Skip to content
fr Sign in
5.3 Medium

CVE-2026-47874 The vulnerability occurs when a client sends HTTP/1.1 pipelined requests over a single connection, causing the Reactor…

Description

The vulnerability occurs when a client sends HTTP/1.1 pipelined requests over a single connection, causing the Reactor Netty HTTP server to consume an excessive amount of memory. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52 and earlier

Affected products and versions

Product Affected versions Fixed in
Reactor Netty 1.3 1.3.0 → 1.3.6 No fix stated
Reactor Netty 1.1 1.1.0 → 1.2.18 No fix stated
Reactor Netty 1.0 earliest → 1.0.52 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Reactor Netty

The 7 CVEs of Reactor Netty →
CVE-2026-47845 In specific scenarios, Reactor Netty HTTP Server may incorrectly evaluate the remote IP address when HAProxy Protocol is… 5.3 Medium CVE-2026-47848 In specific scenarios involving WebSocket handshake redirects to a different origin, the Reactor Netty WebSocket… 6.1 Medium CVE-2026-47844 In specific scenarios, the Reactor Netty HTTP Server may leak exception details across unrelated requests 5.3 Medium CVE-2026-47843 In specific scenarios involving multiple clients with different DNS resolver configurations, Reactor Netty may… 3.7 Low
Track this CVE