CLSA-2026-1793619094: TuxCare security update for io.projectreactor.netty (4 CVEs)
Published Nov 2, 2026
·Updated
TuxCare rebuilt 2 io.projectreactor.netty packages to address 4 CVEs. Fixed in 1.0.18-tuxcare.1.
Affected Software
2 affected componentsFixes available
tuxcare/io.projectreactor.netty:reactor-netty>=1.0.18<1.0.18-tuxcare.1
1.0.18-tuxcare.1
tuxcare/io.projectreactor.netty:reactor-netty-http>=1.0.18<1.0.18-tuxcare.1
1.0.18-tuxcare.1
Event History
Nov 2, 2026
Advisory Published
via OSV·12:31 PM
Data Sourced
via OSV·12:31 PM
DescriptionAffected Software
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
1
Which packages need to be updated?
The update applies to the tuxcare/io.projectreactor.netty packages reactor-netty and reactor-netty-http.
2
What version contains the fixes?
The four CVE fixes are included in version 1.0.18-tuxcare.1.