CLEANSTART-2026-UL83180: flaw was found in Netty's HttpServerCodec
CVE-2026-93491 affects multiple packages. A flaw was found in Netty's HttpServerCodec. See references for individual vulnerability details.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/sonarqubeto a version that resolves this vulnerability.Fixed in 26.10.0.133078-r0 - Upgrade
Upgrade
cleanstart/strimzi-kafka-operatorto a version that resolves this vulnerability.Fixed in 1.3.0-r0
Event History
Frequently Asked Questions
Which deployments should be prioritized for triage?
The affected software listed is cleanstart/sonarqube and cleanstart/strimzi-kafka-operator. The provided data does not identify affected versions within those packages.
What does an attacker need to exploit this issue?
The severity vector indicates network access is required, with low attack complexity. It also indicates no privileges or user interaction are required.
What is the expected security impact?
The provided severity vector indicates a high availability impact, with no confidentiality or integrity impact. The scope is unchanged.
Does the advisory establish whether a default configuration is affected or provide a temporary mitigation?
No. The provided data contains no configuration conditions, workaround, or mitigation guidance.