Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final, the OCSP stapling validator in netty-handler-ssl-ocsp does not properly check certificate revocation status. The implementation may skip revocation checks under certain conditions or fail to properly parse OCSP responses indicating revoked certificates. An attacker can use revoked certificates without detection, potentially compromising secure communications. This issue is fixed in versions 4.1.136.Final and later.