StackRadar

GHSA-xpw8-rcwv-8f8p

High

Advisory

Published 10 Oct 2023In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
176
of 17,781 indexed, latest versions
Container images
214
deployed by those charts
Fix available
1 of 1
affected package

io.netty:netty-codec-http2 vulnerable to HTTP/2 Rapid Reset Attack

Carried by container images the latest versions of 176 of 17,781 indexed charts deploy, on 214 images.

Affected packageAffected versionsFixed inImages
netty-codec-http2maven4.1.12.Final, 4.1.19.Final, 4.1.22.Final, 4.1.24.Final+43 more4.1.100.Final214
OSV records
GHSA-xpw8-rcwv-8f8p

Charts affected

176 by stars
ChartLatestAffected imagesRadar Score
authentication-serviceredestroyder0.2.21 of 1See more

authentication-service redestroyder 0.2.2

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
redestroyder/authorization-service:0.0.1740364a619fd
netty-codec-http2@4.1.73.Final
4.1.100.Final

Open the chart page →

2,583
business-serviceredestroyder0.2.11 of 1See more

business-service redestroyder 0.2.1

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
redestroyder/business-service:0.0.1db03499a0726
netty-codec-http2@4.1.73.Final
4.1.100.Final

Open the chart page →

2,600
routr-connectroutr0.4.32 of 10See more

routr-connect routr 0.4.3

2 of the 10 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
fonoster/routr-edgeport:2.13.6d08a8a574a50
netty-codec-http2@4.1.79.Final
4.1.100.Final
fonoster/routr-requester:2.13.6e0c823506eb2
netty-codec-http2@4.1.79.Final
4.1.100.Final

Open the chart page →

11,021
nacossaber0.1.111 of 1See more

nacos saber 0.1.11

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
nacos/nacos-server:v2.1.0dcf04549c6d7
netty-codec-http2@4.1.42.Final
4.1.100.Final

Open the chart page →

3,978
fmtok8s-conference-chartsalaboy0.1.41 of 6See more

fmtok8s-conference-chart salaboy 0.1.4

1 of the 6 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
netty-codec-http2@4.1.77.Final
4.1.100.Final

Open the chart page →

16,101
fmtok8s-frontendsalaboy0.1.31 of 1See more

fmtok8s-frontend salaboy 0.1.3

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
netty-codec-http2@4.1.77.Final
4.1.100.Final

Open the chart page →

8,033
helm-chart-examplesalaboy0.1.01 of 1See more

helm-chart-example salaboy 0.1.0

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
salaboy/fmtok8s-monolith:v0.1.0f225568e6d03
netty-codec-http2@4.1.51.Final
4.1.100.Final

Open the chart page →

2,847
kafkasb-helm-charts0.3.01 of 2See more

kafka sb-helm-charts 0.3.0

1 of the 2 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
provectuslabs/kafka-ui:latest8f2ff02d64b0
netty-codec-http2@4.1.97.Final
4.1.100.Final

Open the chart page →

1,597
seldon-core-oauth-gatewayseldon0.3.11 of 2See more

seldon-core-oauth-gateway seldon 0.3.1

1 of the 2 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
seldonio/apife:0.3.1eea0d3f578ca
netty-codec-http2@4.1.12.Final
4.1.100.Final

Open the chart page →

8,098
shenyushenyu0.6.32 of 2See more

shenyu shenyu 0.6.3

2 of the 2 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.5.1e2be712fc4f4
netty-codec-http2@4.1.38.Final
4.1.100.Final
apache/shenyu-bootstrap:2.5.11bd5756f6273
netty-codec-http2@4.1.38.Final
4.1.100.Final

Open the chart page →

8,804
shenyushenyu-helm-chart-test2.4.272 of 2See more

shenyu shenyu-helm-chart-test 2.4.27

2 of the 2 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.4.2e8b7c4ddd069
netty-codec-http2@4.1.43.Final
4.1.100.Final
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
netty-codec-http2@4.1.38.Final
4.1.100.Final

Open the chart page →

12,513
simple-keycloaksikalabs0.1.01 of 1See more

simple-keycloak sikalabs 0.1.0

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.18830f76112b6
netty-codec-http2@4.1.82.Final
4.1.100.Final

Open the chart page →

6,443
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
netty-codec-http2@4.1.72.Final
4.1.100.Final

Open the chart page →

13,767
zipkin-gcpt3n1.0.01 of 1See more

zipkin-gcp t3n 1.0.0

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
openzipkin/zipkin-gcp:0.15.2b5d51d1144e2
netty-codec-http2@4.1.43.Final
4.1.100.Final

Open the chart page →

4,538
hadoop-deploymenttejaswita-hadoop-helmchart1.0.01 of 1See more

hadoop-deployment tejaswita-hadoop-helmchart 1.0.0

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
apache/hadoop:3af361b20bec0
netty-codec-http2@4.1.89.Final
4.1.100.Final

