StackRadar

CVE-2019-16869

High

Advisory

Published 11 Oct 2019In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.084
95th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
89
of 17,781 indexed, latest versions
Container images
78
deployed by those charts
Fix available
1 of 2
affected packages

HTTP Request Smuggling in Netty

Carried by container images the latest versions of 89 of 17,781 indexed charts deploy, on 78 images.

Affected packageAffected versionsFixed inImages
nettymaven3.6.1.Final, 3.6.2.Final, 3.6.6.Final, 3.7.0.Final+5 moreno fix listed65
netty-allmaven4.0.23.Final, 4.0.42.Final, 4.0.43.Final, 4.0.44.Final+9 more4.1.42.Final34
OSV records
GHSA-p979-4mfw-53vg

Charts affected

89 by stars
ChartLatestAffected imagesRadar Score
accumulogaffer2.2.13 of 4See more

accumulo gaffer 2.2.1

3 of the 4 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
gchq/accumulo:2.0.1c460bb587d6d
netty@3.10.6.Final
no fix listed
gchq/hdfs:3.3.35ec58edbb2db
netty@3.10.6.Final
no fix listed
library/zookeeper:3.5.5b7a76ec06f68
netty-all@4.1.29.Final
4.1.42.Final

Open the chart page →

16,892
gaffer-road-trafficgaffer2.2.12 of 8See more

gaffer-road-traffic gaffer 2.2.1

2 of the 8 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
netty@3.10.6.Final
no fix listed
library/zookeeper:3.5.5b7a76ec06f68
netty-all@4.1.29.Final
4.1.42.Final

Open the chart page →

9,342
jaegergpg-dev3.3.31 of 5See more

jaeger gpg-dev 3.3.3

1 of the 5 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
library/cassandra:3.11.65aa8400b4b3b
netty-all@4.0.44.Final
4.1.42.Final

Open the chart page →

19,229
hdfsgradiant-bigdataVerified publisher0.1.101 of 2See more

hdfs gradiant-bigdata 0.1.10

1 of the 2 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
gradiant/hdfs:2.7.73b28784ba41f
netty@3.6.2.Final
netty-all@4.0.23.Final
no fix listed
4.1.42.Final

Open the chart page →

7,073
hivegradiant-bigdataVerified publisher0.1.63 of 5See more

hive gradiant-bigdata 0.1.6

3 of the 5 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
netty@3.6.2.Final
netty-all@4.0.23.Final
no fix listed
4.1.42.Final
gradiant/hdfs:2.7.73b28784ba41f
netty@3.6.2.Final
netty-all@4.0.23.Final
no fix listed
4.1.42.Final
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
netty@3.6.2.Final
netty-all@4.0.23.Final
no fix listed
4.1.42.Final

Open the chart page →

20,837
hive-metastoregradiant-bigdataVerified publisher0.1.31 of 2See more

hive-metastore gradiant-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
netty@3.6.2.Final
netty-all@4.0.23.Final
no fix listed
4.1.42.Final

Open the chart page →

6,882
opentsdbgradiant-bigdataVerified publisher0.1.73 of 6See more

opentsdb gradiant-bigdata 0.1.7

3 of the 6 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
netty-all@4.0.23.Final
4.1.42.Final
gradiant/hdfs:2.7.73b28784ba41f
netty@3.6.2.Final
netty-all@4.0.23.Final
no fix listed
4.1.42.Final
gradiant/opentsdb:2.4.0c33d53913869
netty@3.10.6.Final
no fix listed

Open the chart page →

17,511
spark-standalonegradiant-bigdataVerified publisher0.1.01 of 2See more

spark-standalone gradiant-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
gradiant/spark:2.4.4-python-alpine97657d56e927
netty@3.9.9.Final
netty-all@4.1.17.Final
no fix listed
4.1.42.Final

Open the chart page →

6,147
hbasehbase0.1.71 of 4See more

hbase hbase 0.1.7

1 of the 4 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
netty@3.10.6.Final
no fix listed

Open the chart page →

10,540
druidhelmforgeVerified publisher1.3.61 of 4See more

druid helmforge 1.3.6

1 of the 4 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
netty@3.10.6.Final
no fix listed

Open the chart page →

8,541
ibm-business-automation-insights-devibm-charts3.2.02 of 6See more

ibm-business-automation-insights-dev ibm-charts 3.2.0

2 of the 6 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
ibmcom/bai-flink-dev:19.0.2e31ff09e8aad
netty@3.6.2.Final
netty-all@4.1.24.Final
no fix listed
4.1.42.Final
ibmcom/bai-flink-zookeeper-dev:19.0.258548034cf55
netty@3.10.6.Final
no fix listed

