CVE-2022-24823

Medium

Advisory

Published 10 May 2022In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.010; 62nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 152; of 17,781 indexed, latest versions
Container images: 172; deployed by those charts
Fix available: 1 of 1; affected package

Local Information Disclosure Vulnerability in io.netty:netty-codec-http

Carried by container images the latest versions of 152 of 17,781 indexed charts deploy, on 172 images.

Affected package	Affected versions	Fixed in	Images
netty-codec-httpmaven	4.0.27.Final, 4.0.52.Final, 4.1.12.Final, 4.1.13.Final+36 more	4.1.77.Final	172

OSV records: GHSA-269q-hmxg-m83q

Charts affected

152 by stars

Chart

Latest

Affected images

Radar Score

apicurio-registry-sqlwitcom-gmbh

0.1.0

1 of 1 See more

apicurio-registry-sql witcom-gmbh 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-24823.

Container image	Digest	Package	Fixed in
apicurio/apicurio-registry-jpa :1.3.2.Final	44eeddd3562c	netty-codec-http@4.1.49.Final	4.1.77.Final

Open the chart page →

3,424

opendistro-eswitcom-gmbh

1.13.3

1 of 3 See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry CVE-2022-24823.

Container image	Digest	Package	Fixed in
amazon/opendistro-for-elasticsearch :1.13.3	2acfa1dcc5f8	netty-codec-http@4.1.45.Final	4.1.77.Final

Open the chart page →

5,806

Container images carrying it

172 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
apache/skywalking-ui :8.9.1	80530f0308a5	netty-codec-http@4.1.63.Final	4.1.77.Final	1
apicurio/apicurio-registry-jpa :1.3.2.Final	44eeddd3562c	netty-codec-http@4.1.49.Final	4.1.77.Final	1
apicurio/apicurio-registry-kafkasql :2.1.0.Final	a97d67487532	netty-codec-http@4.1.49.Final	4.1.77.Final	1
arturisimo/planner :v1.0	fff9de644941	netty-codec-http@4.1.42.Final	4.1.77.Final	1
assistiot/cybersecurity-monitoring_id-elk :latest	ba1d85ec3739	netty-codec-http@4.1.49.Final	4.1.77.Final	1
assistiot/cybersecurity-monitoring_ir-elk :latest	4228b7a8ef40	netty-codec-http@4.1.49.Final	4.1.77.Final	1
assistiot/identity-manager_kc :latest	0df4b4fa899a	netty-codec-http@4.1.76.Final	4.1.77.Final	1
assistiot/sdn_controller :2.4.0	ea254b6d8a31	netty-codec-http@4.1.35.Final	4.1.77.Final	1
atlassian/confluence-server :7.10.0	3b9222ab32ef	netty-codec-http@4.1.33.Final	4.1.77.Final	1
atomix/atomix :3.1.12	7738ff4f5c63	netty-codec-http@4.1.27.Final	4.1.77.Final	1
choerodon/event-store-service :0.8.0	3c94c97f6f69	netty-codec-http@4.0.27.Final	4.1.77.Final	1
confluentinc/cp-enterprise-control-center :6.1.0	f2975d507a2a	netty-codec-http@4.1.50.Final	4.1.77.Final	1
confluentinc/cp-enterprise-kafka :6.1.0	8f1544df1f48	netty-codec-http@4.1.45.Final	4.1.77.Final	1
confluentinc/cp-kafka-connect :6.1.0	4bc70a83ca6f	netty-codec-http@4.1.47.Final	4.1.77.Final	1
confluentinc/cp-kafka-rest :6.1.0	b0b7aa26254a	netty-codec-http@4.1.50.Final	4.1.77.Final	1
confluentinc/cp-ksqldb-server :6.1.0	ee403d5b9090	netty-codec-http@4.1.45.Final	4.1.77.Final	1
confluentinc/cp-schema-registry :6.1.0	b651d4b6185a	netty-codec-http@4.1.45.Final	4.1.77.Final	1
datappeal/hive-metastore :latest	e38c085a3567	netty-codec-http@4.1.17.Final	4.1.77.Final	1
davidvmar/urjc-davidvmar-worker :1.0.1	0d221e834a21	netty-codec-http@4.1.42.Final	4.1.77.Final	1
dbanda/livy :0.8	0ca125e68e53	netty-codec-http@4.1.17.Final	4.1.77.Final	1
dbanda/spark :2.4.6	d0e6367876ae	netty-codec-http@4.1.17.Final	4.1.77.Final	1
deltaio/delta-sharing-server :0.2.0	8b75118187c5	netty-codec-http@4.1.63.Final	4.1.77.Final	1
dremio/dremio-oss :24.1.0	80ed2e3b7c43	netty-codec-http@4.1.52.Final	4.1.77.Final	1
elastictranscoder/media-storage :f6d861a0	26208b8c2359	netty-codec-http@4.1.65.Final	4.1.77.Final	1
emeraldpay/dshackle :0.14.0	126f0ae0b388	netty-codec-http@4.1.70.Final	4.1.77.Final	1
emeraldpay/dshackle :0.12	ac2a4bc66ab6	netty-codec-http@4.1.70.Final	4.1.77.Final	1
empathyco/elasticsearch :7.17.2-memlock	03e724e41eeb	netty-codec-http@4.1.66.Final	4.1.77.Final	1
expediagroup/pitchfork :1.31	4f2cf61e7de9	netty-codec-http@4.1.68.Final	4.1.77.Final	1
fjvela/urjc-fjvela-worker :1.0.1	70cebf67bd66	netty-codec-http@4.1.42.Final	4.1.77.Final	1
folioci/mod-aes :latest	6d67e9564270	netty-codec-http@4.1.60.Final	4.1.77.Final	1
folioci/mod-codex-inventory :latest	6d53ed758fd1	netty-codec-http@4.1.65.Final	4.1.77.Final	1
folioci/mod-marccat :latest	1b57d690d568	netty-codec-http@4.1.22.Final	4.1.77.Final	1
fonoster/routr :1.0.0-rc5	2ca65af17cbc	netty-codec-http@4.1.32.Final	4.1.77.Final	1
franrobles8/planner :v3.0	99985392d63c	netty-codec-http@4.1.42.Final	4.1.77.Final	1
geoservercloud/geoserver-cloud-gateway :1.0-RC2	ca58b74529cd	netty-codec-http@4.1.51.Final	4.1.77.Final	1
geoservercloud/geoserver-cloud-rest :1.0-RC2	5dc0c93a1710	netty-codec-http@4.1.51.Final	4.1.77.Final	1
geoservercloud/geoserver-cloud-wcs :1.0-RC2	47ae1bdb4bcc	netty-codec-http@4.1.51.Final	4.1.77.Final	1
geoservercloud/geoserver-cloud-webui :1.0-RC2	28c3e5a8c5a3	netty-codec-http@4.1.51.Final	4.1.77.Final	1
geoservercloud/geoserver-cloud-wfs :1.0-RC2	8c70ee06d5ab	netty-codec-http@4.1.51.Final	4.1.77.Final	1
geoservercloud/geoserver-cloud-wms :1.0-RC2	42775ba6a4da	netty-codec-http@4.1.51.Final	4.1.77.Final	1
gotson/komga :0.99.4	9b15ea6bfc30	netty-codec-http@4.1.65.Final	4.1.77.Final	1
gradiant/hdfs :3.2.2	e3bf364fe713	netty-codec-http@4.1.17.Final	4.1.77.Final	1
gurolakman/smsf-configuration :1.0.4	9abb3882bcbd	netty-codec-http@4.1.75.Final	4.1.77.Final	1
gurolakman/smsf-dispatcher :1.0.4	6537e8ed8de8	netty-codec-http@4.1.75.Final	4.1.77.Final	1
gurolakman/smsf-momt :1.0.4	ce23b20a8a17	netty-codec-http@4.1.75.Final	4.1.77.Final	1
gurolakman/smsf-registration :1.0.4	b22e746edd5d	netty-codec-http@4.1.75.Final	4.1.77.Final	1
gurolakman/ussigw-configuration :1.0.4	bf18525c5ad9	netty-codec-http@4.1.75.Final	4.1.77.Final	1
gurolakman/ussigw-core :1.0.4	8739565c3ea2	netty-codec-http@4.1.75.Final	4.1.77.Final	1
hazelcast/hazelcast-jet :4.5.3	a825ecbe9fda	netty-codec-http@4.1.72.Final	4.1.77.Final	1
hivemq/hivemq4 :dns-4.5.14	4d194450d48e	netty-codec-http@4.1.72.Final	4.1.77.Final	1