Search: CVE-2026-59901

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.7	EPSS 0.5%	CVE-2026-59901Netty · [Bzip2Decoder] Infinite Loop in RLE State Machine Leads to Event-Loop Thread Hang High8.7EPSS 0.5%2026-07-22GCVE DatabaseCVE-2026-59901 The `Bzip2Decoder` handler in Netty's compression codec pipeline is vulnerable to a denial-of-service attack through a malformed bzip2 stream that permanently captures the event-loop thread in an infinite loop. The vulnerability exists in the run-length encoding (RLE) state machine within [`Bzip2BlockDecompressor.read()`] EPSS 0.5%Vulnerability CWE-835 #ghsa-558v-64gr-wgg4 #maven	GCVE Database	2026-07-22

Page 1 of 1