StackRadar

CVE-2026-42579

High

Advisory

Published 7 May 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.010
61st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
251
of 17,781 indexed, latest versions
Container images
261
deployed by those charts
Fix available
1 of 1
affected package

Netty has a DNS Codec Input Validation Bypass (Encoder + Decoder)

Carried by container images the latest versions of 251 of 17,781 indexed charts deploy, on 261 images.

Affected packageAffected versionsFixed inImages
netty-codec-dnsmaven4.1.19.Final, 4.1.22.Final, 4.1.27.Final, 4.1.33.Final+63 more4.1.133.Final, 4.2.13.Final261
OSV records
GHSA-cm33-6792-r9fm

Charts affected

251 by stars
ChartLatestAffected imagesRadar Score
zipkinzipkinVerified publisher0.5.01 of 1See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
openzipkin/zipkin-slim:3.6.0a69e1057df36
netty-codec-dns@4.2.10.Final
4.2.13.Final

Open the chart page →

1,159

Container images carrying it

261 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
trinodb/trino:405ee80ab5eeab2
netty-codec-dns@4.1.72.Final
4.1.133.Final
1
viniciusfcf/gitops-quarkus-app-jvm:latestbba8ee1b5cd5
netty-codec-dns@4.1.79.Final
4.1.133.Final
1
vitalii1992/api-gateway-service:latestaabe6ac39356
netty-codec-dns@4.1.92.Final
4.1.133.Final
1
vlebediantsev/logic-ms:latestdf8bf38c535b
netty-codec-dns@4.1.78.Final
4.1.133.Final
1
vrijbrp/haal-centraal-brp-bevragen:develop5c770c2ae48c
netty-codec-dns@4.1.91.Final
4.1.133.Final
1
xeotek/kadeck:6.3.439a3b37a17c5
netty-codec-dns@4.1.108.Final
4.1.133.Final
1
yuzutech/kroki:0.17.0192b7b27c857
netty-codec-dns@4.1.74.Final
4.1.133.Final
1
zahoriaut/zahori-process:0.1.13351f8a220ed7
netty-codec-dns@4.1.94.Final
4.1.133.Final
1
zahoriaut/zahori-server:0.1.17b2de13916f3e
netty-codec-dns@4.1.87.Final
4.1.133.Final
1
zbalogh/reservation-api-server:1.0.97c247e399a1f
netty-codec-dns@4.1.82.Final
4.1.133.Final
1
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
netty-codec-dns@4.1.86.Final
4.1.133.Final
1
ghcr.io/curium-rocks/mitre-siphon:main503c00321502
netty-codec-dns@4.1.92.Final
4.1.133.Final
1
ghcr.io/damap-org/damap-backend:5.0.0f3d0c7d35498
netty-codec-dns@4.1.108.Final
4.1.133.Final
1
ghcr.io/devops-ia/cp-schema-registry:8.1.1-msk-iam-auth2.3.530d1a445acc7
netty-codec-dns@4.1.128.Final
4.1.133.Final
1
ghcr.io/devops-ia/kafka-cruise-control:jdk17-cc2.5.146-iam2.3.8e310642de2e2
netty-codec-dns@4.1.110.Final
4.1.133.Final
1
ghcr.io/fleeksoft/hbase/hbase-base:2.4.13.2c144bdd688d7
netty-codec-dns@4.1.78.Final
4.1.133.Final
1
ghcr.io/gla-rad/enav-api-gateway:latest8f4345c77dda
netty-codec-dns@4.2.12.Final
4.2.13.Final
1
ghcr.io/gla-rad/enav-aton-admin-service:latestcf85570b1324
netty-codec-dns@4.2.12.Final
4.2.13.Final
1
ghcr.io/gla-rad/enav-aton-service:latest3be878690629
netty-codec-dns@4.2.12.Final
4.2.13.Final
1
ghcr.io/gla-rad/enav-aton-service-client:latestf1629ac5f9ec
netty-codec-dns@4.2.12.Final
4.2.13.Final
1
ghcr.io/gla-rad/enav-ckeeper:latest415323ef112b
