{"schemaVersion":3,"id":"CVE-2026-59902","aliases":["UBUNTU-CVE-2026-59902","DEBIAN-CVE-2026-59902","CGA-2x8w-j4qw-cqqw","CGA-362f-x7w6-vhr8","CGA-3f67-h792-rxgq","CGA-48xm-m4qp-h4xv","CGA-55h4-3cc5-xc97","CGA-58rm-4mqq-89v5","CGA-5q73-wg2x-47gf","CGA-65xg-qv38-x847","CGA-886h-88f8-25w9","CGA-8w5h-qpfw-qrxj","CGA-9f3c-v2h6-f7xw","CGA-9m7g-9x59-p95g","CGA-9w45-8qmg-wr9c","CGA-f223-5925-434c","CGA-f2xw-xjvm-7c78","CGA-g584-prqm-xg55","CGA-p4cg-7hhw-59f3","CGA-pgfr-8vp2-p389","CGA-pp66-2f8w-rg6x","CGA-q244-xq3x-94wj","CGA-q83x-8222-j698","CGA-qj58-3qw5-w5hc","CGA-rfq9-r7f2-5gr8","CGA-vc47-9p9q-438g","CGA-vpp2-5hgj-8jv2","CGA-x36g-mcxw-hpf4","CGA-xgq6-89ch-v5qm","CGA-265h-4wcp-4qj8","CGA-2732-jp8r-xjvp","CGA-2m4g-v8jr-m2gw","CGA-2qg8-3m66-g633","CGA-2rxj-q65v-5hxj","CGA-2w54-grf7-5jv6","CGA-2x9h-hqp6-87gr","CGA-2xvw-v5gr-4mhf","CGA-3374-fjp6-7hx2","CGA-3f9j-xcw8-2x58","CGA-3jw6-rwj2-cc7p","CGA-3rc9-567p-7jrh","CGA-3rhc-p9gx-9f2g","CGA-4347-xr4h-337x","CGA-45qv-76hq-2p95","CGA-49jm-qj3c-w76c","CGA-4q75-j6pg-446p","CGA-4vj7-www3-2v7v","CGA-5x32-m36v-2772","CGA-6v74-9p8x-v5c2","CGA-732x-jp3w-xvhf","CGA-8j4j-x24p-9m76","CGA-9hjx-35w7-3xrv","CGA-c4rj-6c76-39cc","CGA-ch7v-v9mj-hh3p","CGA-cjcg-84x8-qj4g","CGA-f8hh-p4cx-2946","CGA-ffr4-g2x3-chj7","CGA-fgww-xp74-x4pp","CGA-fjpx-j87v-hjhg","CGA-fvpx-3q4w-qx4h","CGA-g5pp-vqjg-7pg3","CGA-g7w4-62r6-vp8c","CGA-gm9x-x2mx-mw6g","CGA-h5px-9vfp-v9fg","CGA-h892-vp4x-667h","CGA-j67p-jq32-7rg2","CGA-jfrq-p2fw-3cwh","CGA-jp54-m9xc-qqqw","CGA-mrv7-7x45-m3j4","GHSA-2qj4-mmr9-4v2f","CGA-q93c-vr4w-797w","CGA-qqf3-5jq3-9hfj","CGA-r3mg-7phq-j9xh","CGA-rh5g-9jf7-pvh7","CGA-rp49-f92w-x66c","CGA-rvw5-4ff8-qcgw","CGA-v4px-xx33-3xvf","CGA-vmxj-282r-wq3m","CGA-vppf-6jx9-jpw8","CGA-w775-w4qr-58g6","CGA-w7fj-x7gf-42gc","CGA-w8gf-352r-9mj9","CGA-wc94-79p4-x3pv","CGA-x3xj-cm3x-6225","CGA-x4ch-3w65-3gwj","CGA-x555-j2xv-2qgr","CGA-x6gq-wpfg-38cf","CGA-x8xq-mp97-c5hp","CGA-x8xr-3j52-g74r","CGA-xhvm-878p-5cc7"],"status":"published","duplicateOf":null,"title":null,"description":"Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, io.netty.handler.codec.sctp.SctpMessageCompletionHandler limits incomplete messages and fragment counts but not maxBufferedBytes, allowing unauthenticated peers to exhaust memory with large SCTP fragments. This issue is fixed in versions 4.1.137.Final and 4.2.17.Final.","dates":{"published":"2026-08-17T17:48:55.663Z","modified":"2026-08-18T14:50:42.964Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Maven","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00365,"percentile":0.28974,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":-0.006000000000000016,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00371},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00371,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00371,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00371,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00371,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00371,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00371,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00371,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00371,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00371,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00371,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00673,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00673,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00673,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00673,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00673,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00673,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00673,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00673,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00365,"percentile":0.28974}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00371,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00371,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00371,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00371,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00673,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00673,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00673,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00673,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00673,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00673,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00673,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00673,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00365,"percentile":0.28974}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-400","name":"Uncontrolled Resource Consumption","description":"The product does not properly control the allocation and maintenance of a limited resource.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/400.html"}],"affected":[{"vendor":"chainguard","product":"apache-hop-fips","name":"apache-hop-fips","label":"apache-hop-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-hop-fips","purlType":"apk","versions":[{"text":"< 2.19.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"celeborn-0.5","name":"celeborn-0.5","label":"celeborn-0.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/celeborn-0.5","purlType":"apk","versions":[{"text":"< 0.5.4-r34","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.5.4-r34","eol":null,"hubHref":null},{"vendor":"chainguard","product":"celeborn-0.6","name":"celeborn-0.6","label":"celeborn-0.