- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 2 · 2 high
- Dependents
- 0
- Registry
- Maven Central
Advisories 2
- CVE-2026-73507High 7.5
Netty: Denial of Service in XmlFrameDecoder via CPU Exhaustion
Affected: from 4.2.0.Final, fixed in 4.2.16.Final; fixed in 4.1.136.Final.
- CVE-2026-56817High 8.3
Netty: XML External Entity (XXE) injection via unconfigured XML factory when DTD and entity processing are enabled
Affected: from 4.2.0.Final, fixed in 4.2.16.Final; from 4.1.0.Final, fixed in 4.1.136.Final.