Connected evidence
Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.
Io.netty/netty-codec-http2: netty: http/2 header field values are not validated by default (cr/lf/nul passthrough)
Lead record- Why these records are connected
- Records explicitly naming the same CVE identifier.
- Connection key
cve:CVE-2026-93579- Public snapshot refreshed
- 14 Nov 23:34 UTC
- Distinct source events
- 3
- Source records represented
- 3
Current snapshot membership is shown here. Source histories and cited revisions remain on each record. Future source targets are labelled separately from observed changes. Browse connections.
Evidence in chronological order
- Wed 4 Nov · Dated source evidence · Affected-version evidence changed Io.netty/netty-codec-http2: netty: http/2 header field values are not validated by default (cr/lf/nul passthrough)CVE-2026-93579 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
- Fri 6 Nov · Dated source evidence · Affected-version evidence changed Io.netty/netty-codec-http2: netty: http/2 header field values are not validated by default (cr/lf/nul passthrough)CVE-2026-93579 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
- Fri 6 Nov · Dated source evidence · Affected-version evidence changed Io.netty/netty-codec-http2: netty: http/2 header field values are not validated by default (cr/lf/nul passthrough)CVE-2026-93579 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Affected-version evidence changed; observed by ChangeIntel, not the original publication date.