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/celeborn-0.6","purlType":"apk","versions":[{"text":"< 0.6.3-r15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.6.3-r15","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gremlin-server","name":"gremlin-server","label":"gremlin-server","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gremlin-server","purlType":"apk","versions":[{"text":"< 3.8.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"hadoop-fips-3.3.6","name":"hadoop-fips-3.3.6","label":"hadoop-fips-3.3.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/hadoop-fips-3.3.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"hadoop-fips-3.4.2","name":"hadoop-fips-3.4.2","label":"hadoop-fips-3.4.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/hadoop-fips-3.4.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"hadoop-fips-3.5","name":"hadoop-fips-3.5","label":"hadoop-fips-3.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/hadoop-fips-3.5","purlType":"apk","versions":[{"text":"< 3.5.0-r3","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"< 3.5.0-r3 | All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"management-api-for-apache-cassandra-4.0","name":"management-api-for-apache-cassandra-4.0","label":"management-api-for-apache-cassandra-4.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/management-api-for-apache-cassandra-4.0","purlType":"apk","versions":[{"text":"< 0.1.125-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.1.125-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"management-api-for-apache-cassandra-4.1","name":"management-api-for-apache-cassandra-4.1","label":"management-api-for-apache-cassandra-4.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/management-api-for-apache-cassandra-4.1","purlType":"apk","versions":[{"text":"< 0.1.124-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.1.124-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"management-api-for-apache-cassandra-5.0","name":"management-api-for-apache-cassandra-5.0","label":"management-api-for-apache-cassandra-5.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/management-api-for-apache-cassandra-5.0","purlType":"apk","versions":[{"text":"< 0.1.124-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.1.124-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"pinot","name":"pinot","label":"pinot","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/pinot","purlType":"apk","versions":[{"text":"< 1.5.1-r16","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.1-r16","eol":null,"hubHref":null},{"vendor":"chainguard","product":"pinot-fips","name":"pinot-fips","label":"pinot-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/pinot-fips","purlType":"apk","versions":[{"text":"< 1.5.1-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.1-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ranger","name":"ranger","label":"ranger","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ranger","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"seata-server","name":"seata-server","label":"seata-server","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/seata-server","purlType":"apk","versions":[{"text":"< 2.7.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.7.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"tez","name":"tez","label":"tez","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/tez","purlType":"apk","versions":[{"text":"< 0.10.5-r27","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.10.5-r27","eol":null,"hubHref":null},{"vendor":"chainguard","product":"thingsboard-tb-mqtt-transport","name":"thingsboard-tb-mqtt-transport","label":"thingsboard-tb-mqtt-transport","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/thingsboard-tb-mqtt-transport","purlType":"apk","versions":[{"text":"< 4.3.1.3-r21","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1.3-r21","eol":null,"hubHref":null},{"vendor":"chainguard","product":"thingsboard-tb-node","name":"thingsboard-tb-node","label":"thingsboard-tb-node","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/thingsboard-tb-node","purlType":"apk","versions":[{"text":"< 4.3.1.3-r21","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1.3-r21","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trino","name":"trino","label":"trino","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trino","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trino-plugin-bigquery","name":"trino-plugin-bigquery","label":"trino-plugin-bigquery","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trino-plugin-bigquery","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trino-plugin-delta-lake","name":"trino-plugin-delta-lake","label":"trino-plugin-delta-lake","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trino-plugin-delta-lake","purlType":"apk","versions":[{"text":"< 483-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 483-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trino-plugin-hive","name":"trino-plugin-hive","label":"trino-plugin-hive","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trino-plugin-hive","purlType":"apk","versions":[{"text":"< 483-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 