Pivotal Reactor Netty vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Pivotal Reactor Netty: 1 record(s), with affected versions and fixes.
cpe:2.3:a:pivotal:reactor_netty

CVE-2026-47874 Medium · 5.3 CWE-770 Aug 26, 2026

Reactor Netty HTTP Server Denial of Service With Pipelined Requests

The vulnerability occurs when a client sends HTTP/1.1 pipelined requests over a single connection, causing the Reactor Netty HTTP server to consume an excessive amount of memory. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52 and earlier