StackRadar

CVE-2021-21409

Medium

Advisory

Published 30 Mar 2021In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.049
92nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
135
of 17,781 indexed, latest versions
Container images
139
deployed by those charts
Fix available
1 of 2
affected packages

Possible request smuggling in HTTP/2 due missing validation of content-length

Carried by container images the latest versions of 135 of 17,781 indexed charts deploy, on 139 images.

Affected packageAffected versionsFixed inImages
netty-codec-http2maven4.1.12.Final, 4.1.19.Final, 4.1.22.Final, 4.1.24.Final+18 more4.1.61.Final82
nettymaven3.2.10.Final, 3.6.1.Final, 3.6.2.Final, 3.6.6.Final+6 moreno fix listed66
OSV records
GHSA-f256-j965-7f32

Charts affected

135 by stars
ChartLatestAffected imagesRadar Score
geoservercamptocamp20.0.36 of 12See more

geoserver camptocamp2 0.0.3

6 of the 12 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
netty-codec-http2@4.1.51.Final
4.1.61.Final
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
netty-codec-http2@4.1.51.Final
4.1.61.Final
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
netty-codec-http2@4.1.51.Final
4.1.61.Final
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
netty-codec-http2@4.1.51.Final
4.1.61.Final
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
netty-codec-http2@4.1.51.Final
4.1.61.Final
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
netty-codec-http2@4.1.51.Final
4.1.61.Final

Open the chart page →

88,335
tsoragecetic0.4.111 of 8See more

tsorage cetic 0.4.11

1 of the 8 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:5.0.1c87b1c07fb53
netty@3.10.6.Final
no fix listed

Open the chart page →

12,018
event-store-servicechoerodon0.8.01 of 2See more

event-store-service choerodon 0.8.0

1 of the 2 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
choerodon/event-store-service:0.8.03c94c97f6f69
netty@3.7.0.Final
no fix listed

Open the chart page →

9,808
neo4jcloudnativeapp1.0.01 of 1See more

neo4j cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
library/neo4j:3.4.5-enterprisea1ba477fa412
netty@3.9.9.Final
no fix listed

Open the chart page →

2,837
prestocloudnativeapp0.1.11 of 1See more

presto cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
bivas/presto:0.19605545994f806
netty@3.10.6.Final
no fix listed

Open the chart page →

7,226
riemanncloudnativeapp0.1.21 of 1See more

riemann cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
raykrueger/riemann:0.2.14c8baf3de57bb
netty@3.6.1.Final
no fix listed

Open the chart page →

6,497
spark-history-servercloudnativeapp1.0.01 of 3See more

spark-history-server cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
lightbend/spark-history-server:2.4.00bedf37f428a
netty@3.9.9.Final
no fix listed

Open the chart page →

14,066
pulsarcnieg1.0.82 of 2See more

pulsar cnieg 1.0.8

2 of the 2 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.6.14db6ff0b4045
netty@3.10.6.Final
netty-codec-http2@4.1.48.Final
no fix listed
4.1.61.Final
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
netty-codec-http2@4.1.24.Final
4.1.61.Final

Open the chart page →

16,860
cp-helm-chartscp-helm-charts0.6.16 of 8See more

cp-helm-charts cp-helm-charts 0.6.1

6 of the 8 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
netty-codec-http2@4.1.47.Final
4.1.61.Final
confluentinc/cp-enterprise-kafka:6.1.08f1544df1f48
netty-codec-http2@4.1.45.Final
4.1.61.Final
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
netty-codec-http2@4.1.47.Final
4.1.61.Final
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
netty-codec-http2@4.1.49.Final
4.1.61.Final
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
netty-codec-http2@4.1.49.Final
4.1.61.Final
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
netty-codec-http2@4.1.49.Final
4.1.61.Final

Open the chart page →

58,857
apache-ranger-admindata-platform-stableVerified publisher0.2.01 of 2See more

apache-ranger-admin data-platform-stable 0.2.0

1 of the 2 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
netty@3.10.6.Final
no fix listed

