Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

io.netty:netty-resolver-dns

3 known vulnerabilities (2 high, 1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 2 high, 1 medium
Dependents
0
Registry
Maven Central

Advisories 3

  • Netty has Insufficient Bailiwick Validation for NS Records

    Affected: from 4.2.0.Final, fixed in 4.2.15.Final; fixed in 4.1.135.Final.

  • Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records

    Affected: from 4.2.0.Final, fixed in 4.2.15.Final; fixed in 4.1.135.Final.

  • CVE-2026-45673Medium 6.8

    Netty: DNS Cache Poisoning due to Predictable PRNG and Default Static Source Port

    Affected: from 4.2.0.Final, fixed in 4.2.15.Final; fixed in 4.1.135.Final.