StackRadar

GHSA-xpw8-rcwv-8f8p

High

Advisory

Published 10 Oct 2023In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
176
of 17,781 indexed, latest versions
Container images
214
deployed by those charts
Fix available
1 of 1
affected package

io.netty:netty-codec-http2 vulnerable to HTTP/2 Rapid Reset Attack

Carried by container images the latest versions of 176 of 17,781 indexed charts deploy, on 214 images.

Affected packageAffected versionsFixed inImages
netty-codec-http2maven4.1.12.Final, 4.1.19.Final, 4.1.22.Final, 4.1.24.Final+43 more4.1.100.Final214
OSV records
GHSA-xpw8-rcwv-8f8p

Charts affected

176 by stars
ChartLatestAffected imagesRadar Score
authentication-serviceredestroyder0.2.21 of 1See more

authentication-service redestroyder 0.2.2

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
redestroyder/authorization-service:0.0.1740364a619fd
netty-codec-http2@4.1.73.Final
4.1.100.Final

Open the chart page →

2,583
business-serviceredestroyder0.2.11 of 1See more

business-service redestroyder 0.2.1

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
redestroyder/business-service:0.0.1db03499a0726
netty-codec-http2@4.1.73.Final
4.1.100.Final

Open the chart page →

2,600
routr-connectroutr0.4.32 of 10See more

routr-connect routr 0.4.3

2 of the 10 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
fonoster/routr-edgeport:2.13.6d08a8a574a50
netty-codec-http2@4.1.79.Final
4.1.100.Final
fonoster/routr-requester:2.13.6e0c823506eb2
netty-codec-http2@4.1.79.Final
4.1.100.Final

Open the chart page →

11,021
nacossaber0.1.111 of 1See more

nacos saber 0.1.11

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
nacos/nacos-server:v2.1.0dcf04549c6d7
netty-codec-http2@4.1.42.Final
4.1.100.Final

Open the chart page →

3,978
fmtok8s-conference-chartsalaboy0.1.41 of 6See more

fmtok8s-conference-chart salaboy 0.1.4

1 of the 6 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
netty-codec-http2@4.1.77.Final
4.1.100.Final

Open the chart page →

16,101
fmtok8s-frontendsalaboy0.1.31 of 1See more

fmtok8s-frontend salaboy 0.1.3

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
netty-codec-http2@4.1.77.Final
4.1.100.Final

Open the chart page →

8,033
helm-chart-examplesalaboy0.1.01 of 1See more

helm-chart-example salaboy 0.1.0

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
salaboy/fmtok8s-monolith:v0.1.0f225568e6d03
netty-codec-http2@4.1.51.Final
4.1.100.Final

Open the chart page →

2,847
kafkasb-helm-charts0.3.01 of 2See more

kafka sb-helm-charts 0.3.0

1 of the 2 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
provectuslabs/kafka-ui:latest8f2ff02d64b0
netty-codec-http2@4.1.97.Final
4.1.100.Final

Open the chart page →

1,597
seldon-core-oauth-gatewayseldon0.3.11 of 2See more

seldon-core-oauth-gateway seldon 0.3.1

1 of the 2 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
seldonio/apife:0.3.1eea0d3f578ca
netty-codec-http2@4.1.12.Final
4.1.100.Final

Open the chart page →

8,098
shenyushenyu0.6.32 of 2See more

shenyu shenyu 0.6.3

2 of the 2 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.5.1e2be712fc4f4
netty-codec-http2@4.1.38.Final
4.1.100.Final
apache/shenyu-bootstrap:2.5.11bd5756f6273
netty-codec-http2@4.1.38.Final
4.1.100.Final

Open the chart page →

8,804
shenyushenyu-helm-chart-test2.4.272 of 2See more

shenyu shenyu-helm-chart-test 2.4.27

2 of the 2 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.4.2e8b7c4ddd069
netty-codec-http2@4.1.43.Final
4.1.100.Final
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
netty-codec-http2@4.1.38.Final
4.1.100.Final

Open the chart page →

12,513
simple-keycloaksikalabs0.1.01 of 1See more

simple-keycloak sikalabs 0.1.0

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.18830f76112b6
netty-codec-http2@4.1.82.Final
4.1.100.Final

Open the chart page →

6,443
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
netty-codec-http2@4.1.72.Final
4.1.100.Final

Open the chart page →

13,767
zipkin-gcpt3n1.0.01 of 1See more

zipkin-gcp t3n 1.0.0

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
openzipkin/zipkin-gcp:0.15.2b5d51d1144e2
netty-codec-http2@4.1.43.Final
4.1.100.Final

