netty-codec-redis vulnerabilities

CVEs whose affected-version data names the netty-codec-redis package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-93572High· 7.5

4d ago

A flaw was found in Netty's `RedisArrayAggregator` component

A flaw was found in Netty's `RedisArrayAggregator` component. A remote attacker can exploit this vulnerability by sending specially crafted nested Redis (RESP) array headers. This can cause the `RedisArrayAggregator` to eagerly prealloca…

▾ TwilightRed Hat · netty-codec-redisEPSS 0.34%via NVD