StackRadar

CVE-2026-6860

Medium

Advisory

Published 9 May 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.002
15th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
107
of 17,781 indexed, latest versions
Container images
100
deployed by those charts
Fix available
1 of 1
affected package

Vert.x has a DoS via unbounded server-side SNI SslContext cache growth

Carried by container images the latest versions of 107 of 17,781 indexed charts deploy, on 100 images.

Affected packageAffected versionsFixed inImages
vertx-coremaven4.3.4, 4.3.7, 4.3.8, 4.4.4+24 more4.5.27, 5.0.12100
OSV records
GHSA-3g76-f9xq-8vp6

Charts affected

107 by stars
ChartLatestAffected imagesRadar Score
mod-copycatfolio-org0.1.31 of 1See more

mod-copycat folio-org 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
folioci/mod-copycat:latest1513fad2b799
vertx-core@5.0.10
5.0.12

Open the chart page →

1,466
mod-coursesfolio-org0.1.341 of 1See more

mod-courses folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
folioci/mod-courses:latest68ca414f5596
vertx-core@5.0.6
5.0.12

Open the chart page →

1,533
mod-data-import-converter-storagefolio-org0.1.341 of 1See more

mod-data-import-converter-storage folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
folioci/mod-data-import-converter-storage:latest3028f333778f
vertx-core@4.3.4
no fix listed

Open the chart page →

2,488
mod-emailfolio-org0.1.341 of 1See more

mod-email folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
folioci/mod-email:latest79ea8e2e7ebf
vertx-core@5.0.6
5.0.12

Open the chart page →

866
mod-erm-usage-harvesterfolio-org0.1.341 of 1See more

mod-erm-usage-harvester folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
folioci/mod-erm-usage-harvester:latest2d6767933c59
vertx-core@5.0.10
5.0.12

Open the chart page →

563
mod-eusage-reportsfolio-org0.1.21 of 1See more

mod-eusage-reports folio-org 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
folioci/mod-eusage-reports:latest15de67587091
vertx-core@5.0.8
5.0.12

Open the chart page →

1,224
mod-feesfinesfolio-org0.1.341 of 1See more

mod-feesfines folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
folioci/mod-feesfines:latestfe3a7049f2fb
vertx-core@5.0.5
5.0.12

Open the chart page →

663
mod-inventory-updatefolio-org0.1.21 of 1See more

mod-inventory-update folio-org 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
folioci/mod-inventory-update:latestba84812b4d58
vertx-core@5.0.4
5.0.12

Open the chart page →

878
mod-loginfolio-org0.1.341 of 1See more

mod-login folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
folioci/mod-login:latest88de493f86db
vertx-core@4.5.23
4.5.27

Open the chart page →

1,151
mod-login-samlfolio-org0.1.341 of 1See more

mod-login-saml folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
folioci/mod-login-saml:latest5f3358ccaa0f
vertx-core@4.5.26
4.5.27

Open the chart page →

1,088
mod-ncipfolio-org0.1.341 of 1See more

mod-ncip folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
folioci/mod-ncip:latest8ed83674352b
vertx-core@5.0.8
5.0.12

Open the chart page →

1,103
mod-oai-pmhfolio-org0.1.341 of 1See more

mod-oai-pmh folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
folioci/mod-oai-pmh:latest5cd5ef063f2a
vertx-core@5.0.5
5.0.12

Open the chart page →

962
mod-organizationsfolio-org0.1.341 of 1See more

mod-organizations folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
folioci/mod-organizations:latest7dc9ccf3d937
vertx-core@5.0.10
5.0.12

Open the chart page →

808
mod-patronfolio-org0.1.341 of 1See more

mod-patron folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
folioci/mod-patron:latest5f213acfe2f8
vertx-core@5.0.5
5.0.12

Open the chart page →

827
mod-permissionsfolio-org0.1.351 of 1See more

mod-permissions folio-org 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
folioci/mod-permissions:latest5363e98c6299
vertx-core@5.0.10
5.0.12

Open the chart page →

1,214
mod-remote-storagefolio-org0.1.321 of 1See more

mod-remote-storage folio-org 0.1.32

1 of the 1 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
folioci/mod-remote-storage:latest4f12177123dc
vertx-core@5.0.10
5.0.12

