CVE-2026-41417 | Netty up to 4.1.132.Final/4.2.12.Final HTTP Request setUri crlf injection (GHSA-v8h7-rr48-vmmv)

A vulnerability was found in Netty up to 4.1.132.Final/4.2.12.Final. It has been classified as problematic. This affects the function setUri of the component HTTP Request Handler. Performing a manipulation results in crlf injection.

This vulnerability is reported as CVE-2026-41417. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.