Netty: [codec-http2] Lack of Host Header Deduplication in HTTP/2→HTTP/1.x Translation Leads to Request Routing Bypass · CVE-2026-59900 · GitHub Advisory Database · GitHub

Netty: [codec-http2] Lack of Host Header Deduplication in HTTP/2→HTTP/1.x Translation Leads to Request Routing Bypass

Moderate severity GitHub Reviewed Published Jul 14, 2026 in netty/netty

0 Open 0 Closed

No open alerts for this advisory

Give feedback on Dependabot alerts