{"schemaVersion":3,"id":"CVE-2026-56816","aliases":["UBUNTU-CVE-2026-56816","DEBIAN-CVE-2026-56816","CGA-26qj-rj3h-464j","CGA-293q-6qfh-75qg","CGA-2rp4-j7j3-rwx8","CGA-2wph-7qjp-g7h8","CGA-3x33-8qpq-77f2","CGA-43xq-prfr-765g","CGA-44w5-c7gj-2j6p","CGA-4p2x-p7r7-rpvg","CGA-4r7j-mh8h-5chg","CGA-536r-hqrm-q3hj","CGA-566p-crc8-4fmw","CGA-588j-892x-g3g3","CGA-5mfh-7h8g-78xg","CGA-5pqw-mp32-w6jq","CGA-6538-p734-g57h","CGA-6vvq-v69g-w2p9","CGA-7gc9-7v2p-wqmq","CGA-84cp-cg3p-26xw","CGA-84h6-hpwj-m9j4","CGA-88qj-fwfr-c384","CGA-92q4-cq3w-278c","CGA-c4x4-39v4-fj96","CGA-c86v-533h-gv98","CGA-cg3h-p9q9-3569","CGA-cj2v-wmx5-6472","CGA-cpgr-m4x6-6268","CGA-cqcr-59hg-g6q5","CGA-cw3w-rfrq-53xx","CGA-fvjm-hhhg-m6v7","CGA-ghw4-5v57-qjqj","CGA-gpw5-pw8p-xwcp","CGA-gvrv-p8hp-g3h7","CGA-jf4c-hwmg-628g","CGA-jqrq-w9cx-4qfv","CGA-mxp9-wpw5-8mgg","CGA-p2xg-6cf7-hj58","CGA-pw5c-hfpg-pvq9","CGA-q5g7-9c84-7556","CGA-q8j8-r23c-vcjj","CGA-qmv8-w2m5-c9hf","CGA-r62j-j2pp-278q","CGA-rf6w-p5gq-rq5r","CGA-rmcr-c7jj-87qf","CGA-rmhh-gm6m-xwv4","CGA-rx7f-974v-mxr8","CGA-vfhm-rmg3-x2xh","CGA-vv79-3rj9-x4qm","CGA-w3gp-mx22-jgm2","CGA-whvw-c62c-hp56","CGA-wmh8-g564-72r2","CGA-3jwx-3f2h-6v5g","CGA-4qrx-xm3h-pp9f","CGA-4xp2-q3q9-rm93","CGA-73fh-rw75-qvhx","CGA-754g-5pph-84h4","CGA-7p79-9fgg-3345","CGA-7vv9-gr88-4xvj","CGA-83f6-whrc-2xj5","CGA-862q-hrgv-m3gq","CGA-867x-vgqx-phmw","CGA-88cf-5629-vc6v","CGA-8wp4-v5v7-83vr","CGA-9fq4-4qr8-hvpw","CGA-9h3r-xm2g-p39v","CGA-cx8j-p735-7qgg","CGA-cxx6-mq9h-v5qg","CGA-ff36-2x2f-948h","CGA-g3fj-mp97-xww4","CGA-g47g-26p2-2p6m","CGA-gvxq-xp34-32v8","CGA-h4px-2pqr-g9rv","CGA-hmjg-8r2c-g83v","CGA-hr45-8434-r393","CGA-mgwg-fx9g-qj5q","CGA-p875-jp79-38rm","GHSA-hpcc-26xq-25fv","CGA-pwwc-g3xr-8r7p","CGA-r8v6-8v7v-3xh9","CGA-rfgg-3m8h-9jfw","CGA-rvw2-7w32-hq5v","CGA-vvh9-j5p5-7wwq","CGA-wj2r-wwmw-v4r5","CGA-xggm-7rhj-4c5j"],"status":"published","duplicateOf":null,"title":null,"description":"Netty is a network application framework for development of protocol servers and clients. Prior to 4.2.16.Final, Netty's `Http3FrameCodec` buffers incoming data for HTTP/3 reserved frame types up to the wire-specified payload length without limits; `decodeFrame` trusts `payLoadLength`, allowing an attacker to open multiple QUIC streams and send reserved frames with very large payload lengths to cause memory exhaustion and denial of service. This issue is fixed in version 4.2.16.Final.","dates":{"published":"2026-07-21T21:56:36.194Z","modified":"2026-07-22T18:24:28.067Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Maven","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00644,"percentile":0.5017,"severity":"low","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":0.12200000000000005,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.00522},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00522,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00522,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00522,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00522,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00522,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00522,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00522,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00522,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00522,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00522,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00644,"percentile":0.5017}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.00522,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00522,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00522,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00644,"percentile":0.5017}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"GITHUB_NETTY_NETTY","name":"Netty","source":"github","url":"https://github.com/netty/netty/issues/2562","maturity":"poc","reliabilityScore":0.3,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-400","name":"Uncontrolled Resource Consumption","description":"The product does not properly control the allocation and maintenance of a limited resource.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/400.html"}],"affected":[{"vendor":"chainguard","product":"apache-hop","name":"apache-hop","label":"apache-hop","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-hop","purlType":"apk","versions":[{"text":"< 2.18.1-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.18.1-r11","eol":{"isEol":null,"eolDate":null,"matchMethod":"name_exact","cycle":null,"product":{"name":"apache-hop","label":"Apache Hop","category":"app"}},"hubHref":null},{"vendor":"chainguard","product":"apache-hop-fips","name":"apache-hop-fips","label":"apache-hop-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-hop-fips","purlType":"apk","versions":[{"text":"< 2.18.1-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.18.1-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"camunda-8.9","name":"camunda-8.9","label":"camunda-8.