Open the chart page →

4,240
krokiteochenglim1.0.11 of 5See more

kroki teochenglim 1.0.1

1 of the 5 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
yuzutech/kroki:0.17.0192b7b27c857
netty-codec-http2@4.1.74.Final
4.1.100.Final

Open the chart page →

8,715
shenyutest-helm2.4.212 of 2See more

shenyu test-helm 2.4.21

2 of the 2 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.4.2e8b7c4ddd069
netty-codec-http2@4.1.43.Final
4.1.100.Final
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
netty-codec-http2@4.1.38.Final
4.1.100.Final

Open the chart page →

12,513
thingsboardthingsboardVerified publisher0.1.34 of 12See more

thingsboard thingsboard 0.1.3

4 of the 12 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
thingsboard/tb-coap-transport:3.4.1bd45a09d85d9
netty-codec-http2@4.1.75.Final
4.1.100.Final
thingsboard/tb-http-transport:3.4.1a06f53c5e2da
netty-codec-http2@4.1.75.Final
4.1.100.Final
thingsboard/tb-mqtt-transport:3.4.1030f316ce301
netty-codec-http2@4.1.75.Final
4.1.100.Final
thingsboard/tb-node:3.4.1645f43b688f7
netty-codec-http2@4.1.75.Final
4.1.100.Final

Open the chart page →

25,394
hermestoukVerified publisher0.6.01 of 3See more

hermes touk 0.6.0

1 of the 3 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
netty-codec-http2@4.1.49.Final
4.1.100.Final

Open the chart page →

12,455
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
netty-codec-http2@4.1.73.Final
4.1.100.Final

Open the chart page →

14,364
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
netty-codec-http2@4.1.73.Final
4.1.100.Final

Open the chart page →

28,605
apicurio-registry-sqlwitcom-gmbh0.1.01 of 1See more

apicurio-registry-sql witcom-gmbh 0.1.0

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-jpa:1.3.2.Final44eeddd3562c
netty-codec-http2@4.1.49.Final
4.1.100.Final

Open the chart page →

3,424
opendistro-eswitcom-gmbh1.13.31 of 3See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
netty-codec-http2@4.1.45.Final
4.1.100.Final

Open the chart page →

5,806
zahori-processzahoriVerified publisher1.0.11 of 1See more

zahori-process zahori 1.0.1

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
zahoriaut/zahori-process:0.1.13351f8a220ed7
netty-codec-http2@4.1.94.Final
4.1.100.Final

Open the chart page →

3,480
zahori-serverzahoriVerified publisher1.0.11 of 2See more

zahori-server zahori 1.0.1

1 of the 2 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
zahoriaut/zahori-server:0.1.17b2de13916f3e
netty-codec-http2@4.1.87.Final
4.1.100.Final

Open the chart page →

5,846
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
netty-codec-http2@4.1.82.Final
4.1.100.Final

