Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Keycloak, Spark, Wildfly, WSO2AM may allow attacker misuse
published 29 days ago
Summary
The Netty framework used in these cleanstart products contains a security weakness. It could let a malicious user cause the application to behave incorrectly, potentially leading to service interruption or data exposure. Apply the latest updates or patches from the vendors promptly.
What to do
- Update cleanstart keycloak to version 26.7.2-r1.
- Update cleanstart spark to version 3.5.9-r3.
- Update cleanstart wildfly to version 39.0.1-r9.
- Update cleanstart wso2am to version 4.7.0-r2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | keycloak |
< 26.7.2-r1 Fix: upgrade to 26.7.2-r1
|
| CleanStart | cleanstart | spark |
< 3.5.9-r3 Fix: upgrade to 3.5.9-r3
|
| CleanStart | cleanstart | wildfly |
< 39.0.1-r9 Fix: upgrade to 39.0.1-r9
|
| CleanStart | cleanstart | wso2am |
< 4.7.0-r2 Fix: upgrade to 4.7.0-r2
|
Original advisory text
Netty is an asynchronous, event-driven network application framework
CVE-2026-75595 affects multiple packages. Netty is an asynchronous, event-driven network application framework. See references for individual vulnerability details.
Timeline
Published7 Oct 2026
Updated7 Oct 2026
First seen7 Oct 2026
Sources
CLEANSTART-2026-JA68863 · OSV
Track software like this
Free during beta