CVE-2025-55163
HighAdvisory
Published 13 Aug 2025In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.010
- 62nd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 255
- of 17,781 indexed, latest versions
- Container images
- 294
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Netty affected by MadeYouReset HTTP/2 DDoS vulnerability
Carried by container images the latest versions of 255 of 17,781 indexed charts deploy, on 294 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| netty-codec-http2maven | 4.1.12.Final, 4.1.19.Final, 4.1.22.Final, 4.1.24.Final+63 more | 4.1.124.Final | 294 |
- OSV records
- GHSA-prj3-ccx8-p6x4
Charts affected
255 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| opendistro-eswitcom-gmbh | 1.13.3 | 1 of 3See more | 5,806 |
| ygdrassil-monitoringygdrassilVerified publisher | 0.4.0 | 1 of 10See more | 9,381 |
| zahori-processzahoriVerified publisher | 1.0.1 | 1 of 1See more | 3,480 |
| zahori-serverzahoriVerified publisher | 1.0.1 | 1 of 2See more | 5,846 |
| keycloakxzaks | 2.2.0 | 1 of 1See more | 6,016 |
Container images carrying it
294 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| seldonio/ | ba81b17f00eb | netty-codec-http2 | 4.1.124.Final | 1 |
| seldonio/ | eea0d3f578ca | netty-codec-http2 | 4.1.124.Final | 1 |
| slagattollas/ | cecd95e31486 | netty-codec-http2 | 4.1.124.Final | 1 |
| slagattollas/ | dc63973dae0d | netty-codec-http2 | 4.1.124.Final | 1 |
| snowplow/ | 41d318841516 | netty-codec-http2 | 4.1.124.Final | 1 |
| structurizr/ | 4b5ffb5119c8 | netty-codec-http2 | 4.1.124.Final | 1 |
| thingsboard/ | bd45a09d85d9 | netty-codec-http2 | 4.1.124.Final | 1 |
| thingsboard/ | a06f53c5e2da | netty-codec-http2 | 4.1.124.Final | 1 |
| thingsboard/ | 030f316ce301 | netty-codec-http2 | 4.1.124.Final | 1 |
| thingsboard/ | 645f43b688f7 | netty-codec-http2 | 4.1.124.Final | 1 |
| thingsboard/ | f40a542832c4 | netty-codec-http2 | 4.1.124.Final | 1 |
| thmmniii/ | 5438517d9fc2 | netty-codec-http2 | 4.1.124.Final | 1 |
| thmmniii/ | 86105349c1a3 | netty-codec-http2 | 4.1.124.Final | 1 |
| torrespro/ | 6d3bd305a1ba | netty-codec-http2 | 4.1.124.Final | 1 |
| traccar/ | 621c8d6d46fd | netty-codec-http2 | 4.1.124.Final | 1 |
| treskon/ | 88e813f22347 | netty-codec-http2 | 4.1.124.Final | 1 |
| trinodb/ | 38c6f24ab1a4 | netty-codec-http2 | 4.1.124.Final | 1 |
| trinodb/ | ee80ab5eeab2 | netty-codec-http2 | 4.1.124.Final | 1 |
| viniciusfcf/ | bba8ee1b5cd5 | netty-codec-http2 | 4.1.124.Final | 1 |
| vitalii1992/ | aabe6ac39356 | netty-codec-http2 | 4.1.124.Final | 1 |
| vlebediantsev/ | df8bf38c535b | netty-codec-http2 | 4.1.124.Final | 1 |
| voltha/ | e038acb950d3 | netty-codec-http2 | 4.1.124.Final | 1 |
| vrijbrp/ | 5c770c2ae48c | netty-codec-http2 | 4.1.124.Final | 1 |
| wavefronthq/ | d1064d28f6eb | netty-codec-http2 | 4.1.124.Final | 1 |
| wazuh/ | a7a2076b167e | netty-codec-http2 | 4.1.124.Final | 1 |
| xeotek/ | 39a3b37a17c5 | netty-codec-http2 | 4.1.124.Final | 1 |
| xeotek/ | 4c6b04d9ce55 | netty-codec-http2 | 4.1.124.Final | 1 |
| yuzutech/ | 192b7b27c857 | netty-codec-http2 | 4.1.124.Final | 1 |
| zahoriaut/ | 351f8a220ed7 | netty-codec-http2 | 4.1.124.Final | 1 |
| zahoriaut/ | b2de13916f3e | netty-codec-http2 | 4.1.124.Final | 1 |
| zbalogh/ | 7c247e399a1f | netty-codec-http2 | 4.1.124.Final | 1 |
| gcr.io/ | 0ee5f968d2ab | netty-codec-http2 | 4.1.124.Final | 1 |
| ghcr.io/ | 4a2824296412 | netty-codec-http2 | 4.1.124.Final | 1 |
| ghcr.io/ | d9d796a1b846 | netty-codec-http2 | 4.1.124.Final | 1 |
| ghcr.io/ | 503c00321502 | netty-codec-http2 | 4.1.124.Final | 1 |
| ghcr.io/ | f3d0c7d35498 | netty-codec-http2 | 4.1.124.Final | 1 |
| ghcr.io/ | e310642de2e2 | netty-codec-http2 | 4.1.124.Final | 1 |
| ghcr.io/ | c144bdd688d7 | netty-codec-http2 | 4.1.124.Final | 1 |
| ghcr.io/ | 4b22b4f407c4 | netty-codec-http2 | 4.1.124.Final | 1 |
| ghcr.io/ | 185da4ad3e88 | netty-codec-http2 | 4.1.124.Final | 1 |
| ghcr.io/ | 4ab8fa4143b4 | netty-codec-http2 | 4.1.124.Final | 1 |
| ghcr.io/ | 865ff4da5686 | netty-codec-http2 | 4.1.124.Final | 1 |
| ghcr.io/ | 00ce11c31087 | netty-codec-http2 | 4.1.124.Final | 1 |
| ghcr.io/ | a573fb9bc809 | netty-codec-http2 | 4.1.124.Final | 1 |
| ghcr.io/ | b2de2ff6e8e0 | netty-codec-http2 | 4.1.124.Final | 1 |
| ghcr.io/ | 77cefdab4d5c | netty-codec-http2 | 4.1.124.Final | 1 |
| ghcr.io/ | a59e5eead495 | netty-codec-http2 | 4.1.124.Final | 1 |
| ghcr.io/ | bfedf47bb5e0 | netty-codec-http2 | 4.1.124.Final | 1 |
| ghcr.io/ | 9efe3c74d55f | netty-codec-http2 | 4.1.124.Final | 1 |
| ghcr.io/ | d46ce7b96482 | netty-codec-http2 | 4.1.124.Final | 1 |