StackRadar

CVE-2026-33871

High

Advisory

Published 26 Mar 2026In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.011
64th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
315
of 17,781 indexed, latest versions
Container images
364
deployed by those charts
Fix available
1 of 1
affected package

Netty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass

Carried by container images the latest versions of 315 of 17,781 indexed charts deploy, on 364 images.

Affected packageAffected versionsFixed inImages
netty-codec-http2maven4.1.12.Final, 4.1.19.Final, 4.1.22.Final, 4.1.24.Final+75 more4.1.132.Final, 4.2.11.Final364
OSV records
GHSA-w9fj-cfpg-grvv

Charts affected

315 by stars
ChartLatestAffected imagesRadar Score
geoservercamptocamp20.0.36 of 12See more

geoserver camptocamp2 0.0.3

6 of the 12 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
netty-codec-http2@4.1.51.Final
4.1.132.Final
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
netty-codec-http2@4.1.51.Final
4.1.132.Final
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
netty-codec-http2@4.1.51.Final
4.1.132.Final
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
netty-codec-http2@4.1.51.Final
4.1.132.Final
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
netty-codec-http2@4.1.51.Final
4.1.132.Final
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
netty-codec-http2@4.1.51.Final
4.1.132.Final

Open the chart page →

88,335
opensearch-singlenodecaptnbpVerified publisher1.0.91 of 2See more

opensearch-singlenode captnbp 1.0.9

1 of the 2 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.15.01963b3ece46d
netty-codec-http2@4.1.108.Final
4.1.132.Final

Open the chart page →

1,073
rpc-routerchronicleVerified publisher0.2.91 of 1See more

rpc-router chronicle 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
drpcorg/dshackle:0.54.08858fae1859d
netty-codec-http2@4.1.97.Final
4.1.132.Final

Open the chart page →

6,447
pulsarcnieg1.0.82 of 2See more

pulsar cnieg 1.0.8

2 of the 2 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.6.14db6ff0b4045
netty-codec-http2@4.1.48.Final
4.1.132.Final
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
netty-codec-http2@4.1.24.Final
4.1.132.Final

Open the chart page →

16,860
sumo-besu-genesisconsensys0.1.751 of 1See more

sumo-besu-genesis consensys 0.1.75

1 of the 1 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
netty-codec-http2@4.1.74.Final
4.1.132.Final

Open the chart page →

7,963
sumo-besu-nodeconsensys0.1.751 of 4See more

sumo-besu-node consensys 0.1.75

1 of the 4 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
netty-codec-http2@4.1.74.Final
4.1.132.Final

Open the chart page →

7,963
cp-helm-chartscp-helm-charts0.6.16 of 8See more

cp-helm-charts cp-helm-charts 0.6.1

6 of the 8 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
netty-codec-http2@4.1.47.Final
4.1.132.Final
confluentinc/cp-enterprise-kafka:6.1.08f1544df1f48
netty-codec-http2@4.1.45.Final
4.1.132.Final
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
netty-codec-http2@4.1.47.Final
4.1.132.Final
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
netty-codec-http2@4.1.49.Final
4.1.132.Final
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
netty-codec-http2@4.1.49.Final
4.1.132.Final
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
netty-codec-http2@4.1.49.Final
4.1.132.Final

Open the chart page →

58,857
nifi-registryd4nVerified publisher1.0.01 of 2See more

nifi-registry d4n 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
apache/nifi-registry:1.26.07cdfd8deec92
netty-codec-http2@4.1.109.Final
4.1.132.Final

Open the chart page →

5,398
damap-chartdamapVerified publisher0.3.02 of 5See more

damap-chart damap 0.3.0

2 of the 5 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
ghcr.io/damap-org/damap-backend:5.0.0f3d0c7d35498
netty-codec-http2@4.1.108.Final
4.1.132.Final
quay.io/keycloak/keycloak:26.49409c59bdfb6
netty-codec-http2@4.1.128.Final
4.1.132.Final

