6.1
Medium
CVE-2026-47848 In specific scenarios involving WebSocket handshake redirects to a different origin, the Reactor Netty WebSocket…
Description
In specific scenarios involving WebSocket handshake redirects to a different origin, the Reactor Netty WebSocket client may leak credentials. In order for this to happen, the HTTP client must have been explicitly configured to follow redirects. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52 and earlier
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Reactor Netty 1.3 | 1.3.0 → 1.3.6 | No fix stated |
| Reactor Netty 1.1 | 1.1.0 → 1.2.18 | No fix stated |
| Reactor Netty 1.0 | earliest → 1.0.52 | No fix stated |
References
- spring.io spring.io
Timeline
- Published
- Last modified
Other CVEs of Reactor Netty
The 7 CVEs of Reactor Netty →
CVE-2026-47874
The vulnerability occurs when a client sends HTTP/1.1 pipelined requests over a single connection, causing the Reactor…
5.3
Medium
CVE-2026-47845
In specific scenarios, Reactor Netty HTTP Server may incorrectly evaluate the remote IP address when HAProxy Protocol is…
5.3
Medium
CVE-2026-47844
In specific scenarios, the Reactor Netty HTTP Server may leak exception details across unrelated requests
5.3
Medium
CVE-2026-47843
In specific scenarios involving multiple clients with different DNS resolver configurations, Reactor Netty may…
3.7
Low