StackRadar

CVE-2026-42579

High

Advisory

Published 7 May 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.010
61st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
251
of 17,781 indexed, latest versions
Container images
261
deployed by those charts
Fix available
1 of 1
affected package

Netty has a DNS Codec Input Validation Bypass (Encoder + Decoder)

Carried by container images the latest versions of 251 of 17,781 indexed charts deploy, on 261 images.

Affected packageAffected versionsFixed inImages
netty-codec-dnsmaven4.1.19.Final, 4.1.22.Final, 4.1.27.Final, 4.1.33.Final+63 more4.1.133.Final, 4.2.13.Final261
OSV records
GHSA-cm33-6792-r9fm

Charts affected

251 by stars
ChartLatestAffected imagesRadar Score
eolo-plannereolo-planner-repo0.1.01 of 7See more

eolo-planner eolo-planner-repo 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
netty-codec-dns@4.1.85.Final
4.1.133.Final

Open the chart page →

27,096
eoloplanteoloplant1.0.02 of 7See more

eoloplant eoloplant 1.0.0

2 of the 7 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
netty-codec-dns@4.1.85.Final
4.1.133.Final
mastercloudapps/server:v2.23f3d24dfe2686
netty-codec-dns@4.1.82.Final
4.1.133.Final

Open the chart page →

27,537
eoloplantseoloplants-urjcVerified publisher0.1.02 of 7See more

eoloplants eoloplants-urjc 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
netty-codec-dns@4.1.82.Final
4.1.133.Final
codeurjc/toposervice:v1.09fb4c11e6a49
netty-codec-dns@4.1.85.Final
4.1.133.Final

Open the chart page →

27,721
servereoloserverVerified publisher0.1.02 of 7See more

server eoloserver 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
netty-codec-dns@4.1.82.Final
4.1.133.Final
codeurjc/toposervice:v1.09fb4c11e6a49
netty-codec-dns@4.1.85.Final
4.1.133.Final

Open the chart page →

32,205
dshackleethereum-helm-chartsVerified publisher0.1.91 of 2See more

dshackle ethereum-helm-charts 0.1.9

1 of the 2 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
emeraldpay/dshackle:0.14.0126f0ae0b388
netty-codec-dns@4.1.70.Final
4.1.133.Final

Open the chart page →

2,021
web3signerethereum-helm-chartsVerified publisher1.0.61 of 4See more

web3signer ethereum-helm-charts 1.0.6

1 of the 4 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
consensys/web3signer:latestf146a51a1ba3
netty-codec-dns@4.2.12.Final
4.2.13.Final

Open the chart page →

1,997
spring-boot-adminevryfs-ossVerified publisher0.1.101 of 1See more

spring-boot-admin evryfs-oss 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
quay.io/evryfs/spring-boot-admin:2.7.1060950ef63764
netty-codec-dns@4.1.86.Final
4.1.133.Final

Open the chart page →

5,998
scorpio-brokerfiware0.3.39 of 10See more

scorpio-broker fiware 0.3.3

9 of the 10 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:RegistrySubscriptionManager_2.1.001e11d800459
netty-codec-dns@4.1.70.Final
4.1.133.Final
scorpiobroker/scorpio:eureka-server_2.1.03f05a113a4be
netty-codec-dns@4.1.70.Final
4.1.133.Final
scorpiobroker/scorpio:AtContextServer_2.1.05073ceef2fa0
netty-codec-dns@4.1.70.Final
4.1.133.Final
scorpiobroker/scorpio:gateway_2.1.062dae3dd0eeb
netty-codec-dns@4.1.70.Final
4.1.133.Final
scorpiobroker/scorpio:RegistryManager_2.1.0a2cfcf0947fd
netty-codec-dns@4.1.70.Final
4.1.133.Final
scorpiobroker/scorpio:QueryManager_2.1.0b742a53b2803
netty-codec-dns@4.1.70.Final
4.1.133.Final
scorpiobroker/scorpio:HistoryManager_2.1.0b7fe27a06ff5
netty-codec-dns@4.1.70.Final
4.1.133.Final
scorpiobroker/scorpio:SubscriptionManager_2.1.0e08036670d66
netty-codec-dns@4.1.70.Final
4.1.133.Final
scorpiobroker/scorpio:EntityManager_2.1.0f02e8a429a08
netty-codec-dns@4.1.70.Final
4.1.133.Final