Open the chart page →

13,936
eoloplannerdfa-amm-eoloplannerVerified publisher0.1.02 of 7See more

eoloplanner dfa-amm-eoloplanner 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
amartinm82/planner:v2.01184353ff57b
netty-codec-http2@4.1.42.Final
4.1.132.Final
oscarsotosanchez/toposervice:v1.0d4d020e9f272
netty-codec-http2@4.1.54.Final
4.1.132.Final

Open the chart page →

27,550
kafka-uidoubanVerified publisher1.5.21 of 1See more

kafka-ui douban 1.5.2

1 of the 1 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
ghcr.io/kafbat/kafka-ui:v1.2.0185da4ad3e88
netty-codec-http2@4.1.118.Final
4.1.132.Final

Open the chart page →

1,269
eoloplannerdreyg-jescribanob-chart-eoloplanner0.1.01 of 7See more

eoloplanner dreyg-jescribanob-chart-eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
oscarsotosanchez/toposervice:v1.0d4d020e9f272
netty-codec-http2@4.1.54.Final
4.1.132.Final

Open the chart page →

24,656
drogue-cloud-coredrogue-iotVerified publisher0.7.111 of 22See more

drogue-cloud-core drogue-iot 0.7.11

1 of the 22 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
netty-codec-http2@4.1.86.Final
4.1.132.Final

Open the chart page →

55,666
drogue-cloud-twindrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-twin drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
netty-codec-http2@4.1.86.Final
4.1.132.Final

Open the chart page →

6,915
dshackledysnixVerified publisher0.1.11 of 2See more

dshackle dysnix 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
emeraldpay/dshackle:0.12ac2a4bc66ab6
netty-codec-http2@4.1.70.Final
4.1.132.Final

Open the chart page →

2,237
mintakaeclipse-aeriosVerified publisher1.0.01 of 2See more

mintaka eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
fiware/mintaka:0.7.092a3c5cf43c0
netty-codec-http2@4.1.81.Final
4.1.132.Final

Open the chart page →

11,482
egeria-baseegeria-charts4.3.01 of 5See more

egeria-base egeria-charts 4.3.0

1 of the 5 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
netty-codec-http2@4.1.94.Final
4.1.132.Final

Open the chart page →

4,046
egeria-ctsegeria-charts4.3.01 of 3See more

egeria-cts egeria-charts 4.3.0

1 of the 3 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
netty-codec-http2@4.1.94.Final
4.1.132.Final

Open the chart page →

4,033
egeria-ptsegeria-charts4.3.01 of 3See more

egeria-pts egeria-charts 4.3.0

1 of the 3 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
netty-codec-http2@4.1.94.Final
4.1.132.Final

Open the chart page →

4,033
odpi-egeria-labegeria-charts4.3.01 of 4See more

odpi-egeria-lab egeria-charts 4.3.0

1 of the 4 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
netty-codec-http2@4.1.94.Final
4.1.132.Final

Open the chart page →

4,033
yaadeencircle360-ossVerified publisher0.2.11 of 1See more

yaade encircle360-oss 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
esperotech/yaade:latest24d2d692d948
netty-codec-http2@4.1.103.Final
4.1.132.Final

Open the chart page →

1,000
eolicplantseolicplantsVerified publisher0.1.02 of 7See more

eolicplants eolicplants 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
oscarsotosanchez/planner:v1.0730c00a099b8
netty-codec-http2@4.1.42.Final
4.1.132.Final
oscarsotosanchez/toposervice:v1.0d4d020e9f272
netty-codec-http2@4.1.54.Final
4.1.132.Final

Open the chart page →

27,291
eoloPlanteolo-plannerVerified publisher0.1.03 of 7See more

eoloPlant eolo-planner 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
netty-codec-http2@4.1.85.Final
4.1.132.Final
mastercloudapps/planner:v1.2340a950b311b2
netty-codec-http2@4.1.70.Final
4.1.132.Final
mastercloudapps/server:v2.23f3d24dfe2686
netty-codec-http2@4.1.82.Final
4.1.132.Final

Open the chart page →

27,537
eoloplannereoloplannerVerified publisher0.1.03 of 7See more

eoloplanner eoloplanner 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
netty-codec-http2@4.1.42.Final
4.1.132.Final
codeurjc/server:v1.0310bea5b1ee7
netty-codec-http2@4.1.82.Final
4.1.132.Final
codeurjc/toposervice:v1.09fb4c11e6a49
netty-codec-http2@4.1.85.Final
4.1.132.Final