Open the chart page →

4,538
hadoop-deploymenttejaswita-hadoop-helmchart1.0.01 of 1See more

hadoop-deployment tejaswita-hadoop-helmchart 1.0.0

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
apache/hadoop:3af361b20bec0
netty-codec-http2@4.1.89.Final
4.1.100.Final

Open the chart page →

4,240
krokiteochenglim1.0.11 of 5See more

kroki teochenglim 1.0.1

1 of the 5 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
yuzutech/kroki:0.17.0192b7b27c857
netty-codec-http2@4.1.74.Final
4.1.100.Final

Open the chart page →

8,715
shenyutest-helm2.4.212 of 2See more

shenyu test-helm 2.4.21

2 of the 2 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.4.2e8b7c4ddd069
netty-codec-http2@4.1.43.Final
4.1.100.Final
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
netty-codec-http2@4.1.38.Final
4.1.100.Final

Open the chart page →

12,513
thingsboardthingsboardVerified publisher0.1.34 of 12See more

thingsboard thingsboard 0.1.3

4 of the 12 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
thingsboard/tb-coap-transport:3.4.1bd45a09d85d9
netty-codec-http2@4.1.75.Final
4.1.100.Final
thingsboard/tb-http-transport:3.4.1a06f53c5e2da
netty-codec-http2@4.1.75.Final
4.1.100.Final
thingsboard/tb-mqtt-transport:3.4.1030f316ce301
netty-codec-http2@4.1.75.Final
4.1.100.Final
thingsboard/tb-node:3.4.1645f43b688f7
netty-codec-http2@4.1.75.Final
4.1.100.Final

Open the chart page →

25,394
hermestoukVerified publisher0.6.01 of 3See more

hermes touk 0.6.0

1 of the 3 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
netty-codec-http2@4.1.49.Final
4.1.100.Final

Open the chart page →

12,455
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
netty-codec-http2@4.1.73.Final
4.1.100.Final

Open the chart page →

14,364
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
netty-codec-http2@4.1.73.Final
4.1.100.Final

Open the chart page →

28,605
apicurio-registry-sqlwitcom-gmbh0.1.01 of 1See more

apicurio-registry-sql witcom-gmbh 0.1.0

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-jpa:1.3.2.Final44eeddd3562c
netty-codec-http2@4.1.49.Final
4.1.100.Final

Open the chart page →

3,424
opendistro-eswitcom-gmbh1.13.31 of 3See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
netty-codec-http2@4.1.45.Final
4.1.100.Final

Open the chart page →

5,806
zahori-processzahoriVerified publisher1.0.11 of 1See more

zahori-process zahori 1.0.1

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
zahoriaut/zahori-process:0.1.13351f8a220ed7
netty-codec-http2@4.1.94.Final
4.1.100.Final

Open the chart page →

3,480
zahori-serverzahoriVerified publisher1.0.11 of 2See more

zahori-server zahori 1.0.1

1 of the 2 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
zahoriaut/zahori-server:0.1.17b2de13916f3e
netty-codec-http2@4.1.87.Final
4.1.100.Final

Open the chart page →

5,846
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
netty-codec-http2@4.1.82.Final
4.1.100.Final

