StackRadar

CVE-2026-59900

Medium

Advisory

Published 22 Jul 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.9
base score, highest
EPSS
0.002
14th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
389
of 17,781 indexed, latest versions
Container images
453
deployed by those charts
Fix available
1 of 1
affected package

Netty: [codec-http2] Lack of Host Header Deduplication in HTTP/2→HTTP/1.x Translation Leads to Request Routing Bypass

Carried by container images the latest versions of 389 of 17,781 indexed charts deploy, on 453 images.

Affected packageAffected versionsFixed inImages
netty-codec-http2maven4.1.12.Final, 4.1.19.Final, 4.1.22.Final, 4.1.24.Final+82 more4.1.136.Final, 4.2.16.Final453
OSV records
GHSA-c69g-56f8-xwqj

Charts affected

389 by stars
ChartLatestAffected imagesRadar Score
elasticsearchhelmforgeVerified publisher1.1.81 of 2See more

elasticsearch helmforge 1.1.8

1 of the 2 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
library/elasticsearch:9.5.38d09295845fe
netty-codec-http2@4.1.135.Final
4.1.136.Final

Open the chart page →

280
kibanahelmforgeVerified publisher1.1.71 of 3See more

kibana helmforge 1.1.7

1 of the 3 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
library/elasticsearch:9.5.19656a9ca03f8
netty-codec-http2@4.1.135.Final
4.1.136.Final

Open the chart page →

341
komgahelmforgeVerified publisher1.4.151 of 1See more

komga helmforge 1.4.15

1 of the 1 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
gotson/komga:1.26.36c2a967bbe9a
netty-codec-http2@4.1.135.Final
4.1.136.Final

Open the chart page →

2,261
openbashelm-openbasVerified publisher1.8.142 of 7See more

openbas helm-openbas 1.8.14

2 of the 7 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
openbas/platform:2.0.5d986d80b0a75
netty-codec-http2@4.1.116.Final
4.1.136.Final
opensearchproject/opensearch:3.3.2798cf28e226a
netty-codec-http2@4.1.125.Final
4.1.136.Final

Open the chart page →

25,017
heronheron0.20.5-incubating1 of 2See more

heron heron 0.20.5-incubating

1 of the 2 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
apache/bookkeeper:4.14.5a7d9970c148f
netty-codec-http2@4.1.72.Final
4.1.136.Final

Open the chart page →

1,449
eoloplanthttpd-eoloplant0.1.03 of 7See more

eoloplant httpd-eoloplant 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
netty-codec-http2@4.1.42.Final
4.1.136.Final
codeurjc/server:v1.0310bea5b1ee7
netty-codec-http2@4.1.82.Final
4.1.136.Final
codeurjc/toposervice:v1.09fb4c11e6a49
netty-codec-http2@4.1.85.Final
4.1.136.Final

Open the chart page →

32,205
prometheushuangchengwu-helm-chart0.1.02 of 3See more

prometheus huangchengwu-helm-chart 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:9.2.0133d35d2c263
netty-codec-http2@4.1.77.Final
4.1.136.Final
apache/skywalking-ui:9.2.0295f1dc87d98
netty-codec-http2@4.1.77.Final
4.1.136.Final

Open the chart page →

16,401
skywalking-v1huangchengwu-helm-chart0.1.02 of 4See more

skywalking-v1 huangchengwu-helm-chart 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.9.1b4ec8c18d079
netty-codec-http2@4.1.68.Final
4.1.136.Final
apache/skywalking-ui:8.9.180530f0308a5
netty-codec-http2@4.1.63.Final
4.1.136.Final

Open the chart page →

20,650
eoloserverihuertas2021-vmartinp2021-helm0.1.03 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
netty-codec-http2@4.1.82.Final
4.1.136.Final
codeurjc/toposervice:v1.09fb4c11e6a49
netty-codec-http2@4.1.85.Final
4.1.136.Final
huertaslopez/i.huertas.2021-v.martinp.2021-planner:2.0.0e2c18bd65472
netty-codec-http2@4.1.42.Final
4.1.136.Final

