CVE-2026-42583
HighAdvisory
Published 7 May 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.005
- 39th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 453
- of 17,781 indexed, latest versions
- Container images
- 513
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Netty Lz4FrameDecoder is vulnerable to resource exhaustion
Carried by container images the latest versions of 453 of 17,781 indexed charts deploy, on 513 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| netty-codecmaven | 4.0.23.Final, 4.0.27.Final, 4.0.36.Final, 4.0.37.Final+89 more | 4.1.133.Final | 453 |
| netty-codec-compressionmaven | 4.2.0.Final, 4.2.1.Final, 4.2.4.Final, 4.2.5.Final+5 more | 4.2.13.Final | 66 |
- OSV records
- GHSA-mj4r-2hfc-f8p6
Charts affected
453 by stars
Container images carrying it
513 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| library/ | cab8944a33a1 | netty-codec | 4.1.133.Final | 1 |
| library/ | dfa9ba46d14b | netty-codec | 4.1.133.Final | 1 |
| liukunup/ | 9c079617a81b | netty-codec | 4.1.133.Final | 1 |
| localstack/ | 9d278167f2b7 | netty-codec | 4.1.133.Final | 1 |
| lourdesmorente/ | 608745878cdb | netty-codec | 4.1.133.Final | 1 |
| lsmaster/ | 061eb5fbfa00 | netty-codec | 4.1.133.Final | 1 |
| magento/ | 59fb6f0f1461 | netty-codec | 4.1.133.Final | 1 |
| maksimkavalenka/ | 64a25afb8748 | netty-codec | 4.1.133.Final | 1 |
| maksimkavalenka/ | 13ad9bb170a0 | netty-codec | 4.1.133.Final | 1 |
| maksimkavalenka/ | 2bcdac368b07 | netty-codec | 4.1.133.Final | 1 |
| merlos/ | a38fc7e09ed7 | netty-codec | 4.1.133.Final | 1 |
| metabase/ | 7807bc5cad17 | netty-codec | 4.1.133.Final | 1 |
| metabase/ | ffb2dccacefc | netty-codec | 4.1.133.Final | 1 |
| molynx/ | 441c9f52f092 | netty-codec | 4.1.133.Final | 1 |
| muluder/ | 43b597a93da7 | netty-codec | 4.1.133.Final | 1 |
| nacos/ | fe6e5688cdf3 | netty-codec | 4.1.133.Final | 1 |
| novumrgi/ | 8c54790675b1 | netty-codec | 4.1.133.Final | 1 |
| odavid/ | e7ab3bbc948e | netty-codec | 4.1.133.Final | 1 |
| omecproject/ | b4ae7d0d6b74 | netty-codec | 4.1.133.Final | 1 |
| omecproject/ | 5715e5648aa0 | netty-codec | 4.1.133.Final | 1 |
| onosproject/ | 44914a8d4b3f | netty-codec | 4.1.133.Final | 1 |
| openbas/ | d986d80b0a75 | netty-codec | 4.1.133.Final | 1 |
| openhab/ | d0aa4af452c1 | netty-codec | 4.1.133.Final | 1 |
| opensearchproject/ | 57c25fa01d3c | netty-codec | 4.1.133.Final | 1 |
| opensearchproject/ | 43b0cdaf26ed | netty-codec | 4.1.133.Final | 1 |
| opensearchproject/ | 1963b3ece46d | netty-codec | 4.1.133.Final | 1 |
| opensearchproject/ | 466a49f379bb | netty-codec | 4.1.133.Final | 1 |
| opensearchproject/ | 474ea3fdf25d | netty-codec | 4.1.133.Final | 1 |
| opensearchproject/ | 645d3d9390ad | netty-codec | 4.1.133.Final | 1 |
| opensearchproject/ | 69588c664014 | netty-codec | 4.1.133.Final | 1 |
| opensearchproject/ | 798cf28e226a | netty-codec | 4.1.133.Final | 1 |
| opensearchproject/ | 8690b204fe91 | netty-codec | 4.1.133.Final | 1 |
| opensearchproject/ | c8f3ebd2a934 | netty-codec | 4.1.133.Final | 1 |
| openwhisk/ | f5831ec85525 | netty-codec | 4.1.133.Final | 1 |
| openzipkin/ | 197a9692f6a9 | netty-codec | 4.1.133.Final | 1 |
| openzipkin/ | 60c3970df479 | netty-codec | 4.1.133.Final | 1 |
| openzipkin/ | b5d51d1144e2 | netty-codec | 4.1.133.Final | 1 |
| openzipkin/ | a69e1057df36 | netty-codec-compression | 4.2.13.Final | 1 |
| oscarsotosanchez/ | 730c00a099b8 | netty-codec | 4.1.133.Final | 1 |
| pcarrascoponce/ | 981fc482442c | netty-codec | 4.1.133.Final | 1 |
| penpotapp/ | 47853d9bb9dd | netty-codec | 4.1.133.Final | 1 |
| platform9community/ | de3fa9b70df1 | netty-codec | 4.1.133.Final | 1 |
| platform9community/ | 40a4970de568 | netty-codec | 4.1.133.Final | 1 |
| pmoscode/ | a58f4d762f5c | netty-codec | 4.1.133.Final | 1 |
| project2team4/ | 3ff031a08887 | netty-codec | 4.1.133.Final | 1 |
| prom/ | 71c2e988af06 | netty-codec | 4.1.133.Final | 1 |
| radondb/ | 16981604f1a0 | netty-codec | 4.1.133.Final | 1 |
| redestroyder/ | 740364a619fd | netty-codec | 4.1.133.Final | 1 |
| redestroyder/ | db03499a0726 | netty-codec | 4.1.133.Final | 1 |
| refar/ | 241373fa2972 | netty-codec | 4.1.133.Final | 1 |