6.1
Medium
CVE-2025-22227 In some specific scenarios with chained redirects, Reactor Netty HTTP client leaks credentials
Description
In some specific scenarios with chained redirects, Reactor Netty HTTP client leaks credentials. In order for this to happen, the HTTP client must have been explicitly configured to follow redirects.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Reactor Netty 1.3 | 1.3.x → latest | No fix stated |
| Reactor Netty 1.2 | 1.2.x → latest | No fix stated |
| Reactor Netty 1.1 | 1.1.x → latest | No fix stated |
| Reactor Netty 1.0 | 1.0.x → latest | No fix stated |