Open the chart page →

32,205
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.03 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
netty-codec-http2@4.1.85.Final
4.1.132.Final
mastercloudapps/planner:v1.2340a950b311b2
netty-codec-http2@4.1.70.Final
4.1.132.Final
mastercloudapps/server:v2.23f3d24dfe2686
netty-codec-http2@4.1.82.Final
4.1.132.Final

Open the chart page →

27,537
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.02 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
franrobles8/planner:v3.099985392d63c
netty-codec-http2@4.1.54.Final
4.1.132.Final
oscarsotosanchez/toposervice:v1.0d4d020e9f272
netty-codec-http2@4.1.54.Final
4.1.132.Final

Open the chart page →

27,256
eoloplannereoloplanner-molynx-gat0.1.03 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
netty-codec-http2@4.1.82.Final
4.1.132.Final
codeurjc/toposervice:v1.09fb4c11e6a49
netty-codec-http2@4.1.85.Final
4.1.132.Final
molynx/planner:v1441c9f52f092
netty-codec-http2@4.1.70.Final
4.1.132.Final

Open the chart page →

28,482
eolo-plannereolo-planner-repo0.1.02 of 7See more

eolo-planner eolo-planner-repo 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
arturisimo/planner:v1.0fff9de644941
netty-codec-http2@4.1.42.Final
4.1.132.Final
codeurjc/toposervice:v1.09fb4c11e6a49
netty-codec-http2@4.1.85.Final
4.1.132.Final

Open the chart page →

27,096
eoloplanteoloplant1.0.03 of 7See more

eoloplant eoloplant 1.0.0

3 of the 7 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
netty-codec-http2@4.1.85.Final
4.1.132.Final
mastercloudapps/planner:v1.2340a950b311b2
netty-codec-http2@4.1.70.Final
4.1.132.Final
mastercloudapps/server:v2.23f3d24dfe2686
netty-codec-http2@4.1.82.Final
4.1.132.Final

Open the chart page →

27,537
eoloplantseoloplants-urjcVerified publisher0.1.03 of 7See more

eoloplants eoloplants-urjc 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
netty-codec-http2@4.1.82.Final
4.1.132.Final
codeurjc/toposervice:v1.09fb4c11e6a49
netty-codec-http2@4.1.85.Final
4.1.132.Final
lourdesmorente/new-planner:1.0.0608745878cdb
netty-codec-http2@4.1.42.Final
4.1.132.Final

Open the chart page →

27,721
servereoloserverVerified publisher0.1.03 of 7See more

server eoloserver 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
netty-codec-http2@4.1.42.Final
4.1.132.Final
codeurjc/server:v1.0310bea5b1ee7
netty-codec-http2@4.1.82.Final
4.1.132.Final
codeurjc/toposervice:v1.09fb4c11e6a49
netty-codec-http2@4.1.85.Final
4.1.132.Final

Open the chart page →

32,205
shenyuerdeng2.4.212 of 2See more

shenyu erdeng 2.4.21

2 of the 2 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.4.2e8b7c4ddd069
netty-codec-http2@4.1.43.Final
4.1.132.Final
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
netty-codec-http2@4.1.38.Final
4.1.132.Final

Open the chart page →

12,513
dshackleethereum-helm-chartsVerified publisher0.1.91 of 2See more

dshackle ethereum-helm-charts 0.1.9

1 of the 2 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
emeraldpay/dshackle:0.14.0126f0ae0b388
netty-codec-http2@4.1.70.Final
4.1.132.Final

Open the chart page →

2,021
faucethethereum-helm-chartsVerified publisher0.2.41 of 1See more

fauceth ethereum-helm-charts 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
ghcr.io/komputing/fauceth:release4ab8fa4143b4
netty-codec-http2@4.1.69.Final
4.1.132.Final

Open the chart page →

1,373
spring-boot-adminevryfs-ossVerified publisher0.1.101 of 1See more

spring-boot-admin evryfs-oss 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
quay.io/evryfs/spring-boot-admin:2.7.1060950ef63764
netty-codec-http2@4.1.86.Final
4.1.132.Final

