StackRadar

CVE-2026-42587

High

Advisory

Published 7 May 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.010
61st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
381
of 17,781 indexed, latest versions
Container images
440
deployed by those charts
Fix available
2 of 2
affected packages

Netty: HttpContentDecompressor maxAllocation bypass when Content-Encoding set to br/zstd/snappy leads to decompression bomb DoS

Carried by container images the latest versions of 381 of 17,781 indexed charts deploy, on 440 images.

Affected packageAffected versionsFixed inImages
netty-codec-httpmaven4.0.27.Final, 4.0.52.Final, 4.1.12.Final, 4.1.13.Final+88 more4.1.133.Final, 4.2.13.Final440
netty-codec-http2maven4.1.12.Final, 4.1.19.Final, 4.1.22.Final, 4.1.24.Final+77 more4.1.133.Final, 4.2.13.Final386
OSV records
GHSA-f6hv-jmp6-3vwv

Charts affected

381 by stars
ChartLatestAffected imagesRadar Score
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.1.4044a457e0498
netty-codec-http@4.1.118.Final
netty-codec-http2@4.1.118.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

45,239
xxl-job-adminjoelee2012Verified publisher1.1.01 of 2See more

xxl-job-admin joelee2012 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
xuxueli/xxl-job-admin:2.4.0640093c35fd6
netty-codec-http@4.1.89.Final
4.1.133.Final

Open the chart page →

3,127
shinsei-managerjtektVerified publisher0.2.01 of 8See more

shinsei-manager jtekt 0.2.0

1 of the 8 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
library/neo4j:5.20.052d3dec8d455
netty-codec-http@4.1.109.Final
netty-codec-http2@4.1.109.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

63,461
kadeck-teamskadeck1.1.211 of 1See more

kadeck-teams kadeck 1.1.21

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
xeotek/kadeck:6.3.439a3b37a17c5
netty-codec-http@4.1.108.Final
netty-codec-http2@4.1.108.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

3,576
kadeck-webkadeck0.6.01 of 1See more

kadeck-web kadeck 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
xeotek/kadeck:4.2.94c6b04d9ce55
netty-codec-http@4.1.70.Final
netty-codec-http2@4.1.70.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

7,254
kron-aapm-agentkron-aapm-agent1.1.01 of 1See more

kron-aapm-agent kron-aapm-agent 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
krontechnology/aapm-agent:1.1.07feef7d2ab42
netty-codec-http@4.1.54.Final
netty-codec-http2@4.1.54.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

8,884
tapm-componentkubebb5.7.11 of 3See more

tapm-component kubebb 5.7.1

1 of the 3 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
refar/apm-api:v5.7.1241373fa2972
netty-codec-http@4.1.59.Final
4.1.133.Final

Open the chart page →

10,264
sonarqubekubesphereVerified publisher6.7.01 of 3See more

sonarqube kubesphere 6.7.0

1 of the 3 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
library/sonarqube:8.9-communityeb2f0be32efd
netty-codec-http@4.1.66.Final
4.1.133.Final

Open the chart page →

2,273
nacoskubesphere-testVerified publisher0.1.11 of 1See more

nacos kubesphere-test 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
nacos/nacos-server:1.4.1fe6e5688cdf3
netty-codec-http@4.1.38.Final
netty-codec-http2@4.1.38.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

4,153
penpotkubitodevVerified publisher1.2.11 of 5See more

penpot kubitodev 1.2.1

1 of the 5 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
penpotapp/backend:2.2.147853d9bb9dd
netty-codec-http@4.1.108.Final
netty-codec-http2@4.1.108.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

16,877
strimzi-kafka-operatorkvalitetsitVerified publisher0.36.11 of 1See more

strimzi-kafka-operator kvalitetsit 0.36.1

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.36.1e9e03b31007c
netty-codec-http@4.1.94.Final
netty-codec-http2@4.1.94.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

