Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-45674
8.7
HIGHCVSS v3
Published
June 12, 2026
Affected
5 projects
Assigned by
GitHub
Severity scale
010
Description
Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's DnsResolveContext fails to validate the origin (bailiwick) of CNAME records in DNS responses. Versions 4.1.135.Final and 4.2.15.Final patch the issue.
netty/netty
GitHubNetty project - an event-driven asynchronous network application framework
GitHubNetty project - an event-driven asynchronous network application framework< 4.1.135, >= 4.2.0, < 4.2.15NVD
nettyPython Package IndexA simple python library for networking. Not extremely complex, but allows for simple game servers and chat rooms to be hosted.
Python Package IndexA simple python library for networking. Not extremely complex, but allows for simple game servers and chat rooms to be hosted.< 4.1.135, >= 4.2.0, < 4.2.15NVD
Crates.io
NPM
RubyGems