Open the chart page →

8,245
eoloplannerdfa-amm-eoloplannerVerified publisher0.1.02 of 7See more

eoloplanner dfa-amm-eoloplanner 0.1.0

2 of the 7 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
amartinm82/planner:v2.01184353ff57b
netty-codec-http2@4.1.42.Final
4.1.61.Final
oscarsotosanchez/toposervice:v1.0d4d020e9f272
netty-codec-http2@4.1.54.Final
4.1.61.Final

Open the chart page →

27,550
spark-standalonedmwm-bigdataVerified publisher0.1.01 of 2See more

spark-standalone dmwm-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
gradiant/spark:2.4.4-python-alpine97657d56e927
netty@3.9.9.Final
no fix listed

Open the chart page →

6,147
eoloplannerdreyg-jescribanob-chart-eoloplanner0.1.01 of 7See more

eoloplanner dreyg-jescribanob-chart-eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
oscarsotosanchez/toposervice:v1.0d4d020e9f272
netty-codec-http2@4.1.54.Final
4.1.61.Final

Open the chart page →

24,656
spark-shuffleduyet0.2.01 of 1See more

spark-shuffle duyet 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
snappydatainc/spark-shuffle:v2.2.0-kubernetes-0.5.1fd4b2070466f
netty@3.9.9.Final
no fix listed

Open the chart page →

5,639
eolicplantseolicplantsVerified publisher0.1.02 of 7See more

eolicplants eolicplants 0.1.0

2 of the 7 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
oscarsotosanchez/planner:v1.0730c00a099b8
netty-codec-http2@4.1.42.Final
4.1.61.Final
oscarsotosanchez/toposervice:v1.0d4d020e9f272
netty-codec-http2@4.1.54.Final
4.1.61.Final

Open the chart page →

27,291
eoloPlanteolo-plannerVerified publisher0.1.01 of 7See more

eoloPlant eolo-planner 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
netty-codec-http2@4.1.42.Final
4.1.61.Final

Open the chart page →

27,537
eoloplannereoloplannerVerified publisher0.1.01 of 7See more

eoloplanner eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
netty-codec-http2@4.1.42.Final
4.1.61.Final

Open the chart page →

32,205
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.01 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
netty-codec-http2@4.1.42.Final
4.1.61.Final

Open the chart page →

27,537
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.02 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

2 of the 7 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
franrobles8/planner:v3.099985392d63c
netty-codec-http2@4.1.54.Final
4.1.61.Final
oscarsotosanchez/toposervice:v1.0d4d020e9f272
netty-codec-http2@4.1.54.Final
4.1.61.Final

Open the chart page →

27,256
eoloplannereoloplanner-molynx-gat0.1.01 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
molynx/planner:v1441c9f52f092
netty-codec-http2@4.1.42.Final
4.1.61.Final

Open the chart page →

28,482
eolo-plannereolo-planner-repo0.1.01 of 7See more

eolo-planner eolo-planner-repo 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
arturisimo/planner:v1.0fff9de644941
netty-codec-http2@4.1.42.Final
4.1.61.Final

Open the chart page →

27,096
eoloplanteoloplant1.0.01 of 7See more

eoloplant eoloplant 1.0.0

1 of the 7 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
netty-codec-http2@4.1.42.Final
4.1.61.Final

Open the chart page →

27,537
eoloplantseoloplants-urjcVerified publisher0.1.01 of 7See more

eoloplants eoloplants-urjc 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
lourdesmorente/new-planner:1.0.0608745878cdb
netty-codec-http2@4.1.42.Final
4.1.61.Final

Open the chart page →

27,721
servereoloserverVerified publisher0.1.01 of 7See more

server eoloserver 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
netty-codec-http2@4.1.42.Final
4.1.61.Final

Open the chart page →

32,205
shenyuerdeng2.4.212 of 2See more

shenyu erdeng 2.4.21

2 of the 2 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.4.2e8b7c4ddd069
netty-codec-http2@4.1.43.Final
4.1.61.Final
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
netty-codec-http2@4.1.38.Final
4.1.61.Final

Open the chart page →

12,513
mod-aesfolio-org0.1.331 of 1See more

mod-aes folio-org 0.1.33

1 of the 1 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
folioci/mod-aes:latest6d67e9564270
netty-codec-http2@4.1.60.Final
4.1.61.Final

