Reactor Netty
Spring- Software type
- —
- Catalog vulnerabilities
- 7
Severity across 7 analyzed records
Verify to analyze this security profile
A short verification protects source data and prevents automated AI requests.
en
Severity across 7 analyzed records
A short verification protects source data and prevents automated AI requests.
As of 09/11/2026, within CyStack's analyzed data, Reactor Netty has 5 security vulnerabilities published in the last 90 days. Of these, 0 are rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Reactor Netty and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan| CVE | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-47874Reactor Netty HTTP Server Denial of Service With Pipelined Requests | Exploitation statusNot known exploited | FixYes | Published08/26/2026 | SeverityMedium |
CVE-2026-47845Reactor Netty HTTP Server may incorrectly evaluate proxy addresses | Exploitation statusNot known exploited | FixYes | Published08/26/2026 | SeverityMedium |
CVE-2026-47848Reactor Netty WebSocket Client Leaks Credentials On Redirect | Exploitation statusNot known exploited | FixYes | Published08/26/2026 | SeverityMedium |
CVE-2026-47844Reactor Netty HTTP Server Leaks Exception Details | Exploitation statusNot known exploited | FixYes | Published08/26/2026 | SeverityMedium |
CVE-2026-47843Reactor Netty may incorrectly route traffic due to DNS resolver reuse | Exploitation statusNot known exploited | FixYes | Published08/26/2026 | SeverityLow |
CVE-2026-41715Reactor Netty HTTP Client Leaks Credentials On Protocol Downgrade Redirect | Exploitation statusNot known exploited | FixYes | Published06/09/2026 | SeverityMedium |
CVE-2023-34054Reactor Netty HTTP Server Metrics DoS Vulnerability | Exploitation statusNot confirmed | FixYes | Published11/28/2023 | SeverityMedium |