dependency-security

Here are 3 public repositories matching this topic...

xiaoqiMikko / async-http-client-check

CVE-2026-85721: offline checker for org.asynchttpclient:async-http-client against all 21 repository-level advisories. The GitHub Advisory Database (Dependabot / OSV) lists only 4 of the 17 published on 2026-08-09 - 3.0.12, the version Dependabot recommends, still has 5 (2 high). Fixed in 3.0.13 / 2.16.1.

java security cve asynchttpclient vulnerability-scanner async-http-client dependabot dependency-security

Updated Sep 19, 2026
Java

xiaoqiMikko / netty-resolver-dns-check

Star

CVE-2026-45674 / CVE-2026-47691 / CVE-2026-45673: offline checker for DNS cache poisoning in io.netty:netty-resolver-dns - and whether your app actually uses that resolver. Spring WebClient on Reactor Netty uses it by default, although it is not in your pom.xml.

java dns security spring-boot netty cve webflux vulnerability-scanner reactor-netty dns-cache-poisoning dependency-security

Updated Sep 11, 2026
Java

xiaoqiMikko / netty-http-check

Star

CVE-2026-59903 / CVE-2026-33870: offline checker for io.netty:netty-codec-http - its 14 CVEs plus 9 advisories Netty published on 2026-09-10 that the GitHub Advisory Database (Dependabot) does not list. 4.1.137.Final / 4.2.17.Final is no longer enough; upgrade to 4.1.138.Final / 4.2.18.Final.

java security spring-boot netty cve webflux vulnerability-scanner dependabot dependency-security http-request-smuggling

Updated Sep 19, 2026
Java

Add this topic to your repo

To associate your repository with the dependency-security topic, visit your repo's landing page and select "manage topics."

Learn more