Package
sonarqube
Component
netty-codec-http
Latest update
6.5
CVSS V3
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Justification
Impact
No jar on the classpath references io.netty.handler.codec.http.cors. Elasticsearch implements CORS itself in org.elasticsearch.http.CorsHandler and never installs netty's CorsHandler, so the vulnerable short-circuit path cannot execute.
Status