Open the chart page →

6,016

Container images carrying it

214 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
netty-codec-http2@4.1.51.Final
4.1.100.Final
1
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
netty-codec-http2@4.1.51.Final
4.1.100.Final
1
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
netty-codec-http2@4.1.51.Final
4.1.100.Final
1
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
netty-codec-http2@4.1.51.Final
4.1.100.Final
1
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
netty-codec-http2@4.1.51.Final
4.1.100.Final
1
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
netty-codec-http2@4.1.51.Final
4.1.100.Final
1
gurolakman/smsf-configuration:1.0.49abb3882bcbd
netty-codec-http2@4.1.75.Final
4.1.100.Final
1
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
netty-codec-http2@4.1.75.Final
4.1.100.Final
1
gurolakman/smsf-momt:1.0.4ce23b20a8a17
netty-codec-http2@4.1.75.Final
4.1.100.Final
1
gurolakman/smsf-registration:1.0.4b22e746edd5d
netty-codec-http2@4.1.75.Final
4.1.100.Final
1
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
netty-codec-http2@4.1.75.Final
4.1.100.Final
1
gurolakman/ussigw-core:1.0.48739565c3ea2
netty-codec-http2@4.1.75.Final
4.1.100.Final
1
hazelcast/hazelcast:5.3.18fe26efde8e1
netty-codec-http2@4.1.91.Final
4.1.100.Final
1
hazelcast/hazelcast-jet:4.5.3a825ecbe9fda
netty-codec-http2@4.1.51.Final
4.1.100.Final
1
hivemq/hivemq-operator:4.7.10241d6a8e1963
netty-codec-http2@4.1.77.Final
4.1.100.Final
1
huertaslopez/i.huertas.2021-v.martinp.2021-planner:2.0.0e2c18bd65472
netty-codec-http2@4.1.42.Final
4.1.100.Final
1
hugohg34/planner:0.0.2171f61e8d7e2
netty-codec-http2@4.1.42.Final
4.1.100.Final
1
hugohg34/toposervice:0.0.2812a03b3f274
netty-codec-http2@4.1.70.Final
4.1.100.Final
1
krontechnology/aapm-agent:1.1.07feef7d2ab42
netty-codec-http2@4.1.54.Final
4.1.100.Final
1
lavandadelpatio/torznab-atomohd:latest214eaef5444c
netty-codec-http2@4.1.90.Final
4.1.100.Final
1
library/flink:1.11.2-scala_2.121fe4fb22a2a5
netty-codec-http2@4.1.34.Final
4.1.100.Final
1
localstack/localstack:3.19d278167f2b7
netty-codec-http2@4.1.86.Final
4.1.100.Final
1
lourdesmorente/new-planner:1.0.0608745878cdb
netty-codec-http2@4.1.42.Final
4.1.100.Final
1
magento/magento-cloud-docker-opensearch:2.5-1.4.059fb6f0f1461
netty-codec-http2@4.1.86.Final
4.1.100.Final
1
maksimkavalenka/microservices-learning.resource-processor:latest64a25afb8748
netty-codec-http2@4.1.97.Final
4.1.100.Final
1
maksimkavalenka/microservices-learning.resource-service:latest13ad9bb170a0
netty-codec-http2@4.1.97.Final
4.1.100.Final
1
maksimkavalenka/microservices-learning.song-service:latest2bcdac368b07
netty-codec-http2@4.1.97.Final
4.1.100.Final
1
molynx/planner:v1441c9f52f092
netty-codec-http2@4.1.70.Final
4.1.100.Final
1
nacos/nacos-server:1.4.1fe6e5688cdf3
netty-codec-http2@4.1.38.Final
4.1.100.Final
1
novumrgi/glowroot-central:0.14.0-beta.38c54790675b1
netty-codec-http2@4.1.72.Final
4.1.100.Final
1
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
netty-codec-http2@4.1.19.Final
4.1.100.Final
1
onosproject/onos:2.2.144914a8d4b3f
netty-codec-http2@4.1.35.Final
4.1.100.Final
1
openhab/openhab:3.2.0d0aa4af452c1
netty-codec-http2@4.1.68.Final
4.1.100.Final
1
opensearchproject/opensearch:2.10.0c8f3ebd2a934
netty-codec-http2@4.1.97.Final
4.1.100.Final
1
openwhisk/invoker:1.0.0f5831ec85525
netty-codec-http2@4.1.45.Final
4.1.100.Final
1
openzipkin/zipkin:2.21.060c3970df479
netty-codec-http2@4.1.48.Final
4.1.100.Final
1
openzipkin/zipkin-gcp:0.15.2b5d51d1144e2
netty-codec-http2@4.1.43.Final
4.1.100.Final
1
oscarsotosanchez/planner:v1.0730c00a099b8
netty-codec-http2@4.1.42.Final
4.1.100.Final
1
pcarrascoponce/planner:v1.0981fc482442c
netty-codec-http2@4.1.70.Final
4.1.100.Final
1
platform9community/admin-server:latestde3fa9b70df1
netty-codec-http2@4.1.50.Final
4.1.100.Final
1
platform9community/api-gateway:latest40a4970de568
netty-codec-http2@4.1.50.Final
4.1.100.Final
1
redestroyder/authorization-service:0.0.1740364a619fd
netty-codec-http2@4.1.73.Final
4.1.100.Final
1
redestroyder/business-service:0.0.1db03499a0726
netty-codec-http2@4.1.73.Final
4.1.100.Final
1
salaboy/fmtok8s-monolith:v0.1.0f225568e6d03
netty-codec-http2@4.1.51.Final
4.1.100.Final
1
scorpiobroker/scorpio:scorpio-aaio_2.1.0db55012043df
netty-codec-http2@4.1.70.Final
4.1.100.Final
1
seataio/seata-server:1.5.1ee1ed55f4144
netty-codec-http2@4.1.70.Final
4.1.100.Final
1
seldonio/apife:0.2.7ba81b17f00eb
netty-codec-http2@4.1.12.Final
4.1.100.Final
1
seldonio/apife:0.3.1eea0d3f578ca
netty-codec-http2@4.1.12.Final
4.1.100.Final
1
slagattollas/planner-practica:latestcecd95e31486
netty-codec-http2@4.1.42.Final
4.1.100.Final
1
slagattollas/toposervice-practica:latestdc63973dae0d
netty-codec-http2@4.1.54.Final
4.1.100.Final
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.