[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2023-34462":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T02:55:30.529Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":449,"aliases":459,"duplicate_of":9,"upstream":461,"downstream":462,"duplicates":481,"related":482,"reserved_at":9,"published_at":497,"modified_at":498,"state":499,"summary":500,"references_raw":508,"kevs":555,"epss":556,"epss_history":559,"metrics":833,"affected":843},"CVE-2023-34462","Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. The `SniHandler` can allocate up to 16MB of heap for each channel during the TLS handshake. When the handler or the channel does not have an idle timeout, it can be used to make a TCP server using the `SniHandler` to allocate 16MB of heap. The `SniHandler` class is a handler that waits for the TLS handshake to configure a `SslHandler` according to the indicated server name by the `ClientHello` record. For this matter it allocates a `ByteBuf` using the value defined in the `ClientHello` record. Normally the value of the packet should be smaller than the handshake packet but there are not checks done here and the way the code is written, it is possible to craft a packet that makes the `SslClientHelloHandler`. This vulnerability has been fixed in version 4.1.94.Final.",null,[11,86],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-400","Uncontrolled Resource Consumption","The product does not properly control the allocation and maintenance of a limited resource.","weakness","Draft","Class","High",[20,24,82],{"id":21,"name":22,"techniques":23},"CAPEC-147","XML Ping of the Death",[],{"id":25,"name":26,"techniques":27},"CAPEC-227","Sustained Client Engagement",[28],{"id":29,"name":30,"tactics":31,"countermeasures":35},"T1499","Endpoint Denial of Service",[32],{"id":33,"name":34},"TA0105","Impact",[36,41,45,49,53,57,61,65,69,73,78],{"id":37,"name":38,"tactic":39},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":40},"Detect",{"id":42,"name":43,"tactic":44},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":40},{"id":46,"name":47,"tactic":48},"D3-CSPP","Client-server Payload Profiling",{"name":40},{"id":50,"name":51,"tactic":52},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":40},{"id":54,"name":55,"tactic":56},"D3-NTSA","Network Traffic Signature Analysis",{"name":40},{"id":58,"name":59,"tactic":60},"D3-APCA","Application Protocol Command Analysis",{"name":40},{"id":62,"name":63,"tactic":64},"D3-NTCD","Network Traffic Community Deviation",{"name":40},{"id":66,"name":67,"tactic":68},"D3-RTSD","Remote Terminal Session Detection",{"name":40},{"id":70,"name":71,"tactic":72},"D3-ISVA","Inbound Session Volume Analysis",{"name":40},{"id":74,"name":75,"tactic":76},"D3-NTF","Network Traffic Filtering",{"name":77},"Isolate",{"id":79,"name":80,"tactic":81},"D3-ITF","Inbound Traffic Filtering",{"name":77},{"id":83,"name":84,"techniques":85},"CAPEC-492","Regular Expression Exponential Blowup",[],{"_key":87,"id":87,"name":88,"description":89,"type":15,"status":90,"abstraction":91,"likelihood_of_exploit":18,"capec":92},"CWE-770","Allocation of Resources Without Limits or Throttling","The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.","Incomplete","Base",[93,151,161,163,167,171,175,179,211,273,277,281,311,341,373,377,381,385,389,393],{"id":94,"name":95,"techniques":96},"CAPEC-125","Flooding",[97,125],{"id":98,"name":99,"tactics":100,"countermeasures":102},"T1498.001","Direct Network