Open the chart page →

2,281
mod-marccatfolio-org0.1.301 of 1See more

mod-marccat folio-org 0.1.30

1 of the 1 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
folioci/mod-marccat:latest1b57d690d568
netty-codec-http2@4.1.22.Final
4.1.61.Final

Open the chart page →

6,988
accumulogaffer2.2.12 of 4See more

accumulo gaffer 2.2.1

2 of the 4 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
gchq/accumulo:2.0.1c460bb587d6d
netty@3.10.6.Final
no fix listed
gchq/hdfs:3.3.35ec58edbb2db
netty@3.10.6.Final
no fix listed

Open the chart page →

16,892
gaffer-road-trafficgaffer2.2.11 of 8See more

gaffer-road-traffic gaffer 2.2.1

1 of the 8 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
netty@3.10.6.Final
no fix listed

Open the chart page →

9,342
hdfsgradiant-bigdataVerified publisher0.1.101 of 2See more

hdfs gradiant-bigdata 0.1.10

1 of the 2 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
gradiant/hdfs:2.7.73b28784ba41f
netty@3.6.2.Final
no fix listed

Open the chart page →

7,073
hivegradiant-bigdataVerified publisher0.1.63 of 5See more

hive gradiant-bigdata 0.1.6

3 of the 5 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
netty@3.6.2.Final
no fix listed
gradiant/hdfs:2.7.73b28784ba41f
netty@3.6.2.Final
no fix listed
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
netty@3.6.2.Final
no fix listed

Open the chart page →

20,837
hive-metastoregradiant-bigdataVerified publisher0.1.31 of 2See more

hive-metastore gradiant-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
netty@3.6.2.Final
no fix listed

Open the chart page →

6,882
opentsdbgradiant-bigdataVerified publisher0.1.72 of 6See more

opentsdb gradiant-bigdata 0.1.7

2 of the 6 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
gradiant/hdfs:2.7.73b28784ba41f
netty@3.6.2.Final
no fix listed
gradiant/opentsdb:2.4.0c33d53913869
netty@3.10.6.Final
no fix listed

Open the chart page →

17,511
spark-standalonegradiant-bigdataVerified publisher0.1.01 of 2See more

spark-standalone gradiant-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
gradiant/spark:2.4.4-python-alpine97657d56e927
netty@3.9.9.Final
no fix listed

Open the chart page →

6,147
hazelcast-jethazelcastVerified publisher1.17.11 of 1See more

hazelcast-jet hazelcast 1.17.1

1 of the 1 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
hazelcast/hazelcast-jet:4.5.3a825ecbe9fda
netty-codec-http2@4.1.51.Final
4.1.61.Final

Open the chart page →

6,102
hbasehbase0.1.71 of 4See more

hbase hbase 0.1.7

1 of the 4 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
netty@3.10.6.Final
no fix listed

Open the chart page →

10,540
nacosheidaodageshiwoVerified publisher0.1.51 of 1See more

nacos heidaodageshiwo 0.1.5

1 of the 1 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
nacos/nacos-server:v2.1.0dcf04549c6d7
netty-codec-http2@4.1.42.Final
4.1.61.Final

Open the chart page →

3,978
druidhelmforgeVerified publisher1.3.61 of 4See more

druid helmforge 1.3.6

1 of the 4 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
netty@3.10.6.Final
no fix listed

Open the chart page →

8,541
eoloplanthttpd-eoloplant0.1.01 of 7See more

eoloplant httpd-eoloplant 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
netty-codec-http2@4.1.42.Final
4.1.61.Final

Open the chart page →

32,205
ibm-business-automation-insights-devibm-charts3.2.02 of 6See more

ibm-business-automation-insights-dev ibm-charts 3.2.0

2 of the 6 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
ibmcom/bai-flink-dev:19.0.2e31ff09e8aad
netty@3.6.2.Final
no fix listed
ibmcom/bai-flink-zookeeper-dev:19.0.258548034cf55
netty@3.10.6.Final
no fix listed

Open the chart page →

39,349
eoloserverihuertas2021-vmartinp2021-helm0.1.01 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
huertaslopez/i.huertas.2021-v.martinp.2021-planner:2.0.0e2c18bd65472
netty-codec-http2@4.1.42.Final
4.1.61.Final

