StackRadar

CVE-2026-42587

High

Advisory

Published 7 May 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.010
61st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
381
of 17,781 indexed, latest versions
Container images
440
deployed by those charts
Fix available
2 of 2
affected packages

Netty: HttpContentDecompressor maxAllocation bypass when Content-Encoding set to br/zstd/snappy leads to decompression bomb DoS

Carried by container images the latest versions of 381 of 17,781 indexed charts deploy, on 440 images.

Affected packageAffected versionsFixed inImages
netty-codec-httpmaven4.0.27.Final, 4.0.52.Final, 4.1.12.Final, 4.1.13.Final+88 more4.1.133.Final, 4.2.13.Final440
netty-codec-http2maven4.1.12.Final, 4.1.19.Final, 4.1.22.Final, 4.1.24.Final+77 more4.1.133.Final, 4.2.13.Final386
OSV records
GHSA-f6hv-jmp6-3vwv

Charts affected

381 by stars
ChartLatestAffected imagesRadar Score
yaadeencircle360-ossVerified publisher0.2.11 of 1See more

yaade encircle360-oss 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
esperotech/yaade:latest24d2d692d948
netty-codec-http@4.1.103.Final
netty-codec-http2@4.1.103.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

1,000
eolicplantseolicplantsVerified publisher0.1.02 of 7See more

eolicplants eolicplants 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
oscarsotosanchez/planner:v1.0730c00a099b8
netty-codec-http@4.1.54.Final
netty-codec-http2@4.1.42.Final
4.1.133.Final
4.1.133.Final
oscarsotosanchez/toposervice:v1.0d4d020e9f272
netty-codec-http@4.1.54.Final
netty-codec-http2@4.1.54.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

27,291
eoloPlanteolo-plannerVerified publisher0.1.03 of 7See more

eoloPlant eolo-planner 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
netty-codec-http@4.1.85.Final
netty-codec-http2@4.1.85.Final
4.1.133.Final
4.1.133.Final
mastercloudapps/planner:v1.2340a950b311b2
netty-codec-http@4.1.42.Final
netty-codec-http2@4.1.70.Final
4.1.133.Final
4.1.133.Final
mastercloudapps/server:v2.23f3d24dfe2686
netty-codec-http@4.1.82.Final
netty-codec-http2@4.1.82.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

27,537
eoloplannereoloplannerVerified publisher0.1.03 of 7See more

eoloplanner eoloplanner 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
netty-codec-http@4.1.42.Final
netty-codec-http2@4.1.42.Final
4.1.133.Final
4.1.133.Final
codeurjc/server:v1.0310bea5b1ee7
netty-codec-http@4.1.82.Final
netty-codec-http2@4.1.82.Final
4.1.133.Final
4.1.133.Final
codeurjc/toposervice:v1.09fb4c11e6a49
netty-codec-http@4.1.85.Final
netty-codec-http2@4.1.85.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

32,205
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.03 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
netty-codec-http@4.1.85.Final
netty-codec-http2@4.1.85.Final
4.1.133.Final
4.1.133.Final
mastercloudapps/planner:v1.2340a950b311b2
netty-codec-http@4.1.42.Final
netty-codec-http2@4.1.70.Final
4.1.133.Final
4.1.133.Final
mastercloudapps/server:v2.23f3d24dfe2686
netty-codec-http@4.1.82.Final
netty-codec-http2@4.1.82.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

27,537
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.02 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
franrobles8/planner:v3.099985392d63c
netty-codec-http@4.1.42.Final
netty-codec-http2@4.1.54.Final
4.1.133.Final
4.1.133.Final
oscarsotosanchez/toposervice:v1.0d4d020e9f272
netty-codec-http@4.1.54.Final
netty-codec-http2@4.1.54.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

27,256
eoloplannereoloplanner-molynx-gat0.1.03 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
netty-codec-http@4.1.82.Final
netty-codec-http2@4.1.82.Final
4.1.133.Final
4.1.133.Final
codeurjc/toposervice:v1.09fb4c11e6a49
netty-codec-http@4.1.85.Final
netty-codec-http2@4.1.85.Final
4.1.133.Final
4.1.133.Final
molynx/planner:v1441c9f52f092
netty-codec-http@4.1.42.Final
netty-codec-http2@4.1.70.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