Open the chart page →

571
mod-rtacfolio-org0.1.341 of 1See more

mod-rtac folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
folioci/mod-rtac:latestc959b2d6142f
vertx-core@5.0.4
5.0.12

Open the chart page →

665
mod-senderfolio-org0.1.341 of 1See more

mod-sender folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
folioci/mod-sender:latestd88a675dddf0
vertx-core@5.0.6
5.0.12

Open the chart page →

818
mod-template-enginefolio-org0.1.341 of 1See more

mod-template-engine folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
folioci/mod-template-engine:latestd105c585da30
vertx-core@5.0.6
5.0.12

Open the chart page →

818
mod-user-importfolio-org0.1.341 of 1See more

mod-user-import folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
folioci/mod-user-import:latest1807734472bd
vertx-core@5.0.11
5.0.12

Open the chart page →

1,214
mod-users-blfolio-org0.1.351 of 1See more

mod-users-bl folio-org 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
folioci/mod-users-bl:latest4e2d96c9340d
vertx-core@5.0.6
5.0.12

Open the chart page →

1,321
galoy-depsgaloymoney0.10.201 of 9See more

galoy-deps galoymoney 0.10.20

1 of the 9 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.39.002f6f143fc6d
vertx-core@4.5.0
4.5.27

Open the chart page →

11,961
galoy-depsgaloymoney20.10.201 of 9See more

galoy-deps galoymoney2 0.10.20

1 of the 9 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.39.002f6f143fc6d
vertx-core@4.5.0
4.5.27

Open the chart page →

11,961
cruise-controlhelm-cruise-controlVerified publisher2.1.11 of 2See more

cruise-control helm-cruise-control 2.1.1

1 of the 2 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/kafka-cruise-control:jdk17-cc2.5.146-iam2.3.8e310642de2e2
vertx-core@4.5.8
4.5.27

Open the chart page →

1,453
druidhelmforgeVerified publisher1.3.61 of 4See more

druid helmforge 1.3.6

1 of the 4 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
vertx-core@4.5.24
4.5.27

Open the chart page →

8,541
eoloplanthttpd-eoloplant0.1.01 of 7See more

eoloplant httpd-eoloplant 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
vertx-core@4.3.4
no fix listed

Open the chart page →

32,205
eoloserverihuertas2021-vmartinp2021-helm0.1.01 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
vertx-core@4.3.4
no fix listed

Open the chart page →

27,721
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.1.4044a457e0498
vertx-core@4.5.11
4.5.27

Open the chart page →

45,239
jasperjasperVerified publisher1.0.2021 of 2See more

jasper jasper 1.0.202

1 of the 2 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
vertx-core@4.5.25
4.5.27

Open the chart page →

5,998
strimzi-kafka-operatorkvalitetsitVerified publisher0.36.11 of 1See more

strimzi-kafka-operator kvalitetsit 0.36.1

1 of the 1 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.36.1e9e03b31007c
vertx-core@4.4.4
no fix listed

Open the chart page →

4,098
miot-calendarmicroboxlabs0.1.01 of 1See more

miot-calendar microboxlabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
ghcr.io/microboxlabs/miot-calendar:latest-jvm7157cdc0bf5b
vertx-core@4.5.24
4.5.27

Open the chart page →

1,937
microcks-operatormicrocksVerified publisher0.0.111 of 1See more

microcks-operator microcks 0.0.11

1 of the 1 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
quay.io/microcks/microcks-operator:0.0.1196d1054d4a61
vertx-core@4.5.22
4.5.27

Open the chart page →

1,261
commafeedmt1905028.2.01 of 3See more

commafeed mt190502 8.2.0

1 of the 3 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
athou/commafeed:6.2.0-postgresql5e388351df1a
vertx-core@4.5.24
4.5.27

Open the chart page →

3,687
keycloakmt1905021.4.61 of 3See more

keycloak mt190502 1.4.6

1 of the 3 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.5.68d44614c7479
vertx-core@4.5.23
4.5.27

Open the chart page →

2,901
Practica_4_helmmy-heml-appVerified publisher0.1.01 of 7See more

Practica_4_helm my-heml-app 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
vertx-core@4.3.4
no fix listed

