StackRadar

CVE-2026-6860

Medium

Advisory

Published 9 May 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.002
15th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
107
of 17,781 indexed, latest versions
Container images
100
deployed by those charts
Fix available
1 of 1
affected package

Vert.x has a DoS via unbounded server-side SNI SslContext cache growth

Carried by container images the latest versions of 107 of 17,781 indexed charts deploy, on 100 images.

Affected packageAffected versionsFixed inImages
vertx-coremaven4.3.4, 4.3.7, 4.3.8, 4.4.4+24 more4.5.27, 5.0.12100
OSV records
GHSA-3g76-f9xq-8vp6

Charts affected

107 by stars
ChartLatestAffected imagesRadar Score
simple-keycloaksikalabs0.1.01 of 1See more

simple-keycloak sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.18830f76112b6
vertx-core@4.3.4
no fix listed

Open the chart page →

6,443
strimzi-user-operatorspartan0.4.01 of 1See more

strimzi-user-operator spartan 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.45.158c727cd2e68
vertx-core@4.5.13
4.5.27

Open the chart page →

1,836
teku-validatorstakewise4.3.21 of 2See more

teku-validator stakewise 4.3.2

1 of the 2 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
consensys/teku:25.4.1bf6ecd2ea716
vertx-core@4.5.14
4.5.27

Open the chart page →

3,153
wonder-mesh-netstrrl-helm2026.629.01 of 3See more

wonder-mesh-net strrl-helm 2026.629.0

1 of the 3 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.009a381c715ab
vertx-core@4.5.10
4.5.27

Open the chart page →

5,063
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.1.4044a457e0498
vertx-core@4.5.11
4.5.27

Open the chart page →

45,239
keycloakwiremindVerified publisher25.3.11 of 2See more

keycloak wiremind 25.3.1

1 of the 2 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
vertx-core@4.5.22
4.5.27

Open the chart page →

7,624
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
vertx-core@4.3.4
no fix listed

Open the chart page →

6,016

Container images carrying it

100 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
folioci/mod-inventory-update:latestba84812b4d58
vertx-core@5.0.4
5.0.12
1
folioci/mod-login:latest88de493f86db
vertx-core@4.5.23
4.5.27
1
folioci/mod-login-saml:latest5f3358ccaa0f
vertx-core@4.5.26
4.5.27
1
folioci/mod-ncip:latest8ed83674352b
vertx-core@5.0.8
5.0.12
1
folioci/mod-oai-pmh:latest5cd5ef063f2a
vertx-core@5.0.5
5.0.12
1
folioci/mod-organizations:latest7dc9ccf3d937
vertx-core@5.0.10
5.0.12
1
folioci/mod-patron:latest5f213acfe2f8
vertx-core@5.0.5
5.0.12
1
folioci/mod-permissions:latest5363e98c6299
vertx-core@5.0.10
5.0.12
1
folioci/mod-remote-storage:latest4f12177123dc
vertx-core@5.0.10
5.0.12
1
folioci/mod-rtac:latestc959b2d6142f
vertx-core@5.0.4
5.0.12
1
folioci/mod-sender:latestd88a675dddf0
vertx-core@5.0.6
5.0.12
1
folioci/mod-template-engine:latestd105c585da30
vertx-core@5.0.6
5.0.12
1
folioci/mod-user-import:latest1807734472bd
vertx-core@5.0.11
5.0.12
1
folioci/mod-users-bl:latest4e2d96c9340d
vertx-core@5.0.6
5.0.12
1
graviteeio/ae-engine:3.0.24140932887e0
vertx-core@4.5.21
4.5.27
1
keyfactor/signserver-ce:7.3.2798fbbe00283
vertx-core@4.5.10
4.5.27
1
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
vertx-core@4.5.0
4.5.27
1
tock/bot_admin:25.10.7df3e38c77a38
vertx-core@5.0.7
5.0.12
1
tock/bot_api:25.10.7dd5d5c70e333
vertx-core@5.0.7
5.0.12
1
tock/build_worker:25.10.7080cb6b08d5b
vertx-core@5.0.7
5.0.12
1
tock/duckling:25.10.7ac1f3f1a1e9c
vertx-core@5.0.7
5.0.12
1
tock/kotlin_compiler:25.10.7c9c0fb40089a
vertx-core@5.0.7
5.0.12
1
tock/nlp_api:25.10.7c04ffe67b977
vertx-core@5.0.7
5.0.12
1
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
vertx-core@4.5.25
4.5.27
1
ghcr.io/damap-org/damap-backend:5.0.0f3d0c7d35498
vertx-core@4.5.7
4.5.27
1
ghcr.io/devops-ia/cp-schema-registry:8.1.1-msk-iam-auth2.3.530d1a445acc7
vertx-core@4.5.22
4.5.27
1
ghcr.io/devops-ia/kafka-cruise-control:jdk17-cc2.5.146-iam2.3.8e310642de2e2
vertx-core@4.5.8
4.5.27
1
ghcr.io/microboxlabs/miot-calendar:latest-jvm7157cdc0bf5b
vertx-core@4.5.24
4.5.27
1
ghcr.io/openccu/openccu:3.89.8.20260719b2de2ff6e8e0
vertx-core@5.0.4
5.0.12
1
ghcr.io/projectnessie/nessie:0.92.19efe3c74d55f
vertx-core@4.5.7
4.5.27
1
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
vertx-core@4.5.22
4.5.27
1
ghcr.io/wundergraph/cosmo/keycloak:0.13.0b37408461b9b
vertx-core@4.5.23
4.5.27
1
quay.io/apicurio/apicurio-registry-mem:2.5.8.Final3b036692d546
vertx-core@4.4.6
no fix listed
1
quay.io/keycloak/keycloak:26.009a381c715ab
vertx-core@4.5.10
4.5.27
1
quay.io/keycloak/keycloak:26.0.74388e2379b7e
vertx-core@4.5.10
4.5.27
1
quay.io/keycloak/keycloak:24.0.34d6f22991266
vertx-core@4.5.4
4.5.27
1
quay.io/keycloak/keycloak:23.0.34f72a5b0c076
vertx-core@4.4.6
no fix listed
1
quay.io/keycloak/keycloak:26.3.36a7217a100bd
vertx-core@4.5.18
4.5.27
1
quay.io/keycloak/keycloak:20.0.18830f76112b6
vertx-core@4.3.4
no fix listed
1
quay.io/keycloak/keycloak:26.5.68d44614c7479
vertx-core@4.5.23
4.5.27
1
quay.io/keycloak/keycloak:26.49409c59bdfb6
vertx-core@4.5.22
4.5.27
1
quay.io/keycloak/keycloak:26.0.6a93d22e13b86
vertx-core@4.5.10
4.5.27
1
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
vertx-core@4.3.4
no fix listed
1
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
vertx-core@4.3.4
no fix listed
1
quay.io/maximilianopizarro/custom-rhcl-console:dns-prober-v0.1.21a592ee6651a
vertx-core@4.5.26
4.5.27
1
quay.io/maximilianopizarro/neuralbank-backend:latesta53899fcfc01
vertx-core@4.5.21
4.5.27
1
quay.io/maximilianopizarro/showroom-docs-mcp:latest1a6eff92827a
vertx-core@4.5.25
4.5.27
1
quay.io/microcks/microcks-operator:0.0.1196d1054d4a61
vertx-core@4.5.22
4.5.27
1
quay.io/strimzi/operator:0.45.158c727cd2e68
vertx-core@4.5.13
4.5.27
1
quay.io/strimzi/operator:0.36.1e9e03b31007c
vertx-core@4.4.4
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.