CLSA-2026-1767744512 TuxCare security update for io.projectreactor.netty (2 CVEs)

🗓️ 04 Aug 2026 14:52:07Reported by GoogleType

osv🔗 osv.dev👁 5 Views

TuxCare fixes two vulnerabilities in four io.projectreactor.netty packages, version 1.0.32-tuxcare.1.

Reporter	Title	Published	Views	Family All 49
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.6.5 fixes multiple security vulnerabilities	26 Mar 202503:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities	26 Mar 202504:09	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Spring Cloud Gateway Server, Bouncy Castle, Reactor Netty HTTP Server, NPM and Apache Commons might affect IBM Storage Defender Copy Data Management	30 Sep 202521:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for January 2024 - Multiple CVEs addressed	15 Apr 202502:18	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Reactor Netty affects IBM Process Mining CVE-2023-34062	15 Dec 202315:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Disconnected Log Collector includes components with known vulnerabilities	11 Apr 202421:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana is affected by Multiple Security Vulnerabilities	16 Feb 202408:48	–	ibm
BDU FSTEC	The vulnerability of the Reactor Netty HTTP server, related to uncontrolled resource consumption, allows attackers to cause service failures.	11 Jan 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Reactor Netty HTTP server arises from incorrect path name restrictions for restricted access directories, allowing attackers to disclose protected information.	11 Jan 202400:00	–	bdu_fstec
Chainguard	CVE-2023-34054 vulnerabilities	28 Nov 202309:15	–	cgr

07 Aug 2026 10:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.17.5

EPSS0.01115

SSVC