28,482
eolo-plannereolo-planner-repo0.1.02 of 7See more

eolo-planner eolo-planner-repo 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
arturisimo/planner:v1.0fff9de644941
netty-codec-http@4.1.42.Final
netty-codec-http2@4.1.42.Final
4.1.133.Final
4.1.133.Final
codeurjc/toposervice:v1.09fb4c11e6a49
netty-codec-http@4.1.85.Final
netty-codec-http2@4.1.85.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

27,096
eoloplanteoloplant1.0.03 of 7See more

eoloplant eoloplant 1.0.0

3 of the 7 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
netty-codec-http@4.1.85.Final
netty-codec-http2@4.1.85.Final
4.1.133.Final
4.1.133.Final
mastercloudapps/planner:v1.2340a950b311b2
netty-codec-http@4.1.42.Final
netty-codec-http2@4.1.70.Final
4.1.133.Final
4.1.133.Final
mastercloudapps/server:v2.23f3d24dfe2686
netty-codec-http@4.1.82.Final
netty-codec-http2@4.1.82.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

27,537
eoloplantseoloplants-urjcVerified publisher0.1.03 of 7See more

eoloplants eoloplants-urjc 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
netty-codec-http@4.1.82.Final
netty-codec-http2@4.1.82.Final
4.1.133.Final
4.1.133.Final
codeurjc/toposervice:v1.09fb4c11e6a49
netty-codec-http@4.1.85.Final
netty-codec-http2@4.1.85.Final
4.1.133.Final
4.1.133.Final
lourdesmorente/new-planner:1.0.0608745878cdb
netty-codec-http@4.1.70.Final
netty-codec-http2@4.1.42.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

27,721
servereoloserverVerified publisher0.1.03 of 7See more

server eoloserver 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
netty-codec-http@4.1.42.Final
netty-codec-http2@4.1.42.Final
4.1.133.Final
4.1.133.Final
codeurjc/server:v1.0310bea5b1ee7
netty-codec-http@4.1.82.Final
netty-codec-http2@4.1.82.Final
4.1.133.Final
4.1.133.Final
codeurjc/toposervice:v1.09fb4c11e6a49
netty-codec-http@4.1.85.Final
netty-codec-http2@4.1.85.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

32,205
shenyuerdeng2.4.212 of 2See more

shenyu erdeng 2.4.21

2 of the 2 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.4.2e8b7c4ddd069
netty-codec-http@4.1.38.Final
netty-codec-http2@4.1.43.Final
4.1.133.Final
4.1.133.Final
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
netty-codec-http@4.1.43.Final
netty-codec-http2@4.1.38.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

12,513
dshackleethereum-helm-chartsVerified publisher0.1.91 of 2See more

dshackle ethereum-helm-charts 0.1.9

1 of the 2 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
emeraldpay/dshackle:0.14.0126f0ae0b388
netty-codec-http@4.1.70.Final
netty-codec-http2@4.1.70.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

2,021
faucethethereum-helm-chartsVerified publisher0.2.41 of 1See more

fauceth ethereum-helm-charts 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
ghcr.io/komputing/fauceth:release4ab8fa4143b4
netty-codec-http@4.1.69.Final
netty-codec-http2@4.1.69.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

1,373
web3signerethereum-helm-chartsVerified publisher1.0.61 of 4See more

web3signer ethereum-helm-charts 1.0.6

1 of the 4 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
consensys/web3signer:latestf146a51a1ba3
netty-codec-http@4.2.12.Final
netty-codec-http2@4.2.12.Final
4.2.13.Final
4.2.13.Final

Open the chart page →

1,997
spring-boot-adminevryfs-ossVerified publisher0.1.101 of 1See more

spring-boot-admin evryfs-oss 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
quay.io/evryfs/spring-boot-admin:2.7.1060950ef63764
netty-codec-http@4.1.86.Final
netty-codec-http2@4.1.86.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

5,998
fibfibonacci-cluster-appsVerified publisher1.0.03 of 5See more

fib fibonacci-cluster-apps 1.0.0

3 of the 5 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
golenski/fibonacci-msg-relay:1.0.0c863dcb0c513
netty-codec-http@4.1.114.Final
4.1.133.Final
golenski/fibonacci-task-manager:2.0.03a2b36df247b
netty-codec-http@4.1.114.Final
4.1.133.Final
golenski/fibonacci-worker:2.0.0954caf4aaf6a
netty-codec-http@4.1.114.Final
4.1.133.Final

