javaredis/lettuce #3722Not a task: already works

Update netty for CVE-2026-33870 and CVE-2026-33871

envgap__redis__lettuce-3722

Original GitHub issue ↗Dated source checkout ↗Opened 2026-04-15

01 / FAILURE SIGNATURE

As reported upstream

No identifying execution failure has been captured.

Not a benchmark task.

The project already builds and runs before the fix, so there is nothing to repair.

02 / ENVIRONMENT RECIPE

Base commit: 0ef97e5186e927b2f3228dbda9c5afa70983e453
Manifest: pom.xml
Reproduce: Awaiting issue-specific recipe
Run under trace: Awaiting a meaningful runtime command

03 / ORIGINAL ISSUE TEXT

redis/lettuce #3722 · read the original issue

According to https://nvd.nist.gov/vuln/detail/CVE-2026-33870 and https://nvd.nist.gov/vuln/detail/CVE-2026-33871, netty should be updated to versions 4.2.10 or 4.1.132 (or later)

Continue on GitHub ↗

04 / LABELS

Labels from the report text only; not yet run

No supported category has been assigned.

Label rules and the text that matched

[]