Vulnerabilities > Pivotal > Reactor Netty > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-10-19 CVE-2022-31684 Unspecified vulnerability in Pivotal Reactor Netty
Reactor Netty HTTP Server, in versions 1.0.11 - 1.0.23, may log request headers in some cases of invalid HTTP requests.
network
low complexity
pivotal
4.3
2020-03-03 CVE-2020-5404 Insufficiently Protected Credentials vulnerability in Pivotal Reactor Netty
The HttpClient from Reactor Netty, versions 0.9.x prior to 0.9.5, and versions 0.8.x prior to 0.8.16, may be used incorrectly, leading to a credentials leak during a redirect to a different domain.
network
high complexity
pivotal CWE-522
5.9