CVE-2020-5403: Broadcom Reactor Netty

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

Reactor Netty HttpServer, versions 0.9.3 and 0.9.4, is exposed to a URISyntaxException that causes the connection to be closed prematurely instead of producing a 400 response.

Affected products

• Broadcom Reactor Netty: version 0.9.3 only; version 0.9.4 only

Published 2020-03-03. Last modified 2026-09-04.