Search: CVE-2026-42579

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.1	EPSS 1.0%	CVE-2026-42579 · Prior to 4.2.13.Final and 4.1.133.Final, Netty's DNS codec does not enforce RFC 1035 domain name constraints during either encoding or decoding Critical9.1EPSS 1.0%2026-05-13GCVE Database Netty versions prior to 4.2.13.Final and 4.1.133.Final have a vulnerability in their DNS codec where RFC 1035 domain name constraints are not enforced during encoding or decoding. This flaw allows malicious DNS responses or user-influenced hostnames to exploit the codec. The issue is fixed in versions 4.2.13.Final and 4.1.133.Final. EPSS 1.0%Vulnerability	GCVE Database	2026-05-13

Page 1 of 1