Open the chart page →

5,998
fineractfineract-openshift0.1.11 of 4See more

fineract fineract-openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
apache/fineract:1.12.1a83cf1980609
netty-codec-http2@4.1.119.Final
4.1.132.Final

Open the chart page →

7,792
apollofiware0.1.41 of 1See more

apollo fiware 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
quay.io/fiware/apollo:0.0.1055330b1b60c1
netty-codec-http2@4.1.77.Final
4.1.132.Final

Open the chart page →

6,936
canis-majorfiware0.2.31 of 1See more

canis-major fiware 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
quay.io/fiware/canis-major:1.5.15bb40472e4ff5
netty-codec-http2@4.1.73.Final
4.1.132.Final

Open the chart page →

8,528
consent-facadefiware0.1.11 of 1See more

consent-facade fiware 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
quay.io/seamware/consent-facade:0.0.14be844c750c7e
netty-codec-http2@4.1.115.Final
4.1.132.Final

Open the chart page →

2,475
contract-managementfiware3.5.361 of 1See more

contract-management fiware 3.5.36

1 of the 1 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
quay.io/fiware/contract-management:3.3.122bcfcf874451
netty-codec-http2@4.1.115.Final
4.1.132.Final

Open the chart page →

2,411
credentials-config-servicefiware2.6.41 of 1See more

credentials-config-service fiware 2.6.4

1 of the 1 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
quay.io/fiware/credentials-config-service:3.4.3f2fbced76da8
netty-codec-http2@4.2.9.Final
4.2.11.Final

Open the chart page →

2,293
dss-validation-servicefiware0.0.191 of 1See more

dss-validation-service fiware 0.0.19

1 of the 1 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
quay.io/wi_stefan/dss-validation-service:0.0.18e928db29ee1
netty-codec-http2@4.1.115.Final
4.1.132.Final

Open the chart page →

4,536
endpoint-auth-servicefiware0.1.41 of 4See more

endpoint-auth-service fiware 0.1.4

1 of the 4 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
quay.io/fiware/endpoint-configuration-service:0.4.30dc38a87b844
netty-codec-http2@4.1.69.Final
4.1.132.Final

Open the chart page →

11,835
mintakafiware0.4.71 of 1See more

mintaka fiware 0.4.7

1 of the 1 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
fiware/mintaka:latestefc6793388cc
netty-codec-http2@4.1.81.Final
4.1.132.Final

Open the chart page →

7,019
scorpio-brokerfiware0.3.39 of 10See more

scorpio-broker fiware 0.3.3

9 of the 10 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:RegistrySubscriptionManager_2.1.001e11d800459
netty-codec-http2@4.1.70.Final
4.1.132.Final
scorpiobroker/scorpio:eureka-server_2.1.03f05a113a4be
netty-codec-http2@4.1.70.Final
4.1.132.Final
scorpiobroker/scorpio:AtContextServer_2.1.05073ceef2fa0
netty-codec-http2@4.1.70.Final
4.1.132.Final
scorpiobroker/scorpio:gateway_2.1.062dae3dd0eeb
netty-codec-http2@4.1.70.Final
4.1.132.Final
scorpiobroker/scorpio:RegistryManager_2.1.0a2cfcf0947fd
netty-codec-http2@4.1.70.Final
4.1.132.Final
scorpiobroker/scorpio:QueryManager_2.1.0b742a53b2803
netty-codec-http2@4.1.70.Final
4.1.132.Final
scorpiobroker/scorpio:HistoryManager_2.1.0b7fe27a06ff5
netty-codec-http2@4.1.70.Final
4.1.132.Final
scorpiobroker/scorpio:SubscriptionManager_2.1.0e08036670d66
netty-codec-http2@4.1.70.Final
4.1.132.Final
scorpiobroker/scorpio:EntityManager_2.1.0f02e8a429a08
netty-codec-http2@4.1.70.Final
4.1.132.Final

Open the chart page →

55,600
scorpiobrokerfiware0.1.29 of 10See more

scorpiobroker fiware 0.1.2

9 of the 10 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:RegistrySubscriptionManager_2.1.001e11d800459
netty-codec-http2@4.1.70.Final
4.1.132.Final
scorpiobroker/scorpio:eureka-server_2.1.03f05a113a4be
netty-codec-http2@4.1.70.Final
4.1.132.Final
scorpiobroker/scorpio:AtContextServer_2.1.05073ceef2fa0
netty-codec-http2@4.1.70.Final
4.1.132.Final
scorpiobroker/scorpio:gateway_2.1.062dae3dd0eeb
netty-codec-http2@4.1.70.Final
4.1.132.Final
scorpiobroker/scorpio:RegistryManager_2.1.0a2cfcf0947fd
netty-codec-http2@4.1.70.Final
4.1.132.Final
scorpiobroker/scorpio:QueryManager_2.1.0b742a53b2803
netty-codec-http2@4.1.70.Final
4.1.132.Final
scorpiobroker/scorpio:HistoryManager_2.1.0b7fe27a06ff5
netty-codec-http2@4.1.70.Final
4.1.132.Final
scorpiobroker/scorpio:SubscriptionManager_2.1.0e08036670d66
netty-codec-http2@4.1.70.Final
4.1.132.Final
scorpiobroker/scorpio:EntityManager_2.1.0f02e8a429a08
netty-codec-http2@4.1.70.Final
4.1.132.Final

Open the chart page →

55,600
scorpio-broker-aaiofiware0.4.151 of 1See more

scorpio-broker-aaio fiware 0.4.15

1 of the 1 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:scorpio-aaio_2.1.0db55012043df
netty-codec-http2@4.1.70.Final
4.1.132.Final

Open the chart page →

5,286
tm-forum-apifiware0.17.1519 of 19See more

tm-forum-api fiware 0.17.15

19 of the 19 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
quay.io/fiware/tmforum-account:1.18.06b25aac03414
netty-codec-http2@4.1.91.Final
4.1.132.Final
quay.io/fiware/tmforum-agreement:1.18.081e7025dc16d
netty-codec-http2@4.1.91.Final
4.1.132.Final
quay.io/fiware/tmforum-customer-bill-management:1.18.0dee901f1f75d
netty-codec-http2@4.1.91.Final
4.1.132.Final
quay.io/fiware/tmforum-customer-management:1.18.0d3519cebecd0
netty-codec-http2@4.1.91.Final
4.1.132.Final
quay.io/fiware/tmforum-party-catalog:1.18.07d6969a7393a
netty-codec-http2@4.1.91.Final
4.1.132.Final
quay.io/fiware/tmforum-party-role:1.18.052db89f17863
netty-codec-http2@4.1.91.Final
4.1.132.Final
quay.io/fiware/tmforum-product-catalog:1.18.0e409338726da
netty-codec-http2@4.1.91.Final
4.1.132.Final
quay.io/fiware/tmforum-product-inventory:1.18.03a5d6dd30f1d
netty-codec-http2@4.1.91.Final
4.1.132.Final
quay.io/fiware/tmforum-product-ordering-management:1.18.042c81c291f6f
netty-codec-http2@4.1.91.Final
4.1.132.Final
quay.io/fiware/tmforum-quote:1.18.0d9ca3a334352
netty-codec-http2@4.1.91.Final
4.1.132.Final
quay.io/fiware/tmforum-resource-catalog:1.18.0b0d853627c59
netty-codec-http2@4.1.91.Final
4.1.132.Final
quay.io/fiware/tmforum-resource-function-activation:1.18.062a5acb63fd1
netty-codec-http2@4.1.91.Final
4.1.132.Final
quay.io/fiware/tmforum-resource-inventory:1.18.0553b4a47730b
netty-codec-http2@4.1.91.Final
4.1.132.Final
quay.io/fiware/tmforum-resource-order-management:1.18.0dd1778ad6203
netty-codec-http2@4.1.91.Final
4.1.132.Final
quay.io/fiware/tmforum-service-catalog:1.18.074b0fad9e155
netty-codec-http2@4.1.91.Final
4.1.132.Final
quay.io/fiware/tmforum-service-inventory:1.18.04be54e8cb5c0
netty-codec-http2@4.1.91.Final
4.1.132.Final
quay.io/fiware/tmforum-service-order-management:1.18.0d2091785d544
netty-codec-http2@4.1.91.Final
4.1.132.Final
quay.io/fiware/tmforum-software-management:1.18.01b74a2f7ba67
netty-codec-http2@4.1.91.Final
4.1.132.Final
quay.io/fiware/tmforum-usage-management:1.18.042f190c42926
netty-codec-http2@4.1.91.Final
4.1.132.Final

