{ "@id": "urn:uuid:287fd67b-d690-4131-9ffd-6221462071e3", "role": "Document Creator", "author": "https://tuxcare.com", "version": 22, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-10-31T14:01:12.160119+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-29T10:21:18.524281+00:00", "status_notes": "Vulnerability CVE-2014-3488 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2014-3488" }, "action_statement": "Vulnerability CVE-2014-3488 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T22:54:14.665991+00:00", "status_notes": "Vulnerability CVE-2016-4970 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2016-4970" }, "action_statement": "Vulnerability CVE-2016-4970 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2019-20444 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2019-20444" }, "action_statement": "Vulnerability CVE-2019-20444 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T22:54:14.665991+00:00", "status_notes": "Vulnerability CVE-2019-20445 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2019-20445" }, "action_statement": "Vulnerability CVE-2019-20445 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-29T00:12:47.728703+00:00", "status_notes": "Vulnerability CVE-2020-11612 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2020-11612" }, "action_statement": "Vulnerability CVE-2020-11612 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-29T03:17:51.035769+00:00", "status_notes": "Vulnerability CVE-2020-7238 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2020-7238" }, "action_statement": "Vulnerability CVE-2020-7238 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2021-21290 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2021-21290" }, "action_statement": "Vulnerability CVE-2021-21290 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2021-43797 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2021-43797" }, "action_statement": "Vulnerability CVE-2021-43797 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2022-24823 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2022-24823" }, "action_statement": "Vulnerability CVE-2022-24823 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-29T01:45:14.642108+00:00", "status_notes": "Vulnerability CVE-2022-41915 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2022-41915" }, "action_statement": "Vulnerability CVE-2022-41915 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-31T12:27:08.180928+00:00", "status_notes": "Vulnerability CVE-2023-34462 does not affect version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy. not_affected \u2014 Target version 4.2.12.Final is NOT affected by CVE-2023-34462. The upstream vendor (Netty) fixed the unbounded heap allocation vulnerability in commit 535da17e45 (authored by Norman Maurer), which was already included in the upstream 4.2.12.Final release before TuxCare onboarded it. The target code contains the complete defense logic: validation checks in SslClientHelloHandler.java (lines 142-1...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2023-34462" }, "impact_statement": "not_affected \u2014 Target version 4.2.12.Final is NOT affected by CVE-2023-34462. The upstream vendor (Netty) fixed the unbounded heap allocation vulnerability in commit 535da17e45 (authored by Norman Maurer), which was already included in the upstream 4.2.12.Final release before TuxCare onboarded it. The target code contains the complete defense logic: validation checks in SslClientHelloHandler.java (lines 142-1..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-29T10:21:18.524281+00:00", "status_notes": "Vulnerability CVE-2023-4586 is a false positive for io.netty:netty-handler-proxy 4.2.12.Final-tuxcare.1.", "vulnerability": { "name": "CVE-2023-4586" }, "impact_statement": "The vulnerability has been withdrawn." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-31T14:01:12.160119+00:00", "status_notes": "Vulnerability CVE-2024-29025 does not affect version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy. not_affected \u2014 Target version 4.2.12.Final is not affected by CVE-2024-29025. The vulnerability allowed unbounded memory accumulation through unlimited form fields or buffered bytes in HttpPostRequestDecoder. The fix (upstream commit 0d0c6ed782) adds maxFields (default 128) and maxBufferedBytes (default 1024) limits with enforcement checks that throw TooManyFormFieldsException and TooLongFormFieldException. T...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2024-29025" }, "impact_statement": "not_affected \u2014 Target version 4.2.12.Final is not affected by CVE-2024-29025. The vulnerability allowed unbounded memory accumulation through unlimited form fields or buffered bytes in HttpPostRequestDecoder. The fix (upstream commit 0d0c6ed782) adds maxFields (default 128) and maxBufferedBytes (default 1024) limits with enforcement checks that throw TooManyFormFieldsException and TooLongFormFieldException. T..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-31T11:27:00.180317+00:00", "status_notes": "Vulnerability CVE-2024-47535 does not affect version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy. not_affected \u2014 The target Netty 4.2.12.Final is NOT AFFECTED by CVE-2024-47535. The vulnerability (unbounded file reading causing memory exhaustion) is not present because the upstream fix was already included in the 4.2.12.Final release that TuxCare onboarded. The fix introduces BoundedInputStream to limit file reads during initialization: 8KB for /etc/os-release, /usr/lib/os-release, and /proc/sys/net/core/...