StackRadar

CVE-2026-45536

Medium

Advisory

Published 8 Jun 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.0
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
311
of 17,781 indexed, latest versions
Container images
333
deployed by those charts
Fix available
2 of 2
affected packages

Netty: Unix-socket fd receive leaks descriptors when peer sends two at once

Carried by container images the latest versions of 311 of 17,781 indexed charts deploy, on 333 images.

Affected packageAffected versionsFixed inImages
netty-transport-native-epollmaven4.0.27.Final, 4.0.36.Final, 4.0.52.Final, 4.1.17.Final+77 more4.1.135.Final, 4.2.15.Final331
netty-transport-native-kqueuemaven4.1.46.Final, 4.1.48.Final, 4.1.51.Final, 4.1.65.Final+43 more4.1.135.Final, 4.2.15.Final103
OSV records
GHSA-w573-9ffj-6ff9

Charts affected

311 by stars
ChartLatestAffected imagesRadar Score
drillwearefrank1.3.62 of 3See more

drill wearefrank 1.3.6

2 of the 3 container images this version deploys carry CVE-2026-45536.

Container imageDigestPackageFixed in
apache/drill:1.21.11f96558fd292
netty-transport-native-epoll@4.1.73.Final
4.1.135.Final
bitnamilegacy/zookeeper:3.9.0-debian-11-r1110ed1ea3c8d1
netty-transport-native-epoll@4.1.94.Final
4.1.135.Final

Open the chart page →

9,397
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-45536.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
netty-transport-native-epoll@4.1.73.Final
4.1.135.Final

Open the chart page →

14,364
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-45536.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
netty-transport-native-epoll@4.1.73.Final
4.1.135.Final

Open the chart page →

28,605
hazelcastwenerme5.10.21 of 2See more

hazelcast wenerme 5.10.2

1 of the 2 container images this version deploys carry CVE-2026-45536.

Container imageDigestPackageFixed in
hazelcast/hazelcast:5.5.05dd5d31c7a06
netty-transport-native-epoll@4.1.111.Final
netty-transport-native-kqueue@4.1.111.Final
4.1.135.Final
4.1.135.Final

Open the chart page →

2,634
keycloakwiremindVerified publisher25.3.11 of 2See more

keycloak wiremind 25.3.1

1 of the 2 container images this version deploys carry CVE-2026-45536.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
netty-transport-native-epoll@4.1.128.Final
4.1.135.Final

Open the chart page →

7,624
metabasewiremindVerified publisher2.27.5-wiremind01 of 1See more

metabase wiremind 2.27.5-wiremind0

1 of the 1 container images this version deploys carry CVE-2026-45536.

Container imageDigestPackageFixed in
metabase/metabase:v0.61.1.x9491ed11c901
netty-transport-native-epoll@4.1.127.Final
netty-transport-native-kqueue@4.1.127.Final
4.1.135.Final
4.1.135.Final

Open the chart page →

1,639
opendistro-eswitcom-gmbh1.13.31 of 3See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry CVE-2026-45536.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
netty-transport-native-epoll@4.1.45.Final
4.1.135.Final

Open the chart page →

5,806
zahori-processzahoriVerified publisher1.0.11 of 1See more

zahori-process zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-45536.

Container imageDigestPackageFixed in
zahoriaut/zahori-process:0.1.13351f8a220ed7
netty-transport-native-epoll@4.1.94.Final
netty-transport-native-kqueue@4.1.94.Final
4.1.135.Final
4.1.135.Final

Open the chart page →

3,480
zahori-serverzahoriVerified publisher1.0.11 of 2See more

zahori-server zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-45536.

Container imageDigestPackageFixed in
zahoriaut/zahori-server:0.1.17b2de13916f3e
netty-transport-native-epoll@4.1.87.Final
4.1.135.Final

Open the chart page →

5,846
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-45536.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
netty-transport-native-epoll@4.1.82.Final
4.1.135.Final

Open the chart page →

6,016
zipkinzipkinVerified publisher0.5.01 of 1See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-45536.

