Executive brief
Netty's decoders vulnerable to DoS via zip bomb style attack
Affected products
- Maven io.netty:netty-codec
- Maven io.netty:netty-codec-compression
Junglewise Threat Intelligence
CVE-2025-58057: Netty's decoders vulnerable to DoS via zip bomb style attack
CVE-2025-58057 · Severity: medium · CVSS 4 · Published 2025-09-03
Technologies: io.netty:netty-codec (Maven), io.netty:netty-codec-compression (Maven). Vendors: Maven.