CVE-2022-24823

Medium

Advisory

Published 10 May 2022In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.010; 62nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 152; of 17,781 indexed, latest versions
Container images: 172; deployed by those charts
Fix available: 1 of 1; affected package

Local Information Disclosure Vulnerability in io.netty:netty-codec-http

Carried by container images the latest versions of 152 of 17,781 indexed charts deploy, on 172 images.

Affected package	Affected versions	Fixed in	Images
netty-codec-httpmaven	4.0.27.Final, 4.0.52.Final, 4.1.12.Final, 4.1.13.Final+36 more	4.1.77.Final	172

OSV records: GHSA-269q-hmxg-m83q

Charts affected

152 by stars

Chart

Latest

Affected images

Radar Score

apicurio-registry-sqlwitcom-gmbh

0.1.0

1 of 1 See more

apicurio-registry-sql witcom-gmbh 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-24823.

Container image	Digest	Package	Fixed in
apicurio/apicurio-registry-jpa :1.3.2.Final	44eeddd3562c	netty-codec-http@4.1.49.Final	4.1.77.Final

Open the chart page →

3,424

opendistro-eswitcom-gmbh

1.13.3

1 of 3 See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry CVE-2022-24823.

Container image	Digest	Package	Fixed in
amazon/opendistro-for-elasticsearch :1.13.3	2acfa1dcc5f8	netty-codec-http@4.1.45.Final	4.1.77.Final

Open the chart page →

5,806

Container images carrying it

172 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
thmmniii/fbs-runner :v1.27.1	86105349c1a3	netty-codec-http@4.1.49.Final	4.1.77.Final	1
torrespro/mca-worker :2.0.0	6d3bd305a1ba	netty-codec-http@4.1.42.Final	4.1.77.Final	1
trinodb/trino :405	ee80ab5eeab2	netty-codec-http@4.1.72.Final	4.1.77.Final	1
voltha/voltha-onos :5.1.8	e038acb950d3	netty-codec-http@4.1.35.Final	4.1.77.Final	1
vromero/activemq-artemis :2.16.0	408d6a46b153	netty-codec-http@4.1.51.Final	4.1.77.Final	1
wavefronthq/proxy :9.2	d1064d28f6eb	netty-codec-http@4.1.50.Final	4.1.77.Final	1
xeotek/kadeck :4.2.9	4c6b04d9ce55	netty-codec-http@4.1.70.Final	4.1.77.Final	1
yuzutech/kroki :0.17.0	192b7b27c857	netty-codec-http@4.1.74.Final	4.1.77.Final	1
zammad/zammad-docker-compose :zammad-elasticsearch-4.1.0-31	8274d75a51fc	netty-codec-http@4.1.49.Final	4.1.77.Final	1
zbalogh/reservation-api-server :1.0.9	7c247e399a1f	netty-codec-http@4.1.45.Final	4.1.77.Final	1
gcr.io/spinnaker-marketplace/halyard :1.32.0	0ee5f968d2ab	netty-codec-http@4.1.45.Final	4.1.77.Final	1
ghcr.io/data-fair/elasticsearch :7.17.1	aa45adaf59a7	netty-codec-http@4.1.66.Final	4.1.77.Final	1
ghcr.io/fleeksoft/hbase/hdfs :3.3.3.2	ac62269785ac	netty-codec-http@4.1.61.Final	4.1.77.Final	1
ghcr.io/jens-maus/raspberrymatic :3.83.6.20250824	4b22b4f407c4	netty-codec-http@4.1.67.Final	4.1.77.Final	1
ghcr.io/komputing/fauceth :release	4ab8fa4143b4	netty-codec-http@4.1.69.Final	4.1.77.Final	1
ghcr.io/kvaps/linstor-controller :v1.14.0	00ce11c31087	netty-codec-http@4.1.51.Final	4.1.77.Final	1
ghcr.io/kvaps/linstor-satellite :v1.14.0	a573fb9bc809	netty-codec-http@4.1.51.Final	4.1.77.Final	1
ghcr.io/melodyyangaws/hive-metastore :3.0.0	e949b0f733f0	netty-codec-http@4.1.61.Final	4.1.77.Final	1
ghcr.io/openccu/openccu :3.89.8.20260719	b2de2ff6e8e0	netty-codec-http@4.1.67.Final	4.1.77.Final	1
quay.io/apicurio/apicurio-registry-kube-sync :1.0.1	70ef31840269	netty-codec-http@4.1.68.Final	4.1.77.Final	1
quay.io/fiware/canis-major :1.5.15	bb40472e4ff5	netty-codec-http@4.1.73.Final	4.1.77.Final	1
quay.io/fiware/endpoint-configuration-service :0.4.3	0dc38a87b844	netty-codec-http@4.1.69.Final	4.1.77.Final	1