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/camunda-8.9","purlType":"apk","versions":[{"text":"< 8.9.13-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.9.13-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"camunda-zeebe-8.9","name":"camunda-zeebe-8.9","label":"camunda-zeebe-8.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/camunda-zeebe-8.9","purlType":"apk","versions":[{"text":"< 8.9.13-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.9.13-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"celeborn-0.7","name":"celeborn-0.7","label":"celeborn-0.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/celeborn-0.7","purlType":"apk","versions":[{"text":"< 0.7.0-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.7.0-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kafka_exporter-strimzi-compat","name":"kafka_exporter-strimzi-compat","label":"kafka_exporter-strimzi-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kafka_exporter-strimzi-compat","purlType":"apk","versions":[{"text":"< 1.2.0-r4","noFixRecorded":false,"fixedIn":null},{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r4 | < 1.2.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kafka-strimzi-compat","name":"kafka-strimzi-compat","label":"kafka-strimzi-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kafka-strimzi-compat","purlType":"apk","versions":[{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-3","name":"opensearch-3","label":"opensearch-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-3","purlType":"apk","versions":[{"text":"< 3.7.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.7.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-3-discovery-ec2","name":"opensearch-3-discovery-ec2","label":"opensearch-3-discovery-ec2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-3-discovery-ec2","purlType":"apk","versions":[{"text":"< 3.8.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.0-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-3-iamguarded-compat","name":"opensearch-3-iamguarded-compat","label":"opensearch-3-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-3-iamguarded-compat","purlType":"apk","versions":[{"text":"< 3.8.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.0-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-3-neural-search","name":"opensearch-3-neural-search","label":"opensearch-3-neural-search","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-3-neural-search","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-3-repository-azure","name":"opensearch-3-repository-azure","label":"opensearch-3-repository-azure","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-3-repository-azure","purlType":"apk","versions":[{"text":"< 3.7.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.7.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-3-security","name":"opensearch-3-security","label":"opensearch-3-security","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-3-security","purlType":"apk","versions":[{"text":"< 3.7.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.7.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-fips-3","name":"opensearch-fips-3","label":"opensearch-fips-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-fips-3","purlType":"apk","versions":[{"text":"< 3.7.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.7.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-fips-3-repository-azure","name":"opensearch-fips-3-repository-azure","label":"opensearch-fips-3-repository-azure","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-fips-3-repository-azure","purlType":"apk","versions":[{"text":"< 3.7.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.7.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-fips-3-security","name":"opensearch-fips-3-security","label":"opensearch-fips-3-security","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-fips-3-security","purlType":"apk","versions":[{"text":"< 3.7.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.7.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"prometheus-jmx-exporter-strimzi-compat","name":"prometheus-jmx-exporter-strimzi-compat","label":"prometheus-jmx-exporter-strimzi-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/prometheus-jmx-exporter-strimzi-compat","purlType":"apk","versions":[{"text":"< 1.6.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.6.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spark-4.1-scala-2.13","name":"spark-4.1-scala-2.13","label":"spark-4.1-scala-2.13","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spark-4.1-scala-2.13","purlType":"apk","versions":[{"text":"< 4.1.3-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.3-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spark-fips-4.1-scala-2.13","name":"spark-fips-4.1-scala-2.13","label":"spark-fips-4.1-scala-2.13","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spark-fips-4.1-scala-2.13","purlType":"apk","versions":[{"text":"< 4.1.2-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.2-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator","name":"strimzi-kafka-operator","label":"strimzi-kafka-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator","purlType":"apk","versions":[{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-cluster-operator","name":"strimzi-kafka-operator-cluster-operator","label":"strimzi-kafka-operator-cluster-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-cluster-operator","purlType":"apk","versions":[{"text":"< 1.2.0-r4","noFixRecorded":false,"fixedIn":null},{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null},{"text":"< 1.1.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r4 | < 1.2.0-r5 | < 1.1.0-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-fips-cluster-operator","name":"strimzi-kafka-operator-fips-cluster-operator","label":"strimzi-kafka-operator-fips-cluster-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-fips-cluster-operator","purlType":"apk","versions":[{"text":"< 1.1.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.1.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-fips-kafka-agent","name":"strimzi-kafka-operator-fips-kafka-agent","label":"strimzi-kafka-operator-fips-kafka-agent","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-fips-kafka-agent","purlType":"apk","versions":[{"text":"< 1.1.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.1.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-fips-kafka-init","name":"strimzi-kafka-operator-fips-kafka-init","label":"strimzi-kafka-operator-fips-kafka-init","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-fips-kafka-init","purlType":"apk","versions":[{"text":"< 1.1.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.1.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-fips-topic-operator","name":"strimzi-kafka-operator-fips-topic-operator","label":"strimzi-kafka-operator-fips-topic-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-fips-topic-operator","purlType":"apk","versions":[{"text":"< 1.1.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.1.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-fips-tracing-agent","name":"strimzi-kafka-operator-fips-tracing-agent","label":"strimzi-kafka-operator-fips-tracing-agent","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-fips-tracing-agent","purlType":"apk","versions":[{"text":"< 1.1.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.1.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-fips-user-operator","name":"strimzi-kafka-operator-fips-user-operator","label":"strimzi-kafka-operator-fips-user-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-fips-user-operator","purlType":"apk","versions":[{"text":"< 1.1.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.1.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-kafka-agent","name":"strimzi-kafka-operator-kafka-agent","label":"strimzi-kafka-operator-kafka-agent","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-kafka-agent","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null},{"text":"< 1.1.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 1.2.0-r5 | < 1.1.0-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-kafka-base","name":"strimzi-kafka-operator-kafka-base","label":"strimzi-kafka-operator-kafka-base","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-kafka-base","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 1.2.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-kafka-init","name":"strimzi-kafka-operator-kafka-init","label":"strimzi-kafka-operator-kafka-init","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-kafka-init","purlType":"apk","versions":[{"text":"< 1.1.0-r3","noFixRecorded":false,"fixedIn":null},{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"< 1.1.0-r3 | < 1.2.0-r5 | All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-kafka-thirdparty-libs","name":"strimzi-kafka-operator-kafka-thirdparty-libs","label":"strimzi-kafka-operator-kafka-thirdparty-libs","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-kafka-thirdparty-libs","purlType":"apk","versions":[{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-kafka-thirdparty-libs-cc","name":"strimzi-kafka-operator-kafka-thirdparty-libs-cc","label":"strimzi-kafka-operator-kafka-thirdparty-libs-cc","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-kafka-thirdparty-libs-cc","purlType":"apk","versions":[{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-topic-operator","name":"strimzi-kafka-operator-topic-operator","label":"strimzi-kafka-operator-topic-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-topic-operator","purlType":"apk","versions":[{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null},{"text":"< 1.1.0-r3","noFixRecorded":false,"fixedIn":null},{"text":"< 1.2.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r5 | < 1.1.0-r3 | < 1.2.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-tracing-agent","name":"strimzi-kafka-operator-tracing-agent","label":"strimzi-kafka-operator-tracing-agent","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-tracing-agent","purlType":"apk","versions":[{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null},{"text":"< 1.1.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r5 | < 1.1.0-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-user-operator","name":"strimzi-kafka-operator-user-operator","label":"strimzi-kafka-operator-user-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-user-operator","purlType":"apk","versions":[{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null},{"text":"< 1.1.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r5 | < 1.1.0-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kafka_exporter-strimzi-compat","name":"kafka_exporter-strimzi-compat","label":"kafka_exporter-strimzi-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kafka_exporter-strimzi-compat","purlType":"apk","versions":[{"text":"< 1.2.0-r4","noFixRecorded":false,"fixedIn":null},{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r4 | < 1.2.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kafka-strimzi-compat","name":"kafka-strimzi-compat","label":"kafka-strimzi-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kafka-strimzi-compat","purlType":"apk","versions":[{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-3","name":"opensearch-3","label":"opensearch-3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-3","purlType":"apk","versions":[{"text":"< 3.7.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.7.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-3-discovery-ec2","name":"opensearch-3-discovery-ec2","label":"opensearch-3-discovery-ec2","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-3-discovery-ec2","purlType":"apk","versions":[{"text":"< 3.8.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.0-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-3-iamguarded-compat","name":"opensearch-3-iamguarded-compat","label":"opensearch-3-iamguarded-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-3-iamguarded-compat","purlType":"apk","versions":[{"text":"< 3.8.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.0-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-3-neural-search","name":"opensearch-3-neural-search","label":"opensearch-3-neural-search","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-3-neural-search","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-3-repository-azure","name":"opensearch-3-repository-azure","label":"opensearch-3-repository-azure","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-3-repository-azure","purlType":"apk","versions":[{"text":"< 3.7.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.7.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-3-security","name":"opensearch-3-security","label":"opensearch-3-security","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-3-security","purlType":"apk","versions":[{"text":"< 3.7.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.7.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"prometheus-jmx-exporter-strimzi-compat","name":"prometheus-jmx-exporter-strimzi-compat","label":"prometheus-jmx-exporter-strimzi-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/prometheus-jmx-exporter-strimzi-compat","purlType":"apk","versions":[{"text":"< 1.6.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.6.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"spark-4.1-scala-2.13","name":"spark-4.1-scala-2.13","label":"spark-4.1-scala-2.13","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/spark-4.1-scala-2.13","purlType":"apk","versions":[{"text":"< 4.1.3-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.3-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"strimzi-kafka-operator","name":"strimzi-kafka-operator","label":"strimzi-kafka-operator","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/strimzi-kafka-operator","purlType":"apk","versions":[{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"strimzi-kafka-operator-cluster-operator","name":"strimzi-kafka-operator-cluster-operator","label":"strimzi-kafka-operator-cluster-operator","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/strimzi-kafka-operator-cluster-operator","purlType":"apk","versions":[{"text":"< 1.2.0-r4","noFixRecorded":false,"fixedIn":null},{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null},{"text":"< 1.1.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r4 | < 1.2.0-r5 | < 1.1.0-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"strimzi-kafka-operator-kafka-agent","name":"strimzi-kafka-operator-kafka-agent","label":"strimzi-kafka-operator-kafka-agent","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/strimzi-kafka-operator-kafka-agent","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null},{"text":"< 1.1.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 1.2.0-r5 | < 1.1.0-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"strimzi-kafka-operator-kafka-base","name":"strimzi-kafka-operator-kafka-base","label":"strimzi-kafka-operator-kafka-base","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/strimzi-kafka-operator-kafka-base","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 1.2.