CVE-2026-45536
MediumAdvisory
Published 8 Jun 2026In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 4.0
- base score, highest
- EPSS
- 0.001
- 3rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 311
- of 17,781 indexed, latest versions
- Container images
- 333
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Netty: Unix-socket fd receive leaks descriptors when peer sends two at once
Carried by container images the latest versions of 311 of 17,781 indexed charts deploy, on 333 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| netty-transport-native-epollmaven | 4.0.27.Final, 4.0.36.Final, 4.0.52.Final, 4.1.17.Final+77 more | 4.1.135.Final, 4.2.15.Final | 331 |
| netty-transport-native-kqueuemaven | 4.1.46.Final, 4.1.48.Final, 4.1.51.Final, 4.1.65.Final+43 more | 4.1.135.Final, 4.2.15.Final | 103 |
- OSV records
- GHSA-w573-9ffj-6ff9
Charts affected
311 by stars
Container images carrying it
333 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| codeurjc/ | 9fb4c11e6a49 | netty-transport-native-epoll | 4.1.135.Final | 13 |
| wurstmeister/ | 2d4bbf9cc83d | netty-transport-native-epoll | 4.1.135.Final | 7 |
| solsson/ | 41e5d8f6f290 | netty-transport-native-epoll | 4.1.135.Final | 5 |
| mastercloudapps/ | 40a950b311b2 | netty-transport-native-epoll | 4.1.135.Final | 4 |
| oscarsotosanchez/ | d4d020e9f272 | netty-transport-native-epoll | 4.1.135.Final | 4 |
| quay.io/ | 52f376e64b9b | netty-transport-native-epoll | 4.1.135.Final | 4 |
| apache/ | e8b7c4ddd069 | netty-transport-native-epoll | 4.1.135.Final | 3 |
| apache/ | 0bd3b25c4be4 | netty-transport-native-epoll | 4.1.135.Final | 3 |
| codeurjc/ | 800cf520c245 | netty-transport-native-epoll | 4.1.135.Final | 3 |
| library/ | 8c5f7881cebb | netty-transport-native-epoll | 4.1.135.Final | 3 |
| provectuslabs/ | 8f2ff02d64b0 | netty-transport-native-epoll | 4.1.135.Final | 3 |
| signoz/ | fcc4a3288154 | netty-transport-native-epoll | 4.1.135.Final | 3 |
| airbyte/ | 119be7bfb719 | netty-transport-native-epoll netty-transport-native-kqueue | 4.2.15.Final 4.2.15.Final | 2 |
| amazon/ | 2acfa1dcc5f8 | netty-transport-native-epoll | 4.1.135.Final | 2 |
| apache/ | 0116fb802786 | netty-transport-native-epoll netty-transport-native-kqueue | 4.2.15.Final 4.2.15.Final | 2 |
| apache/ | 7cdfd8deec92 | netty-transport-native-epoll | 4.1.135.Final | 2 |
| apachepulsar/ | b341ef76a852 | netty-transport-native-epoll | 4.1.135.Final | 2 |
| apache/ | 319cd8a81ed1 | netty-transport-native-epoll netty-transport-native-kqueue | 4.1.135.Final 4.1.135.Final | 2 |
| apacherocketmq/ | ce78506bd6fe | netty-transport-native-epoll netty-transport-native-kqueue | 4.1.135.Final 4.1.135.Final | 2 |
| bitnamilegacy/ | 10ed1ea3c8d1 | netty-transport-native-epoll | 4.1.135.Final | 2 |
| confluentinc/ | ac776fad95a5 | netty-transport-native-epoll | 4.1.135.Final | 2 |
| confluentinc/ | 7610a50b13e7 | netty-transport-native-epoll | 4.1.135.Final | 2 |
| confluentinc/ | cae577096489 | netty-transport-native-epoll | 4.1.135.Final | 2 |
| geoservercloud/ | 756559ee788a | netty-transport-native-epoll | 4.1.135.Final | 2 |
| geoservercloud/ | 99540eef78ad | netty-transport-native-epoll | 4.1.135.Final | 2 |
| geoservercloud/ | 5c254c53a357 | netty-transport-native-epoll | 4.1.135.Final | 2 |
| geoservercloud/ | c687b1cbc891 | netty-transport-native-epoll | 4.1.135.Final | 2 |
| geoservercloud/ | 5288f320cf36 | netty-transport-native-epoll | 4.1.135.Final | 2 |
| geoservercloud/ | a30a60ac6cd0 | netty-transport-native-epoll | 4.1.135.Final | 2 |
| graviteeio/ | 05fd67a93056 | netty-transport-native-epoll | 4.1.135.Final | 2 |
| graviteeio/ | 27374522cd04 | netty-transport-native-epoll | 4.2.15.Final | 2 |
| hazelcast/ | 5dd5d31c7a06 | netty-transport-native-epoll netty-transport-native-kqueue | 4.1.135.Final 4.1.135.Final | 2 |
| hookiesolutions/ | 0629694246ba | netty-transport-native-epoll | 4.1.135.Final | 2 |
| hyperledger/ | a674d35eec9a | netty-transport-native-epoll netty-transport-native-kqueue | 4.1.135.Final 4.1.135.Final | 2 |
| library/ | 52d3dec8d455 | netty-transport-native-epoll netty-transport-native-kqueue | 4.1.135.Final 4.1.135.Final | 2 |
| library/ | 80ad2170ad62 | netty-transport-native-epoll | 4.1.135.Final | 2 |
| library/ | f258365d4882 | netty-transport-native-epoll | 4.1.135.Final | 2 |
| metabase/ | 9491ed11c901 | netty-transport-native-epoll netty-transport-native-kqueue | 4.1.135.Final 4.1.135.Final | 2 |
| nacos/ | dcf04549c6d7 | netty-transport-native-epoll | 4.1.135.Final | 2 |
| opensearchproject/ | 967d7f57f72f | netty-transport-native-epoll | 4.1.135.Final | 2 |
| scorpiobroker/ | 01e11d800459 | netty-transport-native-epoll | 4.1.135.Final | 2 |
| scorpiobroker/ | 3f05a113a4be | netty-transport-native-epoll | 4.1.135.Final | 2 |
| scorpiobroker/ | 5073ceef2fa0 | netty-transport-native-epoll | 4.1.135.Final | 2 |
| scorpiobroker/ | 62dae3dd0eeb | netty-transport-native-epoll | 4.1.135.Final | 2 |
| scorpiobroker/ | a2cfcf0947fd | netty-transport-native-epoll | 4.1.135.Final | 2 |
| scorpiobroker/ | b742a53b2803 | netty-transport-native-epoll | 4.1.135.Final | 2 |
| scorpiobroker/ | b7fe27a06ff5 | netty-transport-native-epoll | 4.1.135.Final | 2 |
| scorpiobroker/ | e08036670d66 | netty-transport-native-epoll | 4.1.135.Final | 2 |
| scorpiobroker/ | f02e8a429a08 | netty-transport-native-epoll | 4.1.135.Final | 2 |
| ghcr.io/ | 536358d7b17e | netty-transport-native-epoll | 4.1.135.Final | 2 |