Open the chart page →

39,349
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
dremio/dremio-oss:24.1.080ed2e3b7c43
netty@3.10.6.Final
no fix listed

Open the chart page →

37,671
delta-sharing-serverinseefrlab1.2.11 of 1See more

delta-sharing-server inseefrlab 1.2.1

1 of the 1 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
deltaio/delta-sharing-server:0.2.08b75118187c5
netty@3.10.6.Final
no fix listed

Open the chart page →

6,174
pinotinseefrlab0.2.02 of 2See more

pinot inseefrlab 0.2.0

2 of the 2 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
apachepinot/pinot:latest-jdk110018bb04ced7
netty@3.9.6.Final
no fix listed
library/zookeeper:3.5.5b7a76ec06f68
netty-all@4.1.29.Final
4.1.42.Final

Open the chart page →

10,777
nexusjenkins-x0.1.371 of 1See more

nexus jenkins-x 0.1.37

1 of the 1 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
netty@3.10.6.Final
no fix listed

Open the chart page →

12,856
dinsrokronkltdVerified publisher0.1.71 of 2See more

dinsro kronkltd 0.1.7

1 of the 2 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
duck1123/dinsro:latest9568c5961d5d
netty@3.10.6.Final
no fix listed

Open the chart page →

1,628
pulsarv2milvus-helm2.7.81 of 4See more

pulsarv2 milvus-helm 2.7.8

1 of the 4 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
netty-all@4.1.24.Final
4.1.42.Final

Open the chart page →

15,855
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
netty@3.10.6.Final
no fix listed

Open the chart page →

25,933
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
netty@3.10.6.Final
no fix listed

Open the chart page →

15,675
elasticsearch2ncsaVerified publisher0.2.21 of 2See more

elasticsearch2 ncsa 0.2.2

1 of the 2 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
library/elasticsearch:2.4.641ed3a1a16b6
netty@3.10.6.Final
no fix listed

Open the chart page →

4,911
zookeeper-helm-chartnotesprojectchart0.1.01 of 1See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
netty@3.10.6.Final
no fix listed

Open the chart page →

41,427
hive-metastoreolehrgfVerified publisher0.1.01 of 1See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
netty@3.10.6.Final
no fix listed

Open the chart page →

8,540
comacopencord1.0.01 of 9See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
omecproject/onos-progran:1.0.05715e5648aa0
netty@3.10.5.Final
no fix listed

Open the chart page →

88,546
omec-control-planeopencord0.1.312 of 8See more

omec-control-plane opencord 0.1.31

2 of the 8 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
library/cassandra:2.1.20cb079c0d7a57
netty@3.9.0.Final
netty-all@4.0.44.Final
no fix listed
4.1.42.Final
omecproject/c3po-hssdb:master-latest28a90cc26716
netty@3.9.0.Final
netty-all@4.0.44.Final
no fix listed
4.1.42.Final

Open the chart page →

40,715
onosopencord3.0.21 of 1See more

onos opencord 3.0.2

1 of the 1 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
onosproject/onos:2.2.144914a8d4b3f
netty@3.10.5.Final
no fix listed

Open the chart page →

12,927
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
netty@3.10.5.Final
no fix listed

Open the chart page →

38,865
voltha-infraopencord2.14.01 of 10See more

voltha-infra opencord 2.14.0

1 of the 10 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
voltha/voltha-onos:5.1.8e038acb950d3
netty@3.10.5.Final
no fix listed

Open the chart page →

41,044
openwhiskopenwhisk1.0.02 of 10See more

openwhisk openwhisk 1.0.0

2 of the 10 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
library/zookeeper:3.43882d9493d38
netty@3.10.6.Final
no fix listed
openwhisk/invoker:1.0.0f5831ec85525
netty@3.10.6.Final
no fix listed

Open the chart page →

36,215
hive-metastorepresto-loadbalancer0.2.31 of 1See more

hive-metastore presto-loadbalancer 0.2.3

1 of the 1 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
datappeal/hive-metastore:lateste38c085a3567
netty@3.10.5.Final
netty-all@4.0.52.Final
no fix listed
4.1.42.Final

Open the chart page →

9,606
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
trinodb/trino:45038c6f24ab1a4
netty@3.10.6.Final
no fix listed

Open the chart page →

21,211
archivaslamdev0.0.71 of 2See more

archiva slamdev 0.0.7

1 of the 2 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
xetusoss/archiva:v2.2.588f25242b9ee
netty@3.6.6.Final
no fix listed

Open the chart page →

6,907
newrelic-private-minionsstarcher0.1.21 of 1See more

newrelic-private-minion sstarcher 0.1.2

1 of the 1 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
netty-all@4.0.23.Final
4.1.42.Final

