StackRadar

CVE-2026-59919

Medium

Advisory

Published 22 Jul 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
119
of 17,781 indexed, latest versions
Container images
115
deployed by those charts
Fix available
1 of 1
affected package

Netty: HAProxy V1 Protocol CRLF Injection via AF_UNIX Address

Carried by container images the latest versions of 119 of 17,781 indexed charts deploy, on 115 images.

Affected packageAffected versionsFixed inImages
netty-codec-haproxymaven4.1.43.Final, 4.1.47.Final, 4.1.48.Final, 4.1.63.Final+38 more4.1.136.Final, 4.2.16.Final115
OSV records
GHSA-wh89-7897-x99h

Charts affected

119 by stars
ChartLatestAffected imagesRadar Score
eoloplannereoloplannerVerified publisher0.1.01 of 7See more

eoloplanner eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
netty-codec-haproxy@4.1.82.Final
4.1.136.Final

Open the chart page →

32,205
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.01 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
netty-codec-haproxy@4.1.82.Final
4.1.136.Final

Open the chart page →

27,537
eoloplannereoloplanner-molynx-gat0.1.01 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
netty-codec-haproxy@4.1.82.Final
4.1.136.Final

Open the chart page →

28,482
eoloplanteoloplant1.0.01 of 7See more

eoloplant eoloplant 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
netty-codec-haproxy@4.1.82.Final
4.1.136.Final

Open the chart page →

27,537
eoloplantseoloplants-urjcVerified publisher0.1.01 of 7See more

eoloplants eoloplants-urjc 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
netty-codec-haproxy@4.1.82.Final
4.1.136.Final

Open the chart page →

27,721
servereoloserverVerified publisher0.1.01 of 7See more

server eoloserver 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
netty-codec-haproxy@4.1.82.Final
4.1.136.Final

Open the chart page →

32,205
web3signerethereum-helm-chartsVerified publisher1.0.61 of 4See more

web3signer ethereum-helm-charts 1.0.6

1 of the 4 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
consensys/web3signer:latestf146a51a1ba3
netty-codec-haproxy@4.2.12.Final
4.2.16.Final

Open the chart page →

1,997
rocketmqgengxiankun-charts0.3.01 of 1See more

rocketmq gengxiankun-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
apache/rocketmq:5.3.0434d8398f996
netty-codec-haproxy@4.1.79.Final
4.1.136.Final

Open the chart page →

4,921
geysergeyserVerified publisher0.1.31 of 1See more

geyser geyser 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
ghcr.io/joffreybvn/k8s-geyser:0.0.247f36880072e
netty-codec-haproxy@4.2.7.Final
4.2.16.Final

Open the chart page →

350
gridgain9gridgainVerified publisher1.1.101 of 2See more

gridgain9 gridgain 1.1.10

1 of the 2 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
gridgain/gridgain9:9.1.1895018390077b
netty-codec-haproxy@4.2.10.Final
4.2.16.Final

Open the chart page →

3,199
hbasehbase0.1.71 of 4See more

hbase hbase 0.1.7

1 of the 4 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
ghcr.io/fleeksoft/hbase/hbase-base:2.4.13.2c144bdd688d7
netty-codec-haproxy@4.1.78.Final
4.1.136.Final

Open the chart page →

10,540
eoloplanthttpd-eoloplant0.1.01 of 7See more

eoloplant httpd-eoloplant 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
netty-codec-haproxy@4.1.82.Final
4.1.136.Final

Open the chart page →

32,205
prometheushuangchengwu-helm-chart0.1.01 of 3See more

prometheus huangchengwu-helm-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:9.2.0133d35d2c263
netty-codec-haproxy@4.1.77.Final
4.1.136.Final

Open the chart page →

16,401
skywalking-v1huangchengwu-helm-chart0.1.01 of 4See more

skywalking-v1 huangchengwu-helm-chart 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.9.1b4ec8c18d079
netty-codec-haproxy@4.1.68.Final
4.1.136.Final

Open the chart page →

20,650
eoloserverihuertas2021-vmartinp2021-helm0.1.01 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
netty-codec-haproxy@4.1.82.Final
4.1.136.Final

Open the chart page →

27,721
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
dremio/dremio-oss:24.1.080ed2e3b7c43
netty-codec-haproxy@4.1.89.Final
4.1.136.Final

Open the chart page →

37,671
delta-sharing-serverinseefrlab1.2.11 of 1See more

delta-sharing-server inseefrlab 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
deltaio/delta-sharing-server:0.2.08b75118187c5
netty-codec-haproxy@4.1.63.Final
4.1.136.Final

Open the chart page →

6,174
pinotinseefrlab0.2.01 of 2See more

pinot inseefrlab 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
apachepinot/pinot:latest-jdk110018bb04ced7
netty-codec-haproxy@4.1.74.Final
4.1.136.Final

Open the chart page →

10,777
itm-mqtt-brokerintelVerified publisher1.0.01 of 1See more

itm-mqtt-broker intel 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
hivemq/hivemq4:dns-4.5.144d194450d48e
netty-codec-haproxy@4.1.63.Final
4.1.136.Final

