---
id: 5445
title: "Casting a Net(ty) for Bugs, and Catching a Big One (CVE-2025-59419)"
cve: CVE-2025-59419
cvss: 5.5
severity: medium
source_domain: depthfirst.com
source_url: "https://depthfirst.com/research/casting-a-net-ty-for-bugs-and-catching-a-big-one-cve-2025-59419"
published_at: "2025-10-20T00:00:00Z"
tags: ["vulnerability-research", "java", "command-injection", "netty", "smtp", "cve-2025-59419"]
phying_url: "https://phying.com/item/5445"
lang: en
---

# Casting a Net(ty) for Bugs, and Catching a Big One (CVE-2025-59419)

## Summary

Netty's SMTP codec allowed CRLF injection in user input, letting attackers append forged mail commands that bypass SPF, DKIM and DMARC; depthfirst's agent found it, tracked as CVE-2025-59419.

## Intelligence Metadata

- **Sources:** depthfirst.com
- **CVE:** CVE-2025-59419
- **CVSS:** 5.5
- **Published:** 2025-10-20T00:00:00Z
- **Original:** https://depthfirst.com/research/casting-a-net-ty-for-bugs-and-catching-a-big-one-cve-2025-59419
- **Phying News:** https://phying.com/item/5445