netty-codec-dns@4.2.12.Final
4.2.13.Final
1
ghcr.io/gla-rad/enav-eureka:latest05002092c621
netty-codec-dns@4.2.12.Final
4.2.13.Final
1
ghcr.io/gla-rad/enav-msg-broker:latest6fe372e4e481
netty-codec-dns@4.2.12.Final
4.2.13.Final
1
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
netty-codec-dns@4.1.67.Final
4.1.133.Final
1
ghcr.io/kafbat/kafka-ui:v1.2.0185da4ad3e88
netty-codec-dns@4.1.118.Final
4.1.133.Final
1
ghcr.io/microboxlabs/miot-calendar:latest-jvm7157cdc0bf5b
netty-codec-dns@4.1.130.Final
4.1.133.Final
1
ghcr.io/openccu/openccu:3.89.8.20260719b2de2ff6e8e0
netty-codec-dns@4.1.67.Final
4.1.133.Final
1
ghcr.io/privacyengineering/hawk-service:latestbfedf47bb5e0
netty-codec-dns@4.1.101.Final
4.1.133.Final
1
ghcr.io/projectnessie/nessie:0.92.19efe3c74d55f
netty-codec-dns@4.1.108.Final
4.1.133.Final
1
ghcr.io/punchplatform/punchline-java:8.1.1d46ce7b96482
netty-codec-dns@4.1.82.Final
4.1.133.Final
1
ghcr.io/radar-base/radar-output-restructure/radar-output-restructure:3.0.67fb9c70e96a4
netty-codec-dns@4.2.10.Final
4.2.13.Final
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
netty-codec-dns@4.1.86.Final
4.1.133.Final
1
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
netty-codec-dns@4.2.12.Final
4.2.13.Final
1
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
netty-codec-dns@4.1.128.Final
4.1.133.Final
1
ghcr.io/wundergraph/cosmo/keycloak:0.13.0b37408461b9b
netty-codec-dns@4.1.130.Final
4.1.133.Final
1
public.ecr.aws/aws-containers/retail-store-sample-ui:1.3.0ce3f2e935eb3
netty-codec-dns@4.1.124.Final
4.1.133.Final
1
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
netty-codec-dns@4.1.89.Final
4.1.133.Final
1
public.ecr.aws/v0r6c2e2/trino:latestc265156b00d1
netty-codec-dns@4.1.117.Final
4.1.133.Final
1
quay.io/apicurio/apicurio-registry-kube-sync:1.0.170ef31840269
netty-codec-dns@4.1.68.Final
4.1.133.Final
1
quay.io/apicurio/apicurio-registry-mem:2.5.8.Final3b036692d546
netty-codec-dns@4.1.100.Final
4.1.133.Final
1
quay.io/deployhub/ms-ui:svccat-v11.0.815-g717581f5dedbc31e6f
netty-codec-dns@4.1.127.Final
4.1.133.Final
1
quay.io/evryfs/spring-boot-admin:2.7.1060950ef63764
netty-codec-dns@4.1.86.Final
4.1.133.Final
1
quay.io/fiware/trusted-issuers-registry:0.11.1a8a9ec461034
netty-codec-dns@4.1.89.Final
4.1.133.Final
1
quay.io/keycloak/keycloak:26.009a381c715ab
netty-codec-dns@4.1.111.Final
4.1.133.Final
1
quay.io/keycloak/keycloak:26.0.74388e2379b7e
netty-codec-dns@4.1.111.Final
4.1.133.Final
1
quay.io/keycloak/keycloak:24.0.34d6f22991266
netty-codec-dns@4.1.107.Final
4.1.133.Final
1
quay.io/keycloak/keycloak:23.0.34f72a5b0c076
netty-codec-dns@4.1.100.Final
4.1.133.Final
1
quay.io/keycloak/keycloak:26.3.36a7217a100bd
netty-codec-dns@4.1.124.Final
4.1.133.Final
1
quay.io/keycloak/keycloak:20.0.18830f76112b6
netty-codec-dns@4.1.82.Final
4.1.133.Final
1
quay.io/keycloak/keycloak:26.5.68d44614c7479
netty-codec-dns@4.1.130.Final
4.1.133.Final
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.