OESA-2025-2529 netty security update

🗓️ 24 Oct 2025 14:33:34Reported by GoogleType

osv🔗 osv.dev👁 4 Views

Netty fixes SMTP CRLF command injection; patched in versions 4.1.129 Final and 4.2.8 Final (CVE 2025 59419).

Reporter	Title	Published	Views	Family All 75
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to command injection due to the Netty package (CVE-2025-59419)	13 Jan 202616:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps	18 Dec 202501:19	–	ibm
IBM Security Bulletins	Security Bulletin: SMTP Command Injection Vulnerability in Netty SMTP Codec (Fixed in 4.1.129.Final and 4.2.8.Final) affect IBM watsonx.data	4 Mar 202615:28	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Netty affects IBM Netezza Appliance	16 Dec 202511:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Spring Security, Apache Tomcat, Netty, Lodash, Spring Framework and Node.js might affect IBM Storage Defender Copy Data Management	26 Jun 202617:03	–	ibm
Chainguard	CVE-2025-59419 vulnerabilities	17 Oct 202513:22	–	cgr
Circl	CVE-2025-59419	15 Oct 202514:36	–	circl
CNNVD	Netty 注入漏洞	15 Oct 202500:00	–	cnnvd
CVE	CVE-2025-59419	15 Oct 202515:42	–	cve
Cvelist	CVE-2025-59419 Netty netty-codec-smtp SMTP Command Injection Vulnerability Allowing Email Forgery	15 Oct 202515:42	–	cvelist