Insecure deserialization In io.projectreactor.netty:reactor-netty
Description
Improper Handling of Exceptional Conditions and Improper Input Validation in Reactor Netty Reactor Netty HttpServer, versions 0.9.3 and 0.9.4, is exposed to a URISyntaxException that causes the connection to be closed prematurely instead of producing a 400 response.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 maven | 0.9.5.release | ||
maven | 0.9.5 |
Aliases
1. 2. 3. 4. 5.
References
1.