Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-09-10T00:52:52 io.netty/netty-codec-http: Netty: HTTP request smuggling via post-digit whitespace in chunk-size parsing 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L CWE-444

A flaw was found in Netty's `netty-codec-http` component. A remote attacker could exploit this vulnerability by sending a specially crafted HTTP/1.1 chunk-size token that includes post-digit whitespace. This incorrect parsing of the chunk size can lead to HTTP request smuggling. This allows an attacker to bypass security controls or access unauthorized resources in proxy/backend deployments.

A flaw was found in Netty's `netty-codec-http` component. A remote attacker could exploit this vulnerability by sending a specially crafted HTTP/1.1 chunk-size token that includes post-digit whitespace. This incorrect parsing of the chunk size can lead to HTTP request smuggling. This allows an attacker to bypass security controls or access unauthorized resources in proxy/backend deployments.

This Moderate severity flaw in Netty's HTTP/1.1 chunk-size parsing allows for HTTP request smuggling in proxy/backend deployments. By accepting post-digit whitespace in chunk-size tokens, Netty can misinterpret malformed chunked bodies, leading to a desynchronization between Netty and other HTTP components in the request path. This could enable an attacker to smuggle requests, potentially bypassing security controls or accessing unauthorized resources. See https://github.com/netty/netty/security/advisories/GHSA-j4mg-hqgv-34qc for fixed versions and remediation guidance. Red Hat AMQ Broker 7 Fix deferred netty-codec-http Red Hat AMQ Clients Fix deferred netty-codec-http Red Hat build of Apache Camel 4 for Quarkus 3 Fix deferred netty-codec-http Red Hat build of Apache Camel for Spring Boot 4 Fix deferred netty-codec-http Red Hat build of Apicurio Registry 3 Out of support scope netty-codec-http Red Hat build of Debezium 3 Fix deferred netty-codec-http Red Hat Build of Keycloak Fix deferred netty-codec-http Red Hat Data Grid 8 Fix deferred netty-codec-http Red Hat Fuse 7 Out of support scope netty-codec-http Red Hat JBoss Enterprise Application Platform 7 Out of support scope netty-codec-http Red Hat JBoss Enterprise Application Platform 8 Fix deferred netty-codec-http Red Hat Single Sign-On 7 Out of support scope netty-codec-http https://www.cve.org/CVERecord?id=CVE-2026-93574 https://nvd.nist.gov/vuln/detail/CVE-2026-93574