alibaba / alibaba/arthas

CVE-2026-33870 netty-codec-http

Open
#3,170 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
37.6k
Forks
7.6k
Avg merge
1d 22h
Merged PRs (30d)
4

Description

### 环境信息

* Arthas 版本: 4.1.8

Contributor guide

Open the contributing guide

Research direction

Start by reviewing the CVE-2026-33870 report and the dependency declarations for Arthas 4.1.8 to identify how netty-codec-http is included. Confirm the affected dependency and determine the required remediation; the issue is complete when the vulnerable version is addressed and the project’s dependency checks pass.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
security
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.