ai.agentican:agentican-framework-core (>=0.1.0-alpha.2 <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1 <=0.1.0-alpha.4) +29943 more potentially affected by CVE-2026-42587 via io.netty:netty-codec (>=4.0.0.Alpha1 <=4.1.132.Final)

🗓️ 07 May 2026 00:46:35Reported by Vulners OSVType

vulnersosv

vulnersosv🔗 security.snyk.io👁 16 Views

io.netty codec is vulnerable to CVE-2026-42587; transitive dependencies include agentican and quarkus modules.

Reporter	Title	Published	Views	Family All 186
IBM Security Bulletins	Security Bulletin: DevOps Test Performance contains vulnerabilities related to use of netty-codec-http	19 May 202619:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SPSS Analytic Server is affected by multiple vulnerabilities in Netty	25 Jun 202617:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Netty	21 May 202616:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Db2® federated server is affected by multiple vulnerabilities in Netty open source libraries.	23 Jun 202619:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs.	30 Jul 202615:27	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of Netty, IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities	11 Jun 202607:12	–	ibm
Atlassian	DoS (Denial of Service) io.netty:netty-codec Dependency in Bamboo Data Center	1 Jun 202622:29	–	atlassian
Atlassian	DoS (Denial of Service) io.netty:netty-codec-http2 Dependency in Crowd Data Center	12 Jun 202611:29	–	atlassian
Atlassian	DoS (Denial of Service) io.netty:netty-codec Dependency in Jira Service Management Data Center	3 Jun 202616:29	–	atlassian
BDU FSTEC	The vulnerability of the decompression mechanism used by frameworks for developing network applications, servers, and client protocols via Netty allows a hacker to induce a service failure.	16 Jul 202600:00	–	bdu_fstec

10 Jun 2026 11:46Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.17.5

EPSS0.0099

SSVC

netty codec vulnerability cve 2026 42587 transitive dependencies agentican framework core agentican quarkus deployment quarkus modules vulnerability