Open the chart page →

2,653
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.1.4044a457e0498
netty-codec-haproxy@4.1.118.Final
4.1.136.Final

Open the chart page →

45,239
rocketmq-exporterlogic3579Verified publisher0.0.21 of 1See more

rocketmq-exporter logic3579 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
apache/rocketmq-exporter:0.0.2c8fb51195444
netty-codec-haproxy@4.1.91.Final
4.1.136.Final

Open the chart page →

6,634
metabase-k8smetabase-k8s1.0.01 of 1See more

metabase-k8s metabase-k8s 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
metabase/metabase:v0.53.4.17807bc5cad17
netty-codec-haproxy@4.1.116.Final
4.1.136.Final

Open the chart page →

2,589
miot-calendarmicroboxlabs0.1.01 of 1See more

miot-calendar microboxlabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
ghcr.io/microboxlabs/miot-calendar:latest-jvm7157cdc0bf5b
netty-codec-haproxy@4.1.130.Final
4.1.136.Final

Open the chart page →

1,937
microcks-operatormicrocksVerified publisher0.0.111 of 1See more

microcks-operator microcks 0.0.11

1 of the 1 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
quay.io/microcks/microcks-operator:0.0.1196d1054d4a61
netty-codec-haproxy@4.1.128.Final
4.1.136.Final

Open the chart page →

1,261
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
netty-codec-haproxy@4.1.68.Final
4.1.136.Final

Open the chart page →

25,933
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
netty-codec-haproxy@4.1.74.Final
4.1.136.Final

Open the chart page →

15,675
commafeedmt1905028.2.01 of 3See more

commafeed mt190502 8.2.0

1 of the 3 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
athou/commafeed:6.2.0-postgresql5e388351df1a
netty-codec-haproxy@4.1.130.Final
4.1.136.Final

Open the chart page →

3,687
keycloakmt1905021.4.61 of 3See more

keycloak mt190502 1.4.6

1 of the 3 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.5.68d44614c7479
netty-codec-haproxy@4.1.130.Final
4.1.136.Final

Open the chart page →

2,901
my-app-namemy-app-name0.0.21 of 1See more

my-app-name my-app-name 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
viniciusfcf/gitops-quarkus-app-jvm:latestbba8ee1b5cd5
netty-codec-haproxy@4.1.79.Final
4.1.136.Final

Open the chart page →

9,149
Practica_4_helmmy-heml-appVerified publisher0.1.01 of 7See more

Practica_4_helm my-heml-app 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
netty-codec-haproxy@4.1.82.Final
4.1.136.Final

Open the chart page →

27,721
incorencsaVerified publisher1.38.01 of 29See more

incore ncsa 1.38.0

1 of the 29 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
netty-codec-haproxy@4.1.108.Final
4.1.136.Final

Open the chart page →

15,369
neuralbank-stackneuralbank-stack0.1.01 of 4See more

neuralbank-stack neuralbank-stack 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/neuralbank-backend:latesta53899fcfc01
netty-codec-haproxy@4.1.127.Final
4.1.136.Final

Open the chart page →

5,191
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
netty-codec-haproxy@4.1.94.Final
4.1.136.Final

Open the chart page →

9,005
apicurioone-acre-fundVerified publisher2.3.03 of 5See more

apicurio one-acre-fund 2.3.0

3 of the 5 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
netty-codec-haproxy@4.1.86.Final
4.1.136.Final
apicurio/apicurio-studio-ui:0.2.62.Final349c845270c2
netty-codec-haproxy@4.1.86.Final
4.1.136.Final
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
netty-codec-haproxy@4.1.86.Final
4.1.136.Final

Open the chart page →

18,667
smsf-configurationopenshift1.0.41 of 1See more

smsf-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
gurolakman/smsf-configuration:1.0.49abb3882bcbd
netty-codec-haproxy@4.1.75.Final
4.1.136.Final

Open the chart page →

13,607
smsf-dispatcheropenshift1.0.41 of 1See more

smsf-dispatcher openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
netty-codec-haproxy@4.1.75.Final
4.1.136.Final

Open the chart page →

11,738
smsf-momtopenshift1.0.41 of 1See more

smsf-momt openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
gurolakman/smsf-momt:1.0.4ce23b20a8a17
netty-codec-haproxy@4.1.75.Final
4.1.136.Final

Open the chart page →

13,568
smsf-registrationopenshift1.0.41 of 1See more

smsf-registration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
gurolakman/smsf-registration:1.0.4b22e746edd5d
netty-codec-haproxy@4.1.75.Final
4.1.136.Final

Open the chart page →

13,551
ussigw-configurationopenshift1.0.41 of 1See more

ussigw-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
netty-codec-haproxy@4.1.75.Final
4.1.136.Final

Open the chart page →

13,455
ussigw-coreopenshift1.0.41 of 1See more

ussigw-core openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
gurolakman/ussigw-core:1.0.48739565c3ea2
netty-codec-haproxy@4.1.75.Final
4.1.136.Final