Open the chart page →

27,721
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
dremio/dremio-oss:24.1.080ed2e3b7c43
netty-codec-http2@4.1.89.Final
4.1.136.Final

Open the chart page →

37,671
nifi-registryimprowisedVerified publisher1.0.01 of 2See more

nifi-registry improwised 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
apache/nifi-registry:1.27.063b8e3e40742
netty-codec-http2@4.1.111.Final
4.1.136.Final

Open the chart page →

5,320
delta-sharing-serverinseefrlab1.2.11 of 1See more

delta-sharing-server inseefrlab 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
deltaio/delta-sharing-server:0.2.08b75118187c5
netty-codec-http2@4.1.63.Final
4.1.136.Final

Open the chart page →

6,174
pinotinseefrlab0.2.01 of 2See more

pinot inseefrlab 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
apachepinot/pinot:latest-jdk110018bb04ced7
netty-codec-http2@4.1.74.Final
4.1.136.Final

Open the chart page →

10,777
daveit-at-mOfficialVerified publisher0.2.157 of 11See more

dave it-at-m 0.2.15

7 of the 11 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
netty-codec-http2@4.1.118.Final
4.1.136.Final
ghcr.io/it-at-m/dave-admin-portal/dave-adminportal:10.0.0cbff8141302f
netty-codec-http2@4.1.135.Final
4.1.136.Final
ghcr.io/it-at-m/dave-backend/dave-backend:10.0.0f66413e62afc
netty-codec-http2@4.1.135.Final
4.1.136.Final
ghcr.io/it-at-m/dave-document-storage/dave-document-storage:10.0.09c7fc07330c9
netty-codec-http2@4.1.135.Final
4.1.136.Final
ghcr.io/it-at-m/dave-frontend/dave-frontend:10.0.0a49fdb8d6f1b
netty-codec-http2@4.1.135.Final
4.1.136.Final
ghcr.io/it-at-m/dave-geodata-eai/dave-geodata-eai:10.0.06a3fe3136856
netty-codec-http2@4.1.135.Final
4.1.136.Final
ghcr.io/it-at-m/dave-selfservice-portal/dave-selfserviceportal:10.0.0d352df1b94b6
netty-codec-http2@4.1.135.Final
4.1.136.Final

Open the chart page →

15,089
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.1.4044a457e0498
netty-codec-http2@4.1.118.Final
4.1.136.Final

Open the chart page →

45,239
shinsei-managerjtektVerified publisher0.2.01 of 8See more

shinsei-manager jtekt 0.2.0

1 of the 8 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
library/neo4j:5.20.052d3dec8d455
netty-codec-http2@4.1.109.Final
4.1.136.Final

Open the chart page →

63,461
kadeck-teamskadeck1.1.211 of 1See more

kadeck-teams kadeck 1.1.21

1 of the 1 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
xeotek/kadeck:6.3.439a3b37a17c5
netty-codec-http2@4.1.108.Final
4.1.136.Final

Open the chart page →

3,576
kadeck-webkadeck0.6.01 of 1See more

kadeck-web kadeck 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
xeotek/kadeck:4.2.94c6b04d9ce55
netty-codec-http2@4.1.70.Final
4.1.136.Final

Open the chart page →

7,254
kron-aapm-agentkron-aapm-agent1.1.01 of 1See more

kron-aapm-agent kron-aapm-agent 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
krontechnology/aapm-agent:1.1.07feef7d2ab42
netty-codec-http2@4.1.54.Final
4.1.136.Final

Open the chart page →

8,884
nacoskubesphere-testVerified publisher0.1.11 of 1See more

nacos kubesphere-test 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
nacos/nacos-server:1.4.1fe6e5688cdf3
netty-codec-http2@4.1.38.Final
4.1.136.Final

