{"id":"ECHO-8e5e-4b8f-548b","upstream":["CVE-2026-100655","GHSA-q842-gx74-cj48"],"severity":[],"modified":"2026-11-05T12:11:55.186Z","affected":[{"package":{"ecosystem":"Echo:Maven","name":"io.netty:netty-codec-http","purl":"pkg:maven/io.netty/netty-codec-http"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.74.Final+echo.6"}]}]}],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-100655"},{"type":"WEB","url":"https://github.com/netty/netty/security/advisories/GHSA-rmcw-9fcq-wjq7"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100655"},{"type":"WEB","url":"https://www.vulncheck.com/advisories/netty-before-4.1.138-final-denial-of-service-via-spdysessionhandler"},{"type":"WEB","url":"https://github.com/advisories/GHSA-q842-gx74-cj48"}]}