Files
PoC-in-GitHub/2026/CVE-2026-59903.json

46 lines
1.7 KiB
JSON

[
{
"id": 1361481507,
"name": "netty-http-check",
"full_name": "xiaoqiMikko\/netty-http-check",
"owner": {
"login": "xiaoqiMikko",
"id": 37316664,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/37316664?v=4",
"html_url": "https:\/\/github.com\/xiaoqiMikko",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/xiaoqiMikko\/netty-http-check",
"description": "CVE-2026-59903 \/ CVE-2026-33870: offline checker for io.netty:netty-codec-http - its 14 CVEs plus 9 advisories Netty published on 2026-09-10 that the GitHub Advisory Database (Dependabot) does not list. 4.1.137.Final \/ 4.2.17.Final is no longer enough; upgrade to 4.1.138.Final \/ 4.2.18.Final.",
"fork": false,
"created_at": "2026-09-08T14:17:27Z",
"updated_at": "2026-09-19T19:53:18Z",
"pushed_at": "2026-09-19T19:53:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"dependabot",
"dependency-security",
"http-request-smuggling",
"java",
"netty",
"security",
"spring-boot",
"vulnerability-scanner",
"webflux"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]