Flood",[101],{"id":33,"name":34},[103,105,107,109,111,113,115,117,119,121,123],{"id":37,"name":38,"tactic":104},{"name":40},{"id":42,"name":43,"tactic":106},{"name":40},{"id":46,"name":47,"tactic":108},{"name":40},{"id":50,"name":51,"tactic":110},{"name":40},{"id":54,"name":55,"tactic":112},{"name":40},{"id":58,"name":59,"tactic":114},{"name":40},{"id":62,"name":63,"tactic":116},{"name":40},{"id":66,"name":67,"tactic":118},{"name":40},{"id":70,"name":71,"tactic":120},{"name":40},{"id":74,"name":75,"tactic":122},{"name":77},{"id":79,"name":80,"tactic":124},{"name":77},{"id":29,"name":30,"tactics":126,"countermeasures":128},[127],{"id":33,"name":34},[129,131,133,135,137,139,141,143,145,147,149],{"id":37,"name":38,"tactic":130},{"name":40},{"id":42,"name":43,"tactic":132},{"name":40},{"id":46,"name":47,"tactic":134},{"name":40},{"id":50,"name":51,"tactic":136},{"name":40},{"id":54,"name":55,"tactic":138},{"name":40},{"id":58,"name":59,"tactic":140},{"name":40},{"id":62,"name":63,"tactic":142},{"name":40},{"id":66,"name":67,"tactic":144},{"name":40},{"id":70,"name":71,"tactic":146},{"name":40},{"id":74,"name":75,"tactic":148},{"name":77},{"id":79,"name":80,"tactic":150},{"name":77},{"id":152,"name":153,"techniques":154},"CAPEC-130","Excessive Allocation",[155],{"id":156,"name":157,"tactics":158,"countermeasures":160},"T1499.003","Application Exhaustion Flood",[159],{"id":33,"name":34},[],{"id":21,"name":22,"techniques":162},[],{"id":164,"name":165,"techniques":166},"CAPEC-197","Exponential Data Expansion",[],{"id":168,"name":169,"techniques":170},"CAPEC-229","Serialized Data Parameter Blowup",[],{"id":172,"name":173,"techniques":174},"CAPEC-230","Serialized Data with Nested Payloads",[],{"id":176,"name":177,"techniques":178},"CAPEC-231","Oversized Serialized Data Payloads",[],{"id":180,"name":181,"techniques":182},"CAPEC-469","HTTP DoS",[183],{"id":184,"name":185,"tactics":186,"countermeasures":188},"T1499.002","Service Exhaustion Flood",[187],{"id":33,"name":34},[189,191,193,195,197,199,201,203,205,207,209],{"id":37,"name":38,"tactic":190},{"name":40},{"id":42,"name":43,"tactic":192},{"name":40},{"id":46,"name":47,"tactic":194},{"name":40},{"id":50,"name":51,"tactic":196},{"name":40},{"id":54,"name":55,"tactic":198},{"name":40},{"id":58,"name":59,"tactic":200},{"name":40},{"id":62,"name":63,"tactic":202},{"name":40},{"id":66,"name":67,"tactic":204},{"name":40},{"id":70,"name":71,"tactic":206},{"name":40},{"id":74,"name":75,"tactic":208},{"name":77},{"id":79,"name":80,"tactic":210},{"name":77},{"id":212,"name":213,"techniques":214},"CAPEC-482","TCP Flood",[215,241,247],{"id":98,"name":99,"tactics":216,"countermeasures":218},[217],{"id":33,"name":34},[219,221,223,225,227,229,231,233,235,237,239],{"id":37,"name":38,"tactic":220},{"name":40},{"id":42,"name":43,"tactic":222},{"name":40},{"id":46,"name":47,"tactic":224},{"name":40},{"id":50,"name":51,"tactic":226},{"name":40},{"id":54,"name":55,"tactic":228},{"name":40},{"id":58,"name":59,"tactic":230},{"name":40},{"id":62,"name":63,"tactic":232},{"name":40},{"id":66,"name":67,"tactic":234},{"name":40},{"id":70,"name":71,"tactic":236},{"name":40},{"id":74,"name":75,"tactic":238},{"name":77},{"id":79,"name":80,"tactic":240},{"name":77},{"id":242,"name":243,"tactics":244,"countermeasures":246},"T1499.001","OS Exhaustion Flood",[245],{"id":33,"name":34},[],{"id":184,"name":185,"tactics":248,"countermeasures":250},[249],{"id":33,"name":34},[251,253,255,257,259,261,263,265,267,269,271],{"id":37,"name":38,"tactic":252},{"name":40},{"id":42,"name":43,"tactic":254},{"name":40},{"id":46,"name":47,"tactic":256},{"name":40},{"id":50,"name":51,"tactic":258},{"name":40},{"id":54,"name":55,"tactic":260},{"name":40},{"id":58,"name":59,"tactic":262},{"name":40},{"id":62,"name":63,"tactic":264},{"name":40},{"id":66,"name":67,"tactic":266},{"name":40},{"id":70,"name":71,"tactic":268},{"name":40},{"id":74,"name":75,"tactic":270},{"name":77},{"id":79,"name":80,"tactic":272},{"name":77},{"id":274,"name":275,"techniques":276},"CAPEC-486","UDP