CWE-1035

Every one of the 13 is a mark on the map. Named now: 1 to 13, most at risk first.

1. Io.netty/netty-codec-http: netty: unbounded per-connection queue growth in websocketserverextensionhandler leads to denial of serviceCVE-2026-93558Red Hat · CVSS 7.5 · 1.2% likely

   Red Hat

2. Io.netty/netty-codec-http2: netty: http/2 header field values are not validated by default (cr/lf/nul passthrough)CVE-2026-93579Red Hat · CVSS 6.5 · 1.1% likely

   Red Hat

3. Io.netty/netty-codec-haproxy: netty: haproxy proxy-v2 nested-tlv grandchild bytebuf reference-count leak (incomplete fix of pr #16881)CVE-2026-93564Red Hat · CVSS 7.5 · 1.1% likely

   Red Hat

4. Io.netty/netty-codec-http: netty rtspdecoder method-token smuggling via trailing control byteCVE-2026-93565Red Hat · CVSS 7.5 · 0.9% likely

   Red Hat

5. Io.netty/netty-codec-http: netty: http request smuggling due to control characters in the chunk-size lineCVE-2026-93566Red Hat · CVSS 6.5 · 0.6% likely

   Red Hat

6. Io.netty/netty-codec-http: netty: incomplete validation of malformed transfer-encoding allows http request smugglingCVE-2026-93562Red Hat · CVSS 6.5 · 0.5% likely

   Red Hat

7. Io.netty/netty-codec-http2: netty: http/2 hpackencoder dos with large table sizeCVE-2026-93492Red Hat · CVSS 5.3 · 0.5% likely

   Red Hat

8. Io.netty/netty-codec-stomp: netty: stomp codec content-length long-to-int truncation causes infinite decode loop dosCVE-2026-93560Red Hat · CVSS 7.5 · 0.4% likely

   Red Hat

9. Io.netty/netty-codec-stomp: netty: bytebuf leak in stompsubframedecoder when a frame body is never terminatedCVE-2026-93494Red Hat · CVSS 7.5 · 0.4% likely

   Red Hat

10. Io.netty/netty-codec-mqtt: netty: resource exhaustion in mqttdecoderCVE-2026-93575Red Hat · CVSS 7.5 · 0.4% likely

    Red Hat

11. Io.netty/netty-codec-smtp: netty: unbounded multi-line response accumulation in smtpresponsedecoder leads to memory-exhaustion dosCVE-2026-93563Red Hat · CVSS 7.5 · 0.3% likely

    Red Hat

12. Io.netty/netty-handler-ssl-ocsp: netty: missing extended key usage (eku) check in ocsp client allows certificate revocation bypassCVE-2026-93578Red Hat · CVSS 5.9 · 0.2% likely

    Red Hat

13. Io.netty/netty-codec-memcache: netty: memcache binary codec signed/unsigned type mismatch causes frame desynchronization and response smugglingCVE-2026-93561Red Hat · CVSS 6.5 · 0.2% likely

    Red Hat

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.