Skip to content
OpenAdvisories

Package · Maven

io.netty:netty-codec-classes-quic

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 4.8
    CVE-2026-50009

    Netty QUIC stateless reset token material exposed through header-visible connection IDs

    Netty is a network application framework for development of protocol servers and clients. Prior to version 4.2.15.Final, Netty QUIC exposes the stateless reset token on the network path when using the default HMAC-based connection-ID and stateless-reset-token…

    netty netty netty netty Debian Ubuntu Wolfi Maven
  • High 7.5
    CVE-2026-44894

    Netty's Default QUIC token handler accepts any client-supplied token

    Netty is a network application framework for development of protocol servers and clients. NoQuicTokenHandler is the tokenHandler used when the application does not set one. Prior to version 4.2.15.Final, its writeToken() returns false (server will not send Re…

    netty netty trino trino-plugin-opensearch Debian Ubuntu Wolfi Maven