StackRadar

CVE-2026-56816

High

Advisory

Published 22 Jul 2026In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
43rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
26
of 17,781 indexed, latest versions
Container images
37
deployed by those charts
Fix available
1 of 1
affected package

Netty: Memory Exhaustion via HTTP/3 Reserved Frame Types

Carried by container images the latest versions of 26 of 17,781 indexed charts deploy, on 37 images.

Affected packageAffected versionsFixed inImages
netty-codec-http3maven4.2.7.Final, 4.2.10.Final, 4.2.12.Final, 4.2.13.Final+2 more4.2.16.Final37
OSV records
GHSA-hpcc-26xq-25fv

Charts affected

26 by stars
ChartLatestAffected imagesRadar Score
trinotrino1.42.21 of 1See more

trino trino 1.42.2

1 of the 1 container images this version deploys carry CVE-2026-56816.

Container imageDigestPackageFixed in
trinodb/trino:4801565e8cac299
netty-codec-http3@4.2.10.Final
4.2.16.Final

Open the chart page →

1,309
geoservercloudcamptocamp23.0.17 of 7See more

geoservercloud camptocamp2 3.0.1

7 of the 7 container images this version deploys carry CVE-2026-56816.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:3.0.1.1de0b20bd2a43
netty-codec-http3@4.2.15.Final
4.2.16.Final
geoservercloud/geoserver-cloud-gwc:3.0.1.1b04ed89b5d2b
netty-codec-http3@4.2.15.Final
4.2.16.Final
geoservercloud/geoserver-cloud-rest:3.0.1.1318254b52f96
netty-codec-http3@4.2.15.Final
4.2.16.Final
geoservercloud/geoserver-cloud-wcs:3.0.1.14f077124f591
netty-codec-http3@4.2.15.Final
4.2.16.Final
geoservercloud/geoserver-cloud-webui:3.0.1.14f91e3048ac8
netty-codec-http3@4.2.15.Final
4.2.16.Final
geoservercloud/geoserver-cloud-wfs:3.0.1.1299f0d6232d1
netty-codec-http3@4.2.15.Final
4.2.16.Final
geoservercloud/geoserver-cloud-wms:3.0.1.15164f687ce4d
netty-codec-http3@4.2.15.Final
4.2.16.Final

Open the chart page →

10,546
flyte-binaryflyte2.0.481 of 4See more

flyte-binary flyte 2.0.48

1 of the 4 container images this version deploys carry CVE-2026-56816.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
netty-codec-http3@4.2.7.Final
4.2.16.Final

Open the chart page →

4,641
infrahub-enterpriseinfrahub-enterpriseVerified publisher4.19.21 of 5See more

infrahub-enterprise infrahub-enterprise 4.19.2

1 of the 5 container images this version deploys carry CVE-2026-56816.

Container imageDigestPackageFixed in
library/neo4j:2026.05.0-enterprise2caf944aa4a5
netty-codec-http3@4.2.14.Final
4.2.16.Final

Open the chart page →

10,530
enavenav-service-architectureVerified publisher0.0.77 of 10See more

enav enav-service-architecture 0.0.7

7 of the 10 container images this version deploys carry CVE-2026-56816.

Container imageDigestPackageFixed in
ghcr.io/gla-rad/enav-api-gateway:latest8f4345c77dda
netty-codec-http3@4.2.12.Final
4.2.16.Final
ghcr.io/gla-rad/enav-aton-admin-service:latestcf85570b1324
netty-codec-http3@4.2.12.Final
4.2.16.Final
ghcr.io/gla-rad/enav-aton-service:latest3be878690629
netty-codec-http3@4.2.12.Final
4.2.16.Final
ghcr.io/gla-rad/enav-aton-service-client:latestf1629ac5f9ec
netty-codec-http3@4.2.12.Final
4.2.16.Final
ghcr.io/gla-rad/enav-ckeeper:latest415323ef112b
netty-codec-http3@4.2.12.Final
4.2.16.Final
ghcr.io/gla-rad/enav-eureka:latest05002092c621
netty-codec-http3@4.2.12.Final
4.2.16.Final
ghcr.io/gla-rad/enav-msg-broker:latest6fe372e4e481
netty-codec-http3@4.2.12.Final
4.2.16.Final

Open the chart page →

15,860
mcpmcp-chartsVerified publisher0.0.231 of 7See more

mcp mcp-charts 0.0.23

1 of the 7 container images this version deploys carry CVE-2026-56816.

