CVE-2026-6860
MediumAdvisory
Published 9 May 2026In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.3
- base score, highest
- EPSS
- 0.002
- 15th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 107
- of 17,781 indexed, latest versions
- Container images
- 100
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Vert.x has a DoS via unbounded server-side SNI SslContext cache growth
Carried by container images the latest versions of 107 of 17,781 indexed charts deploy, on 100 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| vertx-coremaven | 4.3.4, 4.3.7, 4.3.8, 4.4.4+24 more | 4.5.27, 5.0.12 | 100 |
- OSV records
- GHSA-3g76-f9xq-8vp6
Charts affected
107 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| simple-keycloaksikalabs | 0.1.0 | 1 of 1See more | 6,443 |
| strimzi-user-operatorspartan | 0.4.0 | 1 of 1See more | 1,836 |
| teku-validatorstakewise | 4.3.2 | 1 of 2See more | 3,153 |
| wonder-mesh-netstrrl-helm | 2026.629.0 | 1 of 3See more | 5,063 |
| opencloudunxwaresVerified publisher | 0.2.3 | 1 of 13See more | 45,239 |
| keycloakwiremindVerified publisher | 25.3.1 | 1 of 2See more | 7,624 |
| keycloakxzaks | 2.2.0 | 1 of 1See more | 6,016 |
Container images carrying it
100 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| codeurjc/ | 310bea5b1ee7 | vertx-core | no fix listed | 8 |
| mastercloudapps/ | f3d24dfe2686 | vertx-core | no fix listed | 4 |
| quay.io/ | 52f376e64b9b | vertx-core | no fix listed | 4 |
| airbyte/ | 119be7bfb719 | vertx-core | 4.5.27 | 2 |
| apache/ | 0116fb802786 | vertx-core | 4.5.27 | 2 |
| ghcr.io/ | 896fc7b18b1b | vertx-core | 4.5.27 | 2 |
| quay.io/ | 044a457e0498 | vertx-core | 4.5.27 | 2 |
| quay.io/ | 054ef67eb7da | vertx-core | no fix listed | 2 |
| quay.io/ | 02f6f143fc6d | vertx-core | 4.5.27 | 2 |
| quay.io/ | ac434a48ac2b | vertx-core | 4.5.27 | 2 |
| airbyte/ | f71cf4e185d5 | vertx-core | 4.5.27 | 1 |
| airbyte/ | d97b67a1346d | vertx-core | 4.5.27 | 1 |
| airbyte/ | 70e125498a1c | vertx-core | 4.5.27 | 1 |
| airbyte/ | 8060b88b29c8 | vertx-core | 4.5.27 | 1 |
| airbyte/ | 42093cff86e9 | vertx-core | 4.5.27 | 1 |
| aktosecurity/ | 15ebb75b94dc | vertx-core | 4.5.27 | 1 |
| aktosecurity/ | a6c1b933517f | vertx-core | 4.5.27 | 1 |
| apachepulsar/ | 16f9fdab3fa6 | vertx-core | no fix listed | 1 |
| apachepulsar/ | 9c9947de139d | vertx-core | 4.5.27 | 1 |
| apicurio/ | 302d202ed149 | vertx-core | no fix listed | 1 |
| apicurio/ | 349c845270c2 | vertx-core | no fix listed | 1 |
| apicurio/ | 27a91978a388 | vertx-core | no fix listed | 1 |
| athou/ | 5e388351df1a | vertx-core | 4.5.27 | 1 |
| bitnamilegacy/ | cb04e49e6eb1 | vertx-core | no fix listed | 1 |
| bitnamilegacy/ | cc599cbd15ff | vertx-core | 4.5.27 | 1 |
| bitnamilegacy/ | da3df0976a9f | vertx-core | 4.5.27 | 1 |
| confluentinc/ | 8ec46c27982f | vertx-core | no fix listed | 1 |
| consensys/ | 3a4f5761ae1c | vertx-core | 4.5.27 | 1 |
| consensys/ | bf6ecd2ea716 | vertx-core | 4.5.27 | 1 |
| consensys/ | f146a51a1ba3 | vertx-core | 4.5.27 | 1 |
| epam/ | 0ac5be78d7c2 | vertx-core | 4.5.27 | 1 |
| esperotech/ | 24d2d692d948 | vertx-core | 4.5.27 | 1 |
| factorhouse/ | 14728f9fd80f | vertx-core | 4.5.27 | 1 |
| factorhouse/ | f9ce9b16b3a7 | vertx-core | 4.5.27 | 1 |
| factorhouse/ | 66b08cc9e943 | vertx-core | 4.5.27 | 1 |
| folioci/ | b4863d135524 | vertx-core | 5.0.12 | 1 |
| folioci/ | e760dbb81d1a | vertx-core | 5.0.12 | 1 |
| folioci/ | eedfcbc29792 | vertx-core | 5.0.12 | 1 |
| folioci/ | 1ef654ee9f23 | vertx-core | 5.0.12 | 1 |
| folioci/ | 682b852e056d | vertx-core | 5.0.12 | 1 |
| folioci/ | 995a25a33133 | vertx-core | 4.5.27 | 1 |
| folioci/ | d4138abfd30d | vertx-core | no fix listed | 1 |
| folioci/ | dd0cdc89670a | vertx-core | 5.0.12 | 1 |
| folioci/ | 1513fad2b799 | vertx-core | 5.0.12 | 1 |
| folioci/ | 68ca414f5596 | vertx-core | 5.0.12 | 1 |
| folioci/ | 3028f333778f | vertx-core | no fix listed | 1 |
| folioci/ | 79ea8e2e7ebf | vertx-core | 5.0.12 | 1 |
| folioci/ | 2d6767933c59 | vertx-core | 5.0.12 | 1 |
| folioci/ | 15de67587091 | vertx-core | 5.0.12 | 1 |
| folioci/ | fe3a7049f2fb | vertx-core | 5.0.12 | 1 |