Skip to content

[Aikido] Fix 2 security issues in kotlin-stdlib, netty-codec-dns - #340

Closed
aikido-autofix[bot] wants to merge 1 commit into
mainfrom
fix/AIK-18525-update-packages-89099902-jc8m
Closed

[Aikido] Fix 2 security issues in kotlin-stdlib, netty-codec-dns#340
aikido-autofix[bot] wants to merge 1 commit into
mainfrom
fix/AIK-18525-update-packages-89099902-jc8m

Conversation

@aikido-autofix

Copy link
Copy Markdown

Upgrade kotlin-stdlib and netty-codec-dns to fix insecure temporary file permissions and DNS memory leak DoS vulnerability.

⚠️ Breaking changes analysis not available for: org.jetbrains.kotlin:kotlin-stdlib

✅ No breaking changes for: io.netty:netty-codec-dns

✅ 2 CVEs resolved by this upgrade

This PR will resolve the following CVEs:

Issue Severity           Description
AIKIDO-2026-550292
MEDIUM
[kotlin-stdlib] In JetBrains Kotlin, a vulnerable Java API is used for temporary file and folder creation. An attacker is able to read data from such files and list directories due to insecure permissions.
CVE-2026-73508
MEDIUM
[netty-codec-dns] A memory leak vulnerability in DNS record handling allows unauthenticated remote attackers to leak direct memory through malformed domain names, causing denial of service. ByteBuf objects fail to release when domain name validation rejects input, enabling incremental memory exhaustion.
🔗 Related Tasks

@codecov

codecov Bot commented Aug 14, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@aikido-autofix

Copy link
Copy Markdown
Author

Closed by Aikido: a new AutoFix has been created → #341

@aikido-autofix aikido-autofix Bot closed this Aug 15, 2026
@aikido-autofix
aikido-autofix Bot deleted the fix/AIK-18525-update-packages-89099902-jc8m branch August 15, 2026 23:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants