StackRadar

CVE-2026-42577

High

Advisory

Published 6 May 2026In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
34th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
31
of 17,781 indexed, latest versions
Container images
40
deployed by those charts
Fix available
1 of 1
affected package

Netty epoll transport denial of service via RST on half-closed TCP connection

Carried by container images the latest versions of 31 of 17,781 indexed charts deploy, on 40 images.

Affected packageAffected versionsFixed inImages
netty-transport-classes-epollmaven4.2.4.Final, 4.2.5.Final, 4.2.7.Final, 4.2.9.Final+3 more4.2.13.Final40
OSV records
GHSA-rwm7-x88c-3g2p

Charts affected

31 by stars
ChartLatestAffected imagesRadar Score
trinotrino1.42.21 of 1See more

trino trino 1.42.2

1 of the 1 container images this version deploys carry CVE-2026-42577.

Container imageDigestPackageFixed in
trinodb/trino:4801565e8cac299
netty-transport-classes-epoll@4.2.10.Final
4.2.13.Final

Open the chart page →

1,309
druiddruid-helmVerified publisher37.0.21 of 3See more

druid druid-helm 37.0.2

1 of the 3 container images this version deploys carry CVE-2026-42577.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
netty-transport-classes-epoll@4.2.12.Final
4.2.13.Final

Open the chart page →

3,812
flyte-binaryflyte2.0.481 of 4See more

flyte-binary flyte 2.0.48

1 of the 4 container images this version deploys carry CVE-2026-42577.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
netty-transport-classes-epoll@4.2.7.Final
4.2.13.Final

Open the chart page →

4,641
enavenav-service-architectureVerified publisher0.0.77 of 10See more

enav enav-service-architecture 0.0.7

7 of the 10 container images this version deploys carry CVE-2026-42577.

Container imageDigestPackageFixed in
ghcr.io/gla-rad/enav-api-gateway:latest8f4345c77dda
netty-transport-classes-epoll@4.2.12.Final
4.2.13.Final
ghcr.io/gla-rad/enav-aton-admin-service:latestcf85570b1324
netty-transport-classes-epoll@4.2.12.Final
4.2.13.Final
ghcr.io/gla-rad/enav-aton-service:latest3be878690629
netty-transport-classes-epoll@4.2.12.Final
4.2.13.Final
ghcr.io/gla-rad/enav-aton-service-client:latestf1629ac5f9ec
netty-transport-classes-epoll@4.2.12.Final
4.2.13.Final
ghcr.io/gla-rad/enav-ckeeper:latest415323ef112b
netty-transport-classes-epoll@4.2.12.Final
4.2.13.Final
ghcr.io/gla-rad/enav-eureka:latest05002092c621
netty-transport-classes-epoll@4.2.12.Final
4.2.13.Final
ghcr.io/gla-rad/enav-msg-broker:latest6fe372e4e481
netty-transport-classes-epoll@4.2.12.Final
4.2.13.Final

Open the chart page →

15,860
amgraviteeioVerified publisher4.12.62 of 3See more

am graviteeio 4.12.6

2 of the 3 container images this version deploys carry CVE-2026-42577.

Container imageDigestPackageFixed in
graviteeio/am-gateway:4.12.607b7f6dc267a
netty-transport-classes-epoll@4.2.11.Final
4.2.13.Final
graviteeio/am-management-api:4.12.6a8eb04ee0c70
netty-transport-classes-epoll@4.2.11.Final
4.2.13.Final

Open the chart page →

2,088
prowlerprowler-appVerified publisher0.0.91 of 5See more

prowler prowler-app 0.0.9

1 of the 5 container images this version deploys carry CVE-2026-42577.

Container imageDigestPackageFixed in
library/neo4j:2026.02.25ab4ab0358cf
netty-transport-classes-epoll@4.2.9.Final
4.2.13.Final

Open the chart page →

8,158
connector-rollout-workerairbyteVerified publisher1.9.21 of 1See more

connector-rollout-worker airbyte 1.9.2

1 of the 1 container images this version deploys carry CVE-2026-42577.

Container imageDigestPackageFixed in
airbyte/connector-rollout-worker:2.0.2-alpha-c905e75d42813fcc191
netty-transport-classes-epoll@4.2.4.Final
4.2.13.Final

Open the chart page →

829
airbyteairbyte-v2Verified publisher2.2.06 of 10See more

airbyte airbyte-v2 2.2.0

6 of the 10 container images this version deploys carry CVE-2026-42577.

