CVE-2026-42577
1 advisory.
Maven/io.netty:netty-transport-classes-epoll CVE-2026-42577: high 7.5, EPSS 0.58%
Netty epoll transport denial of service via RST on half-closed TCP connection
Action: Upgrade io.netty:netty-transport-classes-epoll to 4.2.13.Final or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.2.0.Final | 4.2.13.Final | - |
Fixed versions
| 4.2.13.Final |
Sources
- osv: GHSA-rwm7-x88c-3g2p
- https://github.com/netty/netty/security/advisories/GHSA-rwm7-x88c-3g2p
- https://nvd.nist.gov/vuln/detail/CVE-2026-42577
- https://github.com/netty/netty/pull/16689
- https://github.com/netty/netty/commit/0ec3d97fab376e243d328ac95fbd288ba0f6e22d
- https://github.com/netty/netty
CVE-2026-42577 · published · modified · JSON