Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/io.netty/netty-handler@4.2.17
purl pkg:maven/io.netty/netty-handler@4.2.17
Tags Ghost
This package is not known to be subject of any advisories.
Vulnerabilities fixed by this package (3)

Advisory Summary Aliases
CVE-2026-75596
Netty: Fragmented ClientHello records trigger quadratic pre-handshake reassembly in default SNI parsing Netty's default SNI entrypoint reparses and recopies previously … GHSA-fccg-mwvh-qqg4
CVE-2026-75595
Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext A fragmented TLS ClientHello whose handshake header … GHSA-c4c3-7fpv-j4q5
CVE-2026-62243
Improper Validation of Certificate with Host Mismatch Netty disables TLS hostname verification on the `SslProvider.OPENSSL` client path when a plain … GHSA-p85m-gvr3-788c