Container imageDigestPackageFixed in
airbyte/bootloader:2.2.0f71cf4e185d5
netty-transport-classes-epoll@4.2.9.Final
4.2.13.Final
airbyte/cron:2.2.0d97b67a1346d
netty-transport-classes-epoll@4.2.9.Final
4.2.13.Final
airbyte/server:2.2.070e125498a1c
netty-transport-classes-epoll@4.2.9.Final
4.2.13.Final
airbyte/worker:2.2.08060b88b29c8
netty-transport-classes-epoll@4.2.9.Final
4.2.13.Final
airbyte/workload-api-server:2.2.042093cff86e9
netty-transport-classes-epoll@4.2.9.Final
4.2.13.Final
airbyte/workload-launcher:2.2.0119be7bfb719
netty-transport-classes-epoll@4.2.9.Final
4.2.13.Final

Open the chart page →

12,473
airbyte-data-planeairbyte-v2Verified publisher2.2.01 of 1See more

airbyte-data-plane airbyte-v2 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-42577.

Container imageDigestPackageFixed in
airbyte/workload-launcher:2.2.0119be7bfb719
netty-transport-classes-epoll@4.2.9.Final
4.2.13.Final

Open the chart page →

790
camellia-redis-proxycamellia-redis-proxy1.4.01 of 2See more

camellia-redis-proxy camellia-redis-proxy 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-42577.

Container imageDigestPackageFixed in
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
netty-transport-classes-epoll@4.2.10.Final
4.2.13.Final

Open the chart page →

8,001
web3signerethereum-helm-chartsVerified publisher1.0.61 of 4See more

web3signer ethereum-helm-charts 1.0.6

1 of the 4 container images this version deploys carry CVE-2026-42577.

Container imageDigestPackageFixed in
consensys/web3signer:latestf146a51a1ba3
netty-transport-classes-epoll@4.2.12.Final
4.2.13.Final

Open the chart page →

1,997
flyteconnectorflyte2.0.01 of 1See more

flyteconnector flyte 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-42577.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
netty-transport-classes-epoll@4.2.7.Final
4.2.13.Final

Open the chart page →

3,463
edge-connexionfolio-org0.1.51 of 1See more

edge-connexion folio-org 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-42577.

Container imageDigestPackageFixed in
folioci/edge-connexion:latestb4863d135524
netty-transport-classes-epoll@4.2.9.Final
4.2.13.Final

Open the chart page →

1,132
edge-ncipfolio-org0.1.281 of 1See more

edge-ncip folio-org 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-42577.

Container imageDigestPackageFixed in
folioci/edge-ncip:lateste760dbb81d1a
netty-transport-classes-epoll@4.2.10.Final
4.2.13.Final

Open the chart page →

820
edge-oai-pmhfolio-org0.1.311 of 1See more

edge-oai-pmh folio-org 0.1.31

1 of the 1 container images this version deploys carry CVE-2026-42577.

Container imageDigestPackageFixed in
folioci/edge-oai-pmh:latesteedfcbc29792
netty-transport-classes-epoll@4.2.7.Final
4.2.13.Final

Open the chart page →

874
edge-ordersfolio-org0.1.301 of 1See more

edge-orders folio-org 0.1.30

1 of the 1 container images this version deploys carry CVE-2026-42577.

Container imageDigestPackageFixed in
folioci/edge-orders:latest1ef654ee9f23
netty-transport-classes-epoll@4.2.12.Final
4.2.13.Final

Open the chart page →

735
edge-patronfolio-org0.1.281 of 1See more

edge-patron folio-org 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-42577.

Container imageDigestPackageFixed in
folioci/edge-patron:latest682b852e056d
netty-transport-classes-epoll@4.2.7.Final
4.2.13.Final

Open the chart page →

905
edge-rtacfolio-org0.1.281 of 1See more

edge-rtac folio-org 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-42577.

Container imageDigestPackageFixed in
folioci/edge-rtac:latest15ef73b1abd0
netty-transport-classes-epoll@4.2.10.Final
4.2.13.Final

Open the chart page →

1,259
mod-data-exportfolio-org0.1.401 of 1See more

mod-data-export folio-org 0.1.40

1 of the 1 container images this version deploys carry CVE-2026-42577.

Container imageDigestPackageFixed in
folioci/mod-data-export:latest0cc86bf09755
netty-transport-classes-epoll@4.2.9.Final
4.2.13.Final

Open the chart page →

1,393
mod-data-export-workerfolio-org0.1.151 of 1See more

mod-data-export-worker folio-org 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-42577.

Container imageDigestPackageFixed in
folioci/mod-data-export-worker:latest1ad1811c9b37
netty-transport-classes-epoll@4.2.9.Final
4.2.13.Final

Open the chart page →

1,214
mod-eusage-reportsfolio-org0.1.21 of 1See more

mod-eusage-reports folio-org 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-42577.