483-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trino-plugin-hudi","name":"trino-plugin-hudi","label":"trino-plugin-hudi","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trino-plugin-hudi","purlType":"apk","versions":[{"text":"< 483-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 483-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trino-plugin-iceberg","name":"trino-plugin-iceberg","label":"trino-plugin-iceberg","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trino-plugin-iceberg","purlType":"apk","versions":[{"text":"< 483-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 483-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trino-plugin-lakehouse","name":"trino-plugin-lakehouse","label":"trino-plugin-lakehouse","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trino-plugin-lakehouse","purlType":"apk","versions":[{"text":"< 483-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 483-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trino-plugin-opensearch","name":"trino-plugin-opensearch","label":"trino-plugin-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trino-plugin-opensearch","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trino-plugin-oracle","name":"trino-plugin-oracle","label":"trino-plugin-oracle","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trino-plugin-oracle","purlType":"apk","versions":[{"text":"< 483-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 483-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trino-plugin-pinot","name":"trino-plugin-pinot","label":"trino-plugin-pinot","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trino-plugin-pinot","purlType":"apk","versions":[{"text":"< 483-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 483-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trino-plugin-teradata-functions","name":"trino-plugin-teradata-functions","label":"trino-plugin-teradata-functions","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trino-plugin-teradata-functions","purlType":"apk","versions":[{"text":"< 483-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 483-r7","eol":null,"hubHref":null},{"vendor":"wolfi","product":"celeborn-0.6","name":"celeborn-0.6","label":"celeborn-0.6","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/celeborn-0.6","purlType":"apk","versions":[{"text":"< 0.6.3-r15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.6.3-r15","eol":null,"hubHref":null},{"vendor":"wolfi","product":"management-api-for-apache-cassandra-5.0","name":"management-api-for-apache-cassandra-5.0","label":"management-api-for-apache-cassandra-5.0","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/management-api-for-apache-cassandra-5.0","purlType":"apk","versions":[{"text":"< 0.1.124-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.1.124-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"tez","name":"tez","label":"tez","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/tez","purlType":"apk","versions":[{"text":"< 0.10.5-r27","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.10.5-r27","eol":null,"hubHref":null},{"vendor":"wolfi","product":"thingsboard-tb-mqtt-transport","name":"thingsboard-tb-mqtt-transport","label":"thingsboard-tb-mqtt-transport","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/thingsboard-tb-mqtt-transport","purlType":"apk","versions":[{"text":"< 4.3.1.3-r21","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1.3-r21","eol":null,"hubHref":null},{"vendor":"wolfi","product":"thingsboard-tb-node","name":"thingsboard-tb-node","label":"thingsboard-tb-node","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/thingsboard-tb-node","purlType":"apk","versions":[{"text":"< 4.3.1.3-r21","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1.3-r21","eol":null,"hubHref":null},{"vendor":"wolfi","product":"trino","name":"trino","label":"trino","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/trino","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"trino-plugin-bigquery","name":"trino-plugin-bigquery","label":"trino-plugin-bigquery","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/trino-plugin-bigquery","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"trino-plugin-delta-lake","name":"trino-plugin-delta-lake","label":"trino-plugin-delta-lake","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/trino-plugin-delta-lake","purlType":"apk","versions":[{"text":"< 483-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 483-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"trino-plugin-hive","name":"trino-plugin-hive","label":"trino-plugin-hive","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/trino-plugin-hive","purlType":"apk","versions":[{"text":"< 483-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 483-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"trino-plugin-hudi","name":"trino-plugin-hudi","label":"trino-plugin-hudi","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/trino-plugin-hudi","purlType":"apk","versions":[{"text":"< 483-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 483-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"trino-plugin-iceberg","name":"trino-plugin-iceberg","label":"trino-plugin-iceberg","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/trino-plugin-iceberg","purlType":"apk","versions":[{"text":"< 483-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 