78%
Total Score
100
80
100
100
No declared license or license file was found, leaving the legal terms for using this library unclear.
The compiled artifact has no README, which makes integration less convenient for a library consumer. Missing tests and changelog files are normal for published artifacts and are not concerns here.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-421700 netty-handler is vulnerable to Improper Certificate Validation in versions 4.1.0.Final - 4.1.136.Final and 4.2.0.Final - 4.2.16.Final. | 4.1.0.Final - 4.1.136.Final4.2.0.Final - 4.2.16.Final | High |
CVE-2026-75596 io.netty:netty-handler is vulnerable to Inefficient Algorithmic Complexity in versions 4.2.0.Final - 4.2.16.Final and 0.0.0 - 4.1.136.Final. | 0.0.0 - 4.1.136.Final4.2.0.Final - 4.2.16.Final | Medium |
AIKIDO-2026-445867 netty-handler is vulnerable to Improper Check for Unusual or Exceptional Conditions in versions 0.0.0 - 4.1.136.Final and 4.2.0.Final - 4.2.16.Final. | 0.0.0 - 4.1.136.Final4.2.0.Final - 4.2.16.Final | Critical |
CVE-2026-50010 io.netty:netty-handler is vulnerable to Improper Verification of Cryptographic Signature in versions 4.2.0.Final - 4.2.15.Final and 0.0.0 - 4.1.134.Final. | 0.0.0 - 4.1.134.Final4.2.0.Final - 4.2.15.Final | High |
CVE-2026-45416 io.netty:netty-handler is vulnerable to Allocation of Resources Without Limits or Throttling in versions 4.2.0.Final - 4.2.14.Final and 0.0.0 - 4.1.134.Final. | 0.0.0 - 4.1.134.Final4.2.0.Final - 4.2.14.Final | High |
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
${project.groupId}:netty-buffer Version 5.0.0.Alpha2 | — | — |
${project.groupId}:netty-transport Version 5.0.0.Alpha2 | — | — |
${project.groupId}:netty-codec Version 5.0.0.Alpha2 | — | — |
${project.groupId}:netty-tcnative Version * | — | — |
org.bouncycastle:bcpkix-jdk15on Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.