CVE-2026-45536

Medium

Advisory

Published 8 Jun 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.0; base score, highest
EPSS: 0.001; 3rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 306; of 17,787 indexed, latest versions
Container images: 330; deployed by those charts
Fix available: 2 of 2; affected packages

Netty: Unix-socket fd receive leaks descriptors when peer sends two at once

Carried by container images the latest versions of 306 of 17,787 indexed charts deploy, on 330 images.

Affected package	Affected versions	Fixed in	Images
netty-transport-native-epollmaven	4.0.27.Final, 4.0.36.Final, 4.0.52.Final, 4.1.17.Final+77 more	4.1.135.Final, 4.2.15.Final	328
netty-transport-native-kqueuemaven	4.1.46.Final, 4.1.48.Final, 4.1.51.Final, 4.1.65.Final+42 more	4.1.135.Final, 4.2.15.Final	101

OSV records: GHSA-w573-9ffj-6ff9

Charts affected

306 by stars

Chart

Latest

Affected images

Radar Score

metabasewiremind

2.27.5-wiremind0

1 of 1 See more

metabase wiremind 2.27.5-wiremind0

1 of the 1 container images this version deploys carry CVE-2026-45536.

Container image	Digest	Package	Fixed in
metabase/metabase :v0.61.1.x	9491ed11c901	netty-transport-native-epoll@4.1.127.Final netty-transport-native-kqueue@4.1.127.Final	4.1.135.Final 4.1.135.Final

Open the chart page →

1,639

opendistro-eswitcom-gmbh

1.13.3

1 of 3 See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry CVE-2026-45536.

Container image	Digest	Package	Fixed in
amazon/opendistro-for-elasticsearch :1.13.3	2acfa1dcc5f8	netty-transport-native-epoll@4.1.45.Final	4.1.135.Final

Open the chart page →

5,806

zahori-processzahori

1.0.1

1 of 1 See more

zahori-process zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-45536.

Container image	Digest	Package	Fixed in
zahoriaut/zahori-process :0.1.13	351f8a220ed7	netty-transport-native-epoll@4.1.94.Final netty-transport-native-kqueue@4.1.94.Final	4.1.135.Final 4.1.135.Final

Open the chart page →

3,480

zahori-serverzahori

1.0.1

1 of 2 See more

zahori-server zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-45536.

Container image	Digest	Package	Fixed in
zahoriaut/zahori-server :0.1.17	b2de13916f3e	netty-transport-native-epoll@4.1.87.Final	4.1.135.Final

Open the chart page →

5,846

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-45536.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	netty-transport-native-epoll@4.1.82.Final	4.1.135.Final

Open the chart page →

6,016

zipkinzipkin

0.5.0

1 of 1 See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-45536.

Container image	Digest	Package	Fixed in
openzipkin/zipkin-slim :3.6.0	a69e1057df36	netty-transport-native-epoll@4.2.10.Final	4.2.15.Final

