CVE-2026-42585
MEDIUM
NVD
CVSS Score
6.5
Severity
MEDIUM
Published
May 13, 2026
Vendor
unknown
Description
Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty incorrectly parses malformed Transfer-Encoding, enabling request smuggling attacks. This vulnerability is fixed in 4.2.13.Final and 4.1.133.Final.