- Netty (#16950) : Prevented malformed DNS queries from being sent on query-ID exhaustion under high traffic by adding an early-return and regression tests.
- Netty (#16971) : Prevented a request-smuggling vulnerability by rejecting control characters in the HTTP-version token.
- Curl (#22172) : Made curl fail with a clear, specific error on multi-member gzip responses instead of a vague write error, with a regression test.
- Lettuce (#3774) : Added Cuckoo Filter command support to the Redis Java client accros its sync, async, reactive, cluster and coroutine APIs.