Open the chart page →

27,721
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
dremio/dremio-oss:24.1.080ed2e3b7c43
netty@3.10.6.Final
netty-codec-http2@4.1.52.Final
no fix listed
4.1.61.Final

Open the chart page →

37,671
delta-sharing-serverinseefrlab1.2.11 of 1See more

delta-sharing-server inseefrlab 1.2.1

1 of the 1 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
deltaio/delta-sharing-server:0.2.08b75118187c5
netty@3.10.6.Final
no fix listed

Open the chart page →

6,174
pinotinseefrlab0.2.01 of 2See more

pinot inseefrlab 0.2.0

1 of the 2 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
apachepinot/pinot:latest-jdk110018bb04ced7
netty@3.9.6.Final
no fix listed

Open the chart page →

10,777
nexusjenkins-x0.1.371 of 1See more

nexus jenkins-x 0.1.37

1 of the 1 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
netty@3.10.6.Final
no fix listed

Open the chart page →

12,856
kron-aapm-agentkron-aapm-agent1.1.01 of 1See more

kron-aapm-agent kron-aapm-agent 1.1.0

1 of the 1 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
krontechnology/aapm-agent:1.1.07feef7d2ab42
netty-codec-http2@4.1.54.Final
4.1.61.Final

Open the chart page →

8,884
dinsrokronkltdVerified publisher0.1.71 of 2See more

dinsro kronkltd 0.1.7

1 of the 2 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
duck1123/dinsro:latest9568c5961d5d
netty@3.10.6.Final
no fix listed

Open the chart page →

1,628
nacoskubesphere-testVerified publisher0.1.11 of 1See more

nacos kubesphere-test 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
nacos/nacos-server:1.4.1fe6e5688cdf3
netty-codec-http2@4.1.38.Final
4.1.61.Final

Open the chart page →

4,153
eoloplantmca-eoloplaner0.1.01 of 7See more

eoloplant mca-eoloplaner 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
hugohg34/planner:0.0.2171f61e8d7e2
netty-codec-http2@4.1.42.Final
4.1.61.Final

Open the chart page →

29,588
pulsarv2milvus-helm2.7.81 of 4See more

pulsarv2 milvus-helm 2.7.8

1 of the 4 container images this version deploys carry CVE-2021-21409.

Container imageDigestPackageFixed in
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
netty-codec-http2@4.1.24.Final
4.1.61.Final

