{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2026-33871", "tracking": { "current_release_date": "2026-04-02T13:16:25.380900Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2026-33871", "initial_release_date": "2026-03-25T12:26:14.169700Z", "revision_history": [ { "date": "2026-03-25T12:26:14.169700Z", "number": "1", "summary": "CVE created.| Source connected.| CVE status created. (valid)| Products connected (2).| References created (4)." }, { "date": "2026-03-25T12:26:16.107796Z", "number": "2", "summary": "NCSC Score created." }, { "date": "2026-03-26T19:45:18.322478Z", "number": "3", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (2).| CWES updated (1)." }, { "date": "2026-03-26T19:45:24.872660Z", "number": "4", "summary": "NCSC Score updated." }, { "date": "2026-03-27T00:16:21.490731Z", "number": "5", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (150).| Product Identifiers created (165).| Products created (17).| References created (1).| CWES updated (1)." }, { "date": "2026-03-27T00:16:37.709221Z", "number": "6", "summary": "NCSC Score updated." }, { "date": "2026-03-27T21:15:37.729495Z", "number": "7", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (1).| CWES updated (1)." }, { "date": "2026-03-27T21:15:41.292234Z", "number": "8", "summary": "NCSC Score updated." }, { "date": "2026-03-27T21:26:26.693912Z", "number": "9", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (2).| References created (1).| CWES updated (1)." }, { "date": "2026-03-27T21:26:29.186248Z", "number": "10", "summary": "NCSC Score updated." }, { "date": "2026-03-28T07:57:13.305398Z", "number": "11", "summary": "References created (1)." }, { "date": "2026-03-28T08:10:08.439256Z", "number": "12", "summary": "References removed (1)." }, { "date": "2026-03-28T12:44:16.475464Z", "number": "13", "summary": "Source created.| CVE status created. (valid)| Description created for source.| Products connected (2)." }, { "date": "2026-03-28T12:44:20.148497Z", "number": "14", "summary": "NCSC Score updated." }, { "date": "2026-03-29T00:38:43.923713Z", "number": "15", "summary": "Source connected.| CVE status created. (valid)| EPSS created." }, { "date": "2026-03-29T00:38:47.382266Z", "number": "16", "summary": "NCSC Score updated." }, { "date": "2026-03-29T01:15:42.532103Z", "number": "17", "summary": "References created (1)." }, { "date": "2026-03-30T13:29:45.832558Z", "number": "18", "summary": "Products connected (2).| Products removed (2)." }, { "date": "2026-03-30T13:29:49.067487Z", "number": "19", "summary": "NCSC Score updated." }, { "date": "2026-03-30T20:25:19.797131Z", "number": "20", "summary": "CVSS created.| Products created (2).| Product Identifiers created (2)." }, { "date": "2026-03-30T20:25:27.676802Z", "number": "21", "summary": "NCSC Score updated." }, { "date": "2026-03-31T00:28:07.525061Z", "number": "22", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (97).| Product Identifiers created (28).| Products created (7).| References created (3).| CWES updated (1).| Vendor_assessment created." }, { "date": "2026-03-31T00:28:26.457944Z", "number": "23", "summary": "NCSC Score updated." }, { "date": "2026-03-31T19:38:45.846531Z", "number": "24", "summary": "Unknown change." }, { "date": "2026-03-31T19:38:48.721374Z", "number": "25", "summary": "NCSC Score updated." }, { "date": "2026-04-02T12:18:58.979749Z", "number": "26", "summary": "Products connected (1).| References created (1)." }, { "date": "2026-04-02T12:19:01.697985Z", "number": "27", "summary": "NCSC Score updated." } ], "status": "interim", "version": "27" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/4", "product": { "name": "vers:rpm/4", "product_id": "CSAFPID-2552001", "product_identification_helper": { "cpe": "cpe:/a:redhat:cryostat:4" } } } ], "category": "product_name", "name": "Cryostat 4" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/5", "product": { "name": "vers:rpm/5", "product_id": "CSAFPID-1459353", "product_identification_helper": { "cpe": "cpe:/a:redhat:logging:5" } } } ], "category": "product_name", "name": "Logging Subsystem for Red Hat OpenShift" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1", "product": { "name": "vers:rpm/1", "product_id": "CSAFPID-1441076", "product_identification_helper": { "cpe": "cpe:/a:redhat:serverless:1" } } } ], "category": "product_name", "name": "OpenShift Serverless" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/7", "product": { "name": "vers:rpm/7", "product_id": "CSAFPID-1439334", "product_identification_helper": { "cpe": "cpe:/a:redhat:amq_broker:7" } } } ], "category": "product_name", "name": "Red Hat AMQ Broker 7" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/2023", "product": { "name": "vers:rpm/2023", "product_id": "CSAFPID-5903698", "product_identification_helper": { "cpe": "cpe:/a:redhat:amq_clients:2023" } } } ], "category": "product_name", "name": "Red Hat AMQ Clients" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1439290", "product_identification_helper": { "cpe": "cpe:/a:redhat:build_keycloak:" } } } ], "category": "product_name", "name": "Red Hat Build of Keycloak" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/8", "product": { "name": "vers:rpm/8", "product_id": "CSAFPID-1439292", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_data_grid:8" } } } ], "category": "product_name", "name": "Red Hat Data Grid 8" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/3", "product": { "name": "vers:rpm/3", "product_id": "CSAFPID-5198605", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux_ai:3" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux AI (RHEL AI) 3" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/7", "product": { "name": "vers:rpm/7", "product_id": "CSAFPID-1439294", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_fuse:7" } } } ], "category": "product_name", "name": "Red Hat Fuse 7" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/7", "product": { "name": "vers:rpm/7", "product_id": "CSAFPID-1439300", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7" } } } ], "category": "product_name", "name": "Red Hat JBoss Enterprise Application Platform 7" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/8", "product": { "name": "vers:rpm/8", "product_id": "CSAFPID-1439302", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:8" } } } ], "category": "product_name", "name": "Red Hat JBoss Enterprise Application Platform 8" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1439304", "product_identification_helper": { "cpe": "cpe:/a:redhat:jbosseapxp" } } } ], "category": "product_name", "name": "Red Hat JBoss Enterprise Application Platform Expansion Pack" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1439279", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift_ai" } } } ], "category": "product_name", "name": "Red Hat OpenShift AI (RHOAI)" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/3", "product": { "name": "vers:rpm/3", "product_id": "CSAFPID-1441150", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift_devspaces:3:" } } } ], "category": "product_name", "name": "Red Hat OpenShift Dev Spaces" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/7", "product": { "name": "vers:rpm/7", "product_id": "CSAFPID-1439306", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_enterprise_bpms_platform:7" } } } ], "category": "product_name", "name": "Red Hat Process Automation 7" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/6", "product": { "name": "vers:rpm/6", "product_id": "CSAFPID-1439313", "product_identification_helper": { "cpe": "cpe:/a:redhat:satellite:6" } } } ], "category": "product_name", "name": "Red Hat Satellite 6" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/7", "product": { "name": "vers:rpm/7", "product_id": "CSAFPID-1439308", "product_identification_helper": { "cpe": "cpe:/a:redhat:red_hat_single_sign_on:7" } } } ], "category": "product_name", "name": "Red Hat Single Sign-On 7" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/4", "product": { "name": "vers:rpm/4", "product_id": "CSAFPID-2467441", "product_identification_helper": { "cpe": "cpe:/a:redhat:apache_camel_hawtio:4" } } } ], "category": "product_name", "name": "Red Hat build of Apache Camel - HawtIO 4" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/3", "product": { "name": "vers:rpm/3", "product_id": "CSAFPID-2457601", "product_identification_helper": { "cpe": "cpe:/a:redhat:camel_quarkus:3" } } } ], "category": "product_name", "name": "Red Hat build of Apache Camel 4 for Quarkus 3" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/4", "product": { "name": "vers:rpm/4", "product_id": "CSAFPID-1439286", "product_identification_helper": { "cpe": "cpe:/a:redhat:camel_spring_boot:4" } } } ], "category": "product_name", "name": "Red Hat build of Apache Camel for Spring Boot 4" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/2", "product": { "name": "vers:rpm/2", "product_id": "CSAFPID-2467443", "product_identification_helper": { "cpe": "cpe:/a:redhat:service_registry:2" } } } ], "category": "product_name", "name": "Red Hat build of Apicurio Registry 2" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/3", "product": { "name": "vers:rpm/3", "product_id": "CSAFPID-2656600", "product_identification_helper": { "cpe": "cpe:/a:redhat:apicurio_registry:3" } } } ], "category": "product_name", "name": "Red Hat build of Apicurio Registry 3" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/2", "product": { "name": "vers:rpm/2", "product_id": "CSAFPID-2783932", "product_identification_helper": { "cpe": "cpe:/a:redhat:debezium:2" } } } ], "category": "product_name", "name": "Red Hat build of Debezium 2" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/3", "product": { "name": "vers:rpm/3", "product_id": "CSAFPID-2783934", "product_identification_helper": { "cpe": "cpe:/a:redhat:debezium:3" } } } ], "category": "product_name", "name": "Red Hat build of Debezium 3" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1439348", "product_identification_helper": { "cpe": "cpe:/a:redhat:optaplanner:::el6" } } } ], "category": "product_name", "name": "Red