PT-2026-61744

🗓️ 07 Jul 2026 00:00:00Reported by Positive TechnologiesType

Netty before 4.1.136.Final and 4.2.16.Final allowed large spdy protocol settings, causing heap growth; fixed.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions	20 Aug 202615:19	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities reported in netty-codec-4.1.135.Final.jar for APIM	4 Oct 202617:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in netty-codec-http-4.1.135.Final.jar	15 Sep 202620:38	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Netty affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	2 Nov 202614:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities	30 Jul 202606:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SPSS Analytic Server is affected by multiple vulnerabilities in Netty	19 Aug 202618:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities	6 Nov 202604:30	–	ibm
IBM Security Bulletins	Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite	28 Aug 202606:40	–	ibm
IBM Security Bulletins	Security Bulletin:Vulnerabilities exists in NPS of IBM Netezza Appliance	2 Nov 202607:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Db2® federated server is affected by multiple vulnerabilities in Netty open source libraries.	10 Sep 202621:09	–	ibm

12 Oct 2026 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 27.8

CVSS 3.17.5

EPSS0.00665

SSVC