Open the chart page →

4,153
penpotkubitodevVerified publisher1.2.11 of 5See more

penpot kubitodev 1.2.1

1 of the 5 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
penpotapp/backend:2.2.147853d9bb9dd
netty-codec-http2@4.1.108.Final
4.1.136.Final

Open the chart page →

16,877
strimzi-kafka-operatorkvalitetsitVerified publisher0.36.11 of 1See more

strimzi-kafka-operator kvalitetsit 0.36.1

1 of the 1 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.36.1e9e03b31007c
netty-codec-http2@4.1.94.Final
4.1.136.Final

Open the chart page →

4,098
komgalinkding0.2.31 of 1See more

komga linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
gotson/komga:1.22.0ba892ab3e082
netty-codec-http2@4.1.115.Final
4.1.136.Final

Open the chart page →

3,131
rocketmq-exporterlogic3579Verified publisher0.0.21 of 1See more

rocketmq-exporter logic3579 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
apache/rocketmq-exporter:0.0.2c8fb51195444
netty-codec-http2@4.1.91.Final
4.1.136.Final

Open the chart page →

6,634
elastictranscoderluiscajl0.46.01 of 4See more

elastictranscoder luiscajl 0.46.0

1 of the 4 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
elastictranscoder/media-storage:f6d861a026208b8c2359
netty-codec-http2@4.1.65.Final
4.1.136.Final

Open the chart page →

58,160
torznab-atomohdluiscajl0.0.31 of 1See more

torznab-atomohd luiscajl 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
lavandadelpatio/torznab-atomohd:latest214eaef5444c
netty-codec-http2@4.1.90.Final
4.1.136.Final

Open the chart page →

3,290
eoloplantmca-eoloplaner0.1.02 of 7See more

eoloplant mca-eoloplaner 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
hugohg34/planner:0.0.2171f61e8d7e2
netty-codec-http2@4.1.42.Final
4.1.136.Final
hugohg34/toposervice:0.0.2812a03b3f274
netty-codec-http2@4.1.70.Final
4.1.136.Final

Open the chart page →

29,588
metabase-k8smetabase-k8s1.0.01 of 1See more

metabase-k8s metabase-k8s 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
metabase/metabase:v0.53.4.17807bc5cad17
netty-codec-http2@4.1.116.Final
4.1.136.Final

Open the chart page →

2,589
elasticmicroboxlabs0.3.01 of 1See more

elastic microboxlabs 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
library/elasticsearch:8.17.32cc40b15dff8
netty-codec-http2@4.1.118.Final
4.1.136.Final

Open the chart page →

4,257
miot-calendarmicroboxlabs0.1.01 of 1See more

miot-calendar microboxlabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
ghcr.io/microboxlabs/miot-calendar:latest-jvm7157cdc0bf5b
netty-codec-http2@4.1.130.Final
4.1.136.Final

Open the chart page →

1,937
microcks-operatormicrocksVerified publisher0.0.111 of 1See more

microcks-operator microcks 0.0.11

1 of the 1 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
quay.io/microcks/microcks-operator:0.0.1196d1054d4a61
netty-codec-http2@4.1.128.Final
4.1.136.Final

Open the chart page →

1,261
resource-processormicroservices-learningVerified publisher1.2.01 of 1See more

resource-processor microservices-learning 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
maksimkavalenka/microservices-learning.resource-processor:latest64a25afb8748
netty-codec-http2@4.1.97.Final
4.1.136.Final

Open the chart page →

3,683
resource-servicemicroservices-learningVerified publisher1.5.01 of 2See more

resource-service microservices-learning 1.5.0

1 of the 2 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
maksimkavalenka/microservices-learning.resource-service:latest13ad9bb170a0
netty-codec-http2@4.1.97.Final
4.1.136.Final