Hat build of OptaPlanner 8" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/3", "product": { "name": "vers:rpm/3", "product_id": "CSAFPID-1841460", "product_identification_helper": { "cpe": "cpe:/a:redhat:quarkus:3" } } } ], "category": "product_name", "name": "Red Hat build of Quarkus" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5958198" } } ], "category": "product_name", "name": "bazel6" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5958199" } } ], "category": "product_name", "name": "bazel7" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5958200" } } ], "category": "product_name", "name": "bazel8" } ], "category": "product_family", "name": "Red Hat Enterprise Linux AI (RHEL AI) 3" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2912480" } } ], "category": "product_name", "name": "candlepin" } ], "category": "product_family", "name": "Red Hat Satellite 6" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5187689" } } ], "category": "product_name", "name": "elasticsearch-operator-bundle" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2914696" } } ], "category": "product_name", "name": "elasticsearch-proxy-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2914697" } } ], "category": "product_name", "name": "elasticsearch-rhel9-operator" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2855724" } } ], "category": "product_name", "name": "elasticsearch6-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1459355" } } ], "category": "product_name", "name": "kibana6-rhel8" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2855725" } } ], "category": "product_name", "name": "logging-curator5-rhel9" } ], "category": "product_family", "name": "Logging Subsystem for Red Hat OpenShift" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276242" } } ], "category": "product_name", "name": "kn-ekb-dispatcher-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276243" } } ], "category": "product_name", "name": "kn-ekb-receiver-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5222926" } } ], "category": "product_name", "name": "kn-eventing-integrations-aws-ddb-streams-source-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5222927" } } ], "category": "product_name", "name": "kn-eventing-integrations-aws-s3-sink-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5222928" } } ], "category": "product_name", "name": "kn-eventing-integrations-aws-s3-source-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5222929" } } ], "category": "product_name", "name": "kn-eventing-integrations-aws-sns-sink-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5222930" } } ], "category": "product_name", "name": "kn-eventing-integrations-aws-sqs-sink-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5222931" } } ], "category": "product_name", "name": "kn-eventing-integrations-aws-sqs-source-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5222933" } } ], "category": "product_name", "name": "kn-eventing-integrations-log-sink-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5222934" } } ], "category": "product_name", "name": "kn-eventing-integrations-timer-source-rhel9" } ], "category": "product_family", "name": "OpenShift Serverless" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276240" } } ], "category": "product_name", "name": "netty-codec-http" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3056895" } } ], "category": "product_name", "name": "netty-codec-http2" } ], "category": "product_family", "name": "Cryostat 4" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276244" } } ], "category": "product_name", "name": "netty-codec-http" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3056897" } } ], "category": "product_name", "name": "netty-codec-http2" } ], "category": "product_family", "name": "Red Hat AMQ Broker 7" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5958196" } } ], "category": "product_name", "name": "netty-codec-http" } ], "category": "product_family", "name": "Red Hat AMQ Clients" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5958197" } } ], "category": "product_name", "name": "netty-codec-http" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5965714" } } ], "category": "product_name", "name": "netty-codec-http2" } ], "category": "product_family", "name": "Red Hat Build of Keycloak" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276254" } } ], "category": "product_name", "name": "netty-codec-http" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3056907" } } ], "category": "product_name", "name": "netty-codec-http2" } ], "category": "product_family", "name": "Red Hat Data Grid 8" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276255" } } ], "category": "product_name", "name": "netty-codec-http" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3056908" } } ], "category": "product_name", "name": "netty-codec-http2" } ], "category": "product_family", "name": "Red Hat Fuse 7" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276256" } } ], "category": "product_name", "name": "netty-codec-http" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3056909" } } ], "category": "product_name", "name": "netty-codec-http2" } ], "category": "product_family", "name": "Red Hat JBoss Enterprise Application Platform 7" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276257" } } ], "category": "product_name", "name": "netty-codec-http" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5965716" } } ], "category": "product_name", "name": "netty-codec-http-4.1.100.Final.jar" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3056910" } } ], "category": "product_name", "name": "netty-codec-http2" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5965715" } } ], "category": "product_name", "name": "netty-codec-http2-4.1.100.Final.jar" } ], "category": "product_family", "name": "Red Hat JBoss Enterprise Application Platform 8" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276258" } } ], "category": "product_name", "name": "netty-codec-http" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5965719" } } ], "category": "product_name", "name": "netty-codec-http-4.1.100.Final.jar" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5965720" } } ], "category": "product_name", "name": "netty-codec-http-4.1.130.Final-redhat-00001.jar" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3056911" } } ], "category": "product_name", "name": "netty-codec-http2" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5965717" } } ], "category": "product_name", "name": "netty-codec-http2-4.1.100.Final.jar" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5965718" } } ], "category": "product_name", "name": "netty-codec-http2-4.1.128.Final-redhat-00001.jar" } ], "category": "product_family", "name": "Red Hat JBoss Enterprise Application Platform Expansion Pack" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276259" } } ], "category": "product_name", "name": "netty-codec-http" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3056912" } } ], "category": "product_name", "name": "netty-codec-http2" } ], "category": "product_family", "name": "Red Hat Process Automation 7" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276260" } } ], "category": "product_name", "name": "netty-codec-http" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3056913" } } ], "category": "product_name", "name": "netty-codec-http2" } ], "category": "product_family", "name": "Red Hat Single Sign-On 7" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276247" } } ], "category": "product_name", "name": "netty-codec-http" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3056900" } } ], "category": "product_name", "name": "netty-codec-http2" } ], "category": "product_family", "name": "Red Hat build of Apache Camel - HawtIO 4" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276245" } } ], "category": "product_name", "name": "netty-codec-http" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3056898" } } ], "category": "product_name", "name": "netty-codec-http2" } ], "category": "product_family", "name": "Red Hat build of Apache Camel 4 for Quarkus 3" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276246" } } ], "category": "product_name", "name": "netty-codec-http" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3056899" } } ], "category": "product_name", "name": "netty-codec-http2" } ], "category": "product_family", "name": "Red Hat build of Apache Camel for Spring Boot 4" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276248" } } ], "category": "product_name", "name": "netty-codec-http" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3056901" } } ], "category": "product_name", "name": "netty-codec-http2" } ], "category": "product_family", "name": "Red Hat build of Apicurio Registry 2" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276249" } } ], "category": "product_name", "name": "netty-codec-http" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3056902" } } ], "category": "product_name", "name": "netty-codec-http2" } ], "category": "product_family", "name": "Red Hat build of Apicurio Registry 3" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276250" } } ], "category": "product_name", "name": "netty-codec-http" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3056903" } } ], "category": "product_name", "name": "netty-codec-http2" } ], "category": "product_family", "name": "Red Hat build of Debezium 2" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276251" } } ], "category": "product_name", "name": "netty-codec-http" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3056904" } } ], "category": "product_name", "name": "netty-codec-http2" } ], "category": "product_family", "name": "Red Hat build of Debezium 3" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276252" } } ], "category": "product_name", "name": "netty-codec-http" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3056905" } } ], "category": "product_name", "name": "netty-codec-http2" } ], "category": "product_family", "name": "Red Hat build of OptaPlanner 8" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276253" } } ], "category": "product_name", "name": "netty-codec-http" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3056906" } } ], "category": "product_name", "name": "netty-codec-http2" } ], "category": "product_family", "name": "Red Hat build of Quarkus" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276261" } } ], "category": "product_name", "name": "netty-codec-http" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3056914" } } ], "category": "product_name", "name": "netty-codec-http2" } ], "category": "product_family", "name": "streams for Apache Kafka 2" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276262" } } ], "category": "product_name", "name": "netty-codec-http" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3056915" } } ], "category": "product_name", "name": "netty-codec-http2" } ], "category": "product_family", "name": "streams for Apache Kafka 3" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2783942" } } ], "category": "product_name", "name": "odh-modelmesh-rhel8" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2940322" } } ], "category": "product_name", "name": "odh-modelmesh-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1455894" } } ], "category": "product_name", "name": "odh-trustyai-service-rhel8" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2933420" } } ], "category": "product_name", "name": "odh-trustyai-service-rhel9" } ], "category": "product_family", "name": "Red Hat OpenShift AI (RHOAI)" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-4534155" } } ], "category": "product_name", "name": "openvsx-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2577689" } } ], "category": "product_name", "name": "pluginregistry-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2900226" } } ], "category": "product_name", "name": "server-rhel9" } ], "category": "product_family", "name": "Red Hat OpenShift Dev Spaces" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/2", "product": { "name": "vers:rpm/2", "product_id": "CSAFPID-2467457", "product_identification_helper": { "cpe": "cpe:/a:redhat:amq_streams:2" } } } ], "category": "product_name", "name": "streams for Apache Kafka 2" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/3", "product": { "name": "vers:rpm/3", "product_id": "CSAFPID-3026117", "product_identification_helper": { "cpe": "cpe:/a:redhat:amq_streams:3" } } } ], "category": "product_name", "name": "streams for Apache Kafka 3" } ], "category": "vendor", "name": "Red Hat" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<4.1.132", "product": { "name": "vers:unknown/<4.1.132", "product_id": "CSAFPID-5965171" } }, { "category": "product_version_range", "name": "vers:unknown/<4.2.11", "product": { "name": "vers:unknown/<4.2.11", "product_id": "CSAFPID-5965172" } } ], "category": "product_name", "name": "Netty" } ], "category": "vendor", "name": "Open Source" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1317176", "product_identification_helper": { "cpe": "cpe:/o:suse:opensuse:-" } } } ], "category": "product_name", "name": "SUSE openSUSE" } ], "category": "vendor", "name": "SUSE" }, { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:deb/unknown", "product": { "name": "vers:deb/unknown", "product_id": "CSAFPID-1409744" } } ], "category": "product_name", "name": "netty" } ], "category": "product_family", "name": "bookworm" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:deb/unknown", "product": { "name": "vers:deb/unknown", "product_id": "CSAFPID-1409745" } } ], "category": "product_name", "name": "netty" } ], "category": "product_family", "name": "bullseye" } ], "category": "vendor", "name": "Debian" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<4.1.132", "product": { "name": "vers:unknown/<4.1.132", "product_id": "CSAFPID-5965608", "product_identification_helper": { "cpe": "cpe:2.3:a:netty:netty:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/<4.1.132.final", "product": { "name": "vers:unknown/<4.1.132.final", "product_id": "CSAFPID-5956149" } }, { "category": "product_version_range", "name": "vers:unknown/>=4.2.0.alpha1|<4.2.10.final", "product": { "name": "vers:unknown/>=4.2.0.alpha1|<4.2.10.final", "product_id": "CSAFPID-5956150" } }, { "category": "product_version_range", "name": "vers:unknown/>=4.2.0|<4.2.10", "product": { "name": "vers:unknown/>=4.2.0|<4.2.10", "product_id": "CSAFPID-5965609", "product_identification_helper": { "cpe": "cpe:2.3:a:netty:netty:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "netty" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/4.1.0.beta4", "product": { "name": "vers:unknown/4.1.0.beta4", "product_id": "CSAFPID-5522377", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.0.Beta4" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.0.beta5", "product": { "name": "vers:unknown/4.1.0.beta5", "product_id": "CSAFPID-5522378", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.0.Beta5" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.0.beta6", "product": { "name": "vers:unknown/4.1.0.beta6", "product_id": "CSAFPID-5522379", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.0.Beta6" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.0.beta7", "product": { "name": "vers:unknown/4.1.0.beta7", "product_id": "CSAFPID-5522380", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.0.Beta7" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.0.beta8", "product": { "name": "vers:unknown/4.1.0.beta8", "product_id": "CSAFPID-5522381", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.0.Beta8" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.0.cr1", "product": { "name": "vers:unknown/4.1.0.cr1", "product_id": "CSAFPID-5522382", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.0.CR1" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.0.cr2", "product": { "name": "vers:unknown/4.1.0.cr2", "product_id": "CSAFPID-5522383", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.0.CR2" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.0.cr3", "product": { "name": "vers:unknown/4.1.0.cr3", "product_id": "CSAFPID-5522384", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.0.CR3" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.0.cr4", "product": { "name": "vers:unknown/4.1.0.cr4", "product_id": "CSAFPID-5522385", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.0.CR4" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.0.cr5", "product": { "name": "vers:unknown/4.1.0.cr5", "product_id": "CSAFPID-5522386", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.0.CR5" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.0.cr6", "product": { "name": "vers:unknown/4.1.0.cr6", "product_id": "CSAFPID-5522387", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.0.CR6" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.0.cr7", "product": { "name": "vers:unknown/4.1.0.cr7", "product_id": "CSAFPID-5522388", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.0.CR7" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.0.final", "product": { "name": "vers:unknown/4.1.0.final", "product_id": "CSAFPID-5522389", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.0.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.1.final", "product": { "name": "vers:unknown/4.1.1.final", "product_id": "CSAFPID-5522390", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.1.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.10.final", "product": { "name": "vers:unknown/4.1.10.final", "product_id": "CSAFPID-5522391", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.10.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.100.final", "product": { "name": "vers:unknown/4.1.100.final", "product_id": "CSAFPID-5569620", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.100.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.101.final", "product": { "name": "vers:unknown/4.1.101.final", "product_id": "CSAFPID-5569621", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.101.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.102.final", "product": { "name": "vers:unknown/4.1.102.final", "product_id": "CSAFPID-5569622", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.102.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.103.final", "product": { "name": "vers:unknown/4.1.103.final", "product_id": "CSAFPID-5569623", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.103.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.104.final", "product": { "name": "vers:unknown/4.1.104.final", "product_id": "CSAFPID-5569624", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.104.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.105.final", "product": { "name": "vers:unknown/4.1.105.final", "product_id": "CSAFPID-5569625", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.105.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.106.final", "product": { "name": "vers:unknown/4.1.106.final", "product_id": "CSAFPID-5569626", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.106.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.107.final", "product": { "name": "vers:unknown/4.1.107.final", "product_id": "CSAFPID-5569627", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.107.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.108.final", "product": { "name": "vers:unknown/4.1.108.final", "product_id": "CSAFPID-5569628", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.108.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.109.final", "product": { "name": "vers:unknown/4.1.109.final", "product_id": "CSAFPID-5569629", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.109.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.11.final", "product": { "name": "vers:unknown/4.1.11.final", "product_id": "CSAFPID-5522392", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.11.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.110.final", "product": { "name": "vers:unknown/4.1.110.final", "product_id": "CSAFPID-5569630", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.110.