Open the chart page →

16,927
infrafibonacci-cluster-infraVerified publisher1.0.01 of 4See more

infra fibonacci-cluster-infra 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
apache/activemq-artemis:2.37.0bae523439ee3
netty-codec-http@4.1.112.Final
4.1.133.Final

Open the chart page →

12,454
fineractfineract-openshift0.1.11 of 4See more

fineract fineract-openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
apache/fineract:1.12.1a83cf1980609
netty-codec-http@4.1.119.Final
netty-codec-http2@4.1.119.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

7,792
apollofiware0.1.41 of 1See more

apollo fiware 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
quay.io/fiware/apollo:0.0.1055330b1b60c1
netty-codec-http@4.1.77.Final
netty-codec-http2@4.1.77.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

6,936
canis-majorfiware0.2.31 of 1See more

canis-major fiware 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
quay.io/fiware/canis-major:1.5.15bb40472e4ff5
netty-codec-http@4.1.73.Final
netty-codec-http2@4.1.73.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

8,528
consent-facadefiware0.1.11 of 1See more

consent-facade fiware 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
quay.io/seamware/consent-facade:0.0.14be844c750c7e
netty-codec-http@4.1.115.Final
netty-codec-http2@4.1.115.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

2,475
contract-managementfiware3.5.361 of 1See more

contract-management fiware 3.5.36

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
quay.io/fiware/contract-management:3.3.122bcfcf874451
netty-codec-http@4.1.115.Final
netty-codec-http2@4.1.115.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

2,411
credentials-config-servicefiware2.6.41 of 1See more

credentials-config-service fiware 2.6.4

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
quay.io/fiware/credentials-config-service:3.4.3f2fbced76da8
netty-codec-http@4.2.9.Final
netty-codec-http2@4.2.9.Final
4.2.13.Final
4.2.13.Final

Open the chart page →

2,293
dss-validation-servicefiware0.0.191 of 1See more

dss-validation-service fiware 0.0.19

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
quay.io/wi_stefan/dss-validation-service:0.0.18e928db29ee1
netty-codec-http@4.1.115.Final
netty-codec-http2@4.1.115.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

4,536
endpoint-auth-servicefiware0.1.41 of 4See more

endpoint-auth-service fiware 0.1.4

1 of the 4 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
quay.io/fiware/endpoint-configuration-service:0.4.30dc38a87b844
netty-codec-http@4.1.69.Final
netty-codec-http2@4.1.69.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

11,835
mintakafiware0.4.71 of 1See more

mintaka fiware 0.4.7

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
fiware/mintaka:latestefc6793388cc
netty-codec-http@4.1.81.Final
netty-codec-http2@4.1.81.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

7,019
scorpio-brokerfiware0.3.39 of 10See more

scorpio-broker fiware 0.3.3

9 of the 10 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:RegistrySubscriptionManager_2.1.001e11d800459
netty-codec-http@4.1.32.Final
netty-codec-http2@4.1.70.Final
4.1.133.Final
4.1.133.Final
scorpiobroker/scorpio:eureka-server_2.1.03f05a113a4be
netty-codec-http@4.1.70.Final
netty-codec-http2@4.1.70.Final
4.1.133.Final
4.1.133.Final
scorpiobroker/scorpio:AtContextServer_2.1.05073ceef2fa0
netty-codec-http@4.1.32.Final
netty-codec-http2@4.1.70.Final
4.1.133.Final
4.1.133.Final
scorpiobroker/scorpio:gateway_2.1.062dae3dd0eeb
netty-codec-http@4.1.70.Final
netty-codec-http2@4.1.70.Final
4.1.133.Final
4.1.133.Final
scorpiobroker/scorpio:RegistryManager_2.1.0a2cfcf0947fd
netty-codec-http@4.1.70.Final
netty-codec-http2@4.1.70.Final
4.1.133.Final
4.1.133.Final
scorpiobroker/scorpio:QueryManager_2.1.0b742a53b2803
netty-codec-http@4.1.32.Final
netty-codec-http2@4.1.70.Final
4.1.133.Final
4.1.133.Final
scorpiobroker/scorpio:HistoryManager_2.1.0b7fe27a06ff5
netty-codec-http@4.1.70.Final
netty-codec-http2@4.1.70.Final
4.1.133.Final
4.1.133.Final
scorpiobroker/scorpio:SubscriptionManager_2.1.0e08036670d66
netty-codec-http@4.1.32.Final
netty-codec-http2@4.1.70.Final
4.1.133.Final
4.1.133.Final
scorpiobroker/scorpio:EntityManager_2.1.0f02e8a429a08
netty-codec-http@4.1.32.Final
netty-codec-http2@4.1.70.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

55,600
scorpiobrokerfiware0.1.29 of 10See more

scorpiobroker fiware 0.1.2

9 of the 10 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:RegistrySubscriptionManager_2.1.001e11d800459
netty-codec-http@4.1.32.Final
netty-codec-http2@4.1.70.Final
4.1.133.Final
4.1.133.Final
scorpiobroker/scorpio:eureka-server_2.1.03f05a113a4be
netty-codec-http@4.1.70.Final
netty-codec-http2@4.1.70.Final
4.1.133.Final
4.1.133.Final
scorpiobroker/scorpio:AtContextServer_2.1.05073ceef2fa0
netty-codec-http@4.1.32.Final
netty-codec-http2@4.1.70.Final
4.1.133.Final
4.1.133.Final
scorpiobroker/scorpio:gateway_2.1.062dae3dd0eeb
netty-codec-http@4.1.70.Final
netty-codec-http2@4.1.70.Final
4.1.133.Final
4.1.133.Final
scorpiobroker/scorpio:RegistryManager_2.1.0a2cfcf0947fd
netty-codec-http@4.1.70.Final
netty-codec-http2@4.1.70.Final
4.1.133.Final
4.1.133.Final
scorpiobroker/scorpio:QueryManager_2.1.0b742a53b2803
netty-codec-http@4.1.32.Final
netty-codec-http2@4.1.70.Final
4.1.133.Final
4.1.133.Final
scorpiobroker/scorpio:HistoryManager_2.1.0b7fe27a06ff5
netty-codec-http@4.1.70.Final
netty-codec-http2@4.1.70.Final
4.1.133.Final
4.1.133.Final
scorpiobroker/scorpio:SubscriptionManager_2.1.0e08036670d66
netty-codec-http@4.1.32.Final
netty-codec-http2@4.1.70.Final
4.1.133.Final
4.1.133.Final
scorpiobroker/scorpio:EntityManager_2.1.0f02e8a429a08
netty-codec-http@4.1.32.Final
netty-codec-http2@4.1.70.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

55,600
scorpio-broker-aaiofiware0.4.151 of 1See more

scorpio-broker-aaio fiware 0.4.15

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:scorpio-aaio_2.1.0db55012043df
netty-codec-http@4.1.70.Final
netty-codec-http2@4.1.70.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