Open the chart page →

55,600
scorpiobrokerfiware0.1.29 of 10See more

scorpiobroker fiware 0.1.2

9 of the 10 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:RegistrySubscriptionManager_2.1.001e11d800459
netty-codec-dns@4.1.70.Final
4.1.133.Final
scorpiobroker/scorpio:eureka-server_2.1.03f05a113a4be
netty-codec-dns@4.1.70.Final
4.1.133.Final
scorpiobroker/scorpio:AtContextServer_2.1.05073ceef2fa0
netty-codec-dns@4.1.70.Final
4.1.133.Final
scorpiobroker/scorpio:gateway_2.1.062dae3dd0eeb
netty-codec-dns@4.1.70.Final
4.1.133.Final
scorpiobroker/scorpio:RegistryManager_2.1.0a2cfcf0947fd
netty-codec-dns@4.1.70.Final
4.1.133.Final
scorpiobroker/scorpio:QueryManager_2.1.0b742a53b2803
netty-codec-dns@4.1.70.Final
4.1.133.Final
scorpiobroker/scorpio:HistoryManager_2.1.0b7fe27a06ff5
netty-codec-dns@4.1.70.Final
4.1.133.Final
scorpiobroker/scorpio:SubscriptionManager_2.1.0e08036670d66
netty-codec-dns@4.1.70.Final
4.1.133.Final
scorpiobroker/scorpio:EntityManager_2.1.0f02e8a429a08
netty-codec-dns@4.1.70.Final
4.1.133.Final

Open the chart page →

55,600
scorpio-broker-aaiofiware0.4.151 of 1See more

scorpio-broker-aaio fiware 0.4.15

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:scorpio-aaio_2.1.0db55012043df
netty-codec-dns@4.1.70.Final
4.1.133.Final

Open the chart page →

5,286
trusted-issuers-registryfiware0.13.01 of 1See more

trusted-issuers-registry fiware 0.13.0

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
quay.io/fiware/trusted-issuers-registry:0.11.1a8a9ec461034
netty-codec-dns@4.1.89.Final
4.1.133.Final

Open the chart page →

7,087
flyteconnectorflyte2.0.01 of 1See more

flyteconnector flyte 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
netty-codec-dns@4.2.7.Final
4.2.13.Final

Open the chart page →

3,463
edge-connexionfolio-org0.1.51 of 1See more

edge-connexion folio-org 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
folioci/edge-connexion:latestb4863d135524
netty-codec-dns@4.2.9.Final
4.2.13.Final

Open the chart page →

1,132
edge-ncipfolio-org0.1.281 of 1See more

edge-ncip folio-org 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
folioci/edge-ncip:lateste760dbb81d1a
netty-codec-dns@4.2.10.Final
4.2.13.Final

Open the chart page →

820
edge-oai-pmhfolio-org0.1.311 of 1See more

edge-oai-pmh folio-org 0.1.31

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
folioci/edge-oai-pmh:latesteedfcbc29792
netty-codec-dns@4.2.7.Final
4.2.13.Final

Open the chart page →

874
edge-ordersfolio-org0.1.301 of 1See more

edge-orders folio-org 0.1.30

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
folioci/edge-orders:latest1ef654ee9f23
netty-codec-dns@4.2.12.Final
4.2.13.Final

Open the chart page →

735
edge-patronfolio-org0.1.281 of 1See more

edge-patron folio-org 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
folioci/edge-patron:latest682b852e056d
netty-codec-dns@4.2.7.Final
4.2.13.Final

Open the chart page →

905
mod-aesfolio-org0.1.331 of 1See more

mod-aes folio-org 0.1.33

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
folioci/mod-aes:latest6d67e9564270
netty-codec-dns@4.1.60.Final
4.1.133.Final

Open the chart page →

2,281
mod-authtokenfolio-org0.1.351 of 1See more

mod-authtoken folio-org 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
folioci/mod-authtoken:latest995a25a33133
netty-codec-dns@4.1.118.Final
4.1.133.Final

Open the chart page →

1,558
mod-codex-ekbfolio-org0.1.341 of 1See more

mod-codex-ekb folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
folioci/mod-codex-ekb:latest235a3fa4adc9
netty-codec-dns@4.1.78.Final
4.1.133.Final

Open the chart page →

2,113
mod-codex-inventoryfolio-org0.1.341 of 1See more

mod-codex-inventory folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
folioci/mod-codex-inventory:latest6d53ed758fd1
netty-codec-dns@4.1.65.Final
4.1.133.Final

