StackRadar

GHSA-xpw8-rcwv-8f8p

High

Advisory

Published 10 Oct 2023In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
176
of 17,781 indexed, latest versions
Container images
214
deployed by those charts
Fix available
1 of 1
affected package

io.netty:netty-codec-http2 vulnerable to HTTP/2 Rapid Reset Attack

Carried by container images the latest versions of 176 of 17,781 indexed charts deploy, on 214 images.

Affected packageAffected versionsFixed inImages
netty-codec-http2maven4.1.12.Final, 4.1.19.Final, 4.1.22.Final, 4.1.24.Final+43 more4.1.100.Final214
OSV records
GHSA-xpw8-rcwv-8f8p

Charts affected

176 by stars
ChartLatestAffected imagesRadar Score
authentication-serviceredestroyder0.2.21 of 1See more

authentication-service redestroyder 0.2.2

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
redestroyder/authorization-service:0.0.1740364a619fd
netty-codec-http2@4.1.73.Final
4.1.100.Final

Open the chart page →

2,583
business-serviceredestroyder0.2.11 of 1See more

business-service redestroyder 0.2.1

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
redestroyder/business-service:0.0.1db03499a0726
netty-codec-http2@4.1.73.Final
4.1.100.Final

Open the chart page →

2,600
routr-connectroutr0.4.32 of 10See more

routr-connect routr 0.4.3

2 of the 10 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
fonoster/routr-edgeport:2.13.6d08a8a574a50
netty-codec-http2@4.1.79.Final
4.1.100.Final
fonoster/routr-requester:2.13.6e0c823506eb2
netty-codec-http2@4.1.79.Final
4.1.100.Final

Open the chart page →

11,021
nacossaber0.1.111 of 1See more

nacos saber 0.1.11

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
nacos/nacos-server:v2.1.0dcf04549c6d7
netty-codec-http2@4.1.42.Final
4.1.100.Final

Open the chart page →

3,978
fmtok8s-conference-chartsalaboy0.1.41 of 6See more

fmtok8s-conference-chart salaboy 0.1.4

1 of the 6 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
netty-codec-http2@4.1.77.Final
4.1.100.Final

Open the chart page →

16,101
fmtok8s-frontendsalaboy0.1.31 of 1See more

fmtok8s-frontend salaboy 0.1.3

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
netty-codec-http2@4.1.77.Final
4.1.100.Final

Open the chart page →

8,033
helm-chart-examplesalaboy0.1.01 of 1See more

helm-chart-example salaboy 0.1.0

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
salaboy/fmtok8s-monolith:v0.1.0f225568e6d03
netty-codec-http2@4.1.51.Final
4.1.100.Final

Open the chart page →

2,847
kafkasb-helm-charts0.3.01 of 2See more

kafka sb-helm-charts 0.3.0

1 of the 2 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
provectuslabs/kafka-ui:latest8f2ff02d64b0
netty-codec-http2@4.1.97.Final
4.1.100.Final

Open the chart page →

1,597
seldon-core-oauth-gatewayseldon0.3.11 of 2See more

seldon-core-oauth-gateway seldon 0.3.1

1 of the 2 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
seldonio/apife:0.3.1eea0d3f578ca
netty-codec-http2@4.1.12.Final
4.1.100.Final

Open the chart page →

8,098
shenyushenyu0.6.32 of 2See more

shenyu shenyu 0.6.3

2 of the 2 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.5.1e2be712fc4f4
netty-codec-http2@4.1.38.Final
4.1.100.Final
apache/shenyu-bootstrap:2.5.11bd5756f6273
netty-codec-http2@4.1.38.Final
4.1.100.Final

Open the chart page →

8,804
shenyushenyu-helm-chart-test2.4.272 of 2See more

shenyu shenyu-helm-chart-test 2.4.27

2 of the 2 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.4.2e8b7c4ddd069
netty-codec-http2@4.1.43.Final
4.1.100.Final
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
netty-codec-http2@4.1.38.Final
4.1.100.Final

Open the chart page →

12,513
simple-keycloaksikalabs0.1.01 of 1See more

simple-keycloak sikalabs 0.1.0

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.18830f76112b6
netty-codec-http2@4.1.82.Final
4.1.100.Final

Open the chart page →

6,443
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
netty-codec-http2@4.1.72.Final
4.1.100.Final

Open the chart page →

13,767
zipkin-gcpt3n1.0.01 of 1See more

zipkin-gcp t3n 1.0.0

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
openzipkin/zipkin-gcp:0.15.2b5d51d1144e2
netty-codec-http2@4.1.43.Final
4.1.100.Final