5,286
tm-forum-apifiware0.17.1519 of 19See more

tm-forum-api fiware 0.17.15

19 of the 19 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
quay.io/fiware/tmforum-account:1.18.06b25aac03414
netty-codec-http@4.1.91.Final
netty-codec-http2@4.1.91.Final
4.1.133.Final
4.1.133.Final
quay.io/fiware/tmforum-agreement:1.18.081e7025dc16d
netty-codec-http@4.1.91.Final
netty-codec-http2@4.1.91.Final
4.1.133.Final
4.1.133.Final
quay.io/fiware/tmforum-customer-bill-management:1.18.0dee901f1f75d
netty-codec-http@4.1.91.Final
netty-codec-http2@4.1.91.Final
4.1.133.Final
4.1.133.Final
quay.io/fiware/tmforum-customer-management:1.18.0d3519cebecd0
netty-codec-http@4.1.91.Final
netty-codec-http2@4.1.91.Final
4.1.133.Final
4.1.133.Final
quay.io/fiware/tmforum-party-catalog:1.18.07d6969a7393a
netty-codec-http@4.1.91.Final
netty-codec-http2@4.1.91.Final
4.1.133.Final
4.1.133.Final
quay.io/fiware/tmforum-party-role:1.18.052db89f17863
netty-codec-http@4.1.91.Final
netty-codec-http2@4.1.91.Final
4.1.133.Final
4.1.133.Final
quay.io/fiware/tmforum-product-catalog:1.18.0e409338726da
netty-codec-http@4.1.91.Final
netty-codec-http2@4.1.91.Final
4.1.133.Final
4.1.133.Final
quay.io/fiware/tmforum-product-inventory:1.18.03a5d6dd30f1d
netty-codec-http@4.1.91.Final
netty-codec-http2@4.1.91.Final
4.1.133.Final
4.1.133.Final
quay.io/fiware/tmforum-product-ordering-management:1.18.042c81c291f6f
netty-codec-http@4.1.91.Final
netty-codec-http2@4.1.91.Final
4.1.133.Final
4.1.133.Final
quay.io/fiware/tmforum-quote:1.18.0d9ca3a334352
netty-codec-http@4.1.91.Final
netty-codec-http2@4.1.91.Final
4.1.133.Final
4.1.133.Final
quay.io/fiware/tmforum-resource-catalog:1.18.0b0d853627c59
netty-codec-http@4.1.91.Final
netty-codec-http2@4.1.91.Final
4.1.133.Final
4.1.133.Final
quay.io/fiware/tmforum-resource-function-activation:1.18.062a5acb63fd1
netty-codec-http@4.1.91.Final
netty-codec-http2@4.1.91.Final
4.1.133.Final
4.1.133.Final
quay.io/fiware/tmforum-resource-inventory:1.18.0553b4a47730b
netty-codec-http@4.1.91.Final
netty-codec-http2@4.1.91.Final
4.1.133.Final
4.1.133.Final
quay.io/fiware/tmforum-resource-order-management:1.18.0dd1778ad6203
netty-codec-http@4.1.91.Final
netty-codec-http2@4.1.91.Final
4.1.133.Final
4.1.133.Final
quay.io/fiware/tmforum-service-catalog:1.18.074b0fad9e155
netty-codec-http@4.1.91.Final
netty-codec-http2@4.1.91.Final
4.1.133.Final
4.1.133.Final
quay.io/fiware/tmforum-service-inventory:1.18.04be54e8cb5c0
netty-codec-http@4.1.91.Final
netty-codec-http2@4.1.91.Final
4.1.133.Final
4.1.133.Final
quay.io/fiware/tmforum-service-order-management:1.18.0d2091785d544
netty-codec-http@4.1.91.Final
netty-codec-http2@4.1.91.Final
4.1.133.Final
4.1.133.Final
quay.io/fiware/tmforum-software-management:1.18.01b74a2f7ba67
netty-codec-http@4.1.91.Final
netty-codec-http2@4.1.91.Final
4.1.133.Final
4.1.133.Final
quay.io/fiware/tmforum-usage-management:1.18.042f190c42926
netty-codec-http@4.1.91.Final
netty-codec-http2@4.1.91.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

35,112
trusted-issuers-listfiware0.18.71 of 1See more

trusted-issuers-list fiware 0.18.7

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
quay.io/fiware/trusted-issuers-list:0.9.13c886ce5c056
netty-codec-http@4.2.9.Final
netty-codec-http2@4.2.9.Final
4.2.13.Final
4.2.13.Final

Open the chart page →

1,701
trusted-issuers-registryfiware0.13.01 of 1See more

trusted-issuers-registry fiware 0.13.0

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
quay.io/fiware/trusted-issuers-registry:0.11.1a8a9ec461034
netty-codec-http@4.1.100.Final
netty-codec-http2@4.1.100.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

7,087
my-chartfleet-web-app0.1.01 of 6See more

my-chart fleet-web-app 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
richardchesterwood/k8s-fleetman-api-gateway:release2518f946b9f05
netty-codec-http@4.0.27.Final
4.1.133.Final

Open the chart page →

24,296
flyteconnectorflyte2.0.01 of 1See more

flyteconnector flyte 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
netty-codec-http@4.2.7.Final
netty-codec-http2@4.2.7.Final
4.2.13.Final
4.2.13.Final

Open the chart page →

3,463
edge-connexionfolio-org0.1.51 of 1See more

edge-connexion folio-org 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
folioci/edge-connexion:latestb4863d135524
netty-codec-http@4.2.9.Final
netty-codec-http2@4.2.9.Final
4.2.13.Final
4.2.13.Final

Open the chart page →

1,132
edge-ncipfolio-org0.1.281 of 1See more

edge-ncip folio-org 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
folioci/edge-ncip:lateste760dbb81d1a
netty-codec-http@4.2.10.Final
netty-codec-http2@4.2.10.Final
4.2.13.Final
4.2.13.Final