Container imageDigestPackageFixed in
openzipkin/zipkin-slim:3.6.0a69e1057df36
netty-transport-native-epoll@4.2.10.Final
4.2.15.Final

Open the chart page →

1,159

Container images carrying it

333 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
streamnative/private-cloud-console:v2.3.27-all91e54375e154
netty-transport-native-epoll@4.1.129.Final
netty-transport-native-kqueue@4.1.129.Final
4.1.135.Final
4.1.135.Final
1
structurizr/onpremises:2025.11.094b5ffb5119c8
netty-transport-native-epoll@4.1.118.Final
netty-transport-native-kqueue@4.1.118.Final
4.1.135.Final
4.1.135.Final
1
tchiotludo/akhq:0.28.0c2824dc2ae44
netty-transport-native-kqueue@4.2.13.Final
4.2.15.Final
1
thingsboard/tb-coap-transport:3.4.1bd45a09d85d9
netty-transport-native-epoll@4.1.75.Final
netty-transport-native-kqueue@4.1.75.Final
4.1.135.Final
4.1.135.Final
1
thingsboard/tb-http-transport:3.4.1a06f53c5e2da
netty-transport-native-epoll@4.1.75.Final
netty-transport-native-kqueue@4.1.75.Final
4.1.135.Final
4.1.135.Final
1
thingsboard/tb-mqtt-transport:3.4.1030f316ce301
netty-transport-native-epoll@4.1.75.Final
netty-transport-native-kqueue@4.1.75.Final
4.1.135.Final
4.1.135.Final
1
thingsboard/tb-node:3.4.1645f43b688f7
netty-transport-native-epoll@4.1.75.Final
netty-transport-native-kqueue@4.1.75.Final
4.1.135.Final
4.1.135.Final
1
thingsboard/tb-node:3.6.0f40a542832c4
netty-transport-native-epoll@4.1.91.Final
netty-transport-native-kqueue@4.1.91.Final
4.1.135.Final
4.1.135.Final
1
thingsboard/tb-postgres:latest2d17e4e36edc
netty-transport-native-epoll@4.1.128.Final
netty-transport-native-kqueue@4.1.128.Final
4.1.135.Final
4.1.135.Final
1
thmmniii/fbs-core:v1.27.15438517d9fc2
netty-transport-native-epoll@4.1.92.Final
netty-transport-native-kqueue@4.1.92.Final
4.1.135.Final
4.1.135.Final
1
torrespro/mca-worker:2.0.06d3bd305a1ba
netty-transport-native-epoll@4.1.42.Final
4.1.135.Final
1
treskon/portrait:DEV-latest88e813f22347
netty-transport-native-epoll@4.1.115.Final
netty-transport-native-kqueue@4.1.115.Final
4.1.135.Final
4.1.135.Final
1
trinodb/trino:4801565e8cac299
netty-transport-native-epoll@4.2.10.Final
netty-transport-native-kqueue@4.2.10.Final
4.2.15.Final
4.2.15.Final
1
trinodb/trino:45038c6f24ab1a4
netty-transport-native-epoll@4.1.111.Final
netty-transport-native-kqueue@4.1.111.Final
4.1.135.Final
4.1.135.Final
1
trinodb/trino:4815b5e0a97f599
netty-transport-native-epoll@4.2.12.Final
netty-transport-native-kqueue@4.2.12.Final
4.2.15.Final
4.2.15.Final
1
trinodb/trino:4796af989b0846d
netty-transport-native-epoll@4.2.7.Final
netty-transport-native-kqueue@4.2.7.Final
4.2.15.Final
4.2.15.Final
1
trinodb/trino:405ee80ab5eeab2
netty-transport-native-epoll@4.1.48.Final
netty-transport-native-kqueue@4.1.79.Final
4.1.135.Final
4.1.135.Final
1
vespaengine/vespa:8.526.1569b160f58211
netty-transport-native-epoll@4.1.118.Final
4.1.135.Final
1
vitalii1992/api-gateway-service:latestaabe6ac39356
netty-transport-native-epoll@4.1.92.Final
4.1.135.Final
1
vlebediantsev/logic-ms:latestdf8bf38c535b
netty-transport-native-epoll@4.1.78.Final
4.1.135.Final
1
voltha/voltha-onos:5.1.8e038acb950d3
netty-transport-native-epoll@4.1.35.Final
4.1.135.Final
1
vrijbrp/haal-centraal-brp-bevragen:develop5c770c2ae48c
netty-transport-native-epoll@4.1.91.Final
4.1.135.Final
1
vromero/activemq-artemis:2.16.0408d6a46b153
netty-transport-native-epoll@4.1.51.Final
netty-transport-native-kqueue@4.1.51.Final