Open the chart page →

35,112
trusted-issuers-listfiware0.18.71 of 1See more

trusted-issuers-list fiware 0.18.7

1 of the 1 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
quay.io/fiware/trusted-issuers-list:0.9.13c886ce5c056
netty-codec-http2@4.2.9.Final
4.2.11.Final

Open the chart page →

1,701
trusted-issuers-registryfiware0.13.01 of 1See more

trusted-issuers-registry fiware 0.13.0

1 of the 1 container images this version deploys carry CVE-2026-33871.

Container imageDigestPackageFixed in
quay.io/fiware/trusted-issuers-registry:0.11.1a8a9ec461034
netty-codec-http2@4.1.100.Final
4.1.132.Final

Open the chart page →

7,087

Container images carrying it

364 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
thingsboard/tb-http-transport:3.4.1a06f53c5e2da
netty-codec-http2@4.1.75.Final
4.1.132.Final
1
thingsboard/tb-mqtt-transport:3.4.1030f316ce301
netty-codec-http2@4.1.75.Final
4.1.132.Final
1
thingsboard/tb-node:3.4.1645f43b688f7
netty-codec-http2@4.1.75.Final
4.1.132.Final
1
thingsboard/tb-node:3.6.0f40a542832c4
netty-codec-http2@4.1.91.Final
4.1.132.Final
1
thingsboard/tb-postgres:latest2d17e4e36edc
netty-codec-http2@4.1.128.Final
4.1.132.Final
1
thmmniii/fbs-core:v1.27.15438517d9fc2
netty-codec-http2@4.1.92.Final
4.1.132.Final
1
thmmniii/fbs-runner:v1.27.186105349c1a3
netty-codec-http2@4.1.49.Final
4.1.132.Final
1
tock/bot_admin:25.10.7df3e38c77a38
netty-codec-http2@4.2.9.Final
4.2.11.Final
1
tock/bot_api:25.10.7dd5d5c70e333
netty-codec-http2@4.2.9.Final
4.2.11.Final
1
tock/build_worker:25.10.7080cb6b08d5b
netty-codec-http2@4.2.9.Final
4.2.11.Final
1
tock/duckling:25.10.7ac1f3f1a1e9c
netty-codec-http2@4.2.9.Final
4.2.11.Final
1
tock/kotlin_compiler:25.10.7c9c0fb40089a
netty-codec-http2@4.2.9.Final
4.2.11.Final
1
tock/nlp_api:25.10.7c04ffe67b977
netty-codec-http2@4.2.9.Final
4.2.11.Final
1
torrespro/mca-worker:2.0.06d3bd305a1ba
netty-codec-http2@4.1.42.Final
4.1.132.Final
1
traccar/traccar:6.7-alpine621c8d6d46fd
netty-codec-http2@4.1.118.Final
4.1.132.Final
1
treskon/portrait:DEV-latest88e813f22347
netty-codec-http2@4.1.115.Final
4.1.132.Final
1
trinodb/trino:4801565e8cac299
netty-codec-http2@4.2.10.Final
4.2.11.Final
1
trinodb/trino:45038c6f24ab1a4
netty-codec-http2@4.1.87.Final
4.1.132.Final
1
trinodb/trino:4796af989b0846d
netty-codec-http2@4.2.7.Final
4.2.11.Final
1
trinodb/trino:405ee80ab5eeab2
netty-codec-http2@4.1.72.Final
4.1.132.Final
1
viniciusfcf/gitops-quarkus-app-jvm:latestbba8ee1b5cd5
netty-codec-http2@4.1.79.Final
4.1.132.Final
1
vitalii1992/api-gateway-service:latestaabe6ac39356
netty-codec-http2@4.1.92.Final
4.1.132.Final
1
vlebediantsev/logic-ms:latestdf8bf38c535b
netty-codec-http2@4.1.78.Final