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2024-47535" }, "impact_statement": "not_affected \u2014 The target Netty 4.2.12.Final is NOT AFFECTED by CVE-2024-47535. The vulnerability (unbounded file reading causing memory exhaustion) is not present because the upstream fix was already included in the 4.2.12.Final release that TuxCare onboarded. The fix introduces BoundedInputStream to limit file reads during initialization: 8KB for /etc/os-release, /usr/lib/os-release, and /proc/sys/net/core/..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T22:15:27.793370+00:00", "status_notes": "Vulnerability CVE-2025-24970 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2025-24970" }, "action_statement": "Vulnerability CVE-2025-24970 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-31T11:41:00.087012+00:00", "status_notes": "Vulnerability CVE-2025-25193 does not affect version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy. not_affected \u2014 CVE-2025-25193 affects Netty's BoundedInputStream which failed to count null-bytes (0x00) toward the input limit due to the condition `if (b > 0)`, enabling memory exhaustion DoS attacks. The target repository at version 4.2.12.Final is NOT AFFECTED because the vulnerability was fixed by upstream commit be1e00765b (Norman Maurer, 2025-02-10) which changed the byte-counting logic to `if (b != -1...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2025-25193" }, "impact_statement": "not_affected \u2014 CVE-2025-25193 affects Netty's BoundedInputStream which failed to count null-bytes (0x00) toward the input limit due to the condition `if (b > 0)`, enabling memory exhaustion DoS attacks. The target repository at version 4.2.12.Final is NOT AFFECTED because the vulnerability was fixed by upstream commit be1e00765b (Norman Maurer, 2025-02-10) which changed the byte-counting logic to `if (b != -1..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-31T13:47:22.731302+00:00", "status_notes": "Vulnerability CVE-2025-58056 does not affect version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy. not_affected \u2014 Target version 4.2.12.Final is not affected by CVE-2025-58056. The upstream fix for HTTP/1.1 chunked encoding request smuggling was merged on 2025-09-03 (commit edb55fd8e0a), 6+ months before the upstream 4.2.12.Final release (2026-03-25). TuxCare onboarded an already-fixed version on 2026-09-12. The fix includes strict CRLF validation in chunk extensions (throws InvalidChunkExtensionException ...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2025-58056" }, "impact_statement": "not_affected \u2014 Target version 4.2.12.Final is not affected by CVE-2025-58056. The upstream fix for HTTP/1.1 chunked encoding request smuggling was merged on 2025-09-03 (commit edb55fd8e0a), 6+ months before the upstream 4.2.12.Final release (2026-03-25). TuxCare onboarded an already-fixed version on 2026-09-12. The fix includes strict CRLF validation in chunk extensions (throws InvalidChunkExtensionException ..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-31T11:19:00.186703+00:00", "status_notes": "Vulnerability CVE-2025-58057 does not affect version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy. not_affected \u2014 The target Netty 4.2.12.Final is not affected by CVE-2025-58057. The vulnerability (unbounded memory accumulation in decompressing decoders) was fixed in upstream commit 9d804c54ce by Norman Maurer, which shipped in the upstream 4.2.12.Final release before TuxCare's onboarding. The fix changed BrotliDecoder, ZstdDecoder, JZlibDecoder, and JdkZlibDecoder to immediately forward decompressed chunk...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2025-58057" }, "impact_statement": "not_affected \u2014 The target Netty 4.2.12.Final is not affected by CVE-2025-58057. The vulnerability (unbounded memory accumulation in decompressing decoders) was fixed in upstream commit 9d804c54ce by Norman Maurer, which shipped in the upstream 4.2.12.Final release before TuxCare's onboarding. The fix changed BrotliDecoder, ZstdDecoder, JZlibDecoder, and JdkZlibDecoder to immediately forward decompressed chunk..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-31T13:52:02.845843+00:00", "status_notes": "Vulnerability CVE-2025-67735 does not affect version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy. not_affected \u2014 CVE-2025-67735 (CRLF injection in HttpRequestEncoder leading to request smuggling) is NOT present in target Netty 4.2.12.Final. The upstream vendor fix was already included in the Netty 4.2.12.Final release that TuxCare onboarded. The fix adds validation in DefaultHttpRequest constructor that rejects URIs containing CRLF (\\r, \\n) or space characters by throwing IllegalArgumentException, prevent...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2025-67735" }, "impact_statement": "not_affected \u2014 CVE-2025-67735 (CRLF injection in HttpRequestEncoder leading to request smuggling) is NOT present in target Netty 4.2.12.Final. The upstream vendor fix was already included in the Netty 4.2.12.Final release that TuxCare onboarded. The fix adds validation in DefaultHttpRequest constructor that rejects URIs containing CRLF (\\r, \\n) or space characters by throwing IllegalArgumentException, prevent..