Skip to content

CVE-2026-45536 CVE-2026-45416 CVE-2026-44249 Netty: Unix-socket fd receive leaks descriptors when peer sends two at once Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking#1041

Merged
vharseko merged 1 commit into
OpenIdentityPlatform:masterfrom
vharseko:issues/netty
Jun 9, 2026

Conversation

…ceive leaks descriptors when peer sends two at once Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking
@vharseko vharseko requested a review from maximthomas June 9, 2026 09:08
@vharseko vharseko merged commit 46a179d into OpenIdentityPlatform:master Jun 9, 2026
16 checks passed
@vharseko vharseko deleted the issues/netty branch June 9, 2026 15:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants