{"schemaVersion":3,"id":"CVE-2026-42582","aliases":["UBUNTU-CVE-2026-42582","DEBIAN-CVE-2026-42582","CGA-26v3-v998-h95g","CGA-2m4g-8vg8-mc6c","CGA-2xrv-9cp7-rxjr","CGA-32hm-rhx8-w2hh","CGA-38p8-xrr3-2r6w","CGA-3xmc-7jx5-q9p2","CGA-475g-9m78-ppgg","CGA-4j2j-mfgf-5mmm","CGA-5mj5-5qm2-8285","CGA-65fw-g4j8-g5rr","CGA-7mfr-4247-f3cv","CGA-929q-vc9c-929x","CGA-9p49-c43w-ppx2","CGA-9xwx-ccm5-rxmg","CGA-ccgr-qcpc-j6cc","CGA-chxm-67rp-wgj3","CGA-cwpv-qj76-crp3","CGA-gcvh-wgr8-ph6v","CGA-gmg2-w7v8-8w7m","CGA-j266-rrxc-5797","CGA-jc38-v6qq-xvpq","CGA-jf54-whx4-rrvx","CGA-jfj8-gx9f-27xw","CGA-jq7q-hrjm-95g8","CGA-p853-38r6-hcmh","CGA-v9j2-9p94-v44c","CGA-vwcw-mx78-qw8g","CGA-w74p-p5vg-c4qg","CGA-3hg4-qfgp-qmvv","CGA-3m9h-f95r-98wr","CGA-4hcv-4gp7-488r","CGA-6r39-qf5h-q5xc","CGA-6vp7-3rrq-gx6p","CGA-7c8r-4q6g-cm4g","CGA-8mgx-rw3g-63hr","CGA-c24f-5x8c-fjr8","CGA-ccpx-2crv-7356","CGA-cxq7-2pv8-28gr","CGA-f9cg-6hv4-wf8p","CGA-gv4j-6chh-239p","CGA-hfwq-r4x8-4f6m","CGA-hmjq-ch3f-963q","CGA-jfh4-w437-frxv","CGA-jwg5-cqch-p2w4","CGA-p42j-gfgg-m5j9","CGA-p6r6-jc9f-5pvr","GHSA-2c5c-chwr-9hqw","CGA-q3hq-p64w-m2rc","CGA-q8wx-49wx-5hxr","CGA-r7x8-738r-mj6r","CGA-v433-6582-55j9","CGA-vf8x-9p8w-9r6m","CGA-vr6c-rgxf-hwc8"],"status":"published","duplicateOf":null,"title":null,"description":"Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final, when decoding header blocks, the non-Huffman branch of io.netty.handler.codec.http3.QpackDecoder#decodeHuffmanEncodedLiteral may execute new byte[length] for a string literal before verifying that length bytes are actually present in the compressed field section. The wire encoding allows a very large length to be expressed in few bytes. There is no check that length <= in.readableBytes() before new byte[length]. This vulnerability is fixed in 4.2.13.Final.","dates":{"published":"2026-05-13T18:06:55.559Z","modified":"2026-05-13T19:35:35.549Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Maven","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00486,"percentile":0.40612,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.049,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00437},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00437,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00437,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00437,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00437,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00437,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00437,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00437,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00437,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00437,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00437,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00486,"percentile":0.40612}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00437,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00437,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00437,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00437,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00486,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00486,"percentile":0.40612}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"GITHUB_NETTY_NETTY","name":"Netty","source":"github","url":"https://github.com/netty/netty/issues/2562","maturity":"poc","reliabilityScore":0.3,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-770","name":"Allocation of Resources Without Limits or Throttling","description":"The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/770.html"},{"id":"CWE-789","name":"Memory Allocation with Excessive Size Value","description":"The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated.","type":"weakness","status":"Draft","abstraction":"Variant","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/789.html"}],"affected":[{"vendor":"chainguard","product":"apache-hop","name":"apache-hop","label":"apache-hop","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-hop","purlType":"apk","versions":[{"text":"< 2.17.0-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.17.0-r11","eol":{"isEol":null,"eolDate":null,"matchMethod":"name_exact","cycle":null,"product":{"name":"apache-hop","label":"Apache Hop","category":"app"}},"hubHref":null},{"vendor":"chainguard","product":"apache-hop-fips","name":"apache-hop-fips","label":"apache-hop-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-hop-fips","purlType":"apk","versions":[{"text":"< 2.17.0-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.17.0-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"camunda-8.9","name":"camunda-8.9","label":"camunda-8.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/camunda-8.9","purlType":"apk","versions":[{"text":"< 8.9.5-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.9.5-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"camunda-zeebe-8.9","name":"camunda-zeebe-8.9","label":"camunda-zeebe-8.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/camunda-zeebe-8.9","purlType":"apk","versions":[{"text":"< 8.9.5-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.9.5-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"celeborn-0.7","name":"celeborn-0.7","label":"celeborn-0.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/celeborn-0.7","purlType":"apk","versions":[{"text":"< 0.7.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.7.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"druid","name":"druid","label":"druid","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/druid","purlType":"apk","versions":[{"text":"< 37.0.0-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 37.0.0-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-3","name":"opensearch-3","label":"opensearch-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-3","purlType":"apk","versions":[{"text":"< 3.6.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-3-repository-azure","name":"opensearch-3-repository-azure","label":"opensearch-3-repository-azure","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-3-repository-azure","purlType":"apk","versions":[{"text":"< 3.6.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-3-security","name":"opensearch-3-security","label":"opensearch-3-security","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-3-security","purlType":"apk","versions":[{"text":"< 3.6.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-fips-3","name":"opensearch-fips-3","label":"opensearch-fips-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-fips-3","purlType":"apk","versions":[{"text":"< 3.7.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.7.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-fips-3-repository-azure","name":"opensearch-fips-3-repository-azure","label":"opensearch-fips-3-repository-azure","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-fips-3-repository-azure","purlType":"apk","versions":[{"text":"< 3.7.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.7.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-fips-3-security","name":"opensearch-fips-3-security","label":"opensearch-fips-3-security","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-fips-3-security","purlType":"apk","versions":[{"text":"< 3.7.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.7.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spark-4.1-scala-2.13","name":"spark-4.1-scala-2.13","label":"spark-4.1-scala-2.13","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spark-4.1-scala-2.13","purlType":"apk","versions":[{"text":"< 4.1.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spark-fips-4.1-scala-2.13","name":"spark-fips-4.1-scala-2.13","label":"spark-fips-4.1-scala-2.13","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spark-fips-4.1-scala-2.13","purlType":"apk","versions":[{"text":"< 4.1.1-r14","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.1-r14","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spark-kubernetes-operator","name":"spark-kubernetes-operator","label":"spark-kubernetes-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spark-kubernetes-operator","purlType":"apk","versions":[{"text":"< 0.9.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.9.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spark-kubernetes-operator-fips","name":"spark-kubernetes-operator-fips","label":"spark-kubernetes-operator-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spark-kubernetes-operator-fips","purlType":"apk","versions":[{"text":"< 0.9.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.9.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trino-plugin-delta-lake","name":"trino-plugin-delta-lake","label":"trino-plugin-delta-lake","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trino-plugin-delta-lake","purlType":"apk","versions":[{"text":"< 481-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trino-plugin-exchange-filesystem","name":"trino-plugin-exchange-filesystem","label":"trino-plugin-exchange-filesystem","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trino-plugin-exchange-filesystem","purlType":"apk","versions":[{"text":"< 481-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trino-plugin-exchange-hdfs","name":"trino-plugin-exchange-hdfs","label":"trino-plugin-exchange-hdfs","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trino-plugin-exchange-hdfs","purlType":"apk","versions":[{"text":"< 481-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trino-plugin-hive","name":"trino-plugin-hive","label":"trino-plugin-hive","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trino-plugin-hive","purlType":"apk","versions":[{"text":"< 481-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trino-plugin-hudi","name":"trino-plugin-hudi","label":"trino-plugin-hudi","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trino-plugin-hudi","purlType":"apk","versions":[{"text":"< 481-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trino-plugin-iceberg","name":"trino-plugin-iceberg","label":"trino-plugin-iceberg","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trino-plugin-iceberg","purlType":"apk","versions":[{"text":"< 481-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trino-plugin-lakehouse","name":"trino-plugin-lakehouse","label":"trino-plugin-lakehouse","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trino-plugin-lakehouse","purlType":"apk","versions":[{"text":"< 481-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trino-plugin-pinot","name":"trino-plugin-pinot","label":"trino-plugin-pinot","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trino-plugin-pinot","purlType":"apk","versions":[{"text":"< 481-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"druid","name":"druid","label":"druid","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/druid","purlType":"apk","versions":[{"text":"< 37.0.0-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 37.0.0-r8","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-3","name":"opensearch-3","label":"opensearch-3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-3","purlType":"apk","versions":[{"text":"< 3.6.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-3-repository-azure","name":"opensearch-3-repository-azure","label":"opensearch-3-repository-azure","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-3-repository-azure","purlType":"apk","versions":[{"text":"< 3.6.