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-28T22:15:27.793370+00:00", "status_notes": "Vulnerability CVE-2026-33870 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-33870" }, "action_statement": "Vulnerability CVE-2026-33870 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T17:32:19.560894+00:00", "status_notes": "Vulnerability CVE-2026-41417 is fixed in version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-41417" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T17:32:19.560894+00:00", "status_notes": "Vulnerability CVE-2026-42578 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-42578" }, "action_statement": "Vulnerability CVE-2026-42578 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T17:32:19.560894+00:00", "status_notes": "Vulnerability CVE-2026-42580 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-42580" }, "action_statement": "Vulnerability CVE-2026-42580 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T17:32:19.560894+00:00", "status_notes": "Vulnerability CVE-2026-42581 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-42581" }, "action_statement": "Vulnerability CVE-2026-42581 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T17:32:19.560894+00:00", "status_notes": "Vulnerability CVE-2026-42583 is fixed in version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-42583" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T17:32:19.560894+00:00", "status_notes": "Vulnerability CVE-2026-42584 is fixed in version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-42584" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T17:32:19.560894+00:00", "status_notes": "Vulnerability CVE-2026-42585 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-42585" }, "action_statement": "Vulnerability CVE-2026-42585 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T17:32:19.560894+00:00", "status_notes": "Vulnerability CVE-2026-42587 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-42587" }, "action_statement": "Vulnerability CVE-2026-42587 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T17:32:19.560894+00:00", "status_notes": "Vulnerability CVE-2026-44249 is fixed in version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-44249" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T17:32:19.560894+00:00", "status_notes": "Vulnerability CVE-2026-45416 is fixed in version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-45416" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T17:32:19.560894+00:00", "status_notes": "Vulnerability CVE-2026-50010 is fixed in version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-50010" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T17:32:19.560894+00:00", "status_notes": "Vulnerability CVE-2026-50020 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-50020" }, "action_statement": "Vulnerability CVE-2026-50020 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T17:32:19.560894+00:00", "status_notes": "Vulnerability CVE-2026-55831 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-55831" }, "action_statement": "Vulnerability CVE-2026-55831 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T17:32:19.560894+00:00", "status_notes": "Vulnerability CVE-2026-55833 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-55833" }, "action_statement": "Vulnerability CVE-2026-55833 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T17:32:19.560894+00:00", "status_notes": "Vulnerability CVE-2026-56745 is fixed in version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-56745" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T17:32:19.560894+00:00", "status_notes": "Vulnerability CVE-2026-56746 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-56746" }, "action_statement": "Vulnerability CVE-2026-56746 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T17:32:19.560894+00:00", "status_notes": "Vulnerability CVE-2026-59898 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-59898" }, "action_statement": "Vulnerability CVE-2026-59898 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T17:32:19.560894+00:00", "status_notes": "Vulnerability CVE-2026-59899 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-59899" }, "action_statement": "Vulnerability CVE-2026-59899 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T17:32:19.560894+00:00", "status_notes": "Vulnerability CVE-2026-59901 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-59901" }, "action_statement": "Vulnerability CVE-2026-59901 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T17:32:19.560894+00:00", "status_notes": "Vulnerability CVE-2026-59903 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-59903" }, "action_statement": "Vulnerability CVE-2026-59903 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T17:32:19.560894+00:00", "status_notes": "Vulnerability CVE-2026-59921 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-59921" }, "action_statement": "Vulnerability CVE-2026-59921 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T17:32:19.560894+00:00", "status_notes": "Vulnerability CVE-2026-75595 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-75595" }, "action_statement": "Vulnerability CVE-2026-75595 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy." }, { "status": "affected", "products": [ { "@id": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1", "identifiers": { "purl": "pkg:maven/io.netty/netty-handler-proxy@4.2.12.Final-tuxcare.1" } } ], "timestamp": "2026-10-22T17:32:19.560894+00:00", "status_notes": "Vulnerability CVE-2026-75596 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy.", "vulnerability": { "name": "CVE-2026-75596" }, "action_statement": "Vulnerability CVE-2026-75596 affects version 4.2.12.Final-tuxcare.1 of io.netty:netty-handler-proxy." } ] }