ROOT-APP-MAVEN-CVE-2026-42584 CVE-2026-42584 in io.root.io.netty:netty-codec-http - Patched by Root

🗓️ 15 Jul 2026 11:05:06Reported by GoogleType

osv

osv🔗 osv.dev👁 24 Views

Root patched 2026-42584 in io.root.io.netty netty-codec-http for Root Maven.

Reporter	Title	Published	Views	Family All 185
IBM Security Bulletins	Security Bulletin: DevOps Test Performance contains vulnerabilities related to use of netty-codec-http	19 May 202619:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is is susceptible to multiple Netty vulnerabilities CVE-2026-42580, CVE-2026-42581, CVE-2026-42584, CVE-2026-42585	21 Jul 202621:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Netty	21 May 202616:11	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition	26 Jun 202606:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Db2® federated server is affected by multiple vulnerabilities in Netty open source libraries.	23 Jun 202619:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs.	30 Jul 202615:27	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of Netty, IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities	11 Jun 202607:12	–	ibm
BDU FSTEC	The vulnerability of the HttpClientCodec component in the networking application development framework allows attackers to compromise the integrity and accessibility of protected information, using Netty protocols.	15 Jul 202600:00	–	bdu_fstec
Chainguard	CVE-2026-42584 vulnerabilities	8 May 202601:17	–	cgr
Circl	CVE-2026-42584	5 May 202618:11	–	circl

15 Jul 2026 13:45Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.3

EPSS0.0075

netty codec http root maven patched vulnerability 2026-42584