CVE-2025-58057 Netty Security Issue

sfarooqui
Wed, 10 Sep 2025 00:26:22 +0000
Elasticsearch

Hello! I hope you are well. My team recently ran AWS ECR Inspector on our elasticsearch docker image and Inspector stated our image contains this vulnerability: CVE-2025-58057 (can’t link to the host, but it is an issue with Netty). I tried searching the forums and can’t find anything about this. It states that netty has to be updated to mitigate the issue. Is there any guidance from elasticsearch on this? Please inform me if it would instead be preferred for me to contact anyone else about this. Thank you!

3 posts - 2 participants