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.111.final", "product": { "name": "vers:unknown/4.1.111.final", "product_id": "CSAFPID-5569631", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.111.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.112.final", "product": { "name": "vers:unknown/4.1.112.final", "product_id": "CSAFPID-5569632", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.112.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.113.final", "product": { "name": "vers:unknown/4.1.113.final", "product_id": "CSAFPID-5569633", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.113.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.114.final", "product": { "name": "vers:unknown/4.1.114.final", "product_id": "CSAFPID-5569634", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.114.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.115.final", "product": { "name": "vers:unknown/4.1.115.final", "product_id": "CSAFPID-5569635", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.115.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.116.final", "product": { "name": "vers:unknown/4.1.116.final", "product_id": "CSAFPID-5569636", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.116.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.117.final", "product": { "name": "vers:unknown/4.1.117.final", "product_id": "CSAFPID-5569637", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.117.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.118.final", "product": { "name": "vers:unknown/4.1.118.final", "product_id": "CSAFPID-5569638", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.118.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.119.final", "product": { "name": "vers:unknown/4.1.119.final", "product_id": "CSAFPID-5569639", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.119.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.12.final", "product": { "name": "vers:unknown/4.1.12.final", "product_id": "CSAFPID-5522393", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.12.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.120.final", "product": { "name": "vers:unknown/4.1.120.final", "product_id": "CSAFPID-5569640", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.120.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.121.final", "product": { "name": "vers:unknown/4.1.121.final", "product_id": "CSAFPID-5569641", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.121.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.122.final", "product": { "name": "vers:unknown/4.1.122.final", "product_id": "CSAFPID-5569642", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.122.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.123.final", "product": { "name": "vers:unknown/4.1.123.final", "product_id": "CSAFPID-5569643", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.123.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.124.final", "product": { "name": "vers:unknown/4.1.124.final", "product_id": "CSAFPID-5920154", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.124.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.125.final", "product": { "name": "vers:unknown/4.1.125.final", "product_id": "CSAFPID-5920155", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.125.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.126.final", "product": { "name": "vers:unknown/4.1.126.final", "product_id": "CSAFPID-5920156", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.126.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.127.final", "product": { "name": "vers:unknown/4.1.127.final", "product_id": "CSAFPID-5920157", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.127.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.128.final", "product": { "name": "vers:unknown/4.1.128.final", "product_id": "CSAFPID-5920158", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.128.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.129.final", "product": { "name": "vers:unknown/4.1.129.final", "product_id": "CSAFPID-5920159", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.129.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.13.final", "product": { "name": "vers:unknown/4.1.13.final", "product_id": "CSAFPID-5522394", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.13.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.130.final", "product": { "name": "vers:unknown/4.1.130.final", "product_id": "CSAFPID-5920160", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.130.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.131.final", "product": { "name": "vers:unknown/4.1.131.final", "product_id": "CSAFPID-5920161", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.131.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.14.final", "product": { "name": "vers:unknown/4.1.14.final", "product_id": "CSAFPID-5522395", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.14.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.15.final", "product": { "name": "vers:unknown/4.1.15.final", "product_id": "CSAFPID-5522396", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.15.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.16.final", "product": { "name": "vers:unknown/4.1.16.final", "product_id": "CSAFPID-5522397", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.16.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.17.final", "product": { "name": "vers:unknown/4.1.17.final", "product_id": "CSAFPID-5522398", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.17.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.18.final", "product": { "name": "vers:unknown/4.1.18.final", "product_id": "CSAFPID-5522399", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.18.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.19.final", "product": { "name": "vers:unknown/4.1.19.final", "product_id": "CSAFPID-5522400", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.19.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.2.final", "product": { "name": "vers:unknown/4.1.2.final", "product_id": "CSAFPID-5522401", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.2.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.20.final", "product": { "name": "vers:unknown/4.1.20.final", "product_id": "CSAFPID-5522402", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.20.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.21.final", "product": { "name": "vers:unknown/4.1.21.final", "product_id": "CSAFPID-5522403", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.21.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.22.final", "product": { "name": "vers:unknown/4.1.22.final", "product_id": "CSAFPID-5522404", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.22.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.23.final", "product": { "name": "vers:unknown/4.1.23.final", "product_id": "CSAFPID-5522405", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.23.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.24.final", "product": { "name": "vers:unknown/4.1.24.final", "product_id": "CSAFPID-5522406", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.24.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.25.final", "product": { "name": "vers:unknown/4.1.25.final", "product_id": "CSAFPID-5522407", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.25.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.26.final", "product": { "name": "vers:unknown/4.1.26.final", "product_id": "CSAFPID-5522408", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.26.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.27.final", "product": { "name": "vers:unknown/4.1.27.final", "product_id": "CSAFPID-5522409", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.27.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.28.final", "product": { "name": "vers:unknown/4.1.28.final", "product_id": "CSAFPID-5522410", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.28.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.29.final", "product": { "name": "vers:unknown/4.1.29.final", "product_id": "CSAFPID-5522411", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.29.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.3.final", "product": { "name": "vers:unknown/4.1.3.final", "product_id": "CSAFPID-5522412", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.3.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.30.final", "product": { "name": "vers:unknown/4.1.30.final", "product_id": "CSAFPID-5522413", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.30.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.31.final", "product": { "name": "vers:unknown/4.1.31.final", "product_id": "CSAFPID-5522414", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.31.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.32.final", "product": { "name": "vers:unknown/4.1.32.final", "product_id": "CSAFPID-5522415", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.32.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.33.final", "product": { "name": "vers:unknown/4.1.33.final", "product_id": "CSAFPID-5522416", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.33.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.34.final", "product": { "name": "vers:unknown/4.1.34.final", "product_id": "CSAFPID-5522417", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.34.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.35.final", "product": { "name": "vers:unknown/4.1.35.final", "product_id": "CSAFPID-5522418", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.35.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.36.final", "product": { "name": "vers:unknown/4.1.36.final", "product_id": "CSAFPID-5522419", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.36.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.37.final", "product": { "name": "vers:unknown/4.1.37.final", "product_id": "CSAFPID-5522420", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.37.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.38.final", "product": { "name": "vers:unknown/4.1.38.final", "product_id": "CSAFPID-5522421", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.38.