com.corundumstudio.socketio:netty-socketio (2.0.14), com.erudika:para-cache-hazelcast (>=1.41.5, <=1.43.0) +221 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (5.6.0)

com.hazelcast:hazelcast MAVEN version 5.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.corundumstudio.socketio:netty-socketio 2.0.14 - com.erudika:para-cache-hazelcast =1.41.5, =1.8.0, =3.2.3,...

com.corundumstudio.socketio:netty-socketio (>=1.6.2, <=1.6.3) potentially affected by CVE-2023-42809 via org.redisson:redisson (1.0.1)

org.redisson:redisson MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.corundumstudio.socketio:netty-socketio =1.6.2, =1.6.3 Source cves: CVE-2023-42809 Source advisory:...

com.corundumstudio.socketio:netty-socketio (>=1.6.4, <=1.6.6) potentially affected by CVE-2023-42809 via org.redisson:redisson (1.0.2)

org.redisson:redisson MAVEN version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.corundumstudio.socketio:netty-socketio =1.6.4, =1.6.6 Source cves: CVE-2023-42809 Source advisory:...

com.corundumstudio.socketio:netty-socketio (>=1.7.0, <=1.7.3) potentially affected by CVE-2023-42809 via org.redisson:redisson (1.1.1)

org.redisson:redisson MAVEN version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.corundumstudio.socketio:netty-socketio =1.7.0, =1.7.3 Source cves: CVE-2023-42809 Source advisory:...

com.corundumstudio.socketio:netty-socketio (>=1.7.4, <=1.7.8) potentially affected by CVE-2023-42809 via org.redisson:redisson (1.1.5)

org.redisson:redisson MAVEN version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.corundumstudio.socketio:netty-socketio =1.7.4, =1.7.8 Source cves: CVE-2023-42809 Source advisory:...

com.corundumstudio.socketio:netty-socketio (1.6.7) potentially affected by CVE-2023-42809 via org.redisson:redisson (1.2.0)

org.redisson:redisson MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.corundumstudio.socketio:netty-socketio 1.6.7 Source cves: CVE-2023-42809 Source advisory: OSV:GHSA-4HVC-QWR2-F8RV...

com.corundumstudio.socketio:netty-socketio (>=1.7.9, <=1.7.10), com.geccocrawler:gecco-redis (>=1.0.0, <=1.0.5) potentially affected by CVE-2023-42809 via org.redisson:redisson (2.2.5)

org.redisson:redisson MAVEN version 2.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.corundumstudio.socketio:netty-socketio =1.7.9, =1.0.0, =1.0.5 Source cves: CVE-2023-42809 Source advisory:...

com.corundumstudio.socketio:netty-socketio (1.7.11) potentially affected by CVE-2023-42809 via org.redisson:redisson (2.2.17)

org.redisson:redisson MAVEN version 2.2.17 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.corundumstudio.socketio:netty-socketio 1.7.11 Source cves: CVE-2023-42809 Source advisory: OSV:GHSA-4HVC-QWR2-F8...

com.corundumstudio.socketio:netty-socketio (1.7.12) potentially affected by CVE-2023-42809 via org.redisson:redisson (2.4.0)

org.redisson:redisson MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.corundumstudio.socketio:netty-socketio 1.7.12 Source cves: CVE-2023-42809 Source advisory: OSV:GHSA-4HVC-QWR2-F8R...

com.corundumstudio.socketio:netty-socketio (>=1.7.10, <=1.7.18), com.hazelcast:hazelcast-build-utils (3.4.3) +8 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (3.4.3)

com.hazelcast:hazelcast MAVEN version 3.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.corundumstudio.socketio:netty-socketio =1.7.10, =1.7.18 - com.hazelcast:hazelcast-build-utils 3.4.3 -...

com.corundumstudio.socketio:netty-socketio (>=1.6.0, <=1.7.9), com.hazelcast:hazelcast-client (3.1.3) +8 more potentially affected by CVE-2023-33265 via com.hazelcast:hazelcast (3.1.3)

com.hazelcast:hazelcast MAVEN version 3.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.corundumstudio.socketio:netty-socketio =1.6.0, =1.7.9 - com.hazelcast:hazelcast-client 3.1.3 -...

be.ordina:microservices-dashboard-server (1.0.1), com.alexecollins.docker:docker-java-orchestration-core (>=2.11.17, <=2.11.18) +290 more potentially affected by CVE-2016-4970 via io.netty:netty-handler (>=4.1.0.beta1, <=4.1.0.final)

io.netty:netty-handler MAVEN version =4.1.0.beta1, =2.11.17, =2.11.15, =2.2.7, =1.7.9, =0.8.0, =3.0.0-rc1, =1.0.0-rc1, =1.3-release, =1.6-release and more Source cves: CVE-2016-4970 Source advisory: OSV:GHSA-RV63-GQM8-9W8Q...

Denial Of Service (DoS)

netty-socketio is vulnerable to denial of service DoS attacks. It is possible for an attacker to open many silent channels which don't timeout, causing denial of service...