Package Health/io.projectreactor.netty:reactor-netty-http

reactor-netty-http

HTTP functionality for the Reactor Netty library

Latest 1.4.0-M2io.projectreactor.netty

Maven

90%

Total Score

healthy

Healthy release with active maintenance, strong project backing, and only limited workflow hygiene concerns.

Are you affected? Scan for Free

Health Score Breakdown

Version stability

This is a prerelease milestone, so API or behavior changes are more likely than in a final release; the recent prerelease share is only 20%, partly balancing that concern.

Workflow audit

All six workflows were analyzed, all use read-only permissions, and only 2 of 36 action references are unpinned. A high-confidence template-injection finding and two high-confidence ad hoc package installations are workflow hygiene concerns, but no untrusted checkout or script-injection sink was reported.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-556582 reactor-netty-http is vulnerable to Denial of Service (DoS) in versions 0.0.1 - 1.3.6.	0.0.1 - 1.3.6	Medium
AIKIDO-2026-980617 reactor-netty-http is vulnerable to Information Disclosure in versions 0.0.1 - 1.3.6.	0.0.1 - 1.3.6	Medium
AIKIDO-2026-718872 reactor-netty-http is vulnerable to Improper Input Validation in versions 0.0.1 - 1.3.6.	0.0.1 - 1.3.6	Medium
CVE-2025-22227 io.projectreactor.netty:reactor-netty-http is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in versions 1.3.0-M1 - 1.3.0-M5 and 0.0.0 - 1.2.8.	0.0.0 - 1.2.81.3.0-M1 - 1.3.0-M5	Medium
CVE-2023-34054 io.projectreactor.netty:reactor-netty-http is vulnerable to Security Vulnerability.	—	High

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
io.netty:netty-codec-http Version 4.2.18.Final	—	—
io.netty:netty-codec-http2 Version 4.2.18.Final	—	—
io.netty:netty-codec-http3 Version 4.2.18.Final	—	—
io.netty:netty-resolver-dns Version 4.2.18.Final	—	—
io.netty:netty-resolver-dns-native-macos Version 4.2.18.Final	—	—