StackRadar

GHSA-xpw8-rcwv-8f8p

High

Advisory

Published 10 Oct 2023In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
176
of 17,781 indexed, latest versions
Container images
214
deployed by those charts
Fix available
1 of 1
affected package

io.netty:netty-codec-http2 vulnerable to HTTP/2 Rapid Reset Attack

Carried by container images the latest versions of 176 of 17,781 indexed charts deploy, on 214 images.

Affected packageAffected versionsFixed inImages
netty-codec-http2maven4.1.12.Final, 4.1.19.Final, 4.1.22.Final, 4.1.24.Final+43 more4.1.100.Final214
OSV records
GHSA-xpw8-rcwv-8f8p

Charts affected

176 by stars
ChartLatestAffected imagesRadar Score
authentication-serviceredestroyder0.2.21 of 1See more

authentication-service redestroyder 0.2.2

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
redestroyder/authorization-service:0.0.1740364a619fd
netty-codec-http2@4.1.73.Final
4.1.100.Final

Open the chart page →

2,583
business-serviceredestroyder0.2.11 of 1See more

business-service redestroyder 0.2.1

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
redestroyder/business-service:0.0.1db03499a0726
netty-codec-http2@4.1.73.Final
4.1.100.Final

Open the chart page →

2,600
routr-connectroutr0.4.32 of 10See more

routr-connect routr 0.4.3

2 of the 10 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
fonoster/routr-edgeport:2.13.6d08a8a574a50
netty-codec-http2@4.1.79.Final
4.1.100.Final
fonoster/routr-requester:2.13.6e0c823506eb2
netty-codec-http2@4.1.79.Final
4.1.100.Final

Open the chart page →

11,021
nacossaber0.1.111 of 1See more

nacos saber 0.1.11

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
nacos/nacos-server:v2.1.0dcf04549c6d7
netty-codec-http2@4.1.42.Final
4.1.100.Final

Open the chart page →

3,978
fmtok8s-conference-chartsalaboy0.1.41 of 6See more

fmtok8s-conference-chart salaboy 0.1.4

1 of the 6 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
netty-codec-http2@4.1.77.Final
4.1.100.Final

Open the chart page →

16,101
fmtok8s-frontendsalaboy0.1.31 of 1See more

fmtok8s-frontend salaboy 0.1.3

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
netty-codec-http2@4.1.77.Final
4.1.100.Final

Open the chart page →

8,033
helm-chart-examplesalaboy0.1.01 of 1See more

helm-chart-example salaboy 0.1.0

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
salaboy/fmtok8s-monolith:v0.1.0f225568e6d03
netty-codec-http2@4.1.51.Final
4.1.100.Final

Open the chart page →

2,847
kafkasb-helm-charts0.3.01 of 2See more

kafka sb-helm-charts 0.3.0

1 of the 2 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
provectuslabs/kafka-ui:latest8f2ff02d64b0
netty-codec-http2@4.1.97.Final
4.1.100.Final

Open the chart page →

1,597
seldon-core-oauth-gatewayseldon0.3.11 of 2See more

seldon-core-oauth-gateway seldon 0.3.1

1 of the 2 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
seldonio/apife:0.3.1eea0d3f578ca
netty-codec-http2@4.1.12.Final
4.1.100.Final

Open the chart page →

8,098
shenyushenyu0.6.32 of 2See more

shenyu shenyu 0.6.3

2 of the 2 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.5.1e2be712fc4f4
netty-codec-http2@4.1.38.Final
4.1.100.Final
apache/shenyu-bootstrap:2.5.11bd5756f6273
netty-codec-http2@4.1.38.Final
4.1.100.Final

Open the chart page →

8,804
shenyushenyu-helm-chart-test2.4.272 of 2See more

shenyu shenyu-helm-chart-test 2.4.27

2 of the 2 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.4.2e8b7c4ddd069
netty-codec-http2@4.1.43.Final
4.1.100.Final
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
netty-codec-http2@4.1.38.Final
4.1.100.Final

Open the chart page →

12,513
simple-keycloaksikalabs0.1.01 of 1See more

simple-keycloak sikalabs 0.1.0

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.18830f76112b6
netty-codec-http2@4.1.82.Final
4.1.100.Final

Open the chart page →

6,443
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
netty-codec-http2@4.1.72.Final
4.1.100.Final

Open the chart page →

13,767
zipkin-gcpt3n1.0.01 of 1See more

zipkin-gcp t3n 1.0.0

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
openzipkin/zipkin-gcp:0.15.2b5d51d1144e2
netty-codec-http2@4.1.43.Final
4.1.100.Final

Open the chart page →

4,538
hadoop-deploymenttejaswita-hadoop-helmchart1.0.01 of 1See more

hadoop-deployment tejaswita-hadoop-helmchart 1.0.0

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
apache/hadoop:3af361b20bec0
netty-codec-http2@4.1.89.Final
4.1.100.Final

