Red Hat Build of Debezium 3.6 — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in Red Hat Build of Debezium 3.6, with AI-generated Chinese analysis, references, and POCs.

Vendor: Red Hat

CVE ID	Title	CVSS	Severity	Published
CVE-2026-93562	Io.netty/netty-codec-http: netty: incomplete validation of malformed transfer-encoding allows http request smuggling CWE-1035	6.5	Medium	2026-09-18
CVE-2026-93574	Io.netty/netty-codec-http: netty: http request smuggling via post-digit whitespace in chunk-size parsing CWE-444	6.5	Medium	2026-09-18
CVE-2026-93579	Io.netty/netty-codec-http2: netty: http/2 header field values are not validated by default (cr/lf/nul passthrough) CWE-1035	6.5	Medium	2026-09-18
CVE-2026-93573	Io.netty/netty-codec-http: netty split transfer-encoding fields bypass final-chunked validation and enable request smuggling CWE-444	6.5	Medium	2026-09-18
CVE-2026-93566	Io.netty/netty-codec-http: netty: http request smuggling due to control characters in the chunk-size line CWE-1035	6.5	Medium	2026-09-18
CVE-2026-93492	Io.netty/netty-codec-http2: netty: http/2 hpackencoder dos with large table size CWE-1035	5.3	Medium	2026-09-18

All 6 known CVE vulnerabilities affecting Red Hat Build of Debezium 3.6 with full Chinese analysis, references, and POCs where available.