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.39.final", "product": { "name": "vers:unknown/4.1.39.final", "product_id": "CSAFPID-5522422", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.39.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.4.final", "product": { "name": "vers:unknown/4.1.4.final", "product_id": "CSAFPID-5522423", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.4.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.40.final", "product": { "name": "vers:unknown/4.1.40.final", "product_id": "CSAFPID-5522424", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.40.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.41.final", "product": { "name": "vers:unknown/4.1.41.final", "product_id": "CSAFPID-5522425", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.41.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.42.final", "product": { "name": "vers:unknown/4.1.42.final", "product_id": "CSAFPID-5522426", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.42.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.43.final", "product": { "name": "vers:unknown/4.1.43.final", "product_id": "CSAFPID-5522427", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.43.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.44.final", "product": { "name": "vers:unknown/4.1.44.final", "product_id": "CSAFPID-5522428", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.44.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.45.final", "product": { "name": "vers:unknown/4.1.45.final", "product_id": "CSAFPID-5522429", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.45.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.46.final", "product": { "name": "vers:unknown/4.1.46.final", "product_id": "CSAFPID-5522430", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.46.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.47.final", "product": { "name": "vers:unknown/4.1.47.final", "product_id": "CSAFPID-5522431", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.47.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.48.final", "product": { "name": "vers:unknown/4.1.48.final", "product_id": "CSAFPID-5522432", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.48.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.49.final", "product": { "name": "vers:unknown/4.1.49.final", "product_id": "CSAFPID-5522433", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.49.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.5.final", "product": { "name": "vers:unknown/4.1.5.final", "product_id": "CSAFPID-5522434", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.5.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.50.final", "product": { "name": "vers:unknown/4.1.50.final", "product_id": "CSAFPID-5522435", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.50.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.51.final", "product": { "name": "vers:unknown/4.1.51.final", "product_id": "CSAFPID-5522436", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.51.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.52.final", "product": { "name": "vers:unknown/4.1.52.final", "product_id": "CSAFPID-5522437", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.52.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.53.final", "product": { "name": "vers:unknown/4.1.53.final", "product_id": "CSAFPID-5522438", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.53.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.54.final", "product": { "name": "vers:unknown/4.1.54.final", "product_id": "CSAFPID-5522439", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.54.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.55.final", "product": { "name": "vers:unknown/4.1.55.final", "product_id": "CSAFPID-5522440", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.55.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.56.final", "product": { "name": "vers:unknown/4.1.56.final", "product_id": "CSAFPID-5522441", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.56.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.57.final", "product": { "name": "vers:unknown/4.1.57.final", "product_id": "CSAFPID-5522442", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.57.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.58.final", "product": { "name": "vers:unknown/4.1.58.final", "product_id": "CSAFPID-5522443", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.58.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.59.final", "product": { "name": "vers:unknown/4.1.59.final", "product_id": "CSAFPID-5522444", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.59.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.6.final", "product": { "name": "vers:unknown/4.1.6.final", "product_id": "CSAFPID-5522445", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.6.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.60.final", "product": { "name": "vers:unknown/4.1.60.final", "product_id": "CSAFPID-5522446", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.60.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.61.final", "product": { "name": "vers:unknown/4.1.61.final", "product_id": "CSAFPID-5522447", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.61.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.62.final", "product": { "name": "vers:unknown/4.1.62.final", "product_id": "CSAFPID-5522448", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.62.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.63.final", "product": { "name": "vers:unknown/4.1.63.final", "product_id": "CSAFPID-5522449", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.63.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.64.final", "product": { "name": "vers:unknown/4.1.64.final", "product_id": "CSAFPID-5522450", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.64.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.65.final", "product": { "name": "vers:unknown/4.1.65.final", "product_id": "CSAFPID-5522451", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.65.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.66.final", "product": { "name": "vers:unknown/4.1.66.final", "product_id": "CSAFPID-5522452", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.66.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.67.final", "product": { "name": "vers:unknown/4.1.67.final", "product_id": "CSAFPID-5522453", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.67.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.68.final", "product": { "name": "vers:unknown/4.1.68.final", "product_id": "CSAFPID-5522454", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.68.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.69.final", "product": { "name": "vers:unknown/4.1.69.final", "product_id": "CSAFPID-5522455", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.69.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.7.final", "product": { "name": "vers:unknown/4.1.7.final", "product_id": "CSAFPID-5522456", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.7.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.70.final", "product": { "name": "vers:unknown/4.1.70.final", "product_id": "CSAFPID-5522457", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.70.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.71.final", "product": { "name": "vers:unknown/4.1.71.final", "product_id": "CSAFPID-5522458", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.71.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.72.final", "product": { "name": "vers:unknown/4.1.72.final", "product_id": "CSAFPID-5522459", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.72.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.73.final", "product": { "name": "vers:unknown/4.1.73.final", "product_id": "CSAFPID-5522460", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.73.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.74.final", "product": { "name": "vers:unknown/4.1.74.final", "product_id": "CSAFPID-5522461", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.74.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.75.final", "product": { "name": "vers:unknown/4.1.75.final", "product_id": "CSAFPID-5522462", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.75.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.76.final", "product": { "name": "vers:unknown/4.1.76.final", "product_id": "CSAFPID-5522463", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.76.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.77.final", "product": { "name": "vers:unknown/4.1.77.final", "product_id": "CSAFPID-5522464", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.77.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.78.final", "product": { "name": "vers:unknown/4.1.78.final", "product_id": "CSAFPID-5522465", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.78.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.79.final", "product": { "name": "vers:unknown/4.1.79.final", "product_id": "CSAFPID-5522466", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.79.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.8.final", "product": { "name": "vers:unknown/4.1.8.final", "product_id": "CSAFPID-5522467", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.8.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.80.final", "product": { "name": "vers:unknown/4.1.80.final", "product_id": "CSAFPID-5522468", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.80.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.81.final", "product": { "name": "vers:unknown/4.1.81.final", "product_id": "CSAFPID-5522469", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.81.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.82.final", "product": { "name": "vers:unknown/4.1.82.final", "product_id": "CSAFPID-5522470", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.83.final", "product": { "name": "vers:unknown/4.1.83.final", "product_id": "CSAFPID-5522471", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.83.