CVE-2026-93563Published
Io.netty/netty-codec-smtp: netty: unbounded multi-line response accumulation in smtpresponsedecoder leads to memory-exhaustion dos
cve-program · CVE-2026-93563
Publishednetty-codec-smtp
https://access.redhat.com/downloads/content/package-browser/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat build of Apache Camel for Spring Boot 4",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "netty-codec-smtp",
"defaultStatus": "affected",
"cpes": [
"cpe:/a:redhat:camel_spring_boot:4"
]
}netty-codec-smtp
https://access.redhat.com/downloads/content/package-browser/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat Fuse 7",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "netty-codec-smtp",
"defaultStatus": "unaffected",
"cpes": [
"cpe:/a:redhat:jboss_fuse:7"
]
}jboss-eap-7/eap74-els-openjdk11-openshift-rhel8
https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat JBoss Enterprise Application Platform 7",
"collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
"packageName": "jboss-eap-7/eap74-els-openjdk11-openshift-rhel8",
"defaultStatus": "affected",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:7"
]
}jboss-eap-7/eap74-els-openjdk17-openshift-rhel8
https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat JBoss Enterprise Application Platform 7",
"collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
"packageName": "jboss-eap-7/eap74-els-openjdk17-openshift-rhel8",
"defaultStatus": "affected",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:7"
]
}jboss-eap-7/eap74-els-openjdk8-openshift-rhel8
https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat JBoss Enterprise Application Platform 7",
"collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
"packageName": "jboss-eap-7/eap74-els-openjdk8-openshift-rhel8",
"defaultStatus": "affected",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:7"
]
}netty-codec-smtp
https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat JBoss Enterprise Application Platform 7",
"collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
"packageName": "netty-codec-smtp",
"defaultStatus": "affected",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:7"
]
}netty-codec-smtp
https://access.redhat.com/downloads/content/package-browser/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat Single Sign-On 7",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "netty-codec-smtp",
"defaultStatus": "affected",
"cpes": [
"cpe:/a:redhat:red_hat_single_sign_on:7"
]
}Original source record · Cite this exact observation · Complete original publisher JSON