Netty Netty CRLF注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/netty/netty/security/advisories/GHSA-84h7-rjj3-6jx4
• https://nvd.nist.gov/vuln/detail/CVE-2025-67735
• https://avd.aliyun.com/detail?id=AVD-2025-67735
• https://www.miggo.io/vulnerability-database/cve/CVE-2025-67735
• https://www.ibm.com/support/pages/security-bulletinnetty-crlf-injection-httprequestencoder-request-smuggling-vulnerability-fixed-41129final-and-428final
• https://cve.imfht.com/detail/CVE-2026-41417
• https://avd.aliyun.com/detail?id=AVD-2026-41417
• https://nvd.nist.gov/vuln/detail/CVE-2026-41417
• https://github.com/netty/netty/security/advisories/GHSA-84h7-rjj3-6jx4
• https://www.sentinelone.com/vulnerability-database/cve-2025-67735/

Related Vulnerabilities

• JBOSS Netty SMTP 未授权 命令注入漏洞
• Netty Netty-Codec-Compression等 编码不规范漏洞 可导致 DoS
• Netty 资源管理错误漏洞