References https://github.com/netty/netty/security/advisories/GHSA-jq43-27x9-3v86 https://nvd.nist.gov/vuln/detail/CVE-2025-59419 https://access.redhat.com/security/cve/cve-2025-59419 https://github.com/advisories/GHSA-jq43-27x9-3v86 https://depthfirst.com/post/casting-a-net-ty-for-bugs-and-catching-a-big-one-cve-2025-59419 https://advisories.gitlab.com/pkg/maven/io.netty/netty-codec-smtp/CVE-2025-59419/
Related VulnerabilitiesPoCCVE-2017-7504: JBossMQ HTTP Invocation Layer (HTTPServerILServlet) - Unauthenticated Java DeserializationPoCCVE-2015-7501: Red Hat JBoss - Insecure DeserializationPoCjboss-jmx-console-unauth: JBoss JMX Console - Unauthenticated AccessNetty Netty CRLF注入漏洞Netty Netty-Codec-Compression等 编码不规范漏洞 可导致 DoSPoCCVE-2010-1429: Red Hat JBoss Enterprise Application Platform - Sensitive Information DisclosurePoCCVE-2017-12149: Jboss Application Server - Remote Code ExecutionPoCCVE-2010-1871: JBoss CVE-2010-1871PoCCVE-2017-12149: Java/Jboss Deserialization [RCE]PoCCVE-2017-7504: JBoss 4.x JBossMQ JMS 反序列化漏洞PoCjmx-default-password: JBoss JMX Console Weak CredentialPoCjboss-xml-console-unauthorized: JBoss JMX Console Weak Credential Discovery