Open the chart page →

1,901
mod-codex-muxfolio-org0.1.341 of 1See more

mod-codex-mux folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
folioci/mod-codex-mux:latestd4138abfd30d
netty-codec-dns@4.1.82.Final
4.1.133.Final

Open the chart page →

1,755
mod-configurationfolio-org0.1.341 of 1See more

mod-configuration folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
folioci/mod-configuration:latestdd0cdc89670a
netty-codec-dns@4.2.12.Final
4.2.13.Final

Open the chart page →

711
mod-copycatfolio-org0.1.31 of 1See more

mod-copycat folio-org 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
folioci/mod-copycat:latest1513fad2b799
netty-codec-dns@4.2.12.Final
4.2.13.Final

Open the chart page →

1,466
mod-coursesfolio-org0.1.341 of 1See more

mod-courses folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
folioci/mod-courses:latest68ca414f5596
netty-codec-dns@4.2.9.Final
4.2.13.Final

Open the chart page →

1,533
mod-data-import-converter-storagefolio-org0.1.341 of 1See more

mod-data-import-converter-storage folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
folioci/mod-data-import-converter-storage:latest3028f333778f
netty-codec-dns@4.1.82.Final
4.1.133.Final

Open the chart page →

2,488
mod-emailfolio-org0.1.341 of 1See more

mod-email folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
folioci/mod-email:latest79ea8e2e7ebf
netty-codec-dns@4.2.9.Final
4.2.13.Final

Open the chart page →

866
mod-erm-usage-harvesterfolio-org0.1.341 of 1See more

mod-erm-usage-harvester folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
folioci/mod-erm-usage-harvester:latest2d6767933c59
netty-codec-dns@4.2.12.Final
4.2.13.Final

Open the chart page →

563
mod-eusage-reportsfolio-org0.1.21 of 1See more

mod-eusage-reports folio-org 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
folioci/mod-eusage-reports:latest15de67587091
netty-codec-dns@4.2.10.Final
4.2.13.Final

Open the chart page →

1,224
mod-feesfinesfolio-org0.1.341 of 1See more

mod-feesfines folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
folioci/mod-feesfines:latestfe3a7049f2fb
netty-codec-dns@4.2.7.Final
4.2.13.Final

Open the chart page →

663
mod-inventory-updatefolio-org0.1.21 of 1See more

mod-inventory-update folio-org 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
folioci/mod-inventory-update:latestba84812b4d58
netty-codec-dns@4.2.5.Final
4.2.13.Final

Open the chart page →

878
mod-loginfolio-org0.1.341 of 1See more

mod-login folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
folioci/mod-login:latest88de493f86db
netty-codec-dns@4.1.130.Final
4.1.133.Final

Open the chart page →

1,151
mod-login-samlfolio-org0.1.341 of 1See more

mod-login-saml folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
folioci/mod-login-saml:latest5f3358ccaa0f
netty-codec-dns@4.1.132.Final
4.1.133.Final

Open the chart page →

1,088
mod-marccatfolio-org0.1.301 of 1See more

mod-marccat folio-org 0.1.30

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
folioci/mod-marccat:latest1b57d690d568
netty-codec-dns@4.1.22.Final
4.1.133.Final

Open the chart page →

6,988
mod-ncipfolio-org0.1.341 of 1See more

mod-ncip folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
folioci/mod-ncip:latest8ed83674352b
netty-codec-dns@4.2.10.Final
4.2.13.Final

Open the chart page →

1,103
mod-oai-pmhfolio-org0.1.341 of 1See more

mod-oai-pmh folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
folioci/mod-oai-pmh:latest5cd5ef063f2a
netty-codec-dns@4.2.7.Final
4.2.13.Final

Open the chart page →

962
mod-organizationsfolio-org0.1.341 of 1See more

mod-organizations folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
folioci/mod-organizations:latest7dc9ccf3d937
netty-codec-dns@4.2.12.Final
4.2.13.Final

Open the chart page →

808
mod-patronfolio-org0.1.341 of 1See more

mod-patron folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
folioci/mod-patron:latest5f213acfe2f8
netty-codec-dns@4.2.7.Final
4.2.13.Final

Open the chart page →

827
mod-permissionsfolio-org0.1.351 of 1See more

mod-permissions folio-org 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
folioci/mod-permissions:latest5363e98c6299
netty-codec-dns@4.2.12.Final
4.2.13.Final