483-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"trino-plugin-lakehouse","name":"trino-plugin-lakehouse","label":"trino-plugin-lakehouse","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/trino-plugin-lakehouse","purlType":"apk","versions":[{"text":"< 483-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 483-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"trino-plugin-opensearch","name":"trino-plugin-opensearch","label":"trino-plugin-opensearch","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/trino-plugin-opensearch","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"trino-plugin-oracle","name":"trino-plugin-oracle","label":"trino-plugin-oracle","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/trino-plugin-oracle","purlType":"apk","versions":[{"text":"< 483-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 483-r7","eol":null,"hubHref":null},{"vendor":"wolfi","product":"trino-plugin-pinot","name":"trino-plugin-pinot","label":"trino-plugin-pinot","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/trino-plugin-pinot","purlType":"apk","versions":[{"text":"< 483-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 483-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"trino-plugin-teradata-functions","name":"trino-plugin-teradata-functions","label":"trino-plugin-teradata-functions","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/trino-plugin-teradata-functions","purlType":"apk","versions":[{"text":"< 483-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 483-r7","eol":null,"hubHref":null},{"vendor":"debian","product":"netty","name":"netty","label":"netty","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/netty","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"netty","name":"netty","label":"netty","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/netty","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"io.netty","product":"netty-transport-sctp","name":"io.netty:netty-transport-sctp","label":"netty-transport-sctp","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/io.netty/netty-transport-sctp","purlType":"maven","versions":[{"text":"≥ 4.2.0.Final, < 4.2.17.Final","noFixRecorded":false,"fixedIn":null},{"text":"< 4.1.137.Final","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.2.0.Final, < 4.2.17.Final | < 4.1.137.Final","eol":null,"hubHref":null},{"vendor":"netty","product":"netty","name":"netty","label":"netty","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 4.1.137.Final","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.2.0.Final, < 4.2.17.Final","noFixRecorded":false,"fixedIn":null},{"text":"< 4.1.137","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.2.0, < 4.2.17","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.137.Final | ≥ 4.2.0.Final, < 4.2.17.Final | < 4.1.137 | ≥ 4.2.0, < 4.2.17","eol":null,"hubHref":"/vendor/netty/netty"}],"affectedCount":48,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/netty/netty/security/advisories/GHSA-2qj4-mmr9-4v2f","label":"github.com/netty/netty/security/advisories/GHSA-2qj4-mmr9-4v2f","hostname":"github.com","tags":["X Refsource CONFIRM","Advisory","WEB","Vendor Advisory"]},{"url":"https://github.com/netty/netty/pull/17213","label":"github.com/netty/netty/pull/17213","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB","Issue Tracking","Patch"]},{"url":"https://github.com/netty/netty/pull/17217","label":"github.com/netty/netty/pull/17217","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB","Issue Tracking","Patch"]},{"url":"https://github.com/netty/netty/commit/1b5abc6443b63726c72cdd285af2feb7ddbb8ff7","label":"github.com/netty/netty/commit/1b5abc6443b63726c72cdd285af2feb7ddbb8ff7","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB","Patch"]},{"url":"https://github.com/netty/netty/releases/tag/netty-4.1.137.Final","label":"github.com/netty/netty/releases/tag/netty-4.1.137.Final","hostname":"github.com","tags":["X Refsource MISC","WEB","Release Notes"]},{"url":"https://github.com/netty/netty/releases/tag/netty-4.2.17.Final","label":"github.com/netty/netty/releases/tag/netty-4.2.17.Final","hostname":"github.com","tags":["X Refsource MISC","WEB","Release Notes"]},{"url":"https://ubuntu.com/security/CVE-2026-59902","label":"ubuntu.com/security/CVE-2026-59902","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-59902","label":"www.cve.org/CVERecord?id=CVE-2026-59902","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-59902","label":"security-tracker.debian.org/tracker/CVE-2026-59902","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/59xxx/CVE-2026-59902.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/59xxx/CVE-2026-59902.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59902","label":"nvd.nist.gov/vuln/detail/CVE-2026-59902","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/netty/netty","label":"github.com/netty/netty","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2026:11882-1","SUSE-SU-2026:4391-1"],"duplicates":[],"related":["CGA-F38V-44CX-4892","OPENSUSE-SU-2026:11882-1","SUSE-SU-2026:4391-1"]},"timeline":[{"kind":"published","date":"2026-08-17T17:48:55.663Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-08-18T14:50:42.964Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":30,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T22:02:37.998Z","stale":false,"partial":false}}