- Latest release
- 1.2.0 (Oct 26, 2026): no advisory affects it
- Newest unaffected release
- 1.2.0 (Oct 26, 2026), the latest release
- Advisories
- 1 · 1 high
- Dependents
- 0
- Releases
- 2 since 1.0.0 (May 26, 2026)
- Registry
- Maven Central
- Releases read
- Nov 8, 2026
Version timeline
- CVE-2026-54609Affects 1.0.0 (1.2.0 is outside it)
Advisories 1
- CVE-2026-54609High 8.6
QTINeon has unauthenticated relay-to-host amplification via unbounded RECONNECT_REQUEST forwarding
Affected: versions 1.0.0.
Fixed in 1.2.0 (released Oct 26, 2026, 90 days after disclosure), the first release outside every affected range (no listed fixed version clears them all).
The latest release, 1.2.0, is not affected.