https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 07:44:28 +0000 https://vulnerability.circl.lu/vuln/ghsa-3qp7-7mw8-wx86 <p><strong>Affected:</strong> Maven: io.netty:netty-handler</p> <p>### Summary An attacker can bypass IPv6 subnet rules due to an incorrect masking operation in IpSubnetFilterRule.compareTo(). Valid public IP addresses can bypass the restrictions.</p> <p>### Details `io.netty.handler.ipfilter.IpSubnetFilterRule#compareTo(java.net.InetSocketAddress)` method performs a bitwise AND between the incoming IP address and the configured networkAddress, instead of the subnetMask.</p> <p>### Impact Access Control Bypass. Attacker can bypass IpSubnetFilter IPv6 access controls.</p> <p><strong>Affected:</strong> Maven: io.netty:netty-handler</p> <p>### Summary An attacker can bypass IPv6 subnet rules due to an incorrect masking operation in IpSubnetFilterRule.compareTo(). Valid public IP addresses can bypass the restrictions.</p> <p>### Details `io.netty.handler.ipfilter.IpSubnetFilterRule#compareTo(java.net.InetSocketAddress)` method performs a bitwise AND between the incoming IP address and the configured networkAddress, instead of the subnetMask.</p> <p>### Impact Access Control Bypass. Attacker can bypass IpSubnetFilter IPv6 access controls.</p> https://vulnerability.circl.lu/vuln/ghsa-3qp7-7mw8-wx86