Open the chart page →

820
edge-oai-pmhfolio-org0.1.311 of 1See more

edge-oai-pmh folio-org 0.1.31

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
folioci/edge-oai-pmh:latesteedfcbc29792
netty-codec-http@4.2.7.Final
netty-codec-http2@4.2.7.Final
4.2.13.Final
4.2.13.Final

Open the chart page →

874
edge-ordersfolio-org0.1.301 of 1See more

edge-orders folio-org 0.1.30

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
folioci/edge-orders:latest1ef654ee9f23
netty-codec-http@4.2.12.Final
netty-codec-http2@4.2.12.Final
4.2.13.Final
4.2.13.Final

Open the chart page →

735
edge-patronfolio-org0.1.281 of 1See more

edge-patron folio-org 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
folioci/edge-patron:latest682b852e056d
netty-codec-http@4.2.7.Final
netty-codec-http2@4.2.7.Final
4.2.13.Final
4.2.13.Final

Open the chart page →

905
edge-rtacfolio-org0.1.281 of 1See more

edge-rtac folio-org 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
folioci/edge-rtac:latest15ef73b1abd0
netty-codec-http@4.2.10.Final
netty-codec-http2@4.2.10.Final
4.2.13.Final
4.2.13.Final

Open the chart page →

1,259
mod-aesfolio-org0.1.331 of 1See more

mod-aes folio-org 0.1.33

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
folioci/mod-aes:latest6d67e9564270
netty-codec-http@4.1.60.Final
netty-codec-http2@4.1.60.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

2,281
mod-authtokenfolio-org0.1.351 of 1See more

mod-authtoken folio-org 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
folioci/mod-authtoken:latest995a25a33133
netty-codec-http@4.1.118.Final
netty-codec-http2@4.1.118.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

1,558
mod-codex-ekbfolio-org0.1.341 of 1See more

mod-codex-ekb folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
folioci/mod-codex-ekb:latest235a3fa4adc9
netty-codec-http@4.1.78.Final
netty-codec-http2@4.1.78.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

2,113
mod-codex-inventoryfolio-org0.1.341 of 1See more

mod-codex-inventory folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
folioci/mod-codex-inventory:latest6d53ed758fd1
netty-codec-http@4.1.65.Final
netty-codec-http2@4.1.65.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

1,901
mod-codex-muxfolio-org0.1.341 of 1See more

mod-codex-mux folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
folioci/mod-codex-mux:latestd4138abfd30d
netty-codec-http@4.1.82.Final
netty-codec-http2@4.1.82.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

1,755
mod-configurationfolio-org0.1.341 of 1See more

mod-configuration folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
folioci/mod-configuration:latestdd0cdc89670a
netty-codec-http@4.2.12.Final
netty-codec-http2@4.2.12.Final
4.2.13.Final
4.2.13.Final

Open the chart page →

711
mod-copycatfolio-org0.1.31 of 1See more

mod-copycat folio-org 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
folioci/mod-copycat:latest1513fad2b799
netty-codec-http@4.2.12.Final
netty-codec-http2@4.2.12.Final
4.2.13.Final
4.2.13.Final

Open the chart page →

1,466
mod-coursesfolio-org0.1.341 of 1See more

mod-courses folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
folioci/mod-courses:latest68ca414f5596
netty-codec-http@4.2.9.Final
netty-codec-http2@4.2.9.Final
4.2.13.Final
4.2.13.Final

Open the chart page →

1,533
mod-data-exportfolio-org0.1.401 of 1See more

mod-data-export folio-org 0.1.40

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
folioci/mod-data-export:latest0cc86bf09755
netty-codec-http@4.2.9.Final
netty-codec-http2@4.2.9.Final
4.2.13.Final
4.2.13.Final

