CLEANSTART-2026-GP48303: Netty is an asynchronous, event-driven network application framework
Security vulnerability affects the solr package. Netty is an asynchronous, event-driven network application framework.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/solrto a version that resolves this vulnerability.Fixed in 9.11.0-r0
Event History
Frequently Asked Questions
Does exploitation require authentication or user interaction?
The vector indicates no privileges are required and no user interaction is required. The attack vector is network-based, although the vector also records attack requirements as present.
What is the expected impact if exploited?
The vulnerability is rated critical at 9.1. It can have high impact on confidentiality and integrity, while the availability impact is rated none.
Which deployments should be prioritized for triage?
Prioritize cleanstart/solr deployments that are reachable over the network. The provided data does not identify affected versions, default-configuration status, or an available mitigation.