StackRadar

CVE-2026-10051

Medium

Advisory

Published 22 Jul 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.9
base score, highest
EPSS
0.003
23rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
59
of 17,781 indexed, latest versions
Container images
48
deployed by those charts
Fix available
1 of 1
affected package

Eclipse Jetty: Cross-Request Leakage for trailers on HTTP/1.1 keep-alive connections

Carried by container images the latest versions of 59 of 17,781 indexed charts deploy, on 48 images.

Affected packageAffected versionsFixed inImages
jetty-servermaven12.0.9, 12.0.11, 12.0.12, 12.0.15+14 more12.0.36, 12.1.1048
OSV records
GHSA-f4v5-65jj-pcr2

Charts affected

59 by stars
ChartLatestAffected imagesRadar Score
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-10051.

Container imageDigestPackageFixed in
trinodb/trino:45038c6f24ab1a4
jetty-server@12.0.9
12.0.36

Open the chart page →

21,211
radar-kafkaradar-baseVerified publisher0.4.11 of 2See more

radar-kafka radar-base 0.4.1

1 of the 2 container images this version deploys carry CVE-2026-10051.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.46.0ac434a48ac2b
jetty-server@12.0.16
12.0.36

Open the chart page →

4,219
strimzi-kafka-operatorradar-baseVerified publisher0.46.01 of 1See more

strimzi-kafka-operator radar-base 0.46.0

1 of the 1 container images this version deploys carry CVE-2026-10051.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.46.0ac434a48ac2b
jetty-server@12.0.16
12.0.36

Open the chart page →

1,951
stirling-pdfrubxkubeVerified publisher0.1.21 of 1See more

stirling-pdf rubxkube 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-10051.

Container imageDigestPackageFixed in
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
jetty-server@12.1.8
12.1.10

Open the chart page →

6,207
suwayomirubxkubeVerified publisher0.1.21 of 1See more

suwayomi rubxkube 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-10051.

Container imageDigestPackageFixed in
ghcr.io/suwayomi/suwayomi-server:v2.3.2320d2c3218c7f9f
jetty-server@12.1.8
12.1.10

Open the chart page →

1,610
photonschichtelVerified publisher0.2.01 of 1See more

photon schichtel 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-10051.

Container imageDigestPackageFixed in
rtuszik/photon-docker:2.4.021549c60f9e6
jetty-server@12.1.8
12.1.10

Open the chart page →

2,816
kafkatwomartensVerified publisher0.2.11 of 2See more

kafka twomartens 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-10051.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:latest0ad069035863
jetty-server@12.0.34
12.0.36

Open the chart page →

1,551
hazelcastwenerme5.10.21 of 2See more

hazelcast wenerme 5.10.2

1 of the 2 container images this version deploys carry CVE-2026-10051.

Container imageDigestPackageFixed in
hazelcast/management-center:5.5.2991ddb27c251
jetty-server@12.0.12
12.0.36

Open the chart page →

2,634
metabasewiremindVerified publisher2.27.5-wiremind01 of 1See more

metabase wiremind 2.27.5-wiremind0

1 of the 1 container images this version deploys carry CVE-2026-10051.

Container imageDigestPackageFixed in
metabase/metabase:v0.61.1.x9491ed11c901
jetty-server@12.1.7
12.1.10