Open the chart page →

1,393

Container images carrying it

440 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
esperotech/yaade:latest24d2d692d948
netty-codec-http@4.1.103.Final
netty-codec-http2@4.1.103.Final
4.1.133.Final
4.1.133.Final
1
expediagroup/pitchfork:1.314f2cf61e7de9
netty-codec-http@4.1.68.Final
netty-codec-http2@4.1.68.Final
4.1.133.Final
4.1.133.Final
1
fiware/mintaka:0.7.092a3c5cf43c0
netty-codec-http@4.1.81.Final
netty-codec-http2@4.1.81.Final
4.1.133.Final
4.1.133.Final
1
fiware/mintaka:latestefc6793388cc
netty-codec-http@4.1.81.Final
netty-codec-http2@4.1.81.Final
4.1.133.Final
4.1.133.Final
1
fjvela/urjc-fjvela-worker:1.0.170cebf67bd66
netty-codec-http@4.1.42.Final
netty-codec-http2@4.1.42.Final
4.1.133.Final
4.1.133.Final
1
flowable/flowable-rest:7.1.0b7ae287502cd
netty-codec-http@4.1.113.Final
4.1.133.Final
1
folioci/edge-connexion:latestb4863d135524
netty-codec-http@4.2.9.Final
netty-codec-http2@4.2.9.Final
4.2.13.Final
4.2.13.Final
1
folioci/edge-ncip:lateste760dbb81d1a
netty-codec-http@4.2.10.Final
netty-codec-http2@4.2.10.Final
4.2.13.Final
4.2.13.Final
1
folioci/edge-oai-pmh:latesteedfcbc29792
netty-codec-http@4.2.7.Final
netty-codec-http2@4.2.7.Final
4.2.13.Final
4.2.13.Final
1
folioci/edge-orders:latest1ef654ee9f23
netty-codec-http@4.2.12.Final
netty-codec-http2@4.2.12.Final
4.2.13.Final
4.2.13.Final
1
folioci/edge-patron:latest682b852e056d
netty-codec-http@4.2.7.Final
netty-codec-http2@4.2.7.Final
4.2.13.Final
4.2.13.Final
1
folioci/edge-rtac:latest15ef73b1abd0
netty-codec-http@4.2.10.Final
netty-codec-http2@4.2.10.Final
4.2.13.Final
4.2.13.Final
1
folioci/mod-aes:latest6d67e9564270
netty-codec-http@4.1.60.Final
netty-codec-http2@4.1.60.Final
4.1.133.Final
4.1.133.Final
1
folioci/mod-authtoken:latest995a25a33133
netty-codec-http@4.1.118.Final
netty-codec-http2@4.1.118.Final
4.1.133.Final
4.1.133.Final
1
folioci/mod-codex-ekb:latest235a3fa4adc9
netty-codec-http@4.1.78.Final
netty-codec-http2@4.1.78.Final
4.1.133.Final
4.1.133.Final
1
folioci/mod-codex-inventory:latest6d53ed758fd1
netty-codec-http@4.1.65.Final
netty-codec-http2@4.1.65.Final
4.1.133.Final
4.1.133.Final
1
folioci/mod-codex-mux:latestd4138abfd30d
netty-codec-http@4.1.82.Final
netty-codec-http2@4.1.82.Final
4.1.133.Final
4.1.133.Final
1
folioci/mod-configuration:latestdd0cdc89670a
netty-codec-http@4.2.12.Final
netty-codec-http2@4.2.12.Final
4.2.13.Final
4.2.13.Final
1
folioci/mod-copycat:latest1513fad2b799
netty-codec-http@4.2.12.Final
netty-codec-http2@4.2.12.Final
4.2.13.Final
4.2.13.Final
1
folioci/mod-courses:latest68ca414f5596
netty-codec-http@4.2.9.Final
netty-codec-http2@4.2.9.Final
4.2.13.Final
4.2.13.Final
1
folioci/mod-data-export:latest0cc86bf09755
netty-codec-http@4.2.9.Final
netty-codec-http2@4.2.9.Final
4.2.13.Final
4.2.13.Final
1
folioci/mod-data-export-spring:latestf1d7caf4544b
netty-codec-http@4.2.9.Final
4.2.13.Final
1
folioci/mod-data-export-worker:latest1ad1811c9b37
netty-codec-http@4.2.9.Final
netty-codec-http2@4.2.9.Final
4.2.13.Final
4.2.13.Final
1
folioci/mod-data-import-converter-storage:latest3028f333778f
netty-codec-http@4.1.82.Final
netty-codec-http2@4.1.82.Final
4.1.133.Final
4.1.133.Final
1
folioci/mod-email:latest79ea8e2e7ebf
netty-codec-http@4.2.9.Final
netty-codec-http2@4.2.9.Final
4.2.13.Final
4.2.13.Final
1
folioci/mod-erm-usage-harvester:latest2d6767933c59