4,098
mock-oidclabs64io-helm-chartsVerified publisher0.1.01 of 1See more

mock-oidc labs64io-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
ghcr.io/navikt/mock-oauth2-server:2.1.1065d4ed47ce09
netty-codec-http@4.1.112.Final
4.1.133.Final

Open the chart page →

703
komgalinkding0.2.31 of 1See more

komga linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
gotson/komga:1.22.0ba892ab3e082
netty-codec-http@4.1.115.Final
netty-codec-http2@4.1.115.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

3,131
rocketmq-exporterlogic3579Verified publisher0.0.21 of 1See more

rocketmq-exporter logic3579 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
apache/rocketmq-exporter:0.0.2c8fb51195444
netty-codec-http@4.1.91.Final
netty-codec-http2@4.1.91.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

6,634
opendistro-eslsst-sqre1.4.11 of 3See more

opendistro-es lsst-sqre 1.4.1

1 of the 3 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.4.06df71eb04639
netty-codec-http@4.1.38.Final
4.1.133.Final

Open the chart page →

7,929
elastictranscoderluiscajl0.46.01 of 4See more

elastictranscoder luiscajl 0.46.0

1 of the 4 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
elastictranscoder/media-storage:f6d861a026208b8c2359
netty-codec-http@4.1.65.Final
netty-codec-http2@4.1.65.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

58,160
torznab-atomohdluiscajl0.0.31 of 1See more

torznab-atomohd luiscajl 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
lavandadelpatio/torznab-atomohd:latest214eaef5444c
netty-codec-http@4.1.90.Final
netty-codec-http2@4.1.90.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

3,290
eoloplantmca-eoloplaner0.1.02 of 7See more

eoloplant mca-eoloplaner 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
hugohg34/planner:0.0.2171f61e8d7e2
netty-codec-http@4.1.70.Final
netty-codec-http2@4.1.42.Final
4.1.133.Final
4.1.133.Final
hugohg34/toposervice:0.0.2812a03b3f274
netty-codec-http@4.1.70.Final
netty-codec-http2@4.1.70.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

29,588
metabase-k8smetabase-k8s1.0.01 of 1See more

metabase-k8s metabase-k8s 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
metabase/metabase:v0.53.4.17807bc5cad17
netty-codec-http@4.1.116.Final
netty-codec-http2@4.1.116.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

2,589
elasticmicroboxlabs0.3.01 of 1See more

elastic microboxlabs 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
library/elasticsearch:8.17.32cc40b15dff8
netty-codec-http@4.1.118.Final
netty-codec-http2@4.1.118.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

4,257
miot-calendarmicroboxlabs0.1.01 of 1See more

miot-calendar microboxlabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
ghcr.io/microboxlabs/miot-calendar:latest-jvm7157cdc0bf5b
netty-codec-http@4.1.130.Final
netty-codec-http2@4.1.130.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

1,937
microcks-operatormicrocksVerified publisher0.0.111 of 1See more

microcks-operator microcks 0.0.11

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
quay.io/microcks/microcks-operator:0.0.1196d1054d4a61
netty-codec-http@4.1.128.Final
netty-codec-http2@4.1.128.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

1,261
resource-processormicroservices-learningVerified publisher1.2.01 of 1See more

resource-processor microservices-learning 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
maksimkavalenka/microservices-learning.resource-processor:latest64a25afb8748
netty-codec-http@4.1.97.Final
netty-codec-http2@4.1.97.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

3,683
resource-servicemicroservices-learningVerified publisher1.5.01 of 2See more

resource-service microservices-learning 1.5.0

1 of the 2 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
maksimkavalenka/microservices-learning.resource-service:latest13ad9bb170a0
netty-codec-http@4.1.97.Final
netty-codec-http2@4.1.97.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

5,129
song-servicemicroservices-learningVerified publisher1.2.01 of 2See more

song-service microservices-learning 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
maksimkavalenka/microservices-learning.song-service:latest2bcdac368b07
netty-codec-http@4.1.97.Final
netty-codec-http2@4.1.97.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

