THREAT OPS › Threat News › [GHSA] GHSA-p9jm-q85p-7mcp (medium) — Netty: RedisArrayAggregator max-elements failure leaves retained partial aggregate state
[GHSA] GHSA-p9jm-q85p-7mcp (medium) — Netty: RedisArrayAggregator max-elements failure leaves retained partial aggregate state
GHSA-p9jm-q85p-7mcp Severity: medium CVE: CVE-2026-56818
Netty: RedisArrayAggregator max-elements failure leaves retained partial aggregate state
## Summary
`RedisArrayAggregator` clears retained partial aggregate state when the `maxNestedArrayDepth` limit is exceeded, but it does not clear the same state when the sibling `maxElements` limit is exceeded. A peer can start a valid RESP array, sen
Indicators of compromise
- 7bae566a93e69409697fe57fa807910ba5c9720esha1
- CVE-2026-56818cve
- CVE-2026-44250cve
- CVE-2026-48006cve
- CVE-2026-44890cve
Original source: https://github.com/advisories/GHSA-p9jm-q85p-7mcp