Skip to content
SUSE and openSUSE Address CRLF Injection Vulnerability in netty

SUSE and openSUSE Address CRLF Injection Vulnerability in netty

First seen 19 Dec 2025, 22:56 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

SUSE and openSUSE released updates for netty to address a moderate security issue identified as CVE-2025-67735. The vulnerability involves a lack of URI sanitization in `HttpRequestEncoder`, which can lead to CRLF injection and potential request smuggling. The updates include enhancements and bug fixes, including an update to upstream version 4.1.130.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 225d ago How this analysis works

More articles in this cluster (2)

Following this threat?

Track CVE-2025-67735 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed