netty-codec-smtp
by Netty
Source repositories
CVEs (3)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-93576 | Hig | 0.49 | 7.5 | 0.00 | Sep 18, 2026 | A flaw was found in Netty netty-codec-smtp. The component does not properly validate Carriage Return (CR) and Line Feed (LF) characters in the SMTP command-name field. A remote attacker, if an application routes untrusted input into this field, can embed CR/LF characters to… | ||
| CVE-2026-62380 | Hig | 0.49 | 7.5 | 0.00 | Aug 22, 2026 | Netty (io.netty:netty-codec-socks) versions 4.2.0.Final through 4.2.16.Final and 4.1.x through 4.1.136.Final contain null byte, CRLF, and credential injection vulnerabilities in the SOCKS4 (Socks4ClientEncoder) and SOCKS5 (Socks5ClientEncoder) client encoders, which fail to… | ||
| CVE-2026-100657 | 0.00 | — | 0.00 | Sep 26, 2026 | Rejected reason: This CVE ID has been rejected as a duplicate. |
- risk 0.49cvss 7.5epss 0.00
A flaw was found in Netty netty-codec-smtp. The component does not properly validate Carriage Return (CR) and Line Feed (LF) characters in the SMTP command-name field. A remote attacker, if an application routes untrusted input into this field, can embed CR/LF characters to…
- risk 0.49cvss 7.5epss 0.00
Netty (io.netty:netty-codec-socks) versions 4.2.0.Final through 4.2.16.Final and 4.1.x through 4.1.136.Final contain null byte, CRLF, and credential injection vulnerabilities in the SOCKS4 (Socks4ClientEncoder) and SOCKS5 (Socks5ClientEncoder) client encoders, which fail to…
- CVE-2026-100657Sep 26, 2026risk 0.00cvss —epss 0.00
Rejected reason: This CVE ID has been rejected as a duplicate.