Flood",[],{"id":278,"name":279,"techniques":280},"CAPEC-487","ICMP Flood",[],{"id":282,"name":283,"techniques":284},"CAPEC-488","HTTP Flood",[285],{"id":184,"name":185,"tactics":286,"countermeasures":288},[287],{"id":33,"name":34},[289,291,293,295,297,299,301,303,305,307,309],{"id":37,"name":38,"tactic":290},{"name":40},{"id":42,"name":43,"tactic":292},{"name":40},{"id":46,"name":47,"tactic":294},{"name":40},{"id":50,"name":51,"tactic":296},{"name":40},{"id":54,"name":55,"tactic":298},{"name":40},{"id":58,"name":59,"tactic":300},{"name":40},{"id":62,"name":63,"tactic":302},{"name":40},{"id":66,"name":67,"tactic":304},{"name":40},{"id":70,"name":71,"tactic":306},{"name":40},{"id":74,"name":75,"tactic":308},{"name":77},{"id":79,"name":80,"tactic":310},{"name":77},{"id":312,"name":313,"techniques":314},"CAPEC-489","SSL Flood",[315],{"id":184,"name":185,"tactics":316,"countermeasures":318},[317],{"id":33,"name":34},[319,321,323,325,327,329,331,333,335,337,339],{"id":37,"name":38,"tactic":320},{"name":40},{"id":42,"name":43,"tactic":322},{"name":40},{"id":46,"name":47,"tactic":324},{"name":40},{"id":50,"name":51,"tactic":326},{"name":40},{"id":54,"name":55,"tactic":328},{"name":40},{"id":58,"name":59,"tactic":330},{"name":40},{"id":62,"name":63,"tactic":332},{"name":40},{"id":66,"name":67,"tactic":334},{"name":40},{"id":70,"name":71,"tactic":336},{"name":40},{"id":74,"name":75,"tactic":338},{"name":77},{"id":79,"name":80,"tactic":340},{"name":77},{"id":342,"name":343,"techniques":344},"CAPEC-490","Amplification",[345],{"id":346,"name":347,"tactics":348,"countermeasures":350},"T1498.002","Reflection Amplification",[349],{"id":33,"name":34},[351,353,355,357,359,361,363,365,367,369,371],{"id":37,"name":38,"tactic":352},{"name":40},{"id":42,"name":43,"tactic":354},{"name":40},{"id":46,"name":47,"tactic":356},{"name":40},{"id":50,"name":51,"tactic":358},{"name":40},{"id":54,"name":55,"tactic":360},{"name":40},{"id":58,"name":59,"tactic":362},{"name":40},{"id":62,"name":63,"tactic":364},{"name":40},{"id":66,"name":67,"tactic":366},{"name":40},{"id":70,"name":71,"tactic":368},{"name":40},{"id":74,"name":75,"tactic":370},{"name":77},{"id":79,"name":80,"tactic":372},{"name":77},{"id":374,"name":375,"techniques":376},"CAPEC-491","Quadratic Data Expansion",[],{"id":378,"name":379,"techniques":380},"CAPEC-493","SOAP Array Blowup",[],{"id":382,"name":383,"techniques":384},"CAPEC-494","TCP Fragmentation",[],{"id":386,"name":387,"techniques":388},"CAPEC-495","UDP Fragmentation",[],{"id":390,"name":391,"techniques":392},"CAPEC-496","ICMP Fragmentation",[],{"id":394,"name":395,"techniques":396},"CAPEC-528","XML Flood",[397,423],{"id":184,"name":185,"tactics":398,"countermeasures":400},[399],{"id":33,"name":34},[401,403,405,407,409,411,413,415,417,419,421],{"id":37,"name":38,"tactic":402},{"name":40},{"id":42,"name":43,"tactic":404},{"name":40},{"id":46,"name":47,"tactic":406},{"name":40},{"id":50,"name":51,"tactic":408},{"name":40},{"id":54,"name":55,"tactic":410},{"name":40},{"id":58,"name":59,"tactic":412},{"name":40},{"id":62,"name":63,"tactic":414},{"name":40},{"id":66,"name":67,"tactic":416},{"name":40},{"id":70,"name":71,"tactic":418},{"name":40},{"id":74,"name":75,"tactic":420},{"name