4.1.135.Final
4.1.135.Final
1
wavefronthq/proxy:9.2d1064d28f6eb
netty-transport-native-epoll@4.1.50.Final
4.1.135.Final
1
xeotek/kadeck:6.3.439a3b37a17c5
netty-transport-native-epoll@4.1.108.Final
4.1.135.Final
1
xeotek/kadeck:4.2.94c6b04d9ce55
netty-transport-native-epoll@4.1.70.Final
4.1.135.Final
1
zahoriaut/zahori-process:0.1.13351f8a220ed7
netty-transport-native-epoll@4.1.94.Final
netty-transport-native-kqueue@4.1.94.Final
4.1.135.Final
4.1.135.Final
1
zahoriaut/zahori-server:0.1.17b2de13916f3e
netty-transport-native-epoll@4.1.87.Final
4.1.135.Final
1
zbalogh/reservation-api-server:1.0.97c247e399a1f
netty-transport-native-epoll@4.1.45.Final
4.1.135.Final
1
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
netty-transport-native-epoll@4.1.94.Final
4.1.135.Final
1
ghcr.io/curium-rocks/mitre-siphon:main503c00321502
netty-transport-native-epoll@4.1.92.Final
4.1.135.Final
1
ghcr.io/devops-ia/cp-schema-registry:8.1.1-msk-iam-auth2.3.530d1a445acc7
netty-transport-native-epoll@4.1.128.Final
netty-transport-native-kqueue@4.1.128.Final
4.1.135.Final
4.1.135.Final
1
ghcr.io/devops-ia/kafka-cruise-control:jdk17-cc2.5.146-iam2.3.8e310642de2e2
netty-transport-native-epoll@4.1.118.Final
4.1.135.Final
1
ghcr.io/eshepelyuk/dckr/cmak-3.0.0.6:1.2.090a34412c6b5
netty-transport-native-epoll@4.1.45.Final
4.1.135.Final
1
ghcr.io/fleeksoft/hbase/hbase-base:2.4.13.2c144bdd688d7
netty-transport-native-epoll@4.1.45.Final
netty-transport-native-kqueue@4.1.78.Final
4.1.135.Final
4.1.135.Final
1
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
netty-transport-native-epoll@4.1.50.Final
4.1.135.Final
1
ghcr.io/gla-rad/enav-api-gateway:latest8f4345c77dda
netty-transport-native-epoll@4.2.12.Final
4.2.15.Final
1
ghcr.io/gla-rad/enav-aton-admin-service:latestcf85570b1324
netty-transport-native-epoll@4.2.12.Final
4.2.15.Final
1
ghcr.io/gla-rad/enav-aton-service:latest3be878690629
netty-transport-native-epoll@4.2.12.Final
4.2.15.Final
1
ghcr.io/gla-rad/enav-aton-service-client:latestf1629ac5f9ec
netty-transport-native-epoll@4.2.12.Final
4.2.15.Final
1
ghcr.io/gla-rad/enav-ckeeper:latest415323ef112b
netty-transport-native-epoll@4.2.12.Final
4.2.15.Final
1
ghcr.io/gla-rad/enav-eureka:latest05002092c621
netty-transport-native-epoll@4.2.12.Final
4.2.15.Final
1
ghcr.io/gla-rad/enav-msg-broker:latest6fe372e4e481
netty-transport-native-epoll@4.2.12.Final
4.2.15.Final
1
ghcr.io/joffreybvn/k8s-geyser:0.0.247f36880072e
netty-transport-native-epoll@4.2.7.Final
netty-transport-native-kqueue@4.2.7.Final
4.2.15.Final
4.2.15.Final
1
ghcr.io/kafbat/kafka-ui:v1.2.0185da4ad3e88
netty-transport-native-epoll@4.1.118.Final
netty-transport-native-kqueue@4.1.118.Final
4.1.135.Final
4.1.135.Final
1
ghcr.io/komputing/fauceth:release4ab8fa4143b4
netty-transport-native-epoll@4.1.69.Final
netty-transport-native-kqueue@4.1.69.Final
4.1.135.Final
4.1.135.Final
1
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
netty-transport-native-epoll@4.1.96.Final
netty-transport-native-kqueue@4.1.96.Final
4.1.135.Final
4.1.135.Final
1
ghcr.io/kubelauncher/cassandrab66aba320083
netty-transport-native-epoll@4.1.130.Final
4.1.135.Final
1
ghcr.io/kubelauncher/kafka43e1085cd0a8
netty-transport-native-epoll@4.1.111.Final
4.1.135.Final
1
ghcr.io/kubelauncher/zookeeper7826e9caa461
netty-transport-native-epoll@4.1.113.Final
4.1.135.Final
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.