Open the chart page →

1,639

Container images carrying it

48 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.2.2:8.2.2-1-ubi98e01c0305844
jetty-server@12.0.34
12.0.36
7
apache/druid:37.0.00116fb802786
jetty-server@12.1.8
12.1.10
2
apache/kafka:4.3.177e3df905404
jetty-server@12.0.34
12.0.36
2
gisaia/arlas-permissions-server:28.0.0e612fc722e02
jetty-server@12.1.8
12.1.10
2
gisaia/arlas-persistence-server:28.0.0f667e0ee79be
jetty-server@12.1.8
12.1.10
2
gisaia/arlas-server:28.0.04e693e7b6f37
jetty-server@12.1.8
12.1.10
2
graviteeio/apim-management-api:4.12.19-debian27374522cd04
jetty-server@12.1.9
12.1.10
2
hazelcast/management-center:5.5.2991ddb27c251
jetty-server@12.0.12
12.0.36
2
jenkins/jenkins:2.541.3-jdk21c4098086090c
jetty-server@12.1.5
12.1.10
2
metabase/metabase:v0.61.1.x9491ed11c901
jetty-server@12.1.7
12.1.10
2
ghcr.io/appscode/inbox-server:latest:postgres-latest536358d7b17e
jetty-server@12.0.20
12.0.36
2
ghcr.io/janssenproject/jans/auth-server:0.0.0-nightly7752874e71d8
jetty-server@12.1.8
12.1.10
2
ghcr.io/janssenproject/jans/casa:0.0.0-nightly3f2d14563495
jetty-server@12.1.8
12.1.10
2
ghcr.io/janssenproject/jans/config-api:0.0.0-nightly900e2b88bd08
jetty-server@12.1.8
12.1.10
2
ghcr.io/janssenproject/jans/fido2:0.0.0-nightly2a797804f08c
jetty-server@12.1.8
12.1.10
2
ghcr.io/janssenproject/jans/scim:0.0.0-nightly096b8bcbbe45
jetty-server@12.1.8
12.1.10
2
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.1.1-1-ubi9d20bd62f0182
jetty-server@12.0.25
12.0.36
2
quay.io/strimzi/operator:0.46.0ac434a48ac2b
jetty-server@12.0.16
12.0.36
2
alfio/alf.io:2.0-M5-26060c836a081446
jetty-server@12.0.34
12.0.36
1
apache/activemq-artemis:2.44.00305c26f19ed
jetty-server@12.1.3
12.1.10
1
apache/kafka:4.1.0bff074a5d005
jetty-server@12.0.22
12.0.36
1
confluentinc/cp-kafka:latest0ad069035863
jetty-server@12.0.34
12.0.36
1
confluentinc/cp-schema-registry:latestf0cfd047a839
jetty-server@12.0.35
12.0.36
1
dbeaver/cloudbeaver:26.1.287ab86d00f8c
jetty-server@12.1.7
12.1.10
1
dependencytrack/apiserver:4.14.21ba4f004e1ec
jetty-server@12.1.7
12.1.10
1
gridgain/cloud-connector:2025.5.15ab838d7d3cb
jetty-server@12.0.31
12.0.36
1
keyfactor/signserver-ce:7.3.2798fbbe00283
jetty-server@12.0.15
12.0.36
1
library/neo4j:2026.05.0-enterprise2caf944aa4a5
jetty-server@12.1.8
12.1.10
1
library/neo4j:2026.02.25ab4ab0358cf
jetty-server@12.0.25
12.0.36
1
library/neo4j:2026.05.06c162e2432f8
jetty-server@12.1.8
12.1.10
1
plantuml/plantuml-server:jetty-v1.2026.85f6f99ec2fc1
jetty-server@12.1.6
12.1.10
1
resurfaceio/resurface:3.7.84d5cda2f64109
jetty-server@12.0.16
12.0.36
1
rtuszik/photon-docker:2.4.021549c60f9e6
jetty-server@12.1.8
12.1.10
1
soldevelo/kafka:4.0.0-debian-12-r0cfdc08c2f577
jetty-server@12.0.15
12.0.36
1
stain/jena-fuseki:latestb1d0c96f19ad
jetty-server@12.0.11
12.0.36
1
tchiotludo/akhq:0.28.0c2824dc2ae44
jetty-server@12.1.8
12.1.10
1
trinodb/trino:4801565e8cac299
jetty-server@12.1.7
12.1.10
1
trinodb/trino:45038c6f24ab1a4
jetty-server@12.0.9
12.0.36
1
trinodb/trino:4815b5e0a97f599
jetty-server@12.1.9
12.1.10
1
trinodb/trino:4796af989b0846d
jetty-server@12.1.5
12.1.10
1
vespaengine/vespa:8.526.1569b160f58211
jetty-server@12.0.21
12.0.36
1
ghcr.io/comet-ml/opik/opik-backend:2.2.5950a7aa0562f5
jetty-server@12.1.9
12.1.10
1
ghcr.io/devops-ia/cp-schema-registry:8.1.1-msk-iam-auth2.3.530d1a445acc7
jetty-server@12.0.25
12.0.36
1
ghcr.io/open-telemetry/demo:3.0.0-kafka0601750a3ca4
jetty-server@12.0.34
12.0.36
1
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
jetty-server@12.1.8
12.1.10
1
ghcr.io/suwayomi/suwayomi-server:v2.3.2320d2c3218c7f9f
jetty-server@12.1.8
12.1.10
1
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.1.0-1-ubi99026dbbf280d
jetty-server@12.0.25
12.0.36
1
public.ecr.aws/v0r6c2e2/trino:latestc265156b00d1
jetty-server@12.0.16
12.0.36
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.