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-3-security","name":"opensearch-3-security","label":"opensearch-3-security","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-3-security","purlType":"apk","versions":[{"text":"< 3.6.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"spark-4.1-scala-2.13","name":"spark-4.1-scala-2.13","label":"spark-4.1-scala-2.13","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/spark-4.1-scala-2.13","purlType":"apk","versions":[{"text":"< 4.1.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.2-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"trino-plugin-delta-lake","name":"trino-plugin-delta-lake","label":"trino-plugin-delta-lake","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/trino-plugin-delta-lake","purlType":"apk","versions":[{"text":"< 481-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"trino-plugin-exchange-filesystem","name":"trino-plugin-exchange-filesystem","label":"trino-plugin-exchange-filesystem","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/trino-plugin-exchange-filesystem","purlType":"apk","versions":[{"text":"< 481-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"trino-plugin-exchange-hdfs","name":"trino-plugin-exchange-hdfs","label":"trino-plugin-exchange-hdfs","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/trino-plugin-exchange-hdfs","purlType":"apk","versions":[{"text":"< 481-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"trino-plugin-hive","name":"trino-plugin-hive","label":"trino-plugin-hive","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/trino-plugin-hive","purlType":"apk","versions":[{"text":"< 481-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"trino-plugin-hudi","name":"trino-plugin-hudi","label":"trino-plugin-hudi","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/trino-plugin-hudi","purlType":"apk","versions":[{"text":"< 481-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"trino-plugin-iceberg","name":"trino-plugin-iceberg","label":"trino-plugin-iceberg","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/trino-plugin-iceberg","purlType":"apk","versions":[{"text":"< 481-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"trino-plugin-lakehouse","name":"trino-plugin-lakehouse","label":"trino-plugin-lakehouse","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/trino-plugin-lakehouse","purlType":"apk","versions":[{"text":"< 481-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"trino-plugin-pinot","name":"trino-plugin-pinot","label":"trino-plugin-pinot","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/trino-plugin-pinot","purlType":"apk","versions":[{"text":"< 481-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 481-r0","eol":null,"hubHref":null},{"vendor":"debian","product":"netty","name":"netty","label":"netty","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/netty","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"netty","name":"netty","label":"netty","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/netty","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"io.netty","product":"netty-codec-http3","name":"netty-codec-http3","label":"netty-codec-http3","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.2.0.Alpha1, < 4.2.13.Final","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.2.0.Alpha1, < 4.2.13.Final","eol":null,"hubHref":"/vendor/ionetty/netty-codec-http3"},{"vendor":"io.netty","product":"netty-codec-http3","name":"io.netty:netty-codec-http3","label":"netty-codec-http3","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/io.netty/netty-codec-http3","purlType":"maven","versions":[{"text":"≥ 4.2.0.Final, < 4.2.13.Final","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.2.0.Final, < 4.2.13.Final","eol":null,"hubHref":null},{"vendor":"netty","product":"netty","name":"netty","label":"netty","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.2.0.Alpha1, < 4.2.13.Final","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.2.0, < 4.2.13","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.2.0.Alpha1, < 4.2.13.Final | ≥ 4.2.0, < 4.2.13","eol":null,"hubHref":"/vendor/netty/netty"}],"affectedCount":42,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/netty/netty/security/advisories/GHSA-2c5c-chwr-9hqw","label":"github.com/netty/netty/security/advisories/GHSA-2c5c-chwr-9hqw","hostname":"github.com","tags":["X Refsource CONFIRM","REPORT","Advisory","WEB","Exploit","Vendor Advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-42582","label":"ubuntu.com/security/CVE-2026-42582","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42582","label":"www.cve.org/CVERecord?id=CVE-2026-42582","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-42582","label":"security-tracker.debian.org/tracker/CVE-2026-42582","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/42xxx/CVE-2026-42582.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/42xxx/CVE-2026-42582.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42582","label":"nvd.nist.gov/vuln/detail/CVE-2026-42582","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/netty/netty","label":"github.com/netty/netty","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2026:10795-1","SUSE-SU-2026:2308-1"],"duplicates":[],"related":["CGA-HR83-CWQV-8752","OPENSUSE-SU-2026:10795-1","SUSE-SU-2026:2308-1"]},"timeline":[{"kind":"published","date":"2026-05-13T18:06:55.559Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-05-13T19:35:35.549Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":40,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T18:49:43.162Z","stale":false,"partial":false}}