Vulnerabilidades do Spring Reactor Netty
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Spring Reactor Netty: 1 registro(s), com versões afetadas e correções.
CVE-2026-41715
Média · 6.1
CWE-522 09/06/2026
Reactor Netty HTTP Client Leaks Credentials On Protocol Downgrade Redirect
In specific scenarios involving HTTP redirects from a secure to an insecure endpoint, the Reactor Netty HTTP client may leak credentials. In order for this to happen, the HTTP client must have been explicitly configured to follow redirects.
Affected versions:
Reactor Netty 1.0.0 through 1.0.51; 1.1.0 through 1.1.35; 1.2.0 through 1.2.17; 1.3.0 through 1.3.5.