Open the chart page →

5,129
song-servicemicroservices-learningVerified publisher1.2.01 of 2See more

song-service microservices-learning 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
maksimkavalenka/microservices-learning.song-service:latest2bcdac368b07
netty-codec-http2@4.1.97.Final
4.1.136.Final

Open the chart page →

4,599
pulsarv2milvus-helm2.7.81 of 4See more

pulsarv2 milvus-helm 2.7.8

1 of the 4 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
netty-codec-http2@4.1.24.Final
4.1.136.Final

Open the chart page →

15,855
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
opensearchproject/opensearch:1.1.0967d7f57f72f
netty-codec-http2@4.1.45.Final
4.1.136.Final

Open the chart page →

10,603
standard-application-stackmintel11.4.01 of 12See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
opensearchproject/opensearch:1.1.0967d7f57f72f
netty-codec-http2@4.1.45.Final
4.1.136.Final

Open the chart page →

10,603
mitre-siphonmitre-siphon0.2.91 of 4See more

mitre-siphon mitre-siphon 0.2.9

1 of the 4 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/mitre-siphon:main503c00321502
netty-codec-http2@4.1.92.Final
4.1.136.Final

Open the chart page →

3,083
user-manager-neo4jmoreillonVerified publisher0.9.71 of 6See more

user-manager-neo4j moreillon 0.9.7

1 of the 6 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
library/neo4j:5.20.052d3dec8d455
netty-codec-http2@4.1.109.Final
4.1.136.Final

Open the chart page →

30,363
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
netty-codec-http2@4.1.68.Final
4.1.136.Final

Open the chart page →

25,933
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
netty-codec-http2@4.1.74.Final
4.1.136.Final

Open the chart page →

15,675
commafeedmt1905028.2.01 of 3See more

commafeed mt190502 8.2.0

1 of the 3 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
athou/commafeed:6.2.0-postgresql5e388351df1a
netty-codec-http2@4.1.130.Final
4.1.136.Final

Open the chart page →

3,687
keycloakmt1905021.4.61 of 3See more

keycloak mt190502 1.4.6

1 of the 3 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.5.68d44614c7479
netty-codec-http2@4.1.130.Final
4.1.136.Final

Open the chart page →

2,901
my-app-namemy-app-name0.0.21 of 1See more

my-app-name my-app-name 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
viniciusfcf/gitops-quarkus-app-jvm:latestbba8ee1b5cd5
netty-codec-http2@4.1.79.Final
4.1.136.Final

Open the chart page →

9,149
Practica_4_helmmy-heml-appVerified publisher0.1.03 of 7See more

Practica_4_helm my-heml-app 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
adagber/planner:v1.0e5c1ed097752
netty-codec-http2@4.1.42.Final
4.1.136.Final
codeurjc/server:v1.0310bea5b1ee7
netty-codec-http2@4.1.82.Final
4.1.136.Final
codeurjc/toposervice:v1.09fb4c11e6a49
netty-codec-http2@4.1.85.Final
4.1.136.Final

Open the chart page →

27,721
incorencsaVerified publisher1.38.01 of 29See more

incore ncsa 1.38.0

1 of the 29 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
netty-codec-http2@4.1.108.Final
4.1.136.Final

Open the chart page →

15,369
neuralbank-stackneuralbank-stack0.1.01 of 4See more

neuralbank-stack neuralbank-stack 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/neuralbank-backend:latesta53899fcfc01
netty-codec-http2@4.1.127.Final
4.1.136.Final

Open the chart page →

5,191
logic-ms-helm-chartnotesprojectchart0.1.01 of 2See more

logic-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
vlebediantsev/logic-ms:latestdf8bf38c535b
netty-codec-http2@4.1.78.Final
4.1.136.Final

Open the chart page →

6,852
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
netty-codec-http2@4.1.100.Final
4.1.136.Final

Open the chart page →

5,826
ojp-serverojp0.1.51 of 1See more

ojp-server ojp 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-59900.

