CLSA-2026-1794232618

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794232618.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1794232618
Upstream
CVE (3)
Published
2026-11-09T14:56:59Z
Modified
2026-11-09T19:15:10Z
Summary
TuxCare security update for io.projectreactor.netty (3 CVEs)
Details

TuxCare rebuilt 2 io.projectreactor.netty packages to address 3 CVEs. Fixed in 1.0.17-tuxcare.2.

Affected packages

TuxCare:Maven / io.projectreactor.netty:reactor-netty

Package

Name
io.projectreactor.netty:reactor-netty
Purl
pkg:maven/io.projectreactor.netty/reactor-netty

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.0.17
Fixed
1.0.17-tuxcare.2

Affected versions

1.*
1.0.17
1.0.17-tuxcare.1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794232618.json"
tuxcare 
{
    "base_version": "1.0.17",
    "fixed_version": "1.0.17-tuxcare.2"
}

TuxCare:Maven / io.projectreactor.netty:reactor-netty-http

Package

Name
io.projectreactor.netty:reactor-netty-http
Purl
pkg:maven/io.projectreactor.netty/reactor-netty-http

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.0.17
Fixed
1.0.17-tuxcare.2

Affected versions

1.*
1.0.17
1.0.17-tuxcare.1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794232618.json"
tuxcare 
{
    "base_version": "1.0.17",
    "fixed_version": "1.0.17-tuxcare.2"
}