Open the chart page →

1,159

Container images carrying it

330 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/open-telemetry/demo :1.12.0-kafka	071a788162e8	netty-transport-native-epoll@4.1.100.Final	4.1.135.Final	1
ghcr.io/open-telemetry/demo :1.12.0-frauddetectionservice	77cefdab4d5c	netty-transport-native-epoll@4.1.107.Final	4.1.135.Final	1
ghcr.io/open-telemetry/demo :1.12.0-adservice	a59e5eead495	netty-transport-native-epoll@4.1.110.Final	4.1.135.Final	1
ghcr.io/privacyengineering/hawk-service :latest	bfedf47bb5e0	netty-transport-native-epoll@4.1.101.Final	4.1.135.Final	1
ghcr.io/projectnessie/nessie :0.92.1	9efe3c74d55f	netty-transport-native-epoll@4.1.108.Final netty-transport-native-kqueue@4.1.108.Final	4.1.135.Final 4.1.135.Final	1
ghcr.io/punchplatform/punchline-java :8.1.1	d46ce7b96482	netty-transport-native-epoll@4.1.82.Final netty-transport-native-kqueue@4.1.82.Final	4.1.135.Final 4.1.135.Final	1
ghcr.io/radar-base/radar-output-restructure/radar-output-restructure :3.0.6	7fb9c70e96a4	netty-transport-native-epoll@4.2.10.Final netty-transport-native-kqueue@4.2.10.Final	4.2.15.Final 4.2.15.Final	1
ghcr.io/star-whale/server :0.6.15	8368359c8dd0	netty-transport-native-epoll@4.1.86.Final netty-transport-native-kqueue@4.1.86.Final	4.1.135.Final 4.1.135.Final	1
ghcr.io/wiremind/bitnami/keycloak :26.5.0-debian-12-r3	8622ea9e43c0	netty-transport-native-epoll@4.1.128.Final	4.1.135.Final	1
ghcr.io/wundergraph/cosmo/keycloak :0.13.0	b37408461b9b	netty-transport-native-epoll@4.1.130.Final	4.1.135.Final	1
public.ecr.aws/aws-containers/retail-store-sample-ui :1.3.0	ce3f2e935eb3	netty-transport-native-epoll@4.1.124.Final	4.1.135.Final	1
public.ecr.aws/v0r6c2e2/hive-metastore :latest	794b3bff9510	netty-transport-native-epoll@4.1.89.Final netty-transport-native-kqueue@4.1.89.Final	4.1.135.Final 4.1.135.Final	1
public.ecr.aws/v0r6c2e2/trino :latest	c265156b00d1	netty-transport-native-epoll@4.1.117.Final netty-transport-native-kqueue@4.1.117.Final	4.1.135.Final 4.1.135.Final	1
quay.io/evryfs/spring-boot-admin :2.7.10	60950ef63764	netty-transport-native-epoll@4.1.86.Final	4.1.135.Final	1
quay.io/fiware/trusted-issuers-registry :0.11.1	a8a9ec461034	netty-transport-native-epoll@4.1.100.Final	4.1.135.Final	1
quay.io/keycloak/keycloak :26.0	09a381c715ab	netty-transport-native-epoll@4.1.111.Final	4.1.135.Final	1
quay.io/keycloak/keycloak :26.0.7	4388e2379b7e	netty-transport-native-epoll@4.1.111.Final	4.1.135.Final	1
quay.io/keycloak/keycloak :24.0.3	4d6f22991266	netty-transport-native-epoll@4.1.107.Final	4.1.135.Final	1
quay.io/keycloak/keycloak :23.0.3	4f72a5b0c076	netty-transport-native-epoll@4.1.100.Final	4.1.135.Final	1
quay.io/keycloak/keycloak :26.3.3	6a7217a100bd	netty-transport-native-epoll@4.1.124.Final	4.1.135.Final	1
quay.io/keycloak/keycloak :20.0.1	8830f76112b6	netty-transport-native-epoll@4.1.82.Final	4.1.135.Final	1
quay.io/keycloak/keycloak :26.5.6	8d44614c7479	netty-transport-native-epoll@4.1.130.Final	4.1.135.Final	1
quay.io/keycloak/keycloak :26.4	9409c59bdfb6	netty-transport-native-epoll@4.1.128.Final	4.1.135.Final	1
quay.io/keycloak/keycloak :26.6.3	9b0330756022	netty-transport-native-epoll@4.1.133.Final	4.1.135.Final	1
quay.io/keycloak/keycloak :26.0.6	a93d22e13b86	netty-transport-native-epoll@4.1.111.Final	4.1.135.Final	1
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	netty-transport-native-epoll@4.1.82.Final	4.1.135.Final	1
quay.io/opsmxpublic/ubi8-gate :isd-spin-2025.10.01-5c720954-202511260810	2b3554029737	netty-transport-native-epoll@4.1.94.Final	4.1.135.Final	1
quay.io/opsmxpublic/ubi8-oes-autopilot :isd-spin-2025.10.01-af26a30d4-202511261054	58bd0bcf72f9	netty-transport-native-epoll@4.1.105.Final	4.1.135.Final	1
quay.io/strimzi/operator :0.45.1	58c727cd2e68	netty-transport-native-epoll@4.1.118.Final	4.1.135.Final	1
quay.io/strimzi/operator :0.36.1	e9e03b31007c	netty-transport-native-epoll@4.1.94.Final	4.1.135.Final	1