CVE-2026-44891 | Netty prior 4.1.136.Final/4.2.16.Final StompSubframeDecoder StompSubframeDecoder.java maxLineLength denial of service

July 17, 2026 Yanac

A vulnerability has been found in Netty and classified as problematic. Affected by this issue is some unknown functionality of the file io/netty/handler/codec/stomp/StompSubframeDecoder.java of the component StompSubframeDecoder. This manipulation of the argument maxLineLength causes denial of service.

This vulnerability appears as CVE-2026-44891. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More