":77},{"id":79,"name":80,"tactic":422},{"name":77},{"id":98,"name":99,"tactics":424,"countermeasures":426},[425],{"id":33,"name":34},[427,429,431,433,435,437,439,441,443,445,447],{"id":37,"name":38,"tactic":428},{"name":40},{"id":42,"name":43,"tactic":430},{"name":40},{"id":46,"name":47,"tactic":432},{"name":40},{"id":50,"name":51,"tactic":434},{"name":40},{"id":54,"name":55,"tactic":436},{"name":40},{"id":58,"name":59,"tactic":438},{"name":40},{"id":62,"name":63,"tactic":440},{"name":40},{"id":66,"name":67,"tactic":442},{"name":40},{"id":70,"name":71,"tactic":444},{"name":40},{"id":74,"name":75,"tactic":446},{"name":77},{"id":79,"name":80,"tactic":448},{"name":77},[450],{"_key":451,"name":452,"source":453,"url":454,"maturity":455,"reliability_score":456,"verified":457,"type":9,"platforms":458,"requires_auth":9,"exploitdb":9,"metasploit":9},"GITHUB_NETTY_NETTY","Netty","github","https://github.com/netty/netty/issues/2562","poc",0.3,false,[],[460],"GHSA-6mjq-h674-j845",[],[463,465,467,469,471,473,475,477,479],{"_key":464},"OPENSUSE-SU-2024:14442-1",{"_key":466},"SUSE-SU-2023:2974-1",{"_key":468},"DSA-5558-1",{"_key":470},"USN-6994-1",{"_key":472},"DEBIAN-CVE-2023-34462",{"_key":474},"UBUNTU-CVE-2023-34462",{"_key":476},"RHSA-2023:5484",{"_key":478},"RHSA-2023:5485",{"_key":480},"RHSA-2023:5486",[],[483,484,485,487,489,491,493,495],{"_key":464},{"_key":466},{"_key":486},"CGA-CP7X-R3Q6-PFCJ",{"_key":488},"CGA-H5CV-9CC6-J4JF",{"_key":490},"CGA-R5MP-477X-XH5J",{"_key":492},"CGA-RQ5C-V396-7C72",{"_key":494},"CGA-XCW6-RV74-MWGJ",{"_key":496},"CGA-M8G8-RCVW-X26G","2023-06-22T23:00:12.104Z","2025-02-13T16:55:36.190Z","Modified",{"cisa_kev":457,"cisa_ransomware":457,"cisa_vendor":9,"epss_severity":501,"epss_score":502,"severity":503,"severity_score":504,"severity_version":505,"severity_source":506,"severity_vector":507,"severity_status":499},"low",0.00736,"medium",6.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",[509,519,525,529,533,537,542,547,551],{"url":510,"sources":511,"tags":514},"https://github.com/netty/netty/security/advisories/GHSA-6mjq-h674-j845",[506,512,513],"nvd","osv_maven",[515,516,517,518],"X Refsource CONFIRM","Exploit","Vendor Advisory","WEB",{"url":520,"sources":521,"tags":522},"https://github.com/netty/netty/commit/535da17e45201ae4278c0479e6162bb4127d4c32",[506,512,513],[523,524,518],"X Refsource MISC","Patch",{"url":526,"sources":527,"tags":528},"https://security.netapp.com/advisory/ntap-20230803-0001/",[506,512],[],{"url":530,"sources":531,"tags":532},"https://www.debian.org/security/2023/dsa-5558",[506,512,513],[518],{"url":534,"sources":535,"tags":536},"https://security.netapp.com/advisory/ntap-20240621-0007/",[506,512],[],{"url":538,"sources":539,"tags":540},"https://nvd.nist.gov/vuln/detail/CVE-2023-34462",[513],[541],"Advisory",{"url":543,"sources":544,"tags":545},"https://github.com/netty/netty",[513],[546],"PACKAGE",{"url":548,"sources":549,"tags":550},"https://security.netapp.com/advisory/ntap-20230803-0001",[513],[518],{"url":552,"sources":553,"tags":554},"https://security.netapp.com/advisory/ntap-20240621-0007",[513],[518],[],{"date":557,"score":502,"percentile":558},"2026-06-04",0.73198,[560,564,567,570,573,576,579,582,585,587,590,593,596,599,602,606,609,612,615,618,620,622,625,628,631,635,638,641,645,648,651,655,658,661,664,667,670,673,676,679,682,685,687,690,693,696,700,703,706,709,711,714,717,720,723,726,729,732,735,739,742,745,748,751,754,757,760,763,766,769,772,776,779,782,785,788,791,793,796,799,802,805,808,811,814,817,820,822,825,829],{"date":561,"score":562,"percentile":563