4,599
pulsarv2milvus-helm2.7.81 of 4See more

pulsarv2 milvus-helm 2.7.8

1 of the 4 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
netty-codec-http@4.1.24.Final
netty-codec-http2@4.1.24.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

15,855
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
opensearchproject/opensearch:1.1.0967d7f57f72f
netty-codec-http@4.1.45.Final
netty-codec-http2@4.1.45.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

10,603
standard-application-stackmintel11.4.01 of 12See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
opensearchproject/opensearch:1.1.0967d7f57f72f
netty-codec-http@4.1.45.Final
netty-codec-http2@4.1.45.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

10,603
mitre-siphonmitre-siphon0.2.91 of 4See more

mitre-siphon mitre-siphon 0.2.9

1 of the 4 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/mitre-siphon:main503c00321502
netty-codec-http@4.1.92.Final
netty-codec-http2@4.1.92.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

3,083
user-manager-neo4jmoreillonVerified publisher0.9.71 of 6See more

user-manager-neo4j moreillon 0.9.7

1 of the 6 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
library/neo4j:5.20.052d3dec8d455
netty-codec-http@4.1.109.Final
netty-codec-http2@4.1.109.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

30,363
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
netty-codec-http@4.1.68.Final
netty-codec-http2@4.1.68.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

25,933
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
netty-codec-http@4.1.74.Final
netty-codec-http2@4.1.74.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

15,675
commafeedmt1905028.2.01 of 3See more

commafeed mt190502 8.2.0

1 of the 3 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
athou/commafeed:6.2.0-postgresql5e388351df1a
netty-codec-http@4.1.130.Final
netty-codec-http2@4.1.130.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

3,687
keycloakmt1905021.4.61 of 3See more

keycloak mt190502 1.4.6

1 of the 3 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.5.68d44614c7479
netty-codec-http@4.1.130.Final
netty-codec-http2@4.1.130.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

2,901
my-app-namemy-app-name0.0.21 of 1See more

my-app-name my-app-name 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
viniciusfcf/gitops-quarkus-app-jvm:latestbba8ee1b5cd5
netty-codec-http@4.1.79.Final
netty-codec-http2@4.1.79.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

9,149
elasticsearch-chartmy-elasticsearch0.1.01 of 2See more

elasticsearch-chart my-elasticsearch 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.35e6ac15bf6a5
netty-codec-http@4.1.66.Final
4.1.133.Final

Open the chart page →

9,300
Practica_4_helmmy-heml-appVerified publisher0.1.03 of 7See more

Practica_4_helm my-heml-app 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
adagber/planner:v1.0e5c1ed097752
netty-codec-http@4.1.42.Final
netty-codec-http2@4.1.42.Final
4.1.133.Final
4.1.133.Final
codeurjc/server:v1.0310bea5b1ee7
netty-codec-http@4.1.82.Final
netty-codec-http2@4.1.82.Final
4.1.133.Final
4.1.133.Final
codeurjc/toposervice:v1.09fb4c11e6a49
netty-codec-http@4.1.85.Final
netty-codec-http2@4.1.85.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

27,721
incorencsaVerified publisher1.38.01 of 29See more

incore ncsa 1.38.0

1 of the 29 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
netty-codec-http@4.1.108.Final
netty-codec-http2@4.1.108.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

15,369
neuralbank-stackneuralbank-stack0.1.01 of 4See more

neuralbank-stack neuralbank-stack 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/neuralbank-backend:latesta53899fcfc01
netty-codec-http@4.1.127.Final
netty-codec-http2@4.1.127.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

5,191
logic-ms-helm-chartnotesprojectchart0.1.01 of 2See more

logic-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
vlebediantsev/logic-ms:latestdf8bf38c535b
netty-codec-http@4.1.78.Final
netty-codec-http2@4.1.78.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

6,852
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
netty-codec-http@4.1.108.Final
netty-codec-http2@4.1.100.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

5,826
ojp-serverojp0.1.51 of 1See more

ojp-server ojp 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
rrobetti/ojp:0.1.0-beta1141bd88232b
netty-codec-http@4.1.110.Final
netty-codec-http2@4.1.110.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

