Netty CVE-2024-59000: HTTP/2 to HTTP/1.x Host Header Duplication Leading to Request Routing Bypass
Security Advisory
CVE-2024-59000
Medium
Netty
Affected:
- io.netty:netty-codec-http2 >= 4.2.0.Final, <= 4.2.15.Final
- io.netty:netty-codec-http2 < 4.1.136.Final
Fixed in:
- 4.2.16.Final
- 4.1.136.Final
Referenced CVEs:
CVE-2026-59900 · 6.9
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.