Skip to content
OpenAdvisories

Package · Maven

io.netty:netty-codec-classes-quic

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.8
    CVE-2026-50009

    Netty QUIC stateless reset token material exposed through header-visible connection IDs

    Netty is a network application framework for development of protocol servers and clients. Prior to version 4.2.15.Final, Netty QUIC exposes the stateless reset token on the network path when using the default HMAC-based connection-ID and stateless-reset-token…

    netty netty netty netty Debian Ubuntu Wolfi Maven