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.84.final", "product": { "name": "vers:unknown/4.1.84.final", "product_id": "CSAFPID-5522472", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.84.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.85.final", "product": { "name": "vers:unknown/4.1.85.final", "product_id": "CSAFPID-5522473", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.85.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.86.final", "product": { "name": "vers:unknown/4.1.86.final", "product_id": "CSAFPID-5522474", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.86.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.87.final", "product": { "name": "vers:unknown/4.1.87.final", "product_id": "CSAFPID-5522475", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.87.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.88.final", "product": { "name": "vers:unknown/4.1.88.final", "product_id": "CSAFPID-5522476", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.88.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.89.final", "product": { "name": "vers:unknown/4.1.89.final", "product_id": "CSAFPID-5522477", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.89.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.9.final", "product": { "name": "vers:unknown/4.1.9.final", "product_id": "CSAFPID-5522478", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.9.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.90.final", "product": { "name": "vers:unknown/4.1.90.final", "product_id": "CSAFPID-5522479", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.90.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.91.final", "product": { "name": "vers:unknown/4.1.91.final", "product_id": "CSAFPID-5522480", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.91.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.92.final", "product": { "name": "vers:unknown/4.1.92.final", "product_id": "CSAFPID-5522481", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.92.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.93.final", "product": { "name": "vers:unknown/4.1.93.final", "product_id": "CSAFPID-5522482", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.93.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.94.final", "product": { "name": "vers:unknown/4.1.94.final", "product_id": "CSAFPID-5522483", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.94.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.95.final", "product": { "name": "vers:unknown/4.1.95.final", "product_id": "CSAFPID-5522484", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.95.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.96.final", "product": { "name": "vers:unknown/4.1.96.final", "product_id": "CSAFPID-5522485", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.96.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.97.final", "product": { "name": "vers:unknown/4.1.97.final", "product_id": "CSAFPID-5522486", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.97.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.98.final", "product": { "name": "vers:unknown/4.1.98.final", "product_id": "CSAFPID-5522487", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.98.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.1.99.final", "product": { "name": "vers:unknown/4.1.99.final", "product_id": "CSAFPID-5522488", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.99.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.2.0.alpha1", "product": { "name": "vers:unknown/4.2.0.alpha1", "product_id": "CSAFPID-5569605", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.2.0.Alpha1" } } }, { "category": "product_version_range", "name": "vers:unknown/4.2.0.alpha2", "product": { "name": "vers:unknown/4.2.0.alpha2", "product_id": "CSAFPID-5569606", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.2.0.Alpha2" } } }, { "category": "product_version_range", "name": "vers:unknown/4.2.0.alpha3", "product": { "name": "vers:unknown/4.2.0.alpha3", "product_id": "CSAFPID-5569607", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.2.0.Alpha3" } } }, { "category": "product_version_range", "name": "vers:unknown/4.2.0.alpha4", "product": { "name": "vers:unknown/4.2.0.alpha4", "product_id": "CSAFPID-5569608", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.2.0.Alpha4" } } }, { "category": "product_version_range", "name": "vers:unknown/4.2.0.alpha5", "product": { "name": "vers:unknown/4.2.0.alpha5", "product_id": "CSAFPID-5569609", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.2.0.Alpha5" } } }, { "category": "product_version_range", "name": "vers:unknown/4.2.0.beta1", "product": { "name": "vers:unknown/4.2.0.beta1", "product_id": "CSAFPID-5569610", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.2.0.Beta1" } } }, { "category": "product_version_range", "name": "vers:unknown/4.2.0.final", "product": { "name": "vers:unknown/4.2.0.final", "product_id": "CSAFPID-5569611", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.2.0.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.2.0.rc1", "product": { "name": "vers:unknown/4.2.0.rc1", "product_id": "CSAFPID-5569612", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.2.0.RC1" } } }, { "category": "product_version_range", "name": "vers:unknown/4.2.0.rc2", "product": { "name": "vers:unknown/4.2.0.rc2", "product_id": "CSAFPID-5569613", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.2.0.RC2" } } }, { "category": "product_version_range", "name": "vers:unknown/4.2.0.rc3", "product": { "name": "vers:unknown/4.2.0.rc3", "product_id": "CSAFPID-5569614", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.2.0.RC3" } } }, { "category": "product_version_range", "name": "vers:unknown/4.2.0.rc4", "product": { "name": "vers:unknown/4.2.0.rc4", "product_id": "CSAFPID-5569615", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.2.0.RC4" } } }, { "category": "product_version_range", "name": "vers:unknown/4.2.1.final", "product": { "name": "vers:unknown/4.2.1.final", "product_id": "CSAFPID-5569616", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.2.1.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.2.10.final", "product": { "name": "vers:unknown/4.2.10.final", "product_id": "CSAFPID-5920163", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.2.10.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.2.2.final", "product": { "name": "vers:unknown/4.2.2.final", "product_id": "CSAFPID-5569617", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.2.2.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.2.3.final", "product": { "name": "vers:unknown/4.2.3.final", "product_id": "CSAFPID-5569618", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.2.3.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.2.4.final", "product": { "name": "vers:unknown/4.2.4.final", "product_id": "CSAFPID-5920164", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.2.4.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.2.5.final", "product": { "name": "vers:unknown/4.2.5.final", "product_id": "CSAFPID-5920165", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.2.5.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.2.6.final", "product": { "name": "vers:unknown/4.2.6.final", "product_id": "CSAFPID-5920166", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.2.6.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.2.7.final", "product": { "name": "vers:unknown/4.2.7.final", "product_id": "CSAFPID-5920167", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.2.7.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.2.8.final", "product": { "name": "vers:unknown/4.2.8.final", "product_id": "CSAFPID-5920168", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.2.8.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/4.2.9.final", "product": { "name": "vers:unknown/4.2.9.final", "product_id": "CSAFPID-5920169", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty-codec-http2@4.2.9.Final" } } }, { "category": "product_version_range", "name": "vers:unknown/>=0|<4.1.132.final", "product": { "name": "vers:unknown/>=0|<4.1.132.final", "product_id": "CSAFPID-5920162" } }, { "category": "product_version_range", "name": "vers:unknown/>=4.2.0.alpha1|<4.2.11.final", "product": { "name": "vers:unknown/>=4.2.0.alpha1|<4.2.11.final", "product_id": "CSAFPID-5920170" } } ], "category": "product_name", "name": "netty-codec-http2" } ], "category": "vendor", "name": "netty" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-33871", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "description", "text": "### Summary\nA remote user can trigger a Denial of Service (DoS) against a Netty HTTP/2 server by sending a flood of `CONTINUATION` frames. The server's lack of a limit on the number of `CONTINUATION` frames, combined with a bypass of existing size-based mitigations using zero-byte frames, allows an user to cause excessive CPU consumption with minimal bandwidth, rendering the server unresponsive.\n\n### Details\nThe vulnerability exists in Netty's `DefaultHttp2FrameReader`. When an HTTP/2 `HEADERS` frame is received without the `END_HEADERS` flag, the server expects one or more subsequent `CONTINUATION` frames. However, the implementation does not enforce a limit on the *count* of these `CONTINUATION` frames.\n\nThe key issue is located in `codec-http2/src/main/java/io/netty/handler/codec/http2/DefaultHttp2FrameReader.java`. The `verifyContinuationFrame()` method checks for stream association but fails to implement a frame count limit.\n\nAny user can exploit this by sending a stream of `CONTINUATION` frames with a zero-byte payload. While Netty has a `maxHeaderListSize` protection to limit the total size of headers, this check is never triggered by zero-byte frames. The logic effectively evaluates to `maxHeaderListSize - 0 < currentSize`, which will not trigger the limit until a non-zero byte is added. As a result, the server is forced to process an unlimited number of frames, consuming a CPU thread and monopolizing the connection.