},"2025-11-04",0.00563,0.67484,{"date":565,"score":562,"percentile":566},"2025-11-05",0.67466,{"date":568,"score":562,"percentile":569},"2025-11-06",0.67468,{"date":571,"score":562,"percentile":572},"2025-11-07",0.6748,{"date":574,"score":562,"percentile":575},"2025-11-08",0.67479,{"date":577,"score":562,"percentile":578},"2025-11-09",0.6747,{"date":580,"score":562,"percentile":581},"2025-11-10",0.6746,{"date":583,"score":562,"percentile":584},"2025-11-11",0.67464,{"date":586,"score":562,"percentile":563},"2025-11-12",{"date":588,"score":562,"percentile":589},"2025-11-13",0.67494,{"date":591,"score":562,"percentile":592},"2025-11-14",0.67501,{"date":594,"score":562,"percentile":595},"2025-11-15",0.67498,{"date":597,"score":562,"percentile":598},"2025-11-16",0.67492,{"date":600,"score":562,"percentile":601},"2025-11-17",0.67486,{"date":603,"score":604,"percentile":605},"2025-11-18",0.00847,0.72807,{"date":607,"score":604,"percentile":608},"2025-11-19",0.72815,{"date":610,"score":604,"percentile":611},"2025-11-20",0.72823,{"date":613,"score":562,"percentile":614},"2025-11-21",0.67503,{"date":616,"score":562,"percentile":617},"2025-11-22",0.67507,{"date":619,"score":562,"percentile":595},"2025-11-23",{"date":621,"score":562,"percentile":601},"2025-11-24",{"date":623,"score":562,"percentile":624},"2025-11-25",0.67495,{"date":626,"score":562,"percentile":627},"2025-11-26",0.67502,{"date":629,"score":562,"percentile":630},"2025-11-27",0.67504,{"date":632,"score":633,"percentile":634},"2025-11-28",0.01057,0.7694,{"date":636,"score":633,"percentile":637},"2025-11-29",0.76948,{"date":639,"score":633,"percentile":640},"2025-11-30",0.76945,{"date":642,"score":643,"percentile":644},"2025-12-01",0.00631,0.6962,{"date":646,"score":643,"percentile":647},"2025-12-02",0.69628,{"date":649,"score":643,"percentile":650},"2025-12-03",0.69625,{"date":652,"score":653,"percentile":654},"2025-12-04",0.01184,0.78148,{"date":656,"score":653,"percentile":657},"2025-12-05",0.78153,{"date":659,"score":653,"percentile":660},"2025-12-06",0.78156,{"date":662,"score":653,"percentile":663},"2025-12-07",0.7815,{"date":665,"score":653,"percentile":666},"2025-12-08",0.78154,{"date":668,"score":653,"percentile":669},"2025-12-09",0.78172,{"date":671,"score":653,"percentile":672},"2025-12-10",0.78196,{"date":674,"score":653,"percentile":675},"2025-12-11",0.78211,{"date":677,"score":653,"percentile":678},"2025-12-12",0.78229,{"date":680,"score":653,"percentile":681},"2025-12-13",0.7823,{"date":683,"score":653,"percentile":684},"2025-12-14",0.78227,{"date":686,"score":653,"percentile":684},"2025-12-15",{"date":688,"score":653,"percentile":689},"2025-12-16",0.78239,{"date":691,"score":653,"percentile":692},"2025-12-17",0.78247,{"date":694,"score":653,"percentile":695},"2025-12-18",0.78263,{"date":697,"score":698,"percentile":699},"2025-12-19",0.01091,0.77419,{"date":701,"score":698,"percentile":702},"2025-12-20",0.77412,{"date":704,"score":698,"percentile":705},"2025-12-21",0.77407,{"date":707,"score":698,"percentile":708},"2025-12-22",0.77405,{"date":710,"score":698,"percentile":705},"2025-12-23",{"date":712,"score":698,"percentile":713},"2025-12-24",0.77418,{"date":715,"score":698,"percentile":716},"2025-12-25",0.77435,{"date":718,"score":698,"percentile":719},"2025-12-26",0.7743,{"date":721,"score":698,"percentile":722},"2025-12-27",0.77483,{"date":724,"score":698,"percentile":725},"2025-12-28",0.77417,{"date":727,"score":698,"percentile":728},"2025-12-29",0.77414,{"date":730,"score":698,"percentile":731},"2025-12-30",0.77421,{"date":733,"score":698,"