Open the chart page →

3,164
solrstatcan1.5.101 of 3See more

solr statcan 1.5.10

1 of the 3 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
library/zookeeper:3.5.5b7a76ec06f68
netty-all@4.1.29.Final
4.1.42.Final

Open the chart page →

8,806
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
netty@3.10.5.Final
netty-all@4.1.29.Final
no fix listed
4.1.42.Final

Open the chart page →

13,767
hadoop-deploymenttejaswita-hadoop-helmchart1.0.01 of 1See more

hadoop-deployment tejaswita-hadoop-helmchart 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
apache/hadoop:3af361b20bec0
netty@3.10.6.Final
no fix listed

Open the chart page →

4,240
temporaltemporal0.28.91 of 13See more

temporal temporal 0.28.9

1 of the 13 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
netty-all@4.0.44.Final
4.1.42.Final

Open the chart page →

21,005
queryservicewbstack0.2.11 of 1See more

queryservice wbstack 0.2.1

1 of the 1 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
ghcr.io/wbstack/queryservice:0.3.6_0.6b83b5b81d4b6
netty@3.10.6.Final
no fix listed

Open the chart page →

4,649
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
netty-all@4.0.44.Final
4.1.42.Final

Open the chart page →

10,127
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2019-16869.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
netty-all@4.0.44.Final
4.1.42.Final

Open the chart page →

22,665

Container images carrying it

78 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
library/elasticsearch:2.4.641ed3a1a16b6
netty@3.10.6.Final
no fix listed
1
library/neo4j:3.4.5-enterprisea1ba477fa412
netty@3.9.9.Final
netty-all@4.1.24.Final
no fix listed
4.1.42.Final
1
library/neo4j:3.3.0d4eaa8484246
netty-all@4.1.15.Final
4.1.42.Final
1
library/storm:2.4.0bd5d420506d6
netty@3.6.2.Final
netty-all@4.1.30.Final
no fix listed
4.1.42.Final
1
library/zookeeper:3.43882d9493d38
netty@3.10.6.Final
no fix listed
1
lightbend/spark-history-server:2.4.00bedf37f428a
netty@3.9.9.Final
netty-all@4.1.17.Final
no fix listed
4.1.42.Final
1
muluder/prograncontrollermcord:0.1.843b597a93da7
netty@3.10.5.Final
no fix listed
1
omecproject/c3po-hssdb:master-latest28a90cc26716
netty@3.9.0.Final
netty-all@4.0.44.Final
no fix listed
4.1.42.Final
1
omecproject/onos-progran:1.0.05715e5648aa0
netty@3.10.5.Final
no fix listed
1
onosproject/onos:2.2.144914a8d4b3f
netty@3.10.5.Final
no fix listed
1
openwhisk/invoker:1.0.0f5831ec85525
netty@3.10.6.Final
no fix listed
1
radarbase/kafka-manager:1.3.3.181d2af7dd5a4e
netty@3.10.5.Final
no fix listed
1
raykrueger/riemann:0.2.14c8baf3de57bb
netty@3.6.1.Final
netty-all@4.1.4.Final
no fix listed
4.1.42.Final
1
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
netty@3.10.6.Final
netty-all@4.0.52.Final
no fix listed
4.1.42.Final
1
snappydatainc/spark-shuffle:v2.2.0-kubernetes-0.5.1fd4b2070466f
netty@3.9.9.Final
netty-all@4.0.43.Final
no fix listed
4.1.42.Final
1
sslhep/hive-metastore:3.1.39e80af083079
netty@3.10.5.Final
netty-all@4.1.12.Final
no fix listed
4.1.42.Final
1
thelastpickle/cassandra-reaper:1.3.09c53996c457d
netty-all@4.0.44.Final
4.1.42.Final
1
trinodb/trino:45038c6f24ab1a4
netty@3.10.6.Final
no fix listed
1
trinodb/trino:405ee80ab5eeab2
netty@3.10.5.Final
netty-all@4.1.29.Final
no fix listed
4.1.42.Final
1
voltha/voltha-onos:5.1.8e038acb950d3
netty@3.10.5.Final
no fix listed
1
xetusoss/archiva:v2.2.588f25242b9ee
netty@3.6.6.Final
no fix listed
1
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
netty@3.10.6.Final
no fix listed
1
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
netty@3.10.6.Final
no fix listed
1
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
netty@3.10.6.Final
no fix listed
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
netty@3.10.6.Final
no fix listed
1
ghcr.io/wbstack/queryservice:0.3.6_0.6b83b5b81d4b6
netty@3.10.6.Final
no fix listed
1
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
netty@3.10.6.Final
no fix listed
1
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
netty-all@4.0.23.Final
4.1.42.Final
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.