Container imageDigestPackageFixed in
glarad/mc-service-registry:latest7b02b9e7f1ef
netty-codec-http3@4.2.15.Final
4.2.16.Final

Open the chart page →

6,929
camellia-redis-proxycamellia-redis-proxy1.4.01 of 2See more

camellia-redis-proxy camellia-redis-proxy 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-56816.

Container imageDigestPackageFixed in
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
netty-codec-http3@4.2.10.Final
4.2.16.Final

Open the chart page →

8,001
web3signerethereum-helm-chartsVerified publisher1.0.61 of 4See more

web3signer ethereum-helm-charts 1.0.6

1 of the 4 container images this version deploys carry CVE-2026-56816.

Container imageDigestPackageFixed in
consensys/web3signer:latestf146a51a1ba3
netty-codec-http3@4.2.12.Final
4.2.16.Final

Open the chart page →

1,997
flyteconnectorflyte2.0.01 of 1See more

flyteconnector flyte 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-56816.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
netty-codec-http3@4.2.7.Final
4.2.16.Final

Open the chart page →

3,463
mod-auditfolio-org0.1.361 of 1See more

mod-audit folio-org 0.1.36

1 of the 1 container images this version deploys carry CVE-2026-56816.

Container imageDigestPackageFixed in
folioci/mod-audit:latest88f40730ed45
netty-codec-http3@4.2.15.Final
4.2.16.Final

Open the chart page →

267
mod-event-configfolio-org0.1.341 of 1See more

mod-event-config folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-56816.

Container imageDigestPackageFixed in
folioci/mod-event-config:latest0192adad3897
netty-codec-http3@4.2.15.Final
4.2.16.Final

Open the chart page →

420
mod-financefolio-org0.1.341 of 1See more

mod-finance folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-56816.

Container imageDigestPackageFixed in
folioci/mod-finance:latest14450bc15430
netty-codec-http3@4.2.15.Final
4.2.16.Final

Open the chart page →

534
mod-finance-storagefolio-org0.1.341 of 1See more

mod-finance-storage folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-56816.

Container imageDigestPackageFixed in
folioci/mod-finance-storage:latest4bc4057abaea
netty-codec-http3@4.2.15.Final
4.2.16.Final

Open the chart page →

413
mod-invoicefolio-org0.1.351 of 1See more

mod-invoice folio-org 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-56816.

Container imageDigestPackageFixed in
folioci/mod-invoice:latest45b7b13e81e1
netty-codec-http3@4.2.15.Final
4.2.16.Final

Open the chart page →

568
mod-notifyfolio-org0.1.341 of 1See more

mod-notify folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-56816.

Container imageDigestPackageFixed in
folioci/mod-notify:latesta8c1a90005fc
netty-codec-http3@4.2.15.Final
4.2.16.Final

Open the chart page →

271
mod-ordersfolio-org0.1.341 of 1See more

mod-orders folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-56816.

Container imageDigestPackageFixed in
folioci/mod-orders:latestfc4528220fb8
netty-codec-http3@4.2.15.Final
4.2.16.Final

Open the chart page →

456
mod-orders-storagefolio-org0.1.351 of 1See more

mod-orders-storage folio-org 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-56816.

Container imageDigestPackageFixed in
folioci/mod-orders-storage:latestceeaacc3bf16
netty-codec-http3@4.2.15.Final
4.2.16.Final

Open the chart page →

442
mod-organizations-storagefolio-org0.1.341 of 1See more

mod-organizations-storage folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-56816.