Open the chart page →

1,214
mod-rtacfolio-org0.1.341 of 1See more

mod-rtac folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
folioci/mod-rtac:latestc959b2d6142f
netty-codec-dns@4.2.5.Final
4.2.13.Final

Open the chart page →

665
mod-senderfolio-org0.1.341 of 1See more

mod-sender folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
folioci/mod-sender:latestd88a675dddf0
netty-codec-dns@4.2.9.Final
4.2.13.Final

Open the chart page →

818
mod-template-enginefolio-org0.1.341 of 1See more

mod-template-engine folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
folioci/mod-template-engine:latestd105c585da30
netty-codec-dns@4.2.9.Final
4.2.13.Final

Open the chart page →

818
mod-user-importfolio-org0.1.341 of 1See more

mod-user-import folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
folioci/mod-user-import:latest1807734472bd
netty-codec-dns@4.2.12.Final
4.2.13.Final

Open the chart page →

1,214
mod-users-blfolio-org0.1.351 of 1See more

mod-users-bl folio-org 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
folioci/mod-users-bl:latest4e2d96c9340d
netty-codec-dns@4.2.9.Final
4.2.13.Final

Open the chart page →

1,321
galoy-depsgaloymoney0.10.201 of 9See more

galoy-deps galoymoney 0.10.20

1 of the 9 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.39.002f6f143fc6d
netty-codec-dns@4.1.100.Final
4.1.133.Final

Open the chart page →

11,961
galoy-depsgaloymoney20.10.201 of 9See more

galoy-deps galoymoney2 0.10.20

1 of the 9 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.39.002f6f143fc6d
netty-codec-dns@4.1.100.Final
4.1.133.Final

Open the chart page →

11,961
video-analytics-demogpu-operator0.1.91 of 3See more

video-analytics-demo gpu-operator 0.1.9

1 of the 3 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
anguda/ant-media:2.5c435285fc241
netty-codec-dns@4.1.77.Final
4.1.133.Final

Open the chart page →

15,722
grayloggraylogVerified publisher1.0.21 of 4See more

graylog graylog 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
graylog/graylog:6.1.1019de1aff48c2
netty-codec-dns@4.1.118.Final
4.1.133.Final

Open the chart page →

5,261
cc-spring-appgridgainVerified publisher1.0.61 of 1See more

cc-spring-app gridgain 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
gridgain/cloud-connector:2025.5.15ab838d7d3cb
netty-codec-dns@4.1.130.Final
4.1.133.Final

Open the chart page →

1,691
gridgain9gridgainVerified publisher1.1.101 of 2See more

gridgain9 gridgain 1.1.10

1 of the 2 container images this version deploys carry CVE-2026-42579.

Container imageDigestPackageFixed in
gridgain/gridgain9:9.1.1895018390077b
netty-codec-dns@4.2.10.Final
4.2.13.Final

Open the chart page →

3,199

Container images carrying it

261 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/keycloak/keycloak:26.49409c59bdfb6
netty-codec-dns@4.1.128.Final
4.1.133.Final
1
quay.io/keycloak/keycloak:26.0.6a93d22e13b86
netty-codec-dns@4.1.111.Final
4.1.133.Final
1
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
netty-codec-dns@4.1.82.Final
4.1.133.Final
1
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
netty-codec-dns@4.1.82.Final
4.1.133.Final
1
quay.io/maximilianopizarro/custom-rhcl-console:dns-prober-v0.1.21a592ee6651a
netty-codec-dns@4.1.132.Final
4.1.133.Final
1
quay.io/maximilianopizarro/neuralbank-backend:latesta53899fcfc01
netty-codec-dns@4.1.127.Final
4.1.133.Final
1
quay.io/maximilianopizarro/showroom-docs-mcp:latest1a6eff92827a
netty-codec-dns@4.1.130.Final
4.1.133.Final
1
quay.io/microcks/microcks-operator:0.0.1196d1054d4a61
netty-codec-dns@4.1.128.Final
4.1.133.Final
1
quay.io/opsmxpublic/ubi8-gate:isd-spin-2025.10.01-5c720954-2025112608102b3554029737
netty-codec-dns@4.1.94.Final
4.1.133.Final
1
quay.io/strimzi/operator:0.45.158c727cd2e68
netty-codec-dns@4.1.118.Final
4.1.133.Final
1
quay.io/strimzi/operator:0.36.1e9e03b31007c
netty-codec-dns@4.1.94.Final
4.1.133.Final
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.