2,587
hive-metastoreolehrgfVerified publisher0.1.01 of 1See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
netty-codec-http@4.1.61.Final
4.1.133.Final

Open the chart page →

8,540
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
netty-codec-http@4.1.94.Final
netty-codec-http2@4.1.94.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

9,005
apicurioone-acre-fundVerified publisher2.3.03 of 5See more

apicurio one-acre-fund 2.3.0

3 of the 5 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
netty-codec-http@4.1.86.Final
netty-codec-http2@4.1.86.Final
4.1.133.Final
4.1.133.Final
apicurio/apicurio-studio-ui:0.2.62.Final349c845270c2
netty-codec-http@4.1.86.Final
netty-codec-http2@4.1.86.Final
4.1.133.Final
4.1.133.Final
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
netty-codec-http@4.1.86.Final
netty-codec-http2@4.1.86.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

18,667
raspberrymaticopenccuVerified publisher3.83.61 of 1See more

raspberrymatic openccu 3.83.6

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
netty-codec-http@4.1.67.Final
netty-codec-http2@4.1.67.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

2,421
mockserveropen-charts1.1.01 of 1See more

mockserver open-charts 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
mockserver/mockserver:5.15.00f9ef78c9489
netty-codec-http@4.1.86.Final
netty-codec-http2@4.1.86.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

1,257
cdn-remoteopencord0.2.41 of 3See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
netty-codec-http@4.1.19.Final
netty-codec-http2@4.1.19.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

63,223
onosopencord3.0.21 of 1See more

onos opencord 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
onosproject/onos:2.2.144914a8d4b3f
netty-codec-http@4.1.35.Final
netty-codec-http2@4.1.35.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

12,927
voltha-infraopencord2.14.02 of 10See more

voltha-infra opencord 2.14.0

2 of the 10 container images this version deploys carry CVE-2026-42587.

Container imageDigestPackageFixed in
atomix/atomix:3.1.127738ff4f5c63
netty-codec-http@4.1.27.Final
netty-codec-http2@4.1.27.Final
4.1.133.Final
4.1.133.Final
voltha/voltha-onos:5.1.8e038acb950d3
netty-codec-http@4.1.35.Final
netty-codec-http2@4.1.35.Final
4.1.133.Final
4.1.133.Final

