{"full_name":"netty/netty","owner":"netty","name":"netty","url":"https://github.com/netty/netty","description":"Netty project - an event-driven asynchronous network application framework","homepage":"http://netty.io","topics":[],"language":"Java","license":"Apache-2.0","avatar":"https://avatars.githubusercontent.com/u/473791?v=4","created_at":"2010-11-09T09:22:21Z","pushed_at":"2026-11-10T09:25:27Z","metrics":{"stars":35069,"forks":16283,"watchers":1656,"issues":7036,"prs":10969,"releases":20,"issues_open":null,"issues_closed":null,"prs_open":null,"prs_closed":null,"prs_merged":null,"discussions":209},"growth":{"day":{"stars":-2,"forks":8,"base_day":"2026-11-09"}},"history":{"dates":["2026-11-09","2026-11-10"],"stars":[35071,35069],"forks":[16275,16283],"watchers":[1656,1656],"issues_open":[null,null],"prs_open":[null,null]},"boards":{},"same_owner":[],"issues":[{"number":10341,"title":"Android:when i use Philippines globe 4G network to connect by netty websocket to my server with cdn,i can not connect,but i can connect well when i use china 4G network in china ","comments":69,"created_at":"2020-06-06T07:08:46Z"},{"number":15530,"title":"Improve adaptive unshared size class allocation's fast-path","comments":59,"created_at":"2025-08-08T05:51:35Z"},{"number":13660,"title":"Netty DNS Resolver cannot handle DNS Response with A, AAAA and NS records: SearchDomainUnknownHostException","comments":51,"created_at":"2023-10-16T06:28:57Z"},{"number":6818,"title":"Netty sends TCP-RST instead of TCP-FIN","comments":41,"created_at":"2017-06-06T08:39:59Z"},{"number":5430,"title":"TODO-List for next major version","comments":39,"created_at":"2016-06-20T07:24:09Z"},{"number":6891,"title":"io.netty.util.internal.InternalThreadLocalMap,memory leak","comments":36,"created_at":"2017-06-23T03:21:27Z"},{"number":6096,"title":"Netty should stop swallowing","comments":34,"created_at":"2016-12-02T21:36:13Z"},{"number":16827,"title":"PooledByteBufAllocator: total chunk memory significantly exceeds retained memory","comments":31,"created_at":"2026-05-19T08:20:29Z"}],"discussions":[{"number":18255,"title":"Request for a published OpenPGP signing-key statement for Netty POMs on Maven Central","comments":0,"category":"Q&A","created_at":"2026-11-03T19:58:57Z"},{"number":18241,"title":"netty-4.1.140.Final","comments":0,"category":"Announcements","created_at":"2026-11-02T19:19:52Z"},{"number":18240,"title":"netty-4.2.20.Final","comments":0,"category":"Announcements","created_at":"2026-11-02T19:18:09Z"},{"number":18052,"title":"Resolving netty dependancies locally","comments":2,"category":"Q&A","created_at":"2026-10-23T10:27:39Z"},{"number":17773,"title":"netty-4.2.19.Final","comments":0,"category":"Announcements","created_at":"2026-10-06T18:22:21Z"},{"number":17772,"title":"netty-4.1.139.Final","comments":0,"category":"Announcements","created_at":"2026-10-06T18:04:45Z"},{"number":17678,"title":"How should Http2ConnectionDecoder determine if a stream is a HEAD request?","comments":2,"category":"Q&A","created_at":"2026-09-30T03:08:47Z"},{"number":17517,"title":"Removing native image support without the shared metadata repository","comments":5,"category":"General","created_at":"2026-09-17T10:35:18Z"}],"latest_release":{"name":"netty-4.2.20.Final","tag":"netty-4.2.20.Final","published_at":"2026-11-02T19:18:08Z","body":"## Security Fixes\r\n* https://github.com/netty/netty/security/advisories/GHSA-m77g-r4c7-3w77 - out-of-bounds read in `netty-buffer`\r\n* https://github.com/netty/netty/security/advisories/GHSA-v2v6-vch9-4pcg - inefficient CPU computation in `netty-codec-http3`\r\n* https://github.com/netty/netty/security/advisories/GHSA-rx4g-qxm6-238r - out-of-bounds read in `netty-buffer`\r\n* https://github.com/netty/netty/security/advisories/GHSA-cqmg-wc9g-fpj8 - insufficient entropy in `netty-resolver-dns`\r\n* https://github.com/netty/netty/security/advisories/GHSA-hc9x-r52h-gh4x - unbounded memory usage in `netty-codec-http2`\r\n* https://github.com/netty/netty/security/advisories/GHSA-42mp-m8rq-6rgj - insufficient control character neutralization in `netty-codec-http`\r\n* https://github.com/netty/netty/security/advisories/GHSA-w53r-xhgx-8582 - use-after-free in `netty-codec-classes-quic`\r\n* https://github.com/netty/netty/security/advisories/GHSA-qhw9-p586-v948 - out-of-bounds read in `netty-buffer`\r\n* https://github.com/netty/netty/security/advisories/GHSA-84gx-4cj4-rm7q - unbounded memory usage in `netty-codec-mqtt`\r\n* https://github.com/netty/netty/security/advisories/GHSA-6xv6-9mgg-mfvc - mTLS auth bypass via session resumption in `netty-handler` and `netty-codec-quic`\r\n\r\n## What's Changed\r\n* IoUring: Fix empty writev submissions after sendmsg_zc by @dreamlike-ocean in https://github.com/netty/netty/pull/17782\r\n* Do not let a negatively cached search domain shadow a positive one by @akilegaspi in https://github.com/netty/netty/pull/17623\r\n* Fix musl verify job by @normanmaurer in https://github.com/netty/netty/pull/17801\r\n* Reject Redis lines that start with LF by @yawkat in https://github.com/netty/netty/pull/17793\r\n* Choose server key types from client's signature algorithms for TLS 1.3 by @eager-signal in https://github.com/netty/netty/pull/17764\r\n* Port 4.2: LocalChannel: Deliver data written by the peer before it closed (#17814) by @normanmaurer in https://github.com/netty/netty/pull/17816\r\n* Validate padding of HEADERS frames without priority by @bryce-anderson in https://github.com/netty/netty/pull/17817\r\n* Don't spin in SslHandler.wrapMultiple(...) when the engine consumes nothing by @allthingssecurity in https://github.com/netty/netty/pull/17728\r\n* Preserve invalid SNI names in `ReferenceCountedOpenSslEngine` by @gavinbunney in https://github.com/netty/netty/pull/17781\r\n* Optimize redundant bounds checking in ByteBuf.setBytes by @vpelikh in https://github.com/netty/netty/pull/17023\r\n* Respect SETTINGS_QPACK_BLOCKED_STREAMS for unacknowledged QPACK entries by @allthingssecurity in https://github.com/netty/netty/pull/17754\r\n* Release the DNS response when a query future loses a cancel race by @watson-ryan in https://github.com/netty/netty/pull/17475\r\n* Lazily instantiate VarHandle JCTools queues via holder class by @arnabnandy7 in https://github.com/netty/netty/pull/17750\r\n* Keep reading a closed QUIC stream until the end of its input by @allthingssecurity in https://github.com/netty/netty/pull/17755\r\n* Throw UnsupportedOperationException from AdaptiveByteBuf.memoryAddress() without an address by @normanmaurer in https://github.com/netty/netty/pull/17820\r\n* HAProxyMessage: validate the length of all TLV types by @yawkat in https://github.com/netty/netty/pull/17834\r\n* Fix HpackDynamicTable losing entries when filled to capacity by @yawkat in https://github.com/netty/netty/pull/17831\r\n* Make AdaptiveByteBuf.memoryAddress() faster by @lhotari in https://github.com/netty/netty/pull/17767\r\n* Validate bzip2 Huffman code lengths before building decode tables by @Raghuvardhan-Reddy78 in https://github.com/netty/netty/pull/17812\r\n* Validate header values on DefaultHeaders.copy(), bulk add, entry setValue and ReadOnlyHttpHeaders by @normanmaurer in https://github.com/netty/netty/pull/17841\r\n* Throw DecompressionException on JdkZlib preset dictionary mismatch by @yawkat in https://github.com/netty/netty/pull/17838\r\n* Reject HTTP version numbers that"},"readme":true,"readme_zh":false,"news":[],"stale":false,"snapshot_at":"2026-11-10T09:35:25Z","history_start":"2026-09-06"}