Open the chart page →

13,100
openshift-integration-operatoropenshift-integration-operatorVerified publisher0.8.21 of 2See more

openshift-integration-operator openshift-integration-operator 0.8.2

1 of the 2 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/openshift-integration-operator:v0.8.2d6fc43ac802e
netty-codec-haproxy@4.1.133.Final
4.1.136.Final

Open the chart page →

2,045
trinoopstty0.2.121 of 1See more

trino opstty 0.2.12

1 of the 1 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
trinodb/trino:4815b5e0a97f599
netty-codec-haproxy@4.2.12.Final
4.2.16.Final

Open the chart page →

1,158
p4p40.1.01 of 7See more

p4 p4 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
netty-codec-haproxy@4.1.82.Final
4.1.136.Final

Open the chart page →

27,537
keycloakpascaliskeVerified publisher0.2.01 of 1See more

keycloak pascaliske 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.0.74388e2379b7e
netty-codec-haproxy@4.1.111.Final
4.1.136.Final

Open the chart page →

2,097
Practica_4_helmpr04helm0.1.01 of 7See more

Practica_4_helm pr04helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
netty-codec-haproxy@4.1.82.Final
4.1.136.Final

Open the chart page →

27,558
trinopresto-loadbalancer0.2.101 of 2See more

trino presto-loadbalancer 0.2.10

1 of the 2 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
trinodb/trino:4796af989b0846d
netty-codec-haproxy@4.2.7.Final
4.2.16.Final

Open the chart page →

2,264
punchline-javapunchplatform8.1.11 of 1See more

punchline-java punchplatform 8.1.1

1 of the 1 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
ghcr.io/punchplatform/punchline-java:8.1.1d46ce7b96482
netty-codec-haproxy@4.1.82.Final
4.1.136.Final

Open the chart page →

1,995
rada-platformrada-platform0.1.02 of 7See more

rada-platform rada-platform 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
trinodb/trino:45038c6f24ab1a4
netty-codec-haproxy@4.1.94.Final
4.1.136.Final
ghcr.io/projectnessie/nessie:0.92.19efe3c74d55f
netty-codec-haproxy@4.1.108.Final
4.1.136.Final

Open the chart page →

21,211
radar-cp-ksql-serverradar-baseVerified publisher0.0.21 of 2See more

radar-cp-ksql-server radar-base 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
netty-codec-haproxy@4.1.100.Final
4.1.136.Final

Open the chart page →

5,269
keycloaksb-helm-charts0.3.01 of 2See more

keycloak sb-helm-charts 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-59919.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.0.6a93d22e13b86
netty-codec-haproxy@4.1.111.Final
4.1.136.Final

Open the chart page →

2,590

Container images carrying it

115 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/keycloak/keycloak:24.0.34d6f22991266
netty-codec-haproxy@4.1.107.Final
4.1.136.Final
1
quay.io/keycloak/keycloak:23.0.34f72a5b0c076
netty-codec-haproxy@4.1.100.Final
4.1.136.Final
1
quay.io/keycloak/keycloak:26.3.36a7217a100bd
netty-codec-haproxy@4.1.124.Final
4.1.136.Final
1
quay.io/keycloak/keycloak:20.0.18830f76112b6
netty-codec-haproxy@4.1.82.Final
4.1.136.Final
1
quay.io/keycloak/keycloak:26.5.68d44614c7479
netty-codec-haproxy@4.1.130.Final
4.1.136.Final
1
quay.io/keycloak/keycloak:26.49409c59bdfb6
netty-codec-haproxy@4.1.128.Final
4.1.136.Final
1
quay.io/keycloak/keycloak:26.6.39b0330756022
netty-codec-haproxy@4.1.133.Final
4.1.136.Final
1
quay.io/keycloak/keycloak:26.0.6a93d22e13b86
netty-codec-haproxy@4.1.111.Final
4.1.136.Final
1
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
netty-codec-haproxy@4.1.82.Final
4.1.136.Final
1
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
netty-codec-haproxy@4.1.82.Final
4.1.136.Final
1
quay.io/maximilianopizarro/custom-rhcl-console:dns-prober-v0.1.21a592ee6651a
netty-codec-haproxy@4.1.132.Final
4.1.136.Final
1
quay.io/maximilianopizarro/neuralbank-backend:latesta53899fcfc01
netty-codec-haproxy@4.1.127.Final
4.1.136.Final
1
quay.io/maximilianopizarro/openshift-integration-operator:v0.8.2d6fc43ac802e
netty-codec-haproxy@4.1.133.Final
4.1.136.Final
1
quay.io/maximilianopizarro/showroom-docs-mcp:latest1a6eff92827a
netty-codec-haproxy@4.1.130.Final
4.1.136.Final
1
quay.io/microcks/microcks-operator:0.0.1196d1054d4a61
netty-codec-haproxy@4.1.128.Final
4.1.136.Final
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.