Container imageDigestPackageFixed in
folioci/mod-organizations-storage:lateste46892405fde
netty-codec-http3@4.2.14.Final
4.2.16.Final

Open the chart page →

665
mod-usersfolio-org0.1.341 of 1See more

mod-users folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-56816.

Container imageDigestPackageFixed in
folioci/mod-users:latest6f60033321b0
netty-codec-http3@4.2.15.Final
4.2.16.Final

Open the chart page →

430
gridgain9gridgainVerified publisher1.1.101 of 2See more

gridgain9 gridgain 1.1.10

1 of the 2 container images this version deploys carry CVE-2026-56816.

Container imageDigestPackageFixed in
gridgain/gridgain9:9.1.1895018390077b
netty-codec-http3@4.2.10.Final
4.2.16.Final

Open the chart page →

3,199
trinoopstty0.2.121 of 1See more

trino opstty 0.2.12

1 of the 1 container images this version deploys carry CVE-2026-56816.

Container imageDigestPackageFixed in
trinodb/trino:4815b5e0a97f599
netty-codec-http3@4.2.12.Final
4.2.16.Final

Open the chart page →

1,158
trinopresto-loadbalancer0.2.101 of 2See more

trino presto-loadbalancer 0.2.10

1 of the 2 container images this version deploys carry CVE-2026-56816.

Container imageDigestPackageFixed in
trinodb/trino:4796af989b0846d
netty-codec-http3@4.2.7.Final
4.2.16.Final

Open the chart page →

2,264
photonschichtelVerified publisher0.2.01 of 1See more

photon schichtel 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56816.

Container imageDigestPackageFixed in
rtuszik/photon-docker:2.4.021549c60f9e6
netty-codec-http3@4.2.15.Final
4.2.16.Final

Open the chart page →

2,816
bootzookasoftwaremillVerified publisher0.2.11 of 2See more

bootzooka softwaremill 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-56816.

Container imageDigestPackageFixed in
softwaremill/bootzooka:latest845b5e8f8056
netty-codec-http3@4.2.13.Final
4.2.16.Final

Open the chart page →

3,003
tekton-ci-environment-injectortekton-ci-environment-injectorVerified publisher0.2.41 of 1See more

tekton-ci-environment-injector tekton-ci-environment-injector 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-56816.

Container imageDigestPackageFixed in
quay.io/poundex/tekton-ci-environment-injector:0.2.46dd65f22949c
netty-codec-http3@4.2.15.Final
4.2.16.Final

Open the chart page →

510
tekton-stash-and-cachetekton-stash-and-cacheVerified publisher0.2.21 of 1See more

tekton-stash-and-cache tekton-stash-and-cache 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-56816.

Container imageDigestPackageFixed in
quay.io/poundex/tekton-stash-and-cache:0.2.2e854423caa09
netty-codec-http3@4.2.15.Final
4.2.16.Final