Open the chart page →

41,044

Container images carrying it

440 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
seldonio/apife:0.3.1eea0d3f578ca
netty-codec-http@4.1.12.Final
netty-codec-http2@4.1.12.Final
4.1.133.Final
4.1.133.Final
1
slagattollas/planner-practica:latestcecd95e31486
netty-codec-http@4.1.54.Final
netty-codec-http2@4.1.42.Final
4.1.133.Final
4.1.133.Final
1
slagattollas/toposervice-practica:latestdc63973dae0d
netty-codec-http@4.1.54.Final
netty-codec-http2@4.1.54.Final
4.1.133.Final
4.1.133.Final
1
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
netty-codec-http@4.1.17.Final
4.1.133.Final
1
snowplow/scala-stream-collector-pubsub:2.2.041d318841516
netty-codec-http@4.1.48.Final
netty-codec-http2@4.1.48.Final
4.1.133.Final
4.1.133.Final
1
sslhep/hive-metastore:3.1.39e80af083079
netty-codec-http@4.0.52.Final
4.1.133.Final
1
streamnative/private-cloud-console:v2.3.27-all91e54375e154
netty-codec-http@4.1.129.Final
netty-codec-http2@4.1.129.Final
4.1.133.Final
4.1.133.Final
1
structurizr/onpremises:2025.11.094b5ffb5119c8
netty-codec-http@4.1.118.Final
netty-codec-http2@4.1.118.Final
4.1.133.Final
4.1.133.Final
1
thingsboard/tb-coap-transport:3.4.1bd45a09d85d9
netty-codec-http@4.1.75.Final
netty-codec-http2@4.1.75.Final
4.1.133.Final
4.1.133.Final
1
thingsboard/tb-http-transport:3.4.1a06f53c5e2da
netty-codec-http@4.1.75.Final
netty-codec-http2@4.1.75.Final
4.1.133.Final
4.1.133.Final
1
thingsboard/tb-mqtt-transport:3.4.1030f316ce301
netty-codec-http@4.1.75.Final
netty-codec-http2@4.1.75.Final
4.1.133.Final
4.1.133.Final
1
thingsboard/tb-node:3.4.1645f43b688f7
netty-codec-http@4.1.75.Final
netty-codec-http2@4.1.75.Final
4.1.133.Final
4.1.133.Final
1
thingsboard/tb-node:3.6.0f40a542832c4
netty-codec-http@4.1.91.Final
netty-codec-http2@4.1.91.Final
4.1.133.Final
4.1.133.Final
1
thingsboard/tb-postgres:latest2d17e4e36edc
netty-codec-http@4.1.128.Final
netty-codec-http2@4.1.128.Final
4.1.133.Final
4.1.133.Final
1
thmmniii/fbs-core:v1.27.15438517d9fc2
netty-codec-http@4.1.92.Final
netty-codec-http2@4.1.92.Final
4.1.133.Final
4.1.133.Final
1
thmmniii/fbs-runner:v1.27.186105349c1a3
netty-codec-http@4.1.49.Final
netty-codec-http2@4.1.49.Final
4.1.133.Final
4.1.133.Final
1
tock/bot_admin:25.10.7df3e38c77a38
netty-codec-http@4.2.9.Final
netty-codec-http2@4.2.9.Final
4.2.13.Final
4.2.13.Final
1
tock/bot_api:25.10.7dd5d5c70e333
netty-codec-http@4.2.9.Final
netty-codec-http2@4.2.9.Final
4.2.13.Final
4.2.13.Final
1
tock/build_worker:25.10.7080cb6b08d5b
netty-codec-http@4.2.9.Final
netty-codec-http2@4.2.9.Final
4.2.13.Final
4.2.13.Final
1
tock/duckling:25.10.7ac1f3f1a1e9c
netty-codec-http@4.2.9.Final
netty-codec-http2@4.2.9.Final
4.2.13.Final
4.2.13.Final
1
tock/kotlin_compiler:25.10.7c9c0fb40089a
netty-codec-http@4.2.9.Final
netty-codec-http2@4.2.9.Final
4.2.13.Final
4.2.13.Final
1
tock/nlp_api:25.10.7c04ffe67b977
netty-codec-http@4.2.9.Final
netty-codec-http2@4.2.9.Final
4.2.13.Final
4.2.13.Final
1
torrespro/mca-worker:2.0.06d3bd305a1ba
netty-codec-http@4.1.42.Final
netty-codec-http2@4.1.42.Final
4.1.133.Final
4.1.133.Final
1
traccar/traccar:6.7-alpine621c8d6d46fd
netty-codec-http@4.2.1.Final
netty-codec-http2@4.1.118.Final
4.2.13.Final
4.1.133.Final
1
treskon/portrait:DEV-latest88e813f22347
netty-codec-http@4.1.115.Final