Container imageDigestPackageFixed in
rrobetti/ojp:0.1.0-beta1141bd88232b
netty-codec-http2@4.1.110.Final
4.1.136.Final

Open the chart page →

2,587

Container images carrying it

453 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/comet-ml/opik/opik-backend:2.2.5950a7aa0562f5
netty-codec-http2@4.2.13.Final
4.2.16.Final
1
ghcr.io/cosmo-tech/cosmotech-api:5.2.0269ee25c359b
netty-codec-http2@4.2.15.Final
4.2.16.Final
1
ghcr.io/curium-rocks/mitre-siphon:main503c00321502
netty-codec-http2@4.1.92.Final
4.1.136.Final
1
ghcr.io/damap-org/damap-backend:5.0.0f3d0c7d35498
netty-codec-http2@4.1.108.Final
4.1.136.Final
1
ghcr.io/devops-ia/cp-schema-registry:8.1.1-msk-iam-auth2.3.530d1a445acc7
netty-codec-http2@4.1.128.Final
4.1.136.Final
1
ghcr.io/devops-ia/kafka-cruise-control:jdk17-cc2.5.146-iam2.3.8e310642de2e2
netty-codec-http2@4.1.110.Final
4.1.136.Final
1
ghcr.io/fleeksoft/hbase/hbase-base:2.4.13.2c144bdd688d7
netty-codec-http2@4.1.78.Final
4.1.136.Final
1
ghcr.io/gla-rad/enav-api-gateway:latest8f4345c77dda
netty-codec-http2@4.2.12.Final
4.2.16.Final
1
ghcr.io/gla-rad/enav-aton-admin-service:latestcf85570b1324
netty-codec-http2@4.2.12.Final
4.2.16.Final
1
ghcr.io/gla-rad/enav-aton-service:latest3be878690629
netty-codec-http2@4.2.12.Final
4.2.16.Final
1
ghcr.io/gla-rad/enav-aton-service-client:latestf1629ac5f9ec
netty-codec-http2@4.2.12.Final
4.2.16.Final
1
ghcr.io/gla-rad/enav-ckeeper:latest415323ef112b
netty-codec-http2@4.2.12.Final
4.2.16.Final
1
ghcr.io/gla-rad/enav-eureka:latest05002092c621
netty-codec-http2@4.2.12.Final
4.2.16.Final
1
ghcr.io/gla-rad/enav-msg-broker:latest6fe372e4e481
netty-codec-http2@4.2.12.Final
4.2.16.Final
1
ghcr.io/it-at-m/dave-admin-portal/dave-adminportal:10.0.0cbff8141302f
netty-codec-http2@4.1.135.Final
4.1.136.Final
1
ghcr.io/it-at-m/dave-backend/dave-backend:10.0.0f66413e62afc
netty-codec-http2@4.1.135.Final
4.1.136.Final
1
ghcr.io/it-at-m/dave-document-storage/dave-document-storage:10.0.09c7fc07330c9
netty-codec-http2@4.1.135.Final
4.1.136.Final
1
ghcr.io/it-at-m/dave-frontend/dave-frontend:10.0.0a49fdb8d6f1b
netty-codec-http2@4.1.135.Final
4.1.136.Final
1
ghcr.io/it-at-m/dave-geodata-eai/dave-geodata-eai:10.0.06a3fe3136856
netty-codec-http2@4.1.135.Final
4.1.136.Final
1
ghcr.io/it-at-m/dave-selfservice-portal/dave-selfserviceportal:10.0.0d352df1b94b6
netty-codec-http2@4.1.135.Final
4.1.136.Final
1
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
netty-codec-http2@4.1.67.Final
4.1.136.Final
1
ghcr.io/kafbat/kafka-ui:v1.2.0185da4ad3e88
netty-codec-http2@4.1.118.Final
4.1.136.Final
1
ghcr.io/komputing/fauceth:release4ab8fa4143b4
netty-codec-http2@4.1.69.Final
4.1.136.Final
1
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
netty-codec-http2@4.1.96.Final
4.1.136.Final
1
ghcr.io/kubelauncher/keycloakafe3bd73d7cf
