ROOT-APP-MAVEN-CVE-2026-59901 CVE-2026-59901 in io.netty:netty-codec - Patched by Root

Root has patched CVE-2026-59901 in the io.netty:netty-codec package for Root:Maven. Multiple fixed versions available...

CLEANSTART-2026-WG27700 Security fixes in sonarqube 26.8.0.126808-r2

Package sonarqube version 26.8.0.126808-r2 fixes 5 vulnerabilities: CVE-2026-59645, CVE-2026-56819, CVE-2026-59900, CVE-2026-59901, ghsa-mfg7-5gfp-c4w3...

CVE-2026-59901

creationtimestamp| type| source ---|---|--- 2026-08-10 13:20:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msq6vheark2o 2026-08-13 08:46:21+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0991 2026-09-20 05:20:11+00:00| seen|...

DEBIAN-CVE-2026-59901

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the Bzip2Decoder handler in Netty's compression codec pipeline is vulnerable to a denial-of-service attack through a malformed bzip2 stream that permanently captures the...

UBUNTU-CVE-2026-59901

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the Bzip2Decoder handler in Netty's compression codec pipeline is vulnerable to a denial-of-service attack through a malformed bzip2 stream that permanently captures the...

CVE-2026-59901 Netty Bzip2Decoder: Infinite Loop in RLE State Machine Leads to Event-Loop Thread Hang

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the Bzip2Decoder handler in Netty's compression codec pipeline is vulnerable to a denial-of-service attack through a malformed bzip2 stream that permanently captures the...

ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +3516 more potentially affected by CVE-2026-59901 via io.netty:netty-codec (>=4.2.0.final, <=4.2.15.final)

io.netty:netty-codec MAVEN version =4.2.0.final, =0.4.0, =0.4.0, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.14.0-rc.2 and more Source cves: CVE-2026-59901 Source advisory: SNYK:JAVA-IONETTY-18230935...