{"vulnerability": "CVE-2026-63124", "sightings": [{"uuid": "2fe8786e-6059-4114-a900-8fc9f9691d2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-63124", "type": "published-proof-of-concept", "source": "https://github.com/netty/netty-incubator-codec-ohttp/security/advisories/GHSA-8cfx-wx3q-mh5q", "content": "", "creation_timestamp": "2026-08-20T20:35:06.253875Z"}, {"uuid": "a927ef78-cb1a-4750-b854-42120c02bd44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63124", "type": "seen", "source": "https://bsky.app/profile/thestandup.bsky.social/post/3mtkgttee5z2v", "content": "Netty's incubator Binary HTTP codec (CVE-2026-63124): BinaryHttpParser enters a non-terminating loop when a known-length field section ends exactly after a complete field line. Unauthenticated, and a tiny malformed request or response keeps the parsing thread busy indefinitely. #dev", "creation_timestamp": "2026-08-20T23:51:42.579118Z"}]}