percentile":734},"2025-12-31",0.77436,{"date":736,"score":737,"percentile":738},"2026-01-01",0.00581,0.68418,{"date":740,"score":737,"percentile":741},"2026-01-02",0.68405,{"date":743,"score":737,"percentile":744},"2026-01-03",0.68406,{"date":746,"score":698,"percentile":747},"2026-01-04",0.7744,{"date":749,"score":698,"percentile":750},"2026-01-05",0.77433,{"date":752,"score":698,"percentile":753},"2026-01-06",0.77442,{"date":755,"score":698,"percentile":756},"2026-01-07",0.77449,{"date":758,"score":698,"percentile":759},"2026-01-08",0.77456,{"date":761,"score":698,"percentile":762},"2026-01-09",0.77462,{"date":764,"score":698,"percentile":765},"2026-01-10",0.77463,{"date":767,"score":698,"percentile":768},"2026-01-11",0.77457,{"date":770,"score":698,"percentile":771},"2026-01-12",0.77444,{"date":773,"score":774,"percentile":775},"2026-01-13",0.01211,0.78539,{"date":777,"score":774,"percentile":778},"2026-01-14",0.7856,{"date":780,"score":774,"percentile":781},"2026-01-15",0.78562,{"date":783,"score":774,"percentile":784},"2026-01-16",0.78569,{"date":786,"score":774,"percentile":787},"2026-01-17",0.78577,{"date":789,"score":774,"percentile":790},"2026-01-18",0.78574,{"date":792,"score":774,"percentile":790},"2026-01-19",{"date":794,"score":774,"percentile":795},"2026-01-20",0.78572,{"date":797,"score":774,"percentile":798},"2026-01-21",0.78578,{"date":800,"score":774,"percentile":801},"2026-01-22",0.78586,{"date":803,"score":774,"percentile":804},"2026-01-23",0.78612,{"date":806,"score":774,"percentile":807},"2026-01-24",0.78624,{"date":809,"score":774,"percentile":810},"2026-01-25",0.78617,{"date":812,"score":774,"percentile":813},"2026-01-26",0.78611,{"date":815,"score":774,"percentile":816},"2026-01-27",0.7861,{"date":818,"score":774,"percentile":819},"2026-01-28",0.78615,{"date":821,"score":774,"percentile":816},"2026-01-29",{"date":823,"score":774,"percentile":824},"2026-01-30",0.78613,{"date":826,"score":827,"percentile":828},"2026-01-31",0.00998,0.76526,{"date":830,"score":831,"percentile":832},"2026-02-01",0.00531,0.66873,[834,839,841],{"source":506,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":835,"cvss_v4_0":9},{"baseScore":504,"baseSeverity":836,"vectorString":507,"impactScore":837,"exploitabilityScore":838},"MEDIUM",6,7.2,{"source":512,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":840,"cvss_v4_0":9},{"baseScore":504,"baseSeverity":836,"vectorString":507,"impactScore":837,"exploitabilityScore":838},{"source":513,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":842,"cvss_v4_0":9},{"baseScore":504,"baseSeverity":9,"vectorString":507,"impactScore":837,"exploitabilityScore":838},[844,857],{"ecosystem":845,"name":846,"vendor":847,"product":848,"cpe_part":9,"purl_type":849,"purl_namespace":847,"purl_name":848,"source":9,"versions":850},"Maven","io.netty:netty-handler","io.netty","netty-handler","maven",[851],{"version":852,"is_range":853,"range_type":854,"version_start":9,"version_start_type":9,"version_end":855,"version_end_type":856,"fixed_in":9},"lt4_1_94_Final",true,"ecosystem","4.1.94.Final","excluding",{"ecosystem":9,"name":858,"vendor":858,"product":858,"cpe_part":859,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":860},"netty","a",[861,863],{"version":862,"is_range":853,"range_type":506,"version_start":9,"version_start_type":9,"version_end":855,"version_end_type":856,"fixed_in":9},"\u003C 4.1.94.Final",{"version":864,"is_range":853,"range_type":865,"version_start":9,"version_start_type":9,"version_end":866,"version_end_type":856,"fixed_in":9},"lt4.1.94","cpe","4.1.94"]