CVE-2026-59900 | Netty prior 4.1.136.Final/4.2.16.Final Http2StreamFrameToHttpObjectCodec improper synchronization

A vulnerability has been found in Netty and classified as critical. This vulnerability affects unknown code of the component Http2StreamFrameToHttpObjectCodec/InboundHttp2ToHttpAdapter. The manipulation leads to improper synchronization.

This vulnerability is listed as CVE-2026-59900. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.