[Git][security-tracker-team/security-tracker][master] Add more netty issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7be6a2e3 by Salvatore Bonaccorso at 2026-09-18T23:58:10+02:00
Add more netty issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -197,7 +197,9 @@ CVE-2026-93560 (STOMP codec content-length long-to-int truncation causes infinit
 CVE-2026-93559 (A vulnerability was identified in Forget-C Jellyfish AI Short Drama St ...)
 	TODO: check
 CVE-2026-93558 (Unbounded Per-Connection Queue Growth in WebSocketServerExtensionHandl ...)
-	TODO: check
+	- netty <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2536932
+	NOTE: https://github.com/netty/netty/security/advisories/GHSA-2g37-3h88-55hc
 CVE-2026-93534 (A vulnerability was identified in spatie Scotty up to 1.4.2. Affected  ...)
 	TODO: check
 CVE-2026-93533 (A vulnerability was determined in spatie Scotty up to 1.4.4. This impa ...)
@@ -213,15 +215,25 @@ CVE-2026-93505 (A vulnerability was found in SveltyCMS 0.0.6. This vulnerability
 CVE-2026-93504 (A vulnerability has been found in SveltyCMS 0.0.6. This affects an unk ...)
 	TODO: check
 CVE-2026-93494 (A flaw was found in Netty's StompSubframeDecoder component. A remote a ...)
-	TODO: check
+	- netty <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2536898
+	NOTE: https://github.com/netty/netty/security/advisories/GHSA-ghg5-c4jg-8q5j
 CVE-2026-93493 (A flaw was found in Netty's `netty-handler-ssl-ocsp` component. A remo ...)
-	TODO: check
+	- netty <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2536897
+	NOTE: https://github.com/netty/netty/security/advisories/GHSA-jj3c-mwvr-9g52
 CVE-2026-93492 (A flaw was found in Netty's HTTP/2 HpackEncoder. A remote attacker can ...)
-	TODO: check
+	- netty <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2536895
+	NOTE: https://github.com/netty/netty/security/advisories/GHSA-8352-h356-c9qh
 CVE-2026-93491 (A flaw was found in Netty's HttpServerCodec. A remote, unauthenticated ...)
-	TODO: check
+	- netty <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2536891
+	NOTE: https://github.com/netty/netty/security/advisories/GHSA-pvjx-v7vp-62vq
 CVE-2026-93488 (A flaw was found in Netty. SpdySessionHandler accepts an unlimited num ...)
-	TODO: check
+	- netty <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2536887
+	NOTE: https://github.com/netty/netty/security/advisories/GHSA-rmcw-9fcq-wjq7
 CVE-2026-93432 (A flaw was found in the Quarkus Qute template engine. When the {#eval} ...)
 	TODO: check
 CVE-2026-93338 (Grandstream GWN7660ELR before firmware version 1.0.27.6 contains an in ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7be6a2e36ca2e6a2a62226e1e6622c7771925bf5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7be6a2e36ca2e6a2a62226e1e6622c7771925bf5
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260918/2a371a51/attachment.htm>