netty-codec-http@4.2.12.Final
netty-codec-http2@4.2.12.Final
4.2.13.Final
4.2.13.Final
1
folioci/mod-eusage-reports:latest15de67587091
netty-codec-http@4.2.10.Final
netty-codec-http2@4.2.10.Final
4.2.13.Final
4.2.13.Final
1
folioci/mod-feesfines:latestfe3a7049f2fb
netty-codec-http@4.2.7.Final
netty-codec-http2@4.2.7.Final
4.2.13.Final
4.2.13.Final
1
folioci/mod-inventory-update:latestba84812b4d58
netty-codec-http@4.2.5.Final
netty-codec-http2@4.2.5.Final
4.2.13.Final
4.2.13.Final
1
folioci/mod-login:latest88de493f86db
netty-codec-http@4.1.130.Final
netty-codec-http2@4.1.130.Final
4.1.133.Final
4.1.133.Final
1
folioci/mod-login-saml:latest5f3358ccaa0f
netty-codec-http@4.1.132.Final
netty-codec-http2@4.1.132.Final
4.1.133.Final
4.1.133.Final
1
folioci/mod-marccat:latest1b57d690d568
netty-codec-http@4.1.22.Final
netty-codec-http2@4.1.22.Final
4.1.133.Final
4.1.133.Final
1
folioci/mod-ncip:latest8ed83674352b
netty-codec-http@4.2.10.Final
netty-codec-http2@4.2.10.Final
4.2.13.Final
4.2.13.Final
1
folioci/mod-oai-pmh:latest5cd5ef063f2a
netty-codec-http@4.2.7.Final
netty-codec-http2@4.2.7.Final
4.2.13.Final
4.2.13.Final
1
folioci/mod-organizations:latest7dc9ccf3d937
netty-codec-http@4.2.12.Final
netty-codec-http2@4.2.12.Final
4.2.13.Final
4.2.13.Final
1
folioci/mod-patron:latest5f213acfe2f8
netty-codec-http@4.2.7.Final
netty-codec-http2@4.2.7.Final
4.2.13.Final
4.2.13.Final
1
folioci/mod-permissions:latest5363e98c6299
netty-codec-http@4.2.12.Final
netty-codec-http2@4.2.12.Final
4.2.13.Final
4.2.13.Final
1
folioci/mod-rtac:latestc959b2d6142f
netty-codec-http@4.2.5.Final
netty-codec-http2@4.2.5.Final
4.2.13.Final
4.2.13.Final
1
folioci/mod-sender:latestd88a675dddf0
netty-codec-http@4.2.9.Final
netty-codec-http2@4.2.9.Final
4.2.13.Final
4.2.13.Final
1
folioci/mod-template-engine:latestd105c585da30
netty-codec-http@4.2.9.Final
netty-codec-http2@4.2.9.Final
4.2.13.Final
4.2.13.Final
1
folioci/mod-user-import:latest1807734472bd
netty-codec-http@4.2.12.Final
netty-codec-http2@4.2.12.Final
4.2.13.Final
4.2.13.Final
1
folioci/mod-users-bl:latest4e2d96c9340d
netty-codec-http@4.2.9.Final
netty-codec-http2@4.2.9.Final
4.2.13.Final
4.2.13.Final
1
fonoster/routr:1.0.0-rc52ca65af17cbc
netty-codec-http@4.1.32.Final
netty-codec-http2@4.1.32.Final
4.1.133.Final
4.1.133.Final
1
fonoster/routr-edgeport:2.13.6d08a8a574a50
netty-codec-http@4.1.79.Final
netty-codec-http2@4.1.79.Final
4.1.133.Final
4.1.133.Final
1
fonoster/routr-requester:2.13.6e0c823506eb2
netty-codec-http@4.1.79.Final
netty-codec-http2@4.1.79.Final
4.1.133.Final
4.1.133.Final
1
franrobles8/planner:v3.099985392d63c
netty-codec-http@4.1.42.Final
netty-codec-http2@4.1.54.Final
4.1.133.Final
4.1.133.Final
1
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
netty-codec-http@4.1.51.Final
netty-codec-http2@4.1.51.Final
4.1.133.Final
4.1.133.Final
1
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
netty-codec-http@4.1.51.Final
netty-codec-http2@4.1.51.Final
4.1.133.Final
4.1.133.Final
1
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
netty-codec-http@4.1.51.Final
netty-codec-http2@4.1.51.Final
4.1.133.Final
4.1.133.Final
1
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
netty-codec-http@4.1.51.Final
netty-codec-http2@4.1.51.Final
4.1.133.Final
4.1.133.Final
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.