Open the chart page →

27,721
incorencsaVerified publisher1.38.01 of 29See more

incore ncsa 1.38.0

1 of the 29 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
vertx-core@4.5.7
4.5.27

Open the chart page →

15,369
neuralbank-stackneuralbank-stack0.1.01 of 4See more

neuralbank-stack neuralbank-stack 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/neuralbank-backend:latesta53899fcfc01
vertx-core@4.5.21
4.5.27

Open the chart page →

5,191
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
vertx-core@4.5.0
4.5.27

Open the chart page →

5,826
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
vertx-core@4.3.8
no fix listed

Open the chart page →

9,005
apicurioone-acre-fundVerified publisher2.3.03 of 5See more

apicurio one-acre-fund 2.3.0

3 of the 5 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
vertx-core@4.3.7
no fix listed
apicurio/apicurio-studio-ui:0.2.62.Final349c845270c2
vertx-core@4.3.7
no fix listed
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
vertx-core@4.3.7
no fix listed

Open the chart page →

18,667
p4p40.1.01 of 7See more

p4 p4 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
vertx-core@4.3.4
no fix listed

Open the chart page →

27,537
keycloakpascaliskeVerified publisher0.2.01 of 1See more

keycloak pascaliske 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.0.74388e2379b7e
vertx-core@4.5.10
4.5.27

Open the chart page →

2,097
Practica_4_helmpr04helm0.1.01 of 7See more

Practica_4_helm pr04helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
vertx-core@4.3.4
no fix listed

Open the chart page →

27,558
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
ghcr.io/projectnessie/nessie:0.92.19efe3c74d55f
vertx-core@4.5.7
4.5.27

Open the chart page →

21,211
radar-cp-ksql-serverradar-baseVerified publisher0.0.21 of 2See more

radar-cp-ksql-server radar-base 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
vertx-core@4.3.8
no fix listed

Open the chart page →

5,269
radar-kafkaradar-baseVerified publisher0.4.11 of 2See more

radar-kafka radar-base 0.4.1

1 of the 2 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.46.0ac434a48ac2b
vertx-core@4.5.14
4.5.27

Open the chart page →

4,219
strimzi-kafka-operatorradar-baseVerified publisher0.46.01 of 1See more

strimzi-kafka-operator radar-base 0.46.0

1 of the 1 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.46.0ac434a48ac2b
vertx-core@4.5.14
4.5.27

Open the chart page →

1,951
keycloaksb-helm-charts0.3.01 of 2See more

keycloak sb-helm-charts 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.0.6a93d22e13b86
vertx-core@4.5.10
4.5.27

Open the chart page →

2,590
showroom-docs-mcpshowroom-docs-mcpVerified publisher2.1.01 of 4See more

showroom-docs-mcp showroom-docs-mcp 2.1.0

1 of the 4 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/showroom-docs-mcp:latest1a6eff92827a
vertx-core@4.5.25
4.5.27

Open the chart page →

5,201
keycloaksikalabs0.1.01 of 1See more

keycloak sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-6860.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.3.36a7217a100bd
vertx-core@4.5.18
4.5.27