Open the chart page →

15,855

Container images carrying it

139 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
gradiant/hdfs:2.7.73b28784ba41f
netty@3.6.2.Final
no fix listed
7
bde2020/hive:2.3.2-postgresql-metastore620267768985
netty@3.6.2.Final
no fix listed
4
mastercloudapps/planner:v1.2340a950b311b2
netty-codec-http2@4.1.42.Final
4.1.61.Final
4
oscarsotosanchez/toposervice:v1.0d4d020e9f272
netty-codec-http2@4.1.54.Final
4.1.61.Final
4
apache/shenyu-admin:2.4.2e8b7c4ddd069
netty-codec-http2@4.1.43.Final
4.1.61.Final
3
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
netty-codec-http2@4.1.38.Final
4.1.61.Final
3
codeurjc/planner:v1.0800cf520c245
netty-codec-http2@4.1.42.Final
4.1.61.Final
3
gchq/hdfs:3.3.35ec58edbb2db
netty@3.10.6.Final
no fix listed
3
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
netty-codec-http2@4.1.45.Final
4.1.61.Final
2
apache/druid:37.0.00116fb802786
netty@3.10.6.Final
no fix listed
2
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
netty-codec-http2@4.1.24.Final
4.1.61.Final
2
danisla/hadoop:2.9.0255ba2dd739b
netty@3.6.2.Final
no fix listed
2
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
netty-codec-http2@4.1.51.Final
4.1.61.Final
2
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
netty-codec-http2@4.1.51.Final
4.1.61.Final
2
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
netty-codec-http2@4.1.51.Final
4.1.61.Final
2
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
netty-codec-http2@4.1.51.Final
4.1.61.Final
2
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
netty-codec-http2@4.1.51.Final
4.1.61.Final
2
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
netty-codec-http2@4.1.51.Final
4.1.61.Final
2
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
netty@3.6.2.Final
no fix listed
2
gradiant/opentsdb:2.4.0c33d53913869
netty@3.10.6.Final
no fix listed
2
gradiant/spark:2.4.4-python-alpine97657d56e927
netty@3.9.9.Final
no fix listed
2
nacos/nacos-server:v2.1.0dcf04549c6d7
netty-codec-http2@4.1.42.Final
4.1.61.Final
2
opensearchproject/opensearch:1.1.0967d7f57f72f
netty-codec-http2@4.1.45.Final
4.1.61.Final
2
wurstmeister/zookeeper:latest7a7fd44a7210
netty@3.10.6.Final
no fix listed
2
5200710/hadoop:3.2.3-java8092d3088a5fb
netty@3.10.6.Final
no fix listed
1
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
netty@3.10.5.Final
no fix listed
1
adagber/planner:v1.0e5c1ed097752
netty-codec-http2@4.1.42.Final
4.1.61.Final
1
amartinm82/planner:v2.01184353ff57b
netty-codec-http2@4.1.42.Final
4.1.61.Final
1
apache/druid:29.0.10cef139b6bf1
netty@3.10.5.Final
no fix listed
1
apache/hadoop:3af361b20bec0
netty@3.10.6.Final
no fix listed
1
apacheignite/ignite:2.7.0d7deab68b8fa
netty@3.10.6.Final
no fix listed
1
apache/iotdb:0.13.3-nodeafa47bf1692a
netty-codec-http2@4.1.59.Final
4.1.61.Final
1
apache/nifi-registry:1.14.0090b7f87ec7f
netty-codec-http2@4.1.33.Final
4.1.61.Final
1
apache/nifi-registry:0.8.0974efa2f21da
netty-codec-http2@4.1.33.Final
4.1.61.Final
1
apachepinot/pinot:latest-jdk110018bb04ced7
netty@3.9.6.Final
no fix listed
1
apachepulsar/pulsar:2.10.03b262ab7a7d9
netty@3.10.6.Final
no fix listed
1
apachepulsar/pulsar:2.6.14db6ff0b4045
netty@3.10.6.Final
netty-codec-http2@4.1.48.Final
no fix listed
4.1.61.Final
1
apachepulsar/pulsar:2.9.0d056c89b7131
netty@3.10.6.Final
netty-codec-http2@4.1.51.Final
no fix listed
4.1.61.Final
1
apachepulsar/pulsar:2.8.2d538416d5afe
netty@3.10.6.Final
netty-codec-http2@4.1.51.Final
no fix listed
4.1.61.Final
1
apache/shenyu-admin:2.5.1e2be712fc4f4
netty-codec-http2@4.1.38.Final
4.1.61.Final
1
apache/shenyu-bootstrap:2.5.11bd5756f6273
netty-codec-http2@4.1.38.Final
4.1.61.Final
1
apache/skywalking-oap-server:8.1.0-es7641237e0299b
netty@3.10.5.Final
netty-codec-http2@4.1.42.Final
no fix listed
4.1.61.Final
1
apicurio/apicurio-registry-jpa:1.3.2.Final44eeddd3562c
netty-codec-http2@4.1.49.Final
4.1.61.Final
1
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
netty-codec-http2@4.1.49.Final
4.1.61.Final
1
arturisimo/planner:v1.0fff9de644941
netty-codec-http2@4.1.42.Final
4.1.61.Final
1
assistiot/authorization_svr:latestdb9361dad79b
netty@3.7.0.Final
no fix listed
1
assistiot/cybersecurity-monitoring_id-elk:latestba1d85ec3739
netty-codec-http2@4.1.45.Final
4.1.61.Final
1
assistiot/sdn_controller:2.4.0ea254b6d8a31
netty@3.10.5.Final
netty-codec-http2@4.1.35.Final
no fix listed
4.1.61.Final
1
atomix/atomix:3.1.127738ff4f5c63
netty-codec-http2@4.1.27.Final
4.1.61.Final
1
bivas/presto:0.19605545994f806
netty@3.10.6.Final
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.