Authors: Created by IBM


There is a vulnerability in the Netty library used by IBM WebSphere Application Server Liberty with the grpc-1.0 or grpcClient-1.0 feature enabled. CVEID:  CVE-2025-25193[1]
DESCRIPTION:  Netty, an asynchronous, event-driven network application framework, has a vulnerability in versions up to and including 4.1.118.Final.An unsafe reading of environment file could potentially cause a denial of service in Netty.When loaded on an Windows application, Netty attempts to...

Just published by IBM: Read more