Maven package
io.netty/netty-resolver-dns
pkg:maven/io.netty/netty-resolver-dns
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-47691 | Hig | 8.7 | >= 4.2.0.Final, < 4.2.15.Final | 4.2.15.Final | Jun 12, 2026 | Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's `DnsResolveContext` insufficiently validates the bailiwick of NS records, enabling DNS Cache Poisoning. An attacker controlling an a |
- affected >= 4.2.0.Final, < 4.2.15.Finalfixed 4.2.15.Final
Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's `DnsResolveContext` insufficiently validates the bailiwick of NS records, enabling DNS Cache Poisoning. An attacker controlling an a