CVE-2026-42580
MEDIUM
NVD
CVSS Score
6.5
Severity
MEDIUM
Published
May 13, 2026
Vendor
unknown
Description
Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's chunk size parser silently overflows int, enabling request smuggling attacks. This vulnerability is fixed in 4.2.13.Final and 4.1.133.Final.