Open the chart page →

4,240
krokiteochenglim1.0.11 of 5See more

kroki teochenglim 1.0.1

1 of the 5 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
yuzutech/kroki:0.17.0192b7b27c857
netty-codec-http2@4.1.74.Final
4.1.100.Final

Open the chart page →

8,715
shenyutest-helm2.4.212 of 2See more

shenyu test-helm 2.4.21

2 of the 2 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.4.2e8b7c4ddd069
netty-codec-http2@4.1.43.Final
4.1.100.Final
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
netty-codec-http2@4.1.38.Final
4.1.100.Final

Open the chart page →

12,513
thingsboardthingsboardVerified publisher0.1.34 of 12See more

thingsboard thingsboard 0.1.3

4 of the 12 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
thingsboard/tb-coap-transport:3.4.1bd45a09d85d9
netty-codec-http2@4.1.75.Final
4.1.100.Final
thingsboard/tb-http-transport:3.4.1a06f53c5e2da
netty-codec-http2@4.1.75.Final
4.1.100.Final
thingsboard/tb-mqtt-transport:3.4.1030f316ce301
netty-codec-http2@4.1.75.Final
4.1.100.Final
thingsboard/tb-node:3.4.1645f43b688f7
netty-codec-http2@4.1.75.Final
4.1.100.Final

Open the chart page →

25,394
hermestoukVerified publisher0.6.01 of 3See more

hermes touk 0.6.0

1 of the 3 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
netty-codec-http2@4.1.49.Final
4.1.100.Final

Open the chart page →

12,455
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
netty-codec-http2@4.1.73.Final
4.1.100.Final

Open the chart page →

14,364
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
netty-codec-http2@4.1.73.Final
4.1.100.Final

Open the chart page →

28,605
apicurio-registry-sqlwitcom-gmbh0.1.01 of 1See more

apicurio-registry-sql witcom-gmbh 0.1.0

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-jpa:1.3.2.Final44eeddd3562c
netty-codec-http2@4.1.49.Final
4.1.100.Final

Open the chart page →

3,424
opendistro-eswitcom-gmbh1.13.31 of 3See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
netty-codec-http2@4.1.45.Final
4.1.100.Final

Open the chart page →

5,806
zahori-processzahoriVerified publisher1.0.11 of 1See more

zahori-process zahori 1.0.1

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
zahoriaut/zahori-process:0.1.13351f8a220ed7
netty-codec-http2@4.1.94.Final
4.1.100.Final

Open the chart page →

3,480
zahori-serverzahoriVerified publisher1.0.11 of 2See more

zahori-server zahori 1.0.1

1 of the 2 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
zahoriaut/zahori-server:0.1.17b2de13916f3e
netty-codec-http2@4.1.87.Final
4.1.100.Final

Open the chart page →

5,846
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry GHSA-xpw8-rcwv-8f8p.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
netty-codec-http2@4.1.82.Final
4.1.100.Final

Open the chart page →

6,016

Container images carrying it

214 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/fiware/tmforum-resource-catalog:1.18.0b0d853627c59
netty-codec-http2@4.1.91.Final
4.1.100.Final
1
quay.io/fiware/tmforum-resource-function-activation:1.18.062a5acb63fd1
netty-codec-http2@4.1.91.Final
4.1.100.Final
1
quay.io/fiware/tmforum-resource-inventory:1.18.0553b4a47730b
netty-codec-http2@4.1.91.Final
4.1.100.Final
1
quay.io/fiware/tmforum-resource-order-management:1.18.0dd1778ad6203
netty-codec-http2@4.1.91.Final
4.1.100.Final
1
quay.io/fiware/tmforum-service-catalog:1.18.074b0fad9e155
netty-codec-http2@4.1.91.Final
4.1.100.Final
1
quay.io/fiware/tmforum-service-inventory:1.18.04be54e8cb5c0
netty-codec-http2@4.1.91.Final
4.1.100.Final
1
quay.io/fiware/tmforum-service-order-management:1.18.0d2091785d544
netty-codec-http2@4.1.91.Final
4.1.100.Final
1
quay.io/fiware/tmforum-software-management:1.18.01b74a2f7ba67
netty-codec-http2@4.1.91.Final
4.1.100.Final
1
quay.io/fiware/tmforum-usage-management:1.18.042f190c42926
netty-codec-http2@4.1.91.Final
4.1.100.Final
1
quay.io/keycloak/keycloak:20.0.18830f76112b6
netty-codec-http2@4.1.82.Final
4.1.100.Final
1
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
netty-codec-http2@4.1.82.Final
4.1.100.Final
1
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
netty-codec-http2@4.1.82.Final
4.1.100.Final
1
quay.io/opsmxpublic/ubi8-gate:isd-spin-2025.10.01-5c720954-2025112608102b3554029737
netty-codec-http2@4.1.94.Final
4.1.100.Final
1
quay.io/strimzi/operator:0.36.1e9e03b31007c
netty-codec-http2@4.1.94.Final
4.1.100.Final
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.