CVE-2026-50009
1 advisory.
Maven/io.netty:netty-codec-classes-quic CVE-2026-50009: medium 4.8
Netty: QUIC stateless reset token material exposed through header-visible connection IDs
Action: Upgrade io.netty:netty-codec-classes-quic to 4.2.15.Final or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.2.0.Final | 4.2.15.Final | - |
Fixed versions
| 4.2.15.Final |
Sources
- osv: GHSA-cq4q-cv5g-r8q5
- https://github.com/netty/netty/security/advisories/GHSA-cq4q-cv5g-r8q5
- https://nvd.nist.gov/vuln/detail/CVE-2026-50009
- https://github.com/netty/netty
- https://github.com/netty/netty/releases/tag/netty-4.2.15.Final
CVE-2026-50009 · published · modified · JSON