Skip to main content
← Maven

io.netty:netty-codec-classes-quic

2 known vulnerabilities (1 high, 1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 1 high, 1 medium
Dependents
1,173
Registry
Maven Central

Advisories 2

  • CVE-2026-50009Medium 4.8

    Netty QUIC stateless reset token material exposed through header-visible connection IDs

    Affected: from 4.2.0.Final, fixed in 4.2.15.Final.

  • Netty's Default QUIC token handler accepts any client-supplied token

    Affected: from 4.2.0.Final, fixed in 4.2.15.Final.