Apigee Emulator v2.0.1: Security Hotfix for Netty and Go Libraries

Apigee Emulator Security This release addresses 10 security vulnerabilities in the Netty networking library and the embedded Go standard library. All Netty fixes come from upgrading to 4.1.135.Final ; all Go standard library fixes come from a Cassandra base image rebuild against Go 1.25.11 . CVE Component CVE-2026-50010 Netty ( netty-handler ) CVE-2026-50020 Netty ( netty-codec-http ) CVE-2026-50560 Netty ( netty-codec-http2 ) CVE-2026-48043 Netty ( netty-codec-http2 ) CVE-2026-44249 Netty ( netty-handler ) CVE-2026-45416 Netty ( netty-handler ) CVE-2026-47244 Netty ( netty-codec-http2 ) CVE-2

Apigee Emulator Changed in this release Upgraded Netty to 4.1.135.Final (from 4.1.133.Final ) and pinned all transitive netty-* artifacts via netty-bom . Refreshed the Cassandra base image to pick up Go standard library 1.25.11 (from 1.25.10 ) in the embedded health-check binary. Updated netty-tcnative-boringssl-static classifier variants from 2.0.53.Final to 2.0.77.Final .

Apigee Emulator On June 24, 2026, we released Apigee Emulator version 2.0.1. This is a security-only hotfix release on top of v2.0.0 that addresses 10 security vulnerabilities in the Netty networking library and the embedded Cassandra Go standard library health-check binary. There are no functional, API, or configuration changes -- v2.0.1 is a drop-in replacement for v2.0.0. The emulator image is available at Google Artifact Registry . To upgrade, update the emulator version in your VS Code Cloud Code settings to 2.0.1 . See Manage the Apigee Emulator for details.