Container imageDigestPackageFixed in
folioci/mod-eusage-reports:latest15de67587091
netty-transport-classes-epoll@4.2.10.Final
4.2.13.Final

Open the chart page →

1,224
mod-inventory-updatefolio-org0.1.21 of 1See more

mod-inventory-update folio-org 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-42577.

Container imageDigestPackageFixed in
folioci/mod-inventory-update:latestba84812b4d58
netty-transport-classes-epoll@4.2.5.Final
4.2.13.Final

Open the chart page →

878
mod-oai-pmhfolio-org0.1.341 of 1See more

mod-oai-pmh folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-42577.

Container imageDigestPackageFixed in
folioci/mod-oai-pmh:latest5cd5ef063f2a
netty-transport-classes-epoll@4.2.7.Final
4.2.13.Final

Open the chart page →

962
geysergeyserVerified publisher0.1.31 of 1See more

geyser geyser 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-42577.

Container imageDigestPackageFixed in
ghcr.io/joffreybvn/k8s-geyser:0.0.247f36880072e
netty-transport-classes-epoll@4.2.7.Final
4.2.13.Final

Open the chart page →

350
gridgain9gridgainVerified publisher1.1.101 of 2See more

gridgain9 gridgain 1.1.10

1 of the 2 container images this version deploys carry CVE-2026-42577.

Container imageDigestPackageFixed in
gridgain/gridgain9:9.1.1895018390077b
netty-transport-classes-epoll@4.2.10.Final
4.2.13.Final

Open the chart page →

3,199
druidhelmforgeVerified publisher1.3.61 of 4See more

druid helmforge 1.3.6

1 of the 4 container images this version deploys carry CVE-2026-42577.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
netty-transport-classes-epoll@4.2.12.Final
4.2.13.Final

Open the chart page →

8,541
trinoopstty0.2.121 of 1See more

trino opstty 0.2.12

1 of the 1 container images this version deploys carry CVE-2026-42577.

Container imageDigestPackageFixed in
trinodb/trino:4815b5e0a97f599
netty-transport-classes-epoll@4.2.12.Final
4.2.13.Final

Open the chart page →

1,158
trinopresto-loadbalancer0.2.101 of 2See more

trino presto-loadbalancer 0.2.10

1 of the 2 container images this version deploys carry CVE-2026-42577.

Container imageDigestPackageFixed in
trinodb/trino:4796af989b0846d
netty-transport-classes-epoll@4.2.7.Final
4.2.13.Final

Open the chart page →

2,264
radar-outputradar-baseVerified publisher1.2.101 of 1See more

radar-output radar-base 1.2.10

1 of the 1 container images this version deploys carry CVE-2026-42577.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-output-restructure/radar-output-restructure:3.0.67fb9c70e96a4
netty-transport-classes-epoll@4.2.10.Final
4.2.13.Final

Open the chart page →

2,465
stirling-pdfrubxkubeVerified publisher0.1.21 of 1See more

stirling-pdf rubxkube 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-42577.

Container imageDigestPackageFixed in
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
netty-transport-classes-epoll@4.2.12.Final
4.2.13.Final

Open the chart page →

6,207
zipkinzipkinVerified publisher0.5.01 of 1See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-42577.

Container imageDigestPackageFixed in
openzipkin/zipkin-slim:3.6.0a69e1057df36
netty-transport-classes-epoll@4.2.10.Final
4.2.13.Final

