StackRadar

CVE-2014-7839

Medium

Advisory

Published 17 May 2022In the index since 8 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.020
79th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2
of 17,781 indexed, latest versions
Container images
15
deployed by those charts
Fix available
1 of 1
affected package

XML External Entity Reference in RESTEasy

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 15 images.

Affected packageAffected versionsFixed inImages
resteasy-jaxrsmaven3.0.8.Final, 3.0.9.Final3.0.11.Final15
OSV records
GHSA-pc54-pchm-xcw6

Charts affected

2 by stars
ChartLatestAffected imagesRadar Score
datawolfncsaVerified publisher1.1.01 of 3See more

datawolf ncsa 1.1.0

1 of the 3 container images this version deploys carry CVE-2014-7839.

Container imageDigestPackageFixed in
ncsa/datawolf:4.7.0af6649d59150
resteasy-jaxrs@3.0.8.Final
3.0.11.Final

Open the chart page →

4,989
polyglotncsaVerified publisher0.1.114 of 18See more

polyglot ncsa 0.1.1

14 of the 18 container images this version deploys carry CVE-2014-7839.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
resteasy-jaxrs@3.0.9.Final
3.0.11.Final
ncsapolyglot/converters-avconv:latestc44b22eb58bb
resteasy-jaxrs@3.0.9.Final
3.0.11.Final
ncsapolyglot/converters-ebook-convert:latest438d82cdbdb5
resteasy-jaxrs@3.0.9.Final
3.0.11.Final
ncsapolyglot/converters-ffmpeg:latest48c852c1204b
resteasy-jaxrs@3.0.9.Final
3.0.11.Final
ncsapolyglot/converters-flac:latest072cf5bc6f99
resteasy-jaxrs@3.0.9.Final
3.0.11.Final
ncsapolyglot/converters-gdal:latestf746049515c1
resteasy-jaxrs@3.0.9.Final
3.0.11.Final
ncsapolyglot/converters-ghostscript:latestf350da56dd55
resteasy-jaxrs@3.0.9.Final
3.0.11.Final
ncsapolyglot/converters-htmldoc:latest317dd9e56922
resteasy-jaxrs@3.0.9.Final
3.0.11.Final
ncsapolyglot/converters-imagemagick:latestd244ea8c32ac
resteasy-jaxrs@3.0.9.Final
3.0.11.Final
ncsapolyglot/converters-openjpeg:latest2ba4af461d51
resteasy-jaxrs@3.0.9.Final
3.0.11.Final
ncsapolyglot/converters-txt2html:latest30ee96508c0b
resteasy-jaxrs@3.0.9.Final
3.0.11.Final
ncsapolyglot/converters-unoconv:latest1d9cebe3022b
resteasy-jaxrs@3.0.9.Final
3.0.11.Final
ncsapolyglot/converters-zip:latestf889fe30e2c7
resteasy-jaxrs@3.0.9.Final
3.0.11.Final
ncsapolyglot/polyglot:2.4.097a8c01c076e
resteasy-jaxrs@3.0.9.Final
3.0.11.Final

Open the chart page →

55,726

Container images carrying it

15 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
craigwillis/c2metadata-bd:latestae317d7e4724
resteasy-jaxrs@3.0.9.Final
3.0.11.Final
1
ncsa/datawolf:4.7.0af6649d59150
resteasy-jaxrs@3.0.8.Final
3.0.11.Final
1
ncsapolyglot/converters-avconv:latestc44b22eb58bb
resteasy-jaxrs@3.0.9.Final
3.0.11.Final
1
ncsapolyglot/converters-ebook-convert:latest438d82cdbdb5
resteasy-jaxrs@3.0.9.Final
3.0.11.Final
1
ncsapolyglot/converters-ffmpeg:latest48c852c1204b
resteasy-jaxrs@3.0.9.Final
3.0.11.Final
1
ncsapolyglot/converters-flac:latest072cf5bc6f99
resteasy-jaxrs@3.0.9.Final
3.0.11.Final
1
ncsapolyglot/converters-gdal:latestf746049515c1
resteasy-jaxrs@3.0.9.Final
3.0.11.Final
1
ncsapolyglot/converters-ghostscript:latestf350da56dd55
resteasy-jaxrs@3.0.9.Final
3.0.11.Final
1
ncsapolyglot/converters-htmldoc:latest317dd9e56922
resteasy-jaxrs@3.0.9.Final
3.0.11.Final
1
ncsapolyglot/converters-imagemagick:latestd244ea8c32ac
resteasy-jaxrs@3.0.9.Final
3.0.11.Final
1
ncsapolyglot/converters-openjpeg:latest2ba4af461d51
resteasy-jaxrs@3.0.9.Final
3.0.11.Final
1
ncsapolyglot/converters-txt2html:latest30ee96508c0b
resteasy-jaxrs@3.0.9.Final
3.0.11.Final
1
ncsapolyglot/converters-unoconv:latest1d9cebe3022b
resteasy-jaxrs@3.0.9.Final
3.0.11.Final
1
ncsapolyglot/converters-zip:latestf889fe30e2c7
resteasy-jaxrs@3.0.9.Final
3.0.11.Final
1
ncsapolyglot/polyglot:2.4.097a8c01c076e
resteasy-jaxrs@3.0.9.Final
3.0.11.Final
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.