CLEANSTART-2026-YX73418: Netty netty-tcnative before 2
Published Nov 14, 2026
·Updated
Security vulnerability affects the elasticsearch package. Netty netty-tcnative before 2.
Affected Software
1 affected componentFixes available
cleanstart/elasticsearch<9.5.5-r5
9.5.5-r5
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/elasticsearchto a version that resolves this vulnerability.Fixed in 9.5.5-r5
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The supplied CVSS vector indicates network-based exploitation with low attack complexity. It requires no privileges and no user interaction.
2
What security impact is indicated?
The CVSS vector indicates a low integrity impact. It indicates no confidentiality or availability impact.
3
How can I determine whether my deployment is affected?
Check whether the cleanstart/elasticsearch package includes netty-tcnative at a version before 2. The provided advisory identifies versions before 2 as affected.