Spring Reactor Netty
7 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-47874 | 1.3.0 – 1.3.6 ; 1.1.0 – 1.2.18 ; ≤ 1.0.52 | Reactor Netty HTTP Server Denial of Service With Pipelined Requests | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-47845 | 1.3.0 – 1.3.6 ; 1.1.0 – 1.2.18 ; ≤ 1.0.52 | Reactor Netty HTTP Server may incorrectly evaluate proxy addresses | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-47848 | 1.3.0 – 1.3.6 ; 1.1.0 – 1.2.18 ; ≤ 1.0.52 | Reactor Netty WebSocket Client Leaks Credentials On Redirect | MEDIUM 6.1 | 0.3 % | ||
| CVE-2026-47844 | 1.3.0 – 1.3.6 ; 1.1.0 – 1.2.18 ; ≤ 1.0.52 | Reactor Netty HTTP Server Leaks Exception Details | MEDIUM 5.3 | 0.2 % | ||
| CVE-2026-47843 | 1.3.0 – 1.3.6 ; 1.1.0 – 1.2.18 ; ≤ 1.0.52 | Reactor Netty may incorrectly route traffic due to DNS resolver reuse | LOW 3.7 | 0.3 % | ||
| CVE-2026-41715 | 1.0.0 – < 1.0.52 ; 1.1.0 – < 1.1.36 ; 1.2.0 – < 1.2.17.1 ; … | Reactor Netty HTTP Client Leaks Credentials On Protocol Downgrade Redirect | MEDIUM 6.1 | 0.2 % | ||
| CVE-2023-34054 | 1.1.0 – < 1.1.13 ; 1.0.0 – < 1.0.39 ; older unsupported versions | Reactor Netty HTTP Server Metrics DoS Vulnerability | HIGH 7.5 | 0.9 % |