CVE-2025-55163
HighAdvisory
Published 13 Aug 2025In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.010
- 62nd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 255
- of 17,781 indexed, latest versions
- Container images
- 294
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Netty affected by MadeYouReset HTTP/2 DDoS vulnerability
Carried by container images the latest versions of 255 of 17,781 indexed charts deploy, on 294 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| netty-codec-http2maven | 4.1.12.Final, 4.1.19.Final, 4.1.22.Final, 4.1.24.Final+63 more | 4.1.124.Final | 294 |
- OSV records
- GHSA-prj3-ccx8-p6x4
Charts affected
255 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| opendistro-eswitcom-gmbh | 1.13.3 | 1 of 3See more | 5,806 |
| ygdrassil-monitoringygdrassilVerified publisher | 0.4.0 | 1 of 10See more | 9,381 |
| zahori-processzahoriVerified publisher | 1.0.1 | 1 of 1See more | 3,480 |
| zahori-serverzahoriVerified publisher | 1.0.1 | 1 of 2See more | 5,846 |
| keycloakxzaks | 2.2.0 | 1 of 1See more | 6,016 |
Container images carrying it
294 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| confluentinc/ | f2975d507a2a | netty-codec-http2 | 4.1.124.Final | 1 |
| confluentinc/ | 8f1544df1f48 | netty-codec-http2 | 4.1.124.Final | 1 |
| confluentinc/ | 4bc70a83ca6f | netty-codec-http2 | 4.1.124.Final | 1 |
| confluentinc/ | b0b7aa26254a | netty-codec-http2 | 4.1.124.Final | 1 |
| confluentinc/ | 8ec46c27982f | netty-codec-http2 | 4.1.124.Final | 1 |
| confluentinc/ | ee403d5b9090 | netty-codec-http2 | 4.1.124.Final | 1 |
| confluentinc/ | b651d4b6185a | netty-codec-http2 | 4.1.124.Final | 1 |
| consensys/ | bf6ecd2ea716 | netty-codec-http2 | 4.1.124.Final | 1 |
| davidvmar/ | 0d221e834a21 | netty-codec-http2 | 4.1.124.Final | 1 |
| deltaio/ | 8b75118187c5 | netty-codec-http2 | 4.1.124.Final | 1 |
| dremio/ | 80ed2e3b7c43 | netty-codec-http2 | 4.1.124.Final | 1 |
| drpcorg/ | 8858fae1859d | netty-codec-http2 | 4.1.124.Final | 1 |
| elastictranscoder/ | 26208b8c2359 | netty-codec-http2 | 4.1.124.Final | 1 |
| emeraldpay/ | 126f0ae0b388 | netty-codec-http2 | 4.1.124.Final | 1 |
| emeraldpay/ | ac2a4bc66ab6 | netty-codec-http2 | 4.1.124.Final | 1 |
| esperotech/ | 24d2d692d948 | netty-codec-http2 | 4.1.124.Final | 1 |
| expediagroup/ | 4f2cf61e7de9 | netty-codec-http2 | 4.1.124.Final | 1 |
| fiware/ | 92a3c5cf43c0 | netty-codec-http2 | 4.1.124.Final | 1 |
| fiware/ | efc6793388cc | netty-codec-http2 | 4.1.124.Final | 1 |
| fjvela/ | 70cebf67bd66 | netty-codec-http2 | 4.1.124.Final | 1 |
| folioci/ | 6d67e9564270 | netty-codec-http2 | 4.1.124.Final | 1 |
| folioci/ | 995a25a33133 | netty-codec-http2 | 4.1.124.Final | 1 |
| folioci/ | 235a3fa4adc9 | netty-codec-http2 | 4.1.124.Final | 1 |
| folioci/ | 6d53ed758fd1 | netty-codec-http2 | 4.1.124.Final | 1 |
| folioci/ | d4138abfd30d | netty-codec-http2 | 4.1.124.Final | 1 |
| folioci/ | 3028f333778f | netty-codec-http2 | 4.1.124.Final | 1 |
| folioci/ | 1b57d690d568 | netty-codec-http2 | 4.1.124.Final | 1 |
| fonoster/ | 2ca65af17cbc | netty-codec-http2 | 4.1.124.Final | 1 |
| fonoster/ | d08a8a574a50 | netty-codec-http2 | 4.1.124.Final | 1 |
| fonoster/ | e0c823506eb2 | netty-codec-http2 | 4.1.124.Final | 1 |
| franrobles8/ | 99985392d63c | netty-codec-http2 | 4.1.124.Final | 1 |
| geoservercloud/ | ca58b74529cd | netty-codec-http2 | 4.1.124.Final | 1 |
| geoservercloud/ | 5dc0c93a1710 | netty-codec-http2 | 4.1.124.Final | 1 |
| geoservercloud/ | 47ae1bdb4bcc | netty-codec-http2 | 4.1.124.Final | 1 |
| geoservercloud/ | 28c3e5a8c5a3 | netty-codec-http2 | 4.1.124.Final | 1 |
| geoservercloud/ | 8c70ee06d5ab | netty-codec-http2 | 4.1.124.Final | 1 |
| geoservercloud/ | 42775ba6a4da | netty-codec-http2 | 4.1.124.Final | 1 |
| gotson/ | ba892ab3e082 | netty-codec-http2 | 4.1.124.Final | 1 |
| graviteeio/ | 07b7f6dc267a | netty-codec-http2 | 4.1.124.Final | 1 |
| graviteeio/ | a8eb04ee0c70 | netty-codec-http2 | 4.1.124.Final | 1 |
| graylog/ | 19de1aff48c2 | netty-codec-http2 | 4.1.124.Final | 1 |
| gurolakman/ | 9abb3882bcbd | netty-codec-http2 | 4.1.124.Final | 1 |
| gurolakman/ | 6537e8ed8de8 | netty-codec-http2 | 4.1.124.Final | 1 |
| gurolakman/ | ce23b20a8a17 | netty-codec-http2 | 4.1.124.Final | 1 |
| gurolakman/ | b22e746edd5d | netty-codec-http2 | 4.1.124.Final | 1 |
| gurolakman/ | bf18525c5ad9 | netty-codec-http2 | 4.1.124.Final | 1 |
| gurolakman/ | 8739565c3ea2 | netty-codec-http2 | 4.1.124.Final | 1 |
| hazelcast/ | 8fe26efde8e1 | netty-codec-http2 | 4.1.124.Final | 1 |
| hazelcast/ | a825ecbe9fda | netty-codec-http2 | 4.1.124.Final | 1 |
| hivemq/ | 241d6a8e1963 | netty-codec-http2 | 4.1.124.Final | 1 |