Open the chart page →

1,159

Container images carrying it

40 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
airbyte/workload-launcher:2.2.0119be7bfb719
netty-transport-classes-epoll@4.2.9.Final
4.2.13.Final
2
apache/druid:37.0.00116fb802786
netty-transport-classes-epoll@4.2.12.Final
4.2.13.Final
2
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
netty-transport-classes-epoll@4.2.7.Final
4.2.13.Final
2
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
netty-transport-classes-epoll@4.2.10.Final
4.2.13.Final
1
airbyte/bootloader:2.2.0f71cf4e185d5
netty-transport-classes-epoll@4.2.9.Final
4.2.13.Final
1
airbyte/connector-rollout-worker:2.0.2-alpha-c905e75d42813fcc191
netty-transport-classes-epoll@4.2.4.Final
4.2.13.Final
1
airbyte/cron:2.2.0d97b67a1346d
netty-transport-classes-epoll@4.2.9.Final
4.2.13.Final
1
airbyte/server:2.2.070e125498a1c
netty-transport-classes-epoll@4.2.9.Final
4.2.13.Final
1
airbyte/worker:2.2.08060b88b29c8
netty-transport-classes-epoll@4.2.9.Final
4.2.13.Final
1
airbyte/workload-api-server:2.2.042093cff86e9
netty-transport-classes-epoll@4.2.9.Final
4.2.13.Final
1
consensys/web3signer:latestf146a51a1ba3
netty-transport-classes-epoll@4.2.12.Final
4.2.13.Final
1
folioci/edge-connexion:latestb4863d135524
netty-transport-classes-epoll@4.2.9.Final
4.2.13.Final
1
folioci/edge-ncip:lateste760dbb81d1a
netty-transport-classes-epoll@4.2.10.Final
4.2.13.Final
1
folioci/edge-oai-pmh:latesteedfcbc29792
netty-transport-classes-epoll@4.2.7.Final
4.2.13.Final
1
folioci/edge-orders:latest1ef654ee9f23
netty-transport-classes-epoll@4.2.12.Final
4.2.13.Final
1
folioci/edge-patron:latest682b852e056d
netty-transport-classes-epoll@4.2.7.Final
4.2.13.Final
1
folioci/edge-rtac:latest15ef73b1abd0
netty-transport-classes-epoll@4.2.10.Final
4.2.13.Final
1
folioci/mod-data-export:latest0cc86bf09755
netty-transport-classes-epoll@4.2.9.Final
4.2.13.Final
1
folioci/mod-data-export-worker:latest1ad1811c9b37
netty-transport-classes-epoll@4.2.9.Final
4.2.13.Final
1
folioci/mod-eusage-reports:latest15de67587091
netty-transport-classes-epoll@4.2.10.Final
4.2.13.Final
1
folioci/mod-inventory-update:latestba84812b4d58
netty-transport-classes-epoll@4.2.5.Final
4.2.13.Final
1
folioci/mod-oai-pmh:latest5cd5ef063f2a
netty-transport-classes-epoll@4.2.7.Final
4.2.13.Final
1
graviteeio/am-gateway:4.12.607b7f6dc267a
netty-transport-classes-epoll@4.2.11.Final
4.2.13.Final
1
graviteeio/am-management-api:4.12.6a8eb04ee0c70
netty-transport-classes-epoll@4.2.11.Final
4.2.13.Final
1
gridgain/gridgain9:9.1.1895018390077b
netty-transport-classes-epoll@4.2.10.Final
4.2.13.Final
1
library/neo4j:2026.02.25ab4ab0358cf
netty-transport-classes-epoll@4.2.9.Final
4.2.13.Final
1
openzipkin/zipkin-slim:3.6.0a69e1057df36
netty-transport-classes-epoll@4.2.10.Final
4.2.13.Final
1
trinodb/trino:4801565e8cac299
netty-transport-classes-epoll@4.2.10.Final
4.2.13.Final
1
trinodb/trino:4815b5e0a97f599
netty-transport-classes-epoll@4.2.12.Final
4.2.13.Final
1
trinodb/trino:4796af989b0846d
netty-transport-classes-epoll@4.2.7.Final
4.2.13.Final
1
ghcr.io/gla-rad/enav-api-gateway:latest8f4345c77dda
netty-transport-classes-epoll@4.2.12.Final
4.2.13.Final
1
ghcr.io/gla-rad/enav-aton-admin-service:latestcf85570b1324
netty-transport-classes-epoll@4.2.12.Final
4.2.13.Final
1
ghcr.io/gla-rad/enav-aton-service:latest3be878690629
netty-transport-classes-epoll@4.2.12.Final
4.2.13.Final
1
ghcr.io/gla-rad/enav-aton-service-client:latestf1629ac5f9ec
netty-transport-classes-epoll@4.2.12.Final
4.2.13.Final
1
ghcr.io/gla-rad/enav-ckeeper:latest415323ef112b
netty-transport-classes-epoll@4.2.12.Final
4.2.13.Final
1
ghcr.io/gla-rad/enav-eureka:latest05002092c621
netty-transport-classes-epoll@4.2.12.Final
4.2.13.Final
1
ghcr.io/gla-rad/enav-msg-broker:latest6fe372e4e481
netty-transport-classes-epoll@4.2.12.Final
4.2.13.Final
1
ghcr.io/joffreybvn/k8s-geyser:0.0.247f36880072e
netty-transport-classes-epoll@4.2.7.Final
4.2.13.Final
1
ghcr.io/radar-base/radar-output-restructure/radar-output-restructure:3.0.67fb9c70e96a4
netty-transport-classes-epoll@4.2.10.Final
4.2.13.Final
1
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
netty-transport-classes-epoll@4.2.12.Final
4.2.13.Final
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.