Open the chart page →

4,538
hadoop-deploymenttejaswita-hadoop-helmchart1.0.01 of 1See more

hadoop-deployment tejaswita-hadoop-helmchart 1.0.0

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
apache/hadoop:3af361b20bec0
netty-codec-http2@4.1.89.Final
4.1.100.Final

Open the chart page →

4,240
krokiteochenglim1.0.11 of 5See more

kroki teochenglim 1.0.1

1 of the 5 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
yuzutech/kroki:0.17.0192b7b27c857
netty-codec-http2@4.1.74.Final
4.1.100.Final

Open the chart page →

8,715
shenyutest-helm2.4.212 of 2See more

shenyu test-helm 2.4.21

2 of the 2 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.4.2e8b7c4ddd069
netty-codec-http2@4.1.43.Final
4.1.100.Final
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
netty-codec-http2@4.1.38.Final
4.1.100.Final

Open the chart page →

12,513
thingsboardthingsboardVerified publisher0.1.34 of 12See more

thingsboard thingsboard 0.1.3

4 of the 12 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
thingsboard/tb-coap-transport:3.4.1bd45a09d85d9
netty-codec-http2@4.1.75.Final
4.1.100.Final
thingsboard/tb-http-transport:3.4.1a06f53c5e2da
netty-codec-http2@4.1.75.Final
4.1.100.Final
thingsboard/tb-mqtt-transport:3.4.1030f316ce301
netty-codec-http2@4.1.75.Final
4.1.100.Final
thingsboard/tb-node:3.4.1645f43b688f7
netty-codec-http2@4.1.75.Final
4.1.100.Final

Open the chart page →

25,394
hermestoukVerified publisher0.6.01 of 3See more

hermes touk 0.6.0

1 of the 3 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
netty-codec-http2@4.1.49.Final
4.1.100.Final

Open the chart page →

12,455
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
netty-codec-http2@4.1.73.Final
4.1.100.Final

Open the chart page →

14,364
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
netty-codec-http2@4.1.73.Final
4.1.100.Final

Open the chart page →

28,605
apicurio-registry-sqlwitcom-gmbh0.1.01 of 1See more

apicurio-registry-sql witcom-gmbh 0.1.0

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-jpa:1.3.2.Final44eeddd3562c
netty-codec-http2@4.1.49.Final
4.1.100.Final

Open the chart page →

3,424
opendistro-eswitcom-gmbh1.13.31 of 3See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
netty-codec-http2@4.1.45.Final
4.1.100.Final

Open the chart page →

5,806
zahori-processzahoriVerified publisher1.0.11 of 1See more

zahori-process zahori 1.0.1

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
zahoriaut/zahori-process:0.1.13351f8a220ed7
netty-codec-http2@4.1.94.Final
4.1.100.Final

Open the chart page →

3,480
zahori-serverzahoriVerified publisher1.0.11 of 2See more

zahori-server zahori 1.0.1

1 of the 2 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
zahoriaut/zahori-server:0.1.17b2de13916f3e
netty-codec-http2@4.1.87.Final
4.1.100.Final

Open the chart page →

5,846
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
netty-codec-http2@4.1.82.Final
4.1.100.Final

