CVE-2026-93560

Name of the Vulnerable Software and Affected Versions Netty (affected versions not specified)

Description A flaw in the STOMP codec allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) by sending a specially crafted STOMP frame. The issue occurs when the content-length header exceeds the maximum integer value, leading to an integer truncation. This results in an infinite decode loop that exhausts CPU and memory resources, causing service disruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.