pypi package report

Is io.projectreactor.netty:reactor-netty-http safe?

1 known vulnerability, worst severity HIGH.

cvss
6.5

how bad it is if exploited, out of 10

epss
1.1%

chance of exploitation in the next 30 days

xyz score
3.4

CyberXYZ composite, out of 10

fig. 01 — GHSA-hp5x-rqf7-43vf, the advisory selected below

// advisories

GHSA-hp5x-rqf7-43vf

HIGHCVE-2020-5403

Reactor Netty HttpServer, versions 0.9.3 and 0.9.4, is exposed to a URISyntaxException that causes the connection to be closed prematurely instead of producing a 400 response.

Affected
>= 0.9.3, <= 0.9.4
Fixed in
0.9.5
Published
2022-02-10
Source
github

GHSANVDMITREreference


// ai model usage

No published models are known to use this package.


Checked 2026-09-22 at 01:49 UTC. The most recent advisory here was published 2022-02-10. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Think a verdict here is wrong? Tell us — we respond within 2 business days.
Is io.projectreactor.netty:reactor-netty-http safe? pypi package security report | CyberXYZ