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"strimzi-kafka-operator-kafka-init","name":"strimzi-kafka-operator-kafka-init","label":"strimzi-kafka-operator-kafka-init","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/strimzi-kafka-operator-kafka-init","purlType":"apk","versions":[{"text":"< 1.1.0-r3","noFixRecorded":false,"fixedIn":null},{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"< 1.1.0-r3 | < 1.2.0-r5 | All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"strimzi-kafka-operator-kafka-thirdparty-libs","name":"strimzi-kafka-operator-kafka-thirdparty-libs","label":"strimzi-kafka-operator-kafka-thirdparty-libs","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/strimzi-kafka-operator-kafka-thirdparty-libs","purlType":"apk","versions":[{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"strimzi-kafka-operator-kafka-thirdparty-libs-cc","name":"strimzi-kafka-operator-kafka-thirdparty-libs-cc","label":"strimzi-kafka-operator-kafka-thirdparty-libs-cc","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/strimzi-kafka-operator-kafka-thirdparty-libs-cc","purlType":"apk","versions":[{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"strimzi-kafka-operator-topic-operator","name":"strimzi-kafka-operator-topic-operator","label":"strimzi-kafka-operator-topic-operator","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/strimzi-kafka-operator-topic-operator","purlType":"apk","versions":[{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null},{"text":"< 1.1.0-r3","noFixRecorded":false,"fixedIn":null},{"text":"< 1.2.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r5 | < 1.1.0-r3 | < 1.2.0-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"strimzi-kafka-operator-tracing-agent","name":"strimzi-kafka-operator-tracing-agent","label":"strimzi-kafka-operator-tracing-agent","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/strimzi-kafka-operator-tracing-agent","purlType":"apk","versions":[{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null},{"text":"< 1.1.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r5 | < 1.1.0-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"strimzi-kafka-operator-user-operator","name":"strimzi-kafka-operator-user-operator","label":"strimzi-kafka-operator-user-operator","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/strimzi-kafka-operator-user-operator","purlType":"apk","versions":[{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null},{"text":"< 1.1.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r5 | < 1.1.0-r3","eol":null,"hubHref":null},{"vendor":"debian","product":"netty","name":"netty","label":"netty","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/netty","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"netty","name":"netty","label":"netty","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/netty","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"io.netty","product":"netty-codec-http3","name":"io.netty:netty-codec-http3","label":"netty-codec-http3","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/io.netty/netty-codec-http3","purlType":"maven","versions":[{"text":"< 4.2.16.Final","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.16.Final","eol":null,"hubHref":null},{"vendor":"netty","product":"netty","name":"netty","label":"netty","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 4.2.16.Final","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.2.2, < 4.2.16","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.16.Final | ≥ 4.2.2, < 4.2.16","eol":null,"hubHref":"/vendor/netty/netty"}],"affectedCount":59,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/netty/netty/security/advisories/GHSA-hpcc-26xq-25fv","label":"github.com/netty/netty/security/advisories/GHSA-hpcc-26xq-25fv","hostname":"github.com","tags":["X Refsource CONFIRM","REPORT","Advisory","WEB","Exploit","Vendor Advisory"]},{"url":"https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b","label":"github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB","Patch"]},{"url":"https://github.com/netty/netty/releases/tag/netty-4.2.16.Final","label":"github.com/netty/netty/releases/tag/netty-4.2.16.Final","hostname":"github.com","tags":["X Refsource MISC","WEB","Release Notes"]},{"url":"https://ubuntu.com/security/CVE-2026-56816","label":"ubuntu.com/security/CVE-2026-56816","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-56816","label":"www.cve.org/CVERecord?id=CVE-2026-56816","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-56816","label":"security-tracker.debian.org/tracker/CVE-2026-56816","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/56xxx/CVE-2026-56816.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/56xxx/CVE-2026-56816.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56816","label":"nvd.nist.gov/vuln/detail/CVE-2026-56816","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/netty/netty","label":"github.com/netty/netty","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-GJJW-MQ4V-PH4F"]},"timeline":[{"kind":"published","date":"2026-07-21T21:56:36.194Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-07-22T18:24:28.067Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":40,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T17:43:10.343Z","stale":false,"partial":false}}