netty-codec-http2@4.1.115.Final
4.1.133.Final
4.1.133.Final
1
trinodb/trino:4801565e8cac299
netty-codec-http@4.2.10.Final
netty-codec-http2@4.2.10.Final
4.2.13.Final
4.2.13.Final
1
trinodb/trino:45038c6f24ab1a4
netty-codec-http@4.1.111.Final
netty-codec-http2@4.1.87.Final
4.1.133.Final
4.1.133.Final
1
trinodb/trino:4815b5e0a97f599
netty-codec-http@4.2.12.Final
netty-codec-http2@4.2.12.Final
4.2.13.Final
4.2.13.Final
1
trinodb/trino:4796af989b0846d
netty-codec-http@4.2.7.Final
netty-codec-http2@4.2.7.Final
4.2.13.Final
4.2.13.Final
1
trinodb/trino:405ee80ab5eeab2
netty-codec-http@4.1.72.Final
netty-codec-http2@4.1.72.Final
4.1.133.Final
4.1.133.Final
1
viniciusfcf/gitops-quarkus-app-jvm:latestbba8ee1b5cd5
netty-codec-http@4.1.79.Final
netty-codec-http2@4.1.79.Final
4.1.133.Final
4.1.133.Final
1
vitalii1992/api-gateway-service:latestaabe6ac39356
netty-codec-http@4.1.92.Final
netty-codec-http2@4.1.92.Final
4.1.133.Final
4.1.133.Final
1
vlebediantsev/logic-ms:latestdf8bf38c535b
netty-codec-http@4.1.78.Final
netty-codec-http2@4.1.78.Final
4.1.133.Final
4.1.133.Final
1
voltha/voltha-onos:5.1.8e038acb950d3
netty-codec-http@4.1.35.Final
netty-codec-http2@4.1.35.Final
4.1.133.Final
4.1.133.Final
1
vrijbrp/haal-centraal-brp-bevragen:develop5c770c2ae48c
netty-codec-http@4.1.91.Final
netty-codec-http2@4.1.91.Final
4.1.133.Final
4.1.133.Final
1
vromero/activemq-artemis:2.16.0408d6a46b153
netty-codec-http@4.1.51.Final
4.1.133.Final
1
wavefronthq/proxy:9.2d1064d28f6eb
netty-codec-http@4.1.50.Final
netty-codec-http2@4.1.48.Final
4.1.133.Final
4.1.133.Final
1
wazuh/wazuh-indexer:4.14.49c344d2b1757
netty-codec-http@4.1.125.Final
netty-codec-http2@4.1.125.Final
4.1.133.Final
4.1.133.Final
1
wazuh/wazuh-indexer:4.11.1a7a2076b167e
netty-codec-http@4.1.108.Final
netty-codec-http2@4.1.111.Final
4.1.133.Final
4.1.133.Final
1
wazuh/wazuh-indexer:4.14.3b149b30da686
netty-codec-http@4.1.125.Final
netty-codec-http2@4.1.125.Final
4.1.133.Final
4.1.133.Final
1
xeotek/kadeck:6.3.439a3b37a17c5
netty-codec-http@4.1.108.Final
netty-codec-http2@4.1.108.Final
4.1.133.Final
4.1.133.Final
1
xeotek/kadeck:4.2.94c6b04d9ce55
netty-codec-http@4.1.70.Final
netty-codec-http2@4.1.70.Final
4.1.133.Final
4.1.133.Final
1
xuxueli/xxl-job-admin:2.4.0640093c35fd6
netty-codec-http@4.1.89.Final
4.1.133.Final
1
yuzutech/kroki:0.17.0192b7b27c857
netty-codec-http@4.1.74.Final
netty-codec-http2@4.1.74.Final
4.1.133.Final
4.1.133.Final
1
zahoriaut/zahori-process:0.1.13351f8a220ed7
netty-codec-http@4.1.94.Final
netty-codec-http2@4.1.94.Final
4.1.133.Final
4.1.133.Final
1
zahoriaut/zahori-server:0.1.17b2de13916f3e
netty-codec-http@4.1.87.Final
netty-codec-http2@4.1.87.Final
4.1.133.Final
4.1.133.Final
1
zammad/zammad-docker-compose:zammad-elasticsearch-4.1.0-318274d75a51fc
netty-codec-http@4.1.49.Final
4.1.133.Final
1
zbalogh/reservation-api-server:1.0.97c247e399a1f
netty-codec-http@4.1.82.Final
netty-codec-http2@4.1.45.Final
4.1.133.Final
4.1.133.Final
1
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
netty-codec-http@4.1.45.Final
netty-codec-http2@4.1.45.Final
4.1.133.Final
4.1.133.Final
1
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
netty-codec-http@4.1.86.Final
netty-codec-http2@4.1.94.Final
4.1.133.Final
4.1.133.Final
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.