Upgrade Chainguard zot to version 2.1.1-r7 or higher.

netty vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the netty package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
L CVE-2024-29025	<1:4.1.33-1+deb10u5
H CVE-2023-44487	<1:4.1.33-1+deb10u4
M HTTP Response Splitting	<1:4.1.33-1+deb10u3
H Uncontrolled Recursion	<1:4.1.33-1+deb10u3
L Creation of Temporary File With Insecure Permissions	*
M HTTP Request Smuggling	<1:4.1.33-1+deb10u3
H Resource Exhaustion	<1:4.1.33-1+deb10u3
H Resource Exhaustion	<1:4.1.33-1+deb10u3
M HTTP Request Smuggling	<1:4.1.33-1+deb10u2
M HTTP Request Smuggling	<1:4.1.33-1+deb10u2
M Creation of Temporary File With Insecure Permissions	<1:4.1.33-1+deb10u2
H Resource Exhaustion	<1:4.1.33-1+deb10u2
H HTTP Request Smuggling	<1:4.1.33-1+deb10u2
C HTTP Request Smuggling	<1:4.1.33-1+deb10u2
C HTTP Request Smuggling	<1:4.1.33-1+deb10u2
H HTTP Request Smuggling	<1:4.1.33-1+deb10u1
H Improper Input Validation	<1:4.0.31-1
H Loop with Unreachable Exit Condition ('Infinite Loop')	<1:4.0.37-1