4.1.132.Final
1
voltha/voltha-onos:5.1.8e038acb950d3
netty-codec-http2@4.1.35.Final
4.1.132.Final
1
vrijbrp/haal-centraal-brp-bevragen:develop5c770c2ae48c
netty-codec-http2@4.1.91.Final
4.1.132.Final
1
wavefronthq/proxy:9.2d1064d28f6eb
netty-codec-http2@4.1.48.Final
4.1.132.Final
1
wazuh/wazuh-indexer:4.14.49c344d2b1757
netty-codec-http2@4.1.125.Final
4.1.132.Final
1
wazuh/wazuh-indexer:4.11.1a7a2076b167e
netty-codec-http2@4.1.111.Final
4.1.132.Final
1
wazuh/wazuh-indexer:4.14.3b149b30da686
netty-codec-http2@4.1.125.Final
4.1.132.Final
1
xeotek/kadeck:6.3.439a3b37a17c5
netty-codec-http2@4.1.108.Final
4.1.132.Final
1
xeotek/kadeck:4.2.94c6b04d9ce55
netty-codec-http2@4.1.70.Final
4.1.132.Final
1
yuzutech/kroki:0.17.0192b7b27c857
netty-codec-http2@4.1.74.Final
4.1.132.Final
1
zahoriaut/zahori-process:0.1.13351f8a220ed7
netty-codec-http2@4.1.94.Final
4.1.132.Final
1
zahoriaut/zahori-server:0.1.17b2de13916f3e
netty-codec-http2@4.1.87.Final
4.1.132.Final
1
zbalogh/reservation-api-server:1.0.97c247e399a1f
netty-codec-http2@4.1.45.Final
4.1.132.Final
1
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
netty-codec-http2@4.1.45.Final
4.1.132.Final
1
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
netty-codec-http2@4.1.94.Final
4.1.132.Final
1
ghcr.io/camunda-community-hub/zeebe-simple-monitor:2.6.2d9d796a1b846
netty-codec-http2@4.1.104.Final
4.1.132.Final
1
ghcr.io/curium-rocks/mitre-siphon:main503c00321502
netty-codec-http2@4.1.92.Final
4.1.132.Final
1
ghcr.io/damap-org/damap-backend:5.0.0f3d0c7d35498
netty-codec-http2@4.1.108.Final
4.1.132.Final
1
ghcr.io/devops-ia/cp-schema-registry:8.1.1-msk-iam-auth2.3.530d1a445acc7
netty-codec-http2@4.1.128.Final
4.1.132.Final
1
ghcr.io/devops-ia/kafka-cruise-control:jdk17-cc2.5.146-iam2.3.8e310642de2e2
netty-codec-http2@4.1.110.Final
4.1.132.Final
1
ghcr.io/fleeksoft/hbase/hbase-base:2.4.13.2c144bdd688d7
netty-codec-http2@4.1.78.Final
4.1.132.Final
1
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
netty-codec-http2@4.1.67.Final
4.1.132.Final
1
ghcr.io/kafbat/kafka-ui:v1.2.0185da4ad3e88
netty-codec-http2@4.1.118.Final
4.1.132.Final
1
ghcr.io/komputing/fauceth:release4ab8fa4143b4
netty-codec-http2@4.1.69.Final
4.1.132.Final
1
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
netty-codec-http2@4.1.96.Final
4.1.132.Final
1
ghcr.io/kvaps/linstor-controller:v1.14.000ce11c31087
netty-codec-http2@4.1.51.Final
4.1.132.Final
1
ghcr.io/kvaps/linstor-satellite:v1.14.0a573fb9bc809
netty-codec-http2@4.1.51.Final
4.1.132.Final
1
ghcr.io/microboxlabs/miot-calendar:latest-jvm7157cdc0bf5b
netty-codec-http2@4.1.130.Final
4.1.132.Final
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.