CVEvulnerability

CVE-2026-47874

5.3 MEDIUM Published 2026-08-27 Modified 2026-09-02 Official page ↗
Status
Analyzed
Published
2026-08-27
Last modified
2026-09-02
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weaknesses
CWE-770

Description

The vulnerability occurs when a client sends HTTP/1.1 pipelined requests over a single connection, causing the Reactor Netty HTTP server to consume an excessive amount of memory. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52 and earlier

Affected configurations

• pivotal reactor netty (< 1.0.53) • pivotal reactor netty (>= 1.1.0 < 1.2.19) • pivotal reactor netty (>= 1.3.0 < 1.3.6.1)

Related

Weakness · CWE (1)

  • CWE-770 Allocation of Resources Without Limits or Throttling weakness

References