Skip to content

Vulnerabilities of Spring Reactor Netty

Is your version affected?

CVE Summary Score Published
CVE-2026-47874 The vulnerability occurs when a client sends HTTP/1.1 pipelined requests over a single connection, causing the Reactor… 5.3 Medium Aug 26, 2026
CVE-2026-47845 In specific scenarios, Reactor Netty HTTP Server may incorrectly evaluate the remote IP address when HAProxy Protocol is… 5.3 Medium Aug 26, 2026
CVE-2026-47848 In specific scenarios involving WebSocket handshake redirects to a different origin, the Reactor Netty WebSocket… 6.1 Medium Aug 26, 2026
CVE-2026-47844 In specific scenarios, the Reactor Netty HTTP Server may leak exception details across unrelated requests 5.3 Medium Aug 26, 2026
CVE-2026-47843 In specific scenarios involving multiple clients with different DNS resolver configurations, Reactor Netty may… 3.7 Low Aug 26, 2026
CVE-2026-41715 In specific scenarios involving HTTP redirects from a secure to an insecure endpoint, the Reactor Netty HTTP client… 6.1 Medium Jun 9, 2026
CVE-2023-34054 In Reactor Netty HTTP Server, versions 1.1.x prior to 1.1.13 and versions 1.0.x prior to 1.0.39, it is possible for a… 5.3 Medium Nov 28, 2023

Other Spring products