Open the chart page →

1,082

Container images carrying it

37 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
netty-codec-http3@4.2.7.Final
4.2.16.Final
2
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
netty-codec-http3@4.2.10.Final
4.2.16.Final
1
consensys/web3signer:latestf146a51a1ba3
netty-codec-http3@4.2.12.Final
4.2.16.Final
1
folioci/mod-audit:latest88f40730ed45
netty-codec-http3@4.2.15.Final
4.2.16.Final
1
folioci/mod-event-config:latest0192adad3897
netty-codec-http3@4.2.15.Final
4.2.16.Final
1
folioci/mod-finance:latest14450bc15430
netty-codec-http3@4.2.15.Final
4.2.16.Final
1
folioci/mod-finance-storage:latest4bc4057abaea
netty-codec-http3@4.2.15.Final
4.2.16.Final
1
folioci/mod-invoice:latest45b7b13e81e1
netty-codec-http3@4.2.15.Final
4.2.16.Final
1
folioci/mod-notify:latesta8c1a90005fc
netty-codec-http3@4.2.15.Final
4.2.16.Final
1
folioci/mod-orders:latestfc4528220fb8
netty-codec-http3@4.2.15.Final
4.2.16.Final
1
folioci/mod-orders-storage:latestceeaacc3bf16
netty-codec-http3@4.2.15.Final
4.2.16.Final
1
folioci/mod-organizations-storage:lateste46892405fde
netty-codec-http3@4.2.14.Final
4.2.16.Final
1
folioci/mod-users:latest6f60033321b0
netty-codec-http3@4.2.15.Final
4.2.16.Final
1
geoservercloud/geoserver-cloud-gateway:3.0.1.1de0b20bd2a43
netty-codec-http3@4.2.15.Final
4.2.16.Final
1
geoservercloud/geoserver-cloud-gwc:3.0.1.1b04ed89b5d2b
netty-codec-http3@4.2.15.Final
4.2.16.Final
1
geoservercloud/geoserver-cloud-rest:3.0.1.1318254b52f96
netty-codec-http3@4.2.15.Final
4.2.16.Final
1
geoservercloud/geoserver-cloud-wcs:3.0.1.14f077124f591
netty-codec-http3@4.2.15.Final
4.2.16.Final
1
geoservercloud/geoserver-cloud-webui:3.0.1.14f91e3048ac8
netty-codec-http3@4.2.15.Final
4.2.16.Final
1
geoservercloud/geoserver-cloud-wfs:3.0.1.1299f0d6232d1
netty-codec-http3@4.2.15.Final
4.2.16.Final
1
geoservercloud/geoserver-cloud-wms:3.0.1.15164f687ce4d
netty-codec-http3@4.2.15.Final
4.2.16.Final
1
glarad/mc-service-registry:latest7b02b9e7f1ef
netty-codec-http3@4.2.15.Final
4.2.16.Final
1
gridgain/gridgain9:9.1.1895018390077b
netty-codec-http3@4.2.10.Final
4.2.16.Final
1
library/neo4j:2026.05.0-enterprise2caf944aa4a5
netty-codec-http3@4.2.14.Final
4.2.16.Final
1
rtuszik/photon-docker:2.4.021549c60f9e6
netty-codec-http3@4.2.15.Final
4.2.16.Final
1
softwaremill/bootzooka:latest845b5e8f8056
netty-codec-http3@4.2.13.Final
4.2.16.Final
1
trinodb/trino:4801565e8cac299
netty-codec-http3@4.2.10.Final
4.2.16.Final
1
trinodb/trino:4815b5e0a97f599
netty-codec-http3@4.2.12.Final
4.2.16.Final
1
trinodb/trino:4796af989b0846d
netty-codec-http3@4.2.7.Final
4.2.16.Final
1
ghcr.io/gla-rad/enav-api-gateway:latest8f4345c77dda
netty-codec-http3@4.2.12.Final
4.2.16.Final
1
ghcr.io/gla-rad/enav-aton-admin-service:latestcf85570b1324
netty-codec-http3@4.2.12.Final
4.2.16.Final
1
ghcr.io/gla-rad/enav-aton-service:latest3be878690629
netty-codec-http3@4.2.12.Final
4.2.16.Final
1
ghcr.io/gla-rad/enav-aton-service-client:latestf1629ac5f9ec
netty-codec-http3@4.2.12.Final
4.2.16.Final
1
ghcr.io/gla-rad/enav-ckeeper:latest415323ef112b
netty-codec-http3@4.2.12.Final
4.2.16.Final
1
ghcr.io/gla-rad/enav-eureka:latest05002092c621
netty-codec-http3@4.2.12.Final
4.2.16.Final
1
ghcr.io/gla-rad/enav-msg-broker:latest6fe372e4e481
netty-codec-http3@4.2.12.Final
4.2.16.Final
1
quay.io/poundex/tekton-ci-environment-injector:0.2.46dd65f22949c
netty-codec-http3@4.2.15.Final
4.2.16.Final
1
quay.io/poundex/tekton-stash-and-cache:0.2.2e854423caa09
netty-codec-http3@4.2.15.Final
4.2.16.Final
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.