Apigee Emulator

Apigee Emulator

Security

This release addresses 46 security vulnerabilities across Netty, the embedded Go standard library, Jackson, Apache Log4j, Eclipse Jetty, BouncyCastle, and Apache CXF:

CVE / Advisory · Component

CVE-2026-75595 · Netty (netty-handler)

CVE-2026-75596 · Netty (netty-handler)

CVE-2026-59901 · Netty (netty-codec)

CVE-2026-55831 · Netty (netty-codec-http)

CVE-2026-55833 · Netty (netty-codec-http)

CVE-2026-56745 · Netty (netty-codec-http)

CVE-2026-56746 · Netty (netty-codec-http)

CVE-2026-59898 · Netty (netty-codec-http)

CVE-2026-59899 · Netty (netty-codec-http)

CVE-2026-59903 · Netty (netty-codec-http)

CVE-2026-59921 · Netty (netty-codec-http)

CVE-2026-56819 · Netty (netty-codec-http2)

CVE-2026-59900 · Netty (netty-codec-http2)

CVE-2026-73508 · Netty (netty-codec-dns)

CVE-2026-39821 · Go standard library

CVE-2026-33818 · Go standard library

CVE-2026-39822 · Go standard library

CVE-2026-42505 · Go standard library

CVE-2026-56853 · Go standard library

CVE-2026-56858 · Go standard library

CVE-2026-56859 · Go standard library

CVE-2026-56860 · Go standard library

CVE-2026-56862 · Go standard library

CVE-2026-56864 · Go standard library

CVE-2026-56865 · Go standard library

CVE-2026-68494 · Jackson (jackson-core)

CVE-2026-18401 · Jackson (jackson-core)

CVE-2026-54512 · Jackson (jackson-databind)

CVE-2026-54513 · Jackson (jackson-databind)

CVE-2026-54514 · Jackson (jackson-databind)

CVE-2026-54515 · Jackson (jackson-databind)

CVE-2026-59888 · Jackson (jackson-databind)

CVE-2026-59889 · Jackson (jackson-databind)

CVE-2026-77310 · Jackson (jackson-databind)

GHSA-mhm7-754m-9p8w · Jackson (jackson-databind)

CVE-2025-68161 · Apache Log4j (log4j-core)

CVE-2026-34477 · Apache Log4j (log4j-core)

CVE-2026-34480 · Apache Log4j (log4j-core)

CVE-2026-49844 · Apache Log4j (log4j-api)

CVE-2026-10050 · Eclipse Jetty (jetty-security)

CVE-2026-2332 · Eclipse Jetty (jetty-http)

CVE-2024-6763 · Eclipse Jetty (jetty-http)

CVE-2026-6790 · Eclipse Jetty (jetty-server)

CVE-2026-8763 · BouncyCastle (bcprov-jdk18on)

CVE-2026-13506 · BouncyCastle (bcprov-jdk18on)

CVE-2026-50645 · Apache CXF (cxf-core)