netty-codec-http2@4.1.135.Final
4.1.136.Final
1
ghcr.io/kvaps/linstor-controller:v1.14.000ce11c31087
netty-codec-http2@4.1.51.Final
4.1.136.Final
1
ghcr.io/kvaps/linstor-satellite:v1.14.0a573fb9bc809
netty-codec-http2@4.1.51.Final
4.1.136.Final
1
ghcr.io/microboxlabs/miot-calendar:latest-jvm7157cdc0bf5b
netty-codec-http2@4.1.130.Final
4.1.136.Final
1
ghcr.io/openccu/openccu:3.89.8.20260719b2de2ff6e8e0
netty-codec-http2@4.2.5.Final
4.2.16.Final
1
ghcr.io/open-telemetry/demo:3.0.0-fraud-detection1cdfd1bcf476
netty-codec-http2@4.1.133.Final
4.1.136.Final
1
ghcr.io/open-telemetry/demo:1.12.0-frauddetectionservice77cefdab4d5c
netty-codec-http2@4.1.100.Final
4.1.136.Final
1
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
netty-codec-http2@4.1.100.Final
4.1.136.Final
1
ghcr.io/openunison/openunison-k8s:1.0.509ad450220ab9
netty-codec-http2@4.2.13.Final
4.2.16.Final
1
ghcr.io/privacyengineering/hawk-service:latestbfedf47bb5e0
netty-codec-http2@4.1.101.Final
4.1.136.Final
1
ghcr.io/projectnessie/nessie:0.92.19efe3c74d55f
netty-codec-http2@4.1.108.Final
4.1.136.Final
1
ghcr.io/punchplatform/punchline-java:8.1.1d46ce7b96482
netty-codec-http2@4.1.82.Final
4.1.136.Final
1
ghcr.io/radar-base/radar-output-restructure/radar-output-restructure:3.0.67fb9c70e96a4
netty-codec-http2@4.2.10.Final
4.2.16.Final
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
netty-codec-http2@4.1.86.Final
4.1.136.Final
1
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
netty-codec-http2@4.2.12.Final
4.2.16.Final
1
ghcr.io/wenisch-tech/chronoreaper:1.1.10447726cec07b
netty-codec-http2@4.1.133.Final
4.1.136.Final
1
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
netty-codec-http2@4.1.128.Final
4.1.136.Final
1
ghcr.io/wundergraph/cosmo/keycloak:0.13.0b37408461b9b
netty-codec-http2@4.1.130.Final
4.1.136.Final
1
public.ecr.aws/aws-containers/retail-store-sample-cart:1.3.05d767569c976
netty-codec-http2@4.1.124.Final
4.1.136.Final
1
public.ecr.aws/aws-containers/retail-store-sample-orders:1.3.0e85f034bcf48
netty-codec-http2@4.1.124.Final
4.1.136.Final
1
public.ecr.aws/aws-containers/retail-store-sample-ui:1.3.0ce3f2e935eb3
netty-codec-http2@4.1.124.Final
4.1.136.Final
1
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
netty-codec-http2@4.1.89.Final
4.1.136.Final
1
public.ecr.aws/v0r6c2e2/trino:latestc265156b00d1
netty-codec-http2@4.1.117.Final
4.1.136.Final
1
quay.io/apicurio/apicurio-registry-kube-sync:1.0.170ef31840269
netty-codec-http2@4.1.68.Final
4.1.136.Final
1
quay.io/apicurio/apicurio-registry-mem:2.5.8.Final3b036692d546
netty-codec-http2@4.1.100.Final
4.1.136.Final
1
quay.io/everythingascode/apishift-backend:v0.3.014ff275b2e61
netty-codec-http2@4.1.135.Final
4.1.136.Final
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.