Skip to content

CVE-2025-67735 Netty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoder #949

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
vharseko merged 1 commit into from
Dec 16, 2025
+1 −1

Bump io.netty:netty-codec-http from 4.1.125.Final to 4.1.129.Final

cbfe8a0
Select commit
Loading
Failed to load commit list.
Sign in for the full log view
Merged

CVE-2025-67735 Netty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoder #949

Bump io.netty:netty-codec-http from 4.1.125.Final to 4.1.129.Final
cbfe8a0
Select commit
Loading
Failed to load commit list.
build-maven (17, windows-latest)
succeeded Dec 16, 2025 in 34m 18s