Open the chart page →

1,690

Container images carrying it

100 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
codeurjc/server:v1.0310bea5b1ee7
vertx-core@4.3.4
no fix listed
8
mastercloudapps/server:v2.23f3d24dfe2686
vertx-core@4.3.4
no fix listed
4
quay.io/strimzi/operator:0.37.052f376e64b9b
vertx-core@4.4.4
no fix listed
4
airbyte/workload-launcher:2.2.0119be7bfb719
vertx-core@4.5.24
4.5.27
2
apache/druid:37.0.00116fb802786
vertx-core@4.5.24
4.5.27
2
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
vertx-core@4.5.25
4.5.27
2
quay.io/keycloak/keycloak:26.1.4044a457e0498
vertx-core@4.5.11
4.5.27
2
quay.io/keycloak/keycloak:20.0054ef67eb7da
vertx-core@4.3.4
no fix listed
2
quay.io/strimzi/operator:0.39.002f6f143fc6d
vertx-core@4.5.0
4.5.27
2
quay.io/strimzi/operator:0.46.0ac434a48ac2b
vertx-core@4.5.14
4.5.27
2
airbyte/bootloader:2.2.0f71cf4e185d5
vertx-core@4.5.24
4.5.27
1
airbyte/cron:2.2.0d97b67a1346d
vertx-core@4.5.24
4.5.27
1
airbyte/server:2.2.070e125498a1c
vertx-core@4.5.24
4.5.27
1
airbyte/worker:2.2.08060b88b29c8
vertx-core@4.5.24
4.5.27
1
airbyte/workload-api-server:2.2.042093cff86e9
vertx-core@4.5.24
4.5.27
1
aktosecurity/akto-threat-detection-backend:latest15ebb75b94dc
vertx-core@4.5.11
4.5.27
1
aktosecurity/akto-threat-detection-backend:1.15.7a6c1b933517f
vertx-core@4.5.11
4.5.27
1
apachepulsar/pulsar:3.1.016f9fdab3fa6
vertx-core@4.3.8
no fix listed
1
apachepulsar/pulsar:3.0.79c9947de139d
vertx-core@4.5.10
4.5.27
1
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
vertx-core@4.3.7
no fix listed
1
apicurio/apicurio-studio-ui:0.2.62.Final349c845270c2
vertx-core@4.3.7
no fix listed
1
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
vertx-core@4.3.7
no fix listed
1
athou/commafeed:6.2.0-postgresql5e388351df1a
vertx-core@4.5.24
4.5.27
1
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
vertx-core@4.3.4
no fix listed
1
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
vertx-core@4.5.7
4.5.27
1
bitnamilegacy/keycloak:26.3.3-debian-12-r0da3df0976a9f
vertx-core@4.5.18
4.5.27
1
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
vertx-core@4.3.8
no fix listed
1
consensys/teku:latest3a4f5761ae1c
vertx-core@4.5.24
4.5.27
1
consensys/teku:25.4.1bf6ecd2ea716
vertx-core@4.5.14
4.5.27
1
consensys/web3signer:latestf146a51a1ba3
vertx-core@4.5.26
4.5.27
1
epam/ai-dial-admin-backend:0.20.00ac5be78d7c2
vertx-core@4.5.24
4.5.27
1
esperotech/yaade:latest24d2d692d948
vertx-core@4.5.1
4.5.27
1
factorhouse/factor-platform:96.414728f9fd80f
vertx-core@4.5.24
4.5.27
1
factorhouse/kpow:96.4f9ce9b16b3a7
vertx-core@4.5.24
4.5.27
1
factorhouse/kpow-ce:96.466b08cc9e943
vertx-core@4.5.24
4.5.27
1
folioci/edge-connexion:latestb4863d135524
vertx-core@5.0.7
5.0.12
1
folioci/edge-ncip:lateste760dbb81d1a
vertx-core@5.0.8
5.0.12
1
folioci/edge-oai-pmh:latesteedfcbc29792
vertx-core@5.0.5
5.0.12
1
folioci/edge-orders:latest1ef654ee9f23
vertx-core@5.0.11
5.0.12
1
folioci/edge-patron:latest682b852e056d
vertx-core@5.0.5
5.0.12
1
folioci/mod-authtoken:latest995a25a33133
vertx-core@4.5.13
4.5.27
1
folioci/mod-codex-mux:latestd4138abfd30d
vertx-core@4.3.4
no fix listed
1
folioci/mod-configuration:latestdd0cdc89670a
vertx-core@5.0.11
5.0.12
1
folioci/mod-copycat:latest1513fad2b799
vertx-core@5.0.10
5.0.12
1
folioci/mod-courses:latest68ca414f5596
vertx-core@5.0.6
5.0.12
1
folioci/mod-data-import-converter-storage:latest3028f333778f
vertx-core@4.3.4
no fix listed
1
folioci/mod-email:latest79ea8e2e7ebf
vertx-core@5.0.6
5.0.12
1
folioci/mod-erm-usage-harvester:latest2d6767933c59
vertx-core@5.0.10
5.0.12
1
folioci/mod-eusage-reports:latest15de67587091
vertx-core@5.0.8
5.0.12
1
folioci/mod-feesfines:latestfe3a7049f2fb
vertx-core@5.0.5
5.0.12
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.