http: Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder
CVE-2026-59921
Description
io.netty/netty-codec-http: Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder
Affected products
65- osv-coords64 versionspkg:apk/chainguard/airbyte-serverpkg:apk/chainguard/apache-activemq-artemispkg:apk/chainguard/apache-hop-fipspkg:apk/chainguard/apache-nifipkg:apk/chainguard/apache-pulsar-4.0pkg:apk/chainguard/apicurio-registrypkg:apk/chainguard/apicurio-registry-3-operatorpkg:apk/chainguard/apicurio-registry-3-operator-fipspkg:apk/chainguard/apicurio-registry-fipspkg:apk/chainguard/camunda-8.9pkg:apk/chainguard/camunda-zeebe-8.8pkg:apk/chainguard/cloudwatch-exporterpkg:apk/chainguard/flocipkg:apk/chainguard/floci-azpkg:apk/chainguard/flywaypkg:apk/chainguard/flyway-fipspkg:apk/chainguard/hono-adapter-mqttpkg:apk/chainguard/hono-clipkg:apk/chainguard/hono-service-authpkg:apk/chainguard/hono-service-command-routerpkg:apk/chainguard/hono-service-device-registry-jdbcpkg:apk/chainguard/infinispan-15.2pkg:apk/chainguard/infinispan-16.0pkg:apk/chainguard/infinispan-16.1pkg:apk/chainguard/infinispan-16.2pkg:apk/chainguard/kafbat-uipkg:apk/chainguard/kayenta-2025.2pkg:apk/chainguard/kayenta-fips-2026.0pkg:apk/chainguard/keycloak-26.7pkg:apk/chainguard/keycloak-26.7-iamguarded-compatpkg:apk/chainguard/keycloak-26.7-operatorpkg:apk/chainguard/keycloak-fips-26.7pkg:apk/chainguard/keycloak-fips-26.7-iamguarded-fipspkg:apk/chainguard/keycloak-fips-26.7-operatorpkg:apk/chainguard/knative-kafka-broker-1.22-dispatcher-loompkg:apk/chainguard/knative-kafka-broker-1.22-receiver-loompkg:apk/chainguard/knative-kafka-broker-fips-1.21-dispatcher-loompkg:apk/chainguard/knative-kafka-broker-fips-1.21-receiver-loompkg:apk/chainguard/knative-kafka-broker-fips-1.22-dispatcher-loompkg:apk/chainguard/knative-kafka-broker-fips-1.22-receiver-loompkg:apk/chainguard/nuxeo-2023pkg:apk/chainguard/pinotpkg:apk/chainguard/pinot-fipspkg:apk/chainguard/reposilitepkg:apk/chainguard/request-9047-keycloak-fips-26.4pkg:apk/chainguard/request-9047-keycloak-fips-26.4-iamguarded-fipspkg:apk/chainguard/request-9047-keycloak-fips-26.4-operatorpkg:apk/chainguard/request-9047-keycloak-fips-26.5pkg:apk/chainguard/request-9047-keycloak-fips-26.5-iamguarded-fipspkg:apk/chainguard/request-9047-keycloak-fips-26.5-operatorpkg:apk/chainguard/request-9047-keycloak-fips-26.6pkg:apk/chainguard/request-9047-keycloak-fips-26.6-iamguarded-fipspkg:apk/chainguard/request-9047-keycloak-fips-26.6-operatorpkg:apk/chainguard/s3proxypkg:apk/chainguard/s3proxy-fipspkg:apk/wolfi/apache-activemq-artemispkg:apk/wolfi/apache-nifipkg:apk/wolfi/apicurio-registrypkg:apk/wolfi/cloudwatch-exporterpkg:apk/wolfi/flywaypkg:apk/wolfi/infinispan-15.2pkg:apk/wolfi/infinispan-16.0pkg:apk/wolfi/infinispan-16.1pkg:apk/wolfi/infinispan-16.2
< 2.0.0-r8+ 63 more
- (no CPE)range: < 2.0.0-r8
- (no CPE)range: < 2.55.0-r1
- (no CPE)range: < 2.18.1-r6
- (no CPE)range: < 2.10.0-r6
- (no CPE)range: < 4.0.12-r2
- (no CPE)range: < 3.3.0-r11
- (no CPE)range: < 3.3.0-r11
- (no CPE)range: < 3.3.0-r8
- (no CPE)range: < 3.3.0-r8
- (no CPE)range: < 8.9.13-r2
- (no CPE)range: < 8.8.32-r1
- (no CPE)range: < 0.18.0-r1
- (no CPE)range: < 1.5.33-r3
- (no CPE)range: < 0.9.0-r3
- (no CPE)range: < 13.0.0-r1
- (no CPE)range: < 13.0.0-r3
- (no CPE)range: < 2.7.0-r29
- (no CPE)range: < 2.7.0-r29
- (no CPE)range: < 2.7.0-r29
- (no CPE)range: < 2.7.0-r29
- (no CPE)range: < 2.7.0-r29
- (no CPE)range: < 15.2.6-r23
- (no CPE)range: < 16.0.14-r2
- (no CPE)range: < 16.1.4-r7
- (no CPE)range: < 16.2.1-r2
- (no CPE)range: < 1.5.0-r10
- (no CPE)range: < 2025.2.4-r6
- (no CPE)range: < 2026.0.4-r11
- (no CPE)range: < 26.7.0-r4
- (no CPE)range: < 26.7.0-r4
- (no CPE)range: < 26.7.0-r4
- (no CPE)range: < 26.7.0-r3
- (no CPE)range: < 26.7.0-r3
- (no CPE)range: < 26.7.0-r3
- (no CPE)range: < 1.22.2-r8
- (no CPE)range: < 1.22.2-r8
- (no CPE)range: < 1.21.4-r9
- (no CPE)range: < 1.21.4-r9
- (no CPE)range: < 1.22.2-r11
- (no CPE)range: < 1.22.2-r11
- (no CPE)range: < 2023.45-r3
- (no CPE)range: < 1.5.1-r6
- (no CPE)range: < 1.5.1-r6
- (no CPE)range: < 3.5.28-r7
- (no CPE)range: < 26.4.7-r23
- (no CPE)range: < 26.4.7-r23
- (no CPE)range: < 26.4.7-r23
- (no CPE)range: < 26.5.7-r15
- (no CPE)range: < 26.5.7-r15
- (no CPE)range: < 26.5.7-r15
- (no CPE)range: < 26.6.4-r5
- (no CPE)range: < 26.6.4-r5
- (no CPE)range: < 26.6.4-r5
- (no CPE)range: < 3.3.0-r6
- (no CPE)range: < 3.3.0-r5
- (no CPE)range: < 2.55.0-r1
- (no CPE)range: < 2.10.0-r6
- (no CPE)range: < 3.3.0-r11
- (no CPE)range: < 0.18.0-r1
- (no CPE)range: < 13.0.0-r1
- (no CPE)range: < 15.2.6-r23
- (no CPE)range: < 16.0.14-r2
- (no CPE)range: < 16.1.4-r7
- (no CPE)range: < 16.2.1-r2
Patches
Vulnerability mechanics
News mentions
0No linked articles in our index yet.