Open the chart page →

6,016

Container images carrying it

214 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
apachepulsar/pulsar:2.8.2d538416d5afe
netty-codec-http2@4.1.51.Final
4.1.100.Final
1
apache/rocketmq-exporter:0.0.2c8fb51195444
netty-codec-http2@4.1.91.Final
4.1.100.Final
1
apache/shenyu-admin:2.5.1e2be712fc4f4
netty-codec-http2@4.1.38.Final
4.1.100.Final
1
apache/shenyu-bootstrap:2.5.11bd5756f6273
netty-codec-http2@4.1.38.Final
4.1.100.Final
1
apache/skywalking-oap-server:9.2.0133d35d2c263
netty-codec-http2@4.1.77.Final
4.1.100.Final
1
apache/skywalking-oap-server:8.1.0-es7641237e0299b
netty-codec-http2@4.1.42.Final
4.1.100.Final
1
apache/skywalking-oap-server:8.9.1b4ec8c18d079
netty-codec-http2@4.1.68.Final
4.1.100.Final
1
apache/skywalking-ui:9.2.0295f1dc87d98
netty-codec-http2@4.1.77.Final
4.1.100.Final
1
apache/skywalking-ui:8.9.180530f0308a5
netty-codec-http2@4.1.63.Final
4.1.100.Final
1
apicurio/apicurio-registry-jpa:1.3.2.Final44eeddd3562c
netty-codec-http2@4.1.49.Final
4.1.100.Final
1
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
netty-codec-http2@4.1.49.Final
4.1.100.Final
1
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
netty-codec-http2@4.1.86.Final
4.1.100.Final
1
apicurio/apicurio-studio-ui:0.2.62.Final349c845270c2
netty-codec-http2@4.1.86.Final
4.1.100.Final
1
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
netty-codec-http2@4.1.86.Final
4.1.100.Final
1
apimap/api:v1.8.11ae2b3ab00177
netty-codec-http2@4.1.82.Final
4.1.100.Final
1
arturisimo/planner:v1.0fff9de644941
netty-codec-http2@4.1.42.Final
4.1.100.Final
1
assistiot/cybersecurity-monitoring_id-elk:latestba1d85ec3739
netty-codec-http2@4.1.45.Final
4.1.100.Final
1
assistiot/identity-manager_kc:latest0df4b4fa899a
netty-codec-http2@4.1.76.Final
4.1.100.Final
1
assistiot/sdn_controller:2.4.0ea254b6d8a31
netty-codec-http2@4.1.35.Final
4.1.100.Final
1
atomix/atomix:3.1.127738ff4f5c63
netty-codec-http2@4.1.27.Final
4.1.100.Final
1
bitnamilegacy/elasticsearch:8.12.215d4647fd491
netty-codec-http2@4.1.94.Final
4.1.100.Final
1
bitnamilegacy/elasticsearch:8.12.1-debian-11-r29cfd2df1294d
netty-codec-http2@4.1.94.Final
4.1.100.Final
1
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
netty-codec-http2@4.1.86.Final
4.1.100.Final
1
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
netty-codec-http2@4.1.47.Final
4.1.100.Final
1
confluentinc/cp-enterprise-kafka:6.1.08f1544df1f48
netty-codec-http2@4.1.45.Final
4.1.100.Final
1
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
netty-codec-http2@4.1.47.Final
4.1.100.Final
1
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
netty-codec-http2@4.1.49.Final
4.1.100.Final
1
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
netty-codec-http2@4.1.49.Final
4.1.100.Final
1
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
netty-codec-http2@4.1.49.Final
4.1.100.Final
1
davidvmar/urjc-davidvmar-worker:1.0.10d221e834a21
netty-codec-http2@4.1.42.Final
4.1.100.Final
1
deltaio/delta-sharing-server:0.2.08b75118187c5
netty-codec-http2@4.1.63.Final
4.1.100.Final
1
dremio/dremio-oss:24.1.080ed2e3b7c43
netty-codec-http2@4.1.89.Final
4.1.100.Final
1
drpcorg/dshackle:0.54.08858fae1859d
netty-codec-http2@4.1.97.Final
4.1.100.Final
1
elastictranscoder/media-storage:f6d861a026208b8c2359
netty-codec-http2@4.1.65.Final
4.1.100.Final
1
emeraldpay/dshackle:0.14.0126f0ae0b388
netty-codec-http2@4.1.70.Final
4.1.100.Final
1
emeraldpay/dshackle:0.12ac2a4bc66ab6
netty-codec-http2@4.1.70.Final
4.1.100.Final
1
expediagroup/pitchfork:1.314f2cf61e7de9
netty-codec-http2@4.1.68.Final
4.1.100.Final
1
fiware/mintaka:0.7.092a3c5cf43c0
netty-codec-http2@4.1.81.Final
4.1.100.Final
1
fiware/mintaka:latestefc6793388cc
netty-codec-http2@4.1.81.Final
4.1.100.Final
1
fjvela/urjc-fjvela-worker:1.0.170cebf67bd66
netty-codec-http2@4.1.42.Final
4.1.100.Final
1
folioci/mod-aes:latest6d67e9564270
netty-codec-http2@4.1.60.Final
4.1.100.Final
1
folioci/mod-codex-ekb:latest235a3fa4adc9
netty-codec-http2@4.1.78.Final
4.1.100.Final
1
folioci/mod-codex-inventory:latest6d53ed758fd1
netty-codec-http2@4.1.65.Final
4.1.100.Final
1
folioci/mod-codex-mux:latestd4138abfd30d
netty-codec-http2@4.1.82.Final
4.1.100.Final
1
folioci/mod-data-import-converter-storage:latest3028f333778f
netty-codec-http2@4.1.82.Final
4.1.100.Final
1
folioci/mod-marccat:latest1b57d690d568
netty-codec-http2@4.1.22.Final
4.1.100.Final
1
fonoster/routr:1.0.0-rc52ca65af17cbc
netty-codec-http2@4.1.32.Final
4.1.100.Final
1
fonoster/routr-edgeport:2.13.6d08a8a574a50
netty-codec-http2@4.1.79.Final
4.1.100.Final
1
fonoster/routr-requester:2.13.6e0c823506eb2
netty-codec-http2@4.1.79.Final
4.1.100.Final
1
franrobles8/planner:v3.099985392d63c
netty-codec-http2@4.1.54.Final
4.1.100.Final
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.