CVE-2026-48480: Netty Chunked Stream Missing Final Chunk Validationcve-2026-48480-netty-chunked-stream-missing-final-chunk-validation
The stream parsing logic sequentially reads and decodes chunk data based on an unverified `.isFinal` property. If the parser is unaware when an EOF is missing a valid trailing chunk, an attacker can silently truncate bodies. Track `.isFinal` state and emit a validation error upon outer body completion if the final chunk was not observed.
