Netty HTTP/3 Authority Mismatch Bypass via HTTP/1 Absolute-Form Host Handling
Security Advisory
High
Netty
Affected:
- io.netty:netty-codec-http3 >= 4.2.2.Final, <= 4.2.17.Final
Fixed in:
- 4.2.18.Final
Referenced CVEs:
CVE-2026-100664 · 7.5
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.