What’s Vulnerable › Products

Spring Reactor Netty vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Spring Reactor Netty version is affected

Latest Spring Reactor Netty vulnerabilities

• CVE-2026-47845 — Reactor Netty HTTP Server may incorrectly evaluate proxy addresses (CVSS 5.3)
• CVE-2026-47848 — Reactor Netty WebSocket Client Leaks Credentials On Redirect (CVSS 6.1)
• CVE-2026-47844 — Reactor Netty HTTP Server Leaks Exception Details (CVSS 3.7)
• CVE-2026-47843 — Reactor Netty may incorrectly route traffic due to DNS resolver reuse (CVSS 3.7)
• CVE-2026-41715 — Reactor Netty HTTP Client Leaks Credentials On Protocol Downgrade Redirect (CVSS 6.1)
• CVE-2023-34054 — Reactor Netty HTTP Server Metrics DoS Vulnerability (CVSS 7.5)
• CVE-2023-34062 — (CVSS 7.5)
• CVE-2022-31684 — (CVSS 4.3)
• CVE-2020-5403 — DoS Via Malformed URL with Reactor Netty HTTP Server (CVSS 7.5)
• CVE-2020-5404 — Authentication Leak On Redirect With Reactor Netty HttpClient (CVSS 5.9)
• CVE-2019-11284 — Reactor Netty authentication leak in redirects (CVSS 8.6)