Open the chart page →

6,016

Container images carrying it

214 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
snowplow/scala-stream-collector-pubsub:2.2.041d318841516
netty-codec-http2@4.1.48.Final
4.1.100.Final
1
thingsboard/tb-coap-transport:3.4.1bd45a09d85d9
netty-codec-http2@4.1.75.Final
4.1.100.Final
1
thingsboard/tb-http-transport:3.4.1a06f53c5e2da
netty-codec-http2@4.1.75.Final
4.1.100.Final
1
thingsboard/tb-mqtt-transport:3.4.1030f316ce301
netty-codec-http2@4.1.75.Final
4.1.100.Final
1
thingsboard/tb-node:3.4.1645f43b688f7
netty-codec-http2@4.1.75.Final
4.1.100.Final
1
thingsboard/tb-node:3.6.0f40a542832c4
netty-codec-http2@4.1.91.Final
4.1.100.Final
1
thmmniii/fbs-core:v1.27.15438517d9fc2
netty-codec-http2@4.1.92.Final
4.1.100.Final
1
thmmniii/fbs-runner:v1.27.186105349c1a3
netty-codec-http2@4.1.49.Final
4.1.100.Final
1
torrespro/mca-worker:2.0.06d3bd305a1ba
netty-codec-http2@4.1.42.Final
4.1.100.Final
1
trinodb/trino:45038c6f24ab1a4
netty-codec-http2@4.1.87.Final
4.1.100.Final
1
trinodb/trino:405ee80ab5eeab2
netty-codec-http2@4.1.72.Final
4.1.100.Final
1
viniciusfcf/gitops-quarkus-app-jvm:latestbba8ee1b5cd5
netty-codec-http2@4.1.79.Final
4.1.100.Final
1
vitalii1992/api-gateway-service:latestaabe6ac39356
netty-codec-http2@4.1.92.Final
4.1.100.Final
1
vlebediantsev/logic-ms:latestdf8bf38c535b
netty-codec-http2@4.1.78.Final
4.1.100.Final
1
voltha/voltha-onos:5.1.8e038acb950d3
netty-codec-http2@4.1.35.Final
4.1.100.Final
1
vrijbrp/haal-centraal-brp-bevragen:develop5c770c2ae48c
netty-codec-http2@4.1.91.Final
4.1.100.Final
1
wavefronthq/proxy:9.2d1064d28f6eb
netty-codec-http2@4.1.48.Final
4.1.100.Final
1
xeotek/kadeck:4.2.94c6b04d9ce55
netty-codec-http2@4.1.70.Final
4.1.100.Final
1
yuzutech/kroki:0.17.0192b7b27c857
netty-codec-http2@4.1.74.Final
4.1.100.Final
1
zahoriaut/zahori-process:0.1.13351f8a220ed7
netty-codec-http2@4.1.94.Final
4.1.100.Final
1
zahoriaut/zahori-server:0.1.17b2de13916f3e
netty-codec-http2@4.1.87.Final
4.1.100.Final
1
zbalogh/reservation-api-server:1.0.97c247e399a1f
netty-codec-http2@4.1.45.Final
4.1.100.Final
1
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
netty-codec-http2@4.1.45.Final
4.1.100.Final
1
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
netty-codec-http2@4.1.94.Final
4.1.100.Final
1
ghcr.io/curium-rocks/mitre-siphon:main503c00321502
netty-codec-http2@4.1.92.Final
4.1.100.Final
1
ghcr.io/fleeksoft/hbase/hbase-base:2.4.13.2c144bdd688d7
netty-codec-http2@4.1.78.Final
4.1.100.Final
1
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
netty-codec-http2@4.1.67.Final
4.1.100.Final
1
ghcr.io/komputing/fauceth:release4ab8fa4143b4
netty-codec-http2@4.1.69.Final
4.1.100.Final
1
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
netty-codec-http2@4.1.96.Final
4.1.100.Final
1
ghcr.io/kvaps/linstor-controller:v1.14.000ce11c31087
netty-codec-http2@4.1.51.Final
4.1.100.Final
1
ghcr.io/kvaps/linstor-satellite:v1.14.0a573fb9bc809
netty-codec-http2@4.1.51.Final
4.1.100.Final
1
ghcr.io/openccu/openccu:3.89.8.20260719b2de2ff6e8e0
netty-codec-http2@4.1.67.Final
4.1.100.Final
1
ghcr.io/punchplatform/punchline-java:8.1.1d46ce7b96482
netty-codec-http2@4.1.82.Final
4.1.100.Final
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
netty-codec-http2@4.1.86.Final
4.1.100.Final
1
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
netty-codec-http2@4.1.89.Final
4.1.100.Final
1
quay.io/apicurio/apicurio-registry-kube-sync:1.0.170ef31840269
netty-codec-http2@4.1.68.Final
4.1.100.Final
1
quay.io/evryfs/spring-boot-admin:2.7.1060950ef63764
netty-codec-http2@4.1.86.Final
4.1.100.Final
1
quay.io/fiware/apollo:0.0.1055330b1b60c1
netty-codec-http2@4.1.77.Final
4.1.100.Final
1
quay.io/fiware/canis-major:1.5.15bb40472e4ff5
netty-codec-http2@4.1.73.Final
4.1.100.Final
1
quay.io/fiware/endpoint-configuration-service:0.4.30dc38a87b844
netty-codec-http2@4.1.69.Final
4.1.100.Final
1
quay.io/fiware/tmforum-account:1.18.06b25aac03414
netty-codec-http2@4.1.91.Final
4.1.100.Final
1
quay.io/fiware/tmforum-agreement:1.18.081e7025dc16d
netty-codec-http2@4.1.91.Final
4.1.100.Final
1
quay.io/fiware/tmforum-customer-bill-management:1.18.0dee901f1f75d
netty-codec-http2@4.1.91.Final
4.1.100.Final
1
quay.io/fiware/tmforum-customer-management:1.18.0d3519cebecd0
netty-codec-http2@4.1.91.Final
4.1.100.Final
1
quay.io/fiware/tmforum-party-catalog:1.18.07d6969a7393a
netty-codec-http2@4.1.91.Final
4.1.100.Final
1
quay.io/fiware/tmforum-party-role:1.18.052db89f17863
netty-codec-http2@4.1.91.Final
4.1.100.Final
1
quay.io/fiware/tmforum-product-catalog:1.18.0e409338726da
netty-codec-http2@4.1.91.Final
4.1.100.Final
1
quay.io/fiware/tmforum-product-inventory:1.18.03a5d6dd30f1d
netty-codec-http2@4.1.91.Final
4.1.100.Final
1
quay.io/fiware/tmforum-product-ordering-management:1.18.042c81c291f6f
netty-codec-http2@4.1.91.Final
4.1.100.Final
1
quay.io/fiware/tmforum-quote:1.18.0d9ca3a334352
netty-codec-http2@4.1.91.Final
4.1.100.Final
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.