\n\n`codec-http2/src/main/java/io/netty/handler/codec/http2/DefaultHttp2FrameReader.java`\n\n**`verifyContinuationFrame()` (lines 381-393)** — No frame count check:\n```java\nprivate void verifyContinuationFrame() throws Http2Exception {\n verifyAssociatedWithAStream();\n if (headersContinuation == null) {\n throw connectionError(PROTOCOL_ERROR, \"...\");\n }\n if (streamId != headersContinuation.getStreamId()) {\n throw connectionError(PROTOCOL_ERROR, \"...\");\n }\n // NO frame count limit!\n}\n```\n\n**`HeadersBlockBuilder.addFragment()` (lines 695-723)** — Byte limit bypassed by 0-byte frames:\n```java\n// Line 710-711: This check NEVER fires when len=0\nif (headersDecoder.configuration().maxHeaderListSizeGoAway() - len <\n headerBlock.readableBytes()) {\n headerSizeExceeded(); // 10240 - 0 < 1 => FALSE always\n}\n```\n\nWhen `len=0`: `maxGoAway - 0 < readableBytes` → `10240 < 1` → FALSE. The byte limit is never triggered.\n\n### Impact\nThis is a CPU-based Denial of Service (DoS). Any service using Netty's default HTTP/2 server implementation is impacted. An unauthenticated user can exhaust server CPU resources and block legitimate users, leading to service unavailability. The low bandwidth requirement for the attack makes it highly practical.", "title": "github - https://api.github.com/advisories/GHSA-w9fj-cfpg-grvv" }, { "category": "description", "text": "### Summary\nA remote user can trigger a Denial of Service (DoS) against a Netty HTTP/2 server by sending a flood of `CONTINUATION` frames. The server's lack of a limit on the number of `CONTINUATION` frames, combined with a bypass of existing size-based mitigations using zero-byte frames, allows an user to cause excessive CPU consumption with minimal bandwidth, rendering the server unresponsive.\n\n### Details\nThe vulnerability exists in Netty's `DefaultHttp2FrameReader`. When an HTTP/2 `HEADERS` frame is received without the `END_HEADERS` flag, the server expects one or more subsequent `CONTINUATION` frames. However, the implementation does not enforce a limit on the *count* of these `CONTINUATION` frames.\n\nThe key issue is located in `codec-http2/src/main/java/io/netty/handler/codec/http2/DefaultHttp2FrameReader.java`. The `verifyContinuationFrame()` method checks for stream association but fails to implement a frame count limit.\n\nAny user can exploit this by sending a stream of `CONTINUATION` frames with a zero-byte payload. While Netty has a `maxHeaderListSize` protection to limit the total size of headers, this check is never triggered by zero-byte frames. The logic effectively evaluates to `maxHeaderListSize - 0 < currentSize`, which will not trigger the limit until a non-zero byte is added. As a result, the server is forced to process an unlimited number of frames, consuming a CPU thread and monopolizing the connection.\n\n`codec-http2/src/main/java/io/netty/handler/codec/http2/DefaultHttp2FrameReader.java`\n\n**`verifyContinuationFrame()` (lines 381-393)** — No frame count check:\n```java\nprivate void verifyContinuationFrame() throws Http2Exception {\n verifyAssociatedWithAStream();\n if (headersContinuation == null) {\n throw connectionError(PROTOCOL_ERROR, \"...\");\n }\n if (streamId != headersContinuation.getStreamId()) {\n throw connectionError(PROTOCOL_ERROR, \"...\");\n }\n // NO frame count limit!\n}\n```\n\n**`HeadersBlockBuilder.addFragment()` (lines 695-723)** — Byte limit bypassed by 0-byte frames:\n```java\n// Line 710-711: This check NEVER fires when len=0\nif (headersDecoder.configuration().maxHeaderListSizeGoAway() - len <\n headerBlock.readableBytes()) {\n headerSizeExceeded(); // 10240 - 0 < 1 => FALSE always\n}\n```\n\nWhen `len=0`: `maxGoAway - 0 < readableBytes` → `10240 < 1` → FALSE. The byte limit is never triggered.\n\n### Impact\nThis is a CPU-based Denial of Service (DoS). Any service using Netty's default HTTP/2 server implementation is impacted. An unauthenticated user can exhaust server CPU resources and block legitimate users, leading to service unavailability. The low bandwidth requirement for the attack makes it highly practical.", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Maven%2FGHSA-w9fj-cfpg-grvv.json?alt=media" }, { "category": "description", "text": "Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.132.Final and 4.2.10.Final, a remote user can trigger a Denial of Service (DoS) against a Netty HTTP/2 server by sending a flood of `CONTINUATION` frames. The server's lack of a limit on the number of `CONTINUATION` frames, combined with a bypass of existing size-based mitigations using zero-byte frames, allows an user to cause excessive CPU consumption with minimal bandwidth, rendering the server unresponsive. Versions 4.1.132.Final and 4.2.10.Final fix the issue.", "title": "nvd - https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-33871" }, { "category": "description", "text": "Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.132.Final and 4.2.10.Final, a remote user can trigger a Denial of Service (DoS) against a Netty HTTP/2 server by sending a flood of `CONTINUATION` frames. The server's lack of a limit on the number of `CONTINUATION` frames, combined with a bypass of existing size-based mitigations using zero-byte frames, allows an user to cause excessive CPU consumption with minimal bandwidth, rendering the server unresponsive. Versions 4.1.132.Final and 4.2.10.Final fix the issue.", "title": "cveprojectv5 - https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33871.json" }, { "category": "description", "text": "Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.132.Final and 4.2.10.Final, a remote user can trigger a Denial of Service (DoS) against a Netty HTTP/2 server by sending a flood of `CONTINUATION` frames. The server's lack of a limit on the number of `CONTINUATION` frames, combined with a bypass of existing size-based mitigations using zero-byte frames, allows an user to cause excessive CPU consumption with minimal bandwidth, rendering the server unresponsive. Versions 4.1.132.Final and 4.2.10.Final fix the issue.", "title": "debian - https://security-tracker.debian.org/tracker/CVE-2026-33871" }, { "category": "description", "text": "Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.132.Final and 4.2.10.Final, a remote user can trigger a Denial of Service (DoS) against a Netty HTTP/2 server by sending a flood of `CONTINUATION` frames. The server's lack of a limit on the number of `CONTINUATION` frames, combined with a bypass of existing size-based mitigations using zero-byte frames, allows an user to cause excessive CPU consumption with minimal bandwidth, rendering the server unresponsive. Versions 4.1.132.Final and 4.2.10.Final fix the issue.\nA flaw was found in Netty. A remote user can trigger a Denial of Service (DoS) against a Netty HTTP/2 server by sending a flood of CONTINUATION frames. The server's lack of a limit on these frames, coupled with a bypass of size-based mitigations using zero-byte frames, allows an attacker to consume excessive CPU resources. This can render the server unresponsive with minimal bandwidth usage.", "title": "redhat - https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-33871.json" }, { "category": "other", "text": "0.00087", "title": "EPSS" }, { "category": "other", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "title": "CVSSV4" }, { "category": "other", "text": "8.7", "title": "CVSSV4 base score" }, { "category": "other", "text": "4.3", "title": "NCSC Score" }, { "category": "other", "text": "There is product data available from source Nvd, There is product data available from source Certbundde", "title": "NCSC Score top increasing factors" }, { "category": "other", "text": "The value of the most recent EPSS score, Is related to a product by vendor Red Hat, Is related to a product by vendor Open Source", "title": "NCSC Score top decreasing factors" }, { "category": "details", "text": "Severity: 3\n", "title": "Vendor assessment" } ], "product_status": { "known_affected": [ "CSAFPID-5522377", "CSAFPID-5522378", "CSAFPID-5522379", "CSAFPID-5522380", "CSAFPID-5522381", "CSAFPID-5522382", "CSAFPID-5522383", "CSAFPID-5522384", "CSAFPID-5522385", "CSAFPID-5522386", "CSAFPID-5522387", "CSAFPID-5522388", "CSAFPID-5522389", "CSAFPID-5522390", "CSAFPID-5522391", "CSAFPID-5522392", "CSAFPID-5522393", "CSAFPID-5522394", "CSAFPID-5522395", "CSAFPID-5522396", "CSAFPID-5522397", "CSAFPID-5522398", "CSAFPID-5522399", "CSAFPID-5522400", "CSAFPID-5522401", "CSAFPID-5522402", "CSAFPID-5522403", "CSAFPID-5522404", "CSAFPID-5522405", "CSAFPID-5522406", "CSAFPID-5522407", "CSAFPID-5522408", "CSAFPID-5522409", "CSAFPID-5522410", "CSAFPID-5522411", "CSAFPID-5522412", "CSAFPID-5522413", "CSAFPID-5522414", "CSAFPID-5522415", "CSAFPID-5522416", "CSAFPID-5522417", "CSAFPID-5522418", "CSAFPID-5522419", "CSAFPID-5522420", "CSAFPID-5522421", "CSAFPID-5522422", "CSAFPID-5522423", "CSAFPID-5522424", "CSAFPID-5522425", "CSAFPID-5522426", "CSAFPID-5522427", "CSAFPID-5522428", "CSAFPID-5522429", "CSAFPID-5522430", "CSAFPID-5522431", "CSAFPID-5522432", "CSAFPID-5522433", "CSAFPID-5522434", "CSAFPID-5522435", "CSAFPID-5522436", "CSAFPID-5522437", "CSAFPID-5522438", "CSAFPID-5522439", "CSAFPID-5522440", "CSAFPID-5522441", "CSAFPID-5522442", "CSAFPID-5522443", "CSAFPID-5522444", "CSAFPID-5522445", "CSAFPID-5522446", "CSAFPID-5522447", "CSAFPID-5522448", "CSAFPID-5522449", "CSAFPID-5522450", "CSAFPID-5522451", "CSAFPID-5522452", "CSAFPID-5522453", "CSAFPID-5522454", "CSAFPID-5522455", "CSAFPID-5522456", "CSAFPID-5522457", "CSAFPID-5522458", "CSAFPID-5522459", "CSAFPID-5522460", "CSAFPID-5522461", "CSAFPID-5522462", "CSAFPID-5522463", "CSAFPID-5522464", "CSAFPID-5522465", "CSAFPID-5522466", "CSAFPID-5522467", "CSAFPID-5522468", "CSAFPID-5522469", "CSAFPID-5522470", "CSAFPID-5522471", "CSAFPID-5522472", "CSAFPID-5522473", "CSAFPID-5522474", "CSAFPID-5522475", "CSAFPID-5522476", "CSAFPID-5522477", "CSAFPID-5522478", "CSAFPID-5522479", "CSAFPID-5522480", "CSAFPID-5522481", "CSAFPID-5522482", "CSAFPID-5522483", "CSAFPID-5522484", "CSAFPID-5522485", "CSAFPID-5522486", "CSAFPID-5522487", "CSAFPID-5522488", "CSAFPID-5569605", "CSAFPID-5569606", "CSAFPID-5569607", "CSAFPID-5569608", "CSAFPID-5569609", "CSAFPID-5569610", "CSAFPID-5569611", "CSAFPID-5569612", "CSAFPID-5569613", "CSAFPID-5569614", "CSAFPID-5569615", "CSAFPID-5569616", "CSAFPID-5569617", "CSAFPID-5569618", "CSAFPID-5569620", "CSAFPID-5569621", "CSAFPID-5569622", "CSAFPID-5569623", "CSAFPID-5569624", "CSAFPID-5569625", "CSAFPID-5569626", "CSAFPID-5569627", "CSAFPID-5569628", "CSAFPID-5569629", "CSAFPID-5569630", "CSAFPID-5569631", "CSAFPID-5569632", "CSAFPID-5569633", "CSAFPID-5569634", "CSAFPID-5569635", "CSAFPID-5569636", "CSAFPID-5569637", "CSAFPID-5569638", "CSAFPID-5569639", "CSAFPID-5569640", "CSAFPID-5569641", "CSAFPID-5569642", "CSAFPID-5569643", "CSAFPID-5920154", "CSAFPID-5920155", "CSAFPID-5920156", "CSAFPID-5920157", "CSAFPID-5920158", "CSAFPID-5920159", "CSAFPID-5920160", "CSAFPID-5920161", "CSAFPID-5920162", "CSAFPID-5920163", "CSAFPID-5920164", "CSAFPID-5920165", "CSAFPID-5920166", "CSAFPID-5920167", "CSAFPID-5920168", "CSAFPID-5920169", "CSAFPID-5920170", "CSAFPID-5956149", "CSAFPID-5956150", "CSAFPID-1409744", "CSAFPID-1409745", "CSAFPID-5965171", "CSAFPID-5965172", "CSAFPID-5965608", "CSAFPID-5965609", "CSAFPID-1439279", "CSAFPID-1439286", "CSAFPID-1439290", "CSAFPID-1439292", "CSAFPID-1439294", "CSAFPID-1439300", "CSAFPID-1439302", "CSAFPID-1439304", "CSAFPID-1439306", "CSAFPID-1439308", "CSAFPID-1439313", "CSAFPID-1439334", "CSAFPID-1439348", "CSAFPID-1441076", "CSAFPID-1441150", "CSAFPID-1455894", "CSAFPID-1459353", "CSAFPID-1459355", "CSAFPID-1841460", "CSAFPID-2457601", "CSAFPID-2467441", "CSAFPID-2467443", "CSAFPID-2467457", "CSAFPID-2552001", "CSAFPID-2577689", "CSAFPID-2656600", "CSAFPID-2783932", "CSAFPID-2783934", "CSAFPID-2783942", "CSAFPID-2855724", "CSAFPID-2855725", "CSAFPID-2900226", "CSAFPID-2912480", "CSAFPID-2914696", "CSAFPID-2914697", "CSAFPID-2933420", "CSAFPID-2940322", "CSAFPID-3026117", "CSAFPID-3056895", "CSAFPID-3056897", "CSAFPID-3056898", "CSAFPID-3056899", "CSAFPID-3056900", "CSAFPID-3056901", "CSAFPID-3056902", "CSAFPID-3056903", "CSAFPID-3056904", "CSAFPID-3056905", "CSAFPID-3056906", "CSAFPID-3056907", "CSAFPID-3056908", "CSAFPID-3056909", "CSAFPID-3056910", "CSAFPID-3056911", "CSAFPID-3056912", "CSAFPID-3056913", "CSAFPID-3056914", "CSAFPID-3056915", "CSAFPID-4534155", "CSAFPID-5187689", "CSAFPID-5198605", "CSAFPID-5222926", "CSAFPID-5222927", "CSAFPID-5222928", "CSAFPID-5222929", "CSAFPID-5222930", "CSAFPID-5222931", "CSAFPID-5222933", "CSAFPID-5222934", "CSAFPID-5276240", "CSAFPID-5276242", "CSAFPID-5276243", "CSAFPID-5276244", "CSAFPID-5276245", "CSAFPID-5276246", "CSAFPID-5276247", "CSAFPID-5276248", "CSAFPID-5276249", "CSAFPID-5276250", "CSAFPID-5276251", "CSAFPID-5276252", "CSAFPID-5276253", "CSAFPID-5276254", "CSAFPID-5276255", "CSAFPID-5276256", "CSAFPID-5276257", "CSAFPID-5276258", "CSAFPID-5276259", "CSAFPID-5276260", "CSAFPID-5276261", "CSAFPID-5276262", "CSAFPID-5903698", "CSAFPID-5958196", "CSAFPID-5958197", "CSAFPID-5958198", "CSAFPID-5958199", "CSAFPID-5958200", "CSAFPID-5965714", "CSAFPID-5965715", "CSAFPID-5965716", "CSAFPID-5965717", "CSAFPID-5965718", "CSAFPID-5965719", "CSAFPID-5965720", "CSAFPID-1317176" ] }, "references": [ { "category": "external", "summary": "Source - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0846.json" }, { "category": "external", "summary": "Source - github", "url": "https://api.github.com/advisories/GHSA-w9fj-cfpg-grvv" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Maven%2FGHSA-w9fj-cfpg-grvv.json?alt=media" }, { "category": "external", "summary": "Source - nvd", "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-33871" }, { "category": "external", "summary": "Source - cveprojectv5", "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33871.json" }, { "category": "external", "summary": "Source - debian", "url": "https://security-tracker.debian.org/tracker/CVE-2026-33871" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-33871.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0846.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0846" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8" }, { "category": "external", "summary": "Reference - certbundde; cveprojectv5; github; nvd; osv; redhat", "url": "https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv" }, { "category": "external", "summary": "Reference - github", "url": "https://github.com/advisories/GHSA-w9fj-cfpg-grvv" }, { "category": "external", "summary": "Reference - github; redhat", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33871" }, { "category": "external", "summary": "Reference - redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-33871" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V6FXSMXDC2QFATWVCNOU4EKAIWG25UXN/" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1317176", "CSAFPID-1409744", "CSAFPID-1409745", "CSAFPID-1439279", "CSAFPID-1439286", "CSAFPID-1439290", "CSAFPID-1439292", "CSAFPID-1439294", "CSAFPID-1439300", "CSAFPID-1439302", "CSAFPID-1439304", "CSAFPID-1439306", "CSAFPID-1439308", "CSAFPID-1439313", "CSAFPID-1439334", "CSAFPID-1439348", "CSAFPID-1441076", "CSAFPID-1441150", "CSAFPID-1455894", "CSAFPID-1459353", "CSAFPID-1459355", "CSAFPID-1841460", "CSAFPID-2457601", "CSAFPID-2467441", "CSAFPID-2467443", "CSAFPID-2467457", "CSAFPID-2552001", "CSAFPID-2577689", "CSAFPID-2656600", "CSAFPID-2783932", "CSAFPID-2783934", "CSAFPID-2783942", "CSAFPID-2855724", "CSAFPID-2855725", "CSAFPID-2900226", "CSAFPID-2912480", "CSAFPID-2914696", "CSAFPID-2914697", "CSAFPID-2933420", "CSAFPID-2940322", "CSAFPID-3026117", "CSAFPID-3056895", "CSAFPID-3056897", "CSAFPID-3056898", "CSAFPID-3056899", "CSAFPID-3056900", "CSAFPID-3056901", "CSAFPID-3056902", "CSAFPID-3056903", "CSAFPID-3056904", "CSAFPID-3056905", "CSAFPID-3056906", "CSAFPID-3056907", "CSAFPID-3056908", "CSAFPID-3056909", "CSAFPID-3056910", "CSAFPID-3056911", "CSAFPID-3056912", "CSAFPID-3056913", "CSAFPID-3056914", "CSAFPID-3056915", "CSAFPID-4534155", "CSAFPID-5187689", "CSAFPID-5198605", "CSAFPID-5222926", "CSAFPID-5222927", "CSAFPID-5222928", "CSAFPID-5222929", "CSAFPID-5222930", "CSAFPID-5222931", "CSAFPID-5222933", "CSAFPID-5222934", "CSAFPID-5276240", "CSAFPID-5276242", "CSAFPID-5276243", "CSAFPID-5276244", "CSAFPID-5276245", "CSAFPID-5276246", "CSAFPID-5276247", "CSAFPID-5276248", "CSAFPID-5276249", "CSAFPID-5276250", "CSAFPID-5276251", "CSAFPID-5276252", "CSAFPID-5276253", "CSAFPID-5276254", "CSAFPID-5276255", "CSAFPID-5276256", "CSAFPID-5276257", "CSAFPID-5276258", "CSAFPID-5276259", "CSAFPID-5276260", "CSAFPID-5276261", "CSAFPID-5276262", "CSAFPID-5522377", "CSAFPID-5522378", "CSAFPID-5522379", "CSAFPID-5522380", "CSAFPID-5522381", "CSAFPID-5522382", "CSAFPID-5522383", "CSAFPID-5522384", "CSAFPID-5522385", "CSAFPID-5522386", "CSAFPID-5522387", "CSAFPID-5522388", "CSAFPID-5522389", "CSAFPID-5522390", "CSAFPID-5522391", "CSAFPID-5522392", "CSAFPID-5522393", "CSAFPID-5522394", "CSAFPID-5522395", "CSAFPID-5522396", "CSAFPID-5522397", "CSAFPID-5522398", "CSAFPID-5522399", "CSAFPID-5522400", "CSAFPID-5522401", "CSAFPID-5522402", "CSAFPID-5522403", "CSAFPID-5522404", "CSAFPID-5522405", "CSAFPID-5522406", "CSAFPID-5522407", "CSAFPID-5522408", "CSAFPID-5522409", "CSAFPID-5522410", "CSAFPID-5522411", "CSAFPID-5522412", "CSAFPID-5522413", "CSAFPID-5522414", "CSAFPID-5522415", "CSAFPID-5522416", "CSAFPID-5522417", "CSAFPID-5522418", "CSAFPID-5522419", "CSAFPID-5522420", "CSAFPID-5522421", "CSAFPID-5522422", "CSAFPID-5522423", "CSAFPID-5522424", "CSAFPID-5522425", "CSAFPID-5522426", "CSAFPID-5522427", "CSAFPID-5522428", "CSAFPID-5522429", "CSAFPID-5522430", "CSAFPID-5522431", "CSAFPID-5522432", "CSAFPID-5522433", "CSAFPID-5522434", "CSAFPID-5522435", "CSAFPID-5522436", "CSAFPID-5522437", "CSAFPID-5522438", "CSAFPID-5522439", "CSAFPID-5522440", "CSAFPID-5522441", "CSAFPID-5522442", "CSAFPID-5522443", "CSAFPID-5522444", "CSAFPID-5522445", "CSAFPID-5522446", "CSAFPID-5522447", "CSAFPID-5522448", "CSAFPID-5522449", "CSAFPID-5522450", "CSAFPID-5522451", "CSAFPID-5522452", "CSAFPID-5522453", "CSAFPID-5522454", "CSAFPID-5522455", "CSAFPID-5522456", "CSAFPID-5522457", "CSAFPID-5522458", "CSAFPID-5522459", "CSAFPID-5522460", "CSAFPID-5522461", "CSAFPID-5522462", "CSAFPID-5522463", "CSAFPID-5522464", "CSAFPID-5522465", "CSAFPID-5522466", "CSAFPID-5522467", "CSAFPID-5522468", "CSAFPID-5522469", "CSAFPID-5522470", "CSAFPID-5522471", "CSAFPID-5522472", "CSAFPID-5522473", "CSAFPID-5522474", "CSAFPID-5522475", "CSAFPID-5522476", "CSAFPID-5522477", "CSAFPID-5522478", "CSAFPID-5522479", "CSAFPID-5522480", "CSAFPID-5522481", "CSAFPID-5522482", "CSAFPID-5522483", "CSAFPID-5522484", "CSAFPID-5522485", "CSAFPID-5522486", "CSAFPID-5522487", "CSAFPID-5522488", "CSAFPID-5569605", "CSAFPID-5569606", "CSAFPID-5569607", "CSAFPID-5569608", "CSAFPID-5569609", "CSAFPID-5569610", "CSAFPID-5569611", "CSAFPID-5569612", "CSAFPID-5569613", "CSAFPID-5569614", "CSAFPID-5569615", "CSAFPID-5569616", "CSAFPID-5569617", "CSAFPID-5569618", "CSAFPID-5569620", "CSAFPID-5569621", "CSAFPID-5569622", "CSAFPID-5569623", "CSAFPID-5569624", "CSAFPID-5569625", "CSAFPID-5569626", "CSAFPID-5569627", "CSAFPID-5569628", "CSAFPID-5569629", "CSAFPID-5569630", "CSAFPID-5569631", "CSAFPID-5569632", "CSAFPID-5569633", "CSAFPID-5569634", "CSAFPID-5569635", "CSAFPID-5569636", "CSAFPID-5569637", "CSAFPID-5569638", "CSAFPID-5569639", "CSAFPID-5569640", "CSAFPID-5569641", "CSAFPID-5569642", "CSAFPID-5569643", "CSAFPID-5903698", "CSAFPID-5920154", "CSAFPID-5920155", "CSAFPID-5920156", "CSAFPID-5920157", "CSAFPID-5920158", "CSAFPID-5920159", "CSAFPID-5920160", "CSAFPID-5920161", "CSAFPID-5920162", "CSAFPID-5920163", "CSAFPID-5920164", "CSAFPID-5920165", "CSAFPID-5920166", "CSAFPID-5920167", "CSAFPID-5920168", "CSAFPID-5920169", "CSAFPID-5920170", "CSAFPID-5956149", "CSAFPID-5956150", "CSAFPID-5958196", "CSAFPID-5958197", "CSAFPID-5958198", "CSAFPID-5958199", "CSAFPID-5958200", "CSAFPID-5965171", "CSAFPID-5965172", "CSAFPID-5965608", "CSAFPID-5965609", "CSAFPID-5965714", "CSAFPID-5965715", "CSAFPID-5965716", "CSAFPID-5965717", "CSAFPID-5965718", "CSAFPID-5965719", "CSAFPID-5965720" ] } ], "title": "CVE-2026-33871" } ] }