Skip to content

CVE-2026-42581 Netty HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization #48805

Closed
cve
#49401
Closed
CVE-2026-42581 Netty HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization#48805
cve
#49401
Labels
kind/cveIssues identified as CVEs on third-party dependencies, or issues which Keycloak is not affectedrelease/26.4.13release/26.6.3release/26.7.0status/blocked-externalUsed for marking Issues/PRs as blocked by some external factors like a bug in Quarkusteam/cloud-native
@vmuzikar

Description

@vmuzikar
vmuzikar
opened on May 7, 2026

Description

GHSA-xxqh-mfjm-7mv9

Will need to be fixed from the Quarkus side.

Metadata

Metadata

Assignees

No one assigned

    Labels

    kind/cveIssues identified as CVEs on third-party dependencies, or issues which Keycloak is not affectedrelease/26.4.13release/26.6.3release/26.7.0status/blocked-externalUsed for marking Issues/PRs as blocked by some external factors like a bug in Quarkusteam/cloud-native

    Type

    cve

    Fields

    No fields configured for cve.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions