ANCHORE-2026-45674

ANCHORE-2026-45674 PUBLISHED

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's DnsResolveContext fails to validate the origin (bailiwick) of CNAME records in DNS responses. Versions 4.1.135.Final and 4.2.15.Final patch the issue.

Affected Products

Vendor	Product	Versions
netty	netty	4.2.0.final, 0

Timeline

Jun 12, 2026 CVE Published
Jun 13, 2026 CVE Updated

References

https://github.com/netty/netty/releases/tag/netty-4.1.135.Final url
https://github.com/netty/netty/releases/tag/netty-4.2.15.Final url
https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc url

Open in Interactive Console →