StackRadar

CVE-2014-9390

Critical

Advisory

Published 19 Dec 2014In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.756
99th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
16
of 17,781 indexed, latest versions
Container images
15
deployed by those charts
Fix available
2 of 2
affected packages

JGit Improper Input Validation vulnerability

Carried by container images the latest versions of 16 of 17,781 indexed charts deploy, on 15 images.

Affected packageAffected versionsFixed inImages
mercurialpypi3.1.23.2.314
gitdeb1:1.9.1-11:1.9.1-1ubuntu0.11
OSV records
GHSA-6vvc-c2m3-cjf3UBUNTU-CVE-2014-9390
Also known as
PYSEC-2020-217, USN-2470-1

Charts affected

16 by stars
ChartLatestAffected imagesRadar Score
rocketmqgin1.1.01 of 2See more

rocketmq gin 1.1.0

1 of the 2 container images this version deploys carry CVE-2014-9390.

Container imageDigestPackageFixed in
apacherocketmq/rocketmq-dashboard:1.0.024799aff6cf8
mercurial@3.1.2
3.2.3

Open the chart page →

9,154
kafka-devwikimedia0.2.01 of 1See more

kafka-dev wikimedia 0.2.0

1 of the 1 container images this version deploys carry CVE-2014-9390.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
git@1:1.9.1-1
1:1.9.1-1ubuntu0.1

Open the chart page →

41,427
osba-container-instances-demoazure-sample0.1.01 of 1See more

osba-container-instances-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2014-9390.

Container imageDigestPackageFixed in
neilpeterson/osba-container-instances-demo:latest6527b05d5d03
mercurial@3.1.2
3.2.3

Open the chart page →

3,212
osba-cosmos-mongodb-demoazure-sample0.1.01 of 1See more

osba-cosmos-mongodb-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2014-9390.

Container imageDigestPackageFixed in
neilpeterson/osba-cosmos-mongodb-demo:latestf4940e84ed05
mercurial@3.1.2
3.2.3

Open the chart page →

2,904
osba-mysql-demoazure-sample0.1.01 of 1See more

osba-mysql-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2014-9390.

Container imageDigestPackageFixed in
neilpeterson/osba-mysql-demo:latest5859d68a6c9f
mercurial@3.1.2
3.2.3

Open the chart page →

2,895
osba-storage-demoazure-sample0.1.01 of 1See more

osba-storage-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2014-9390.

Container imageDigestPackageFixed in
neilpeterson/osba-storage-demo:latest29d229ab446e
mercurial@3.1.2
3.2.3

Open the chart page →

3,425
osba-text-analytics-demoazure-sample0.1.01 of 1See more

osba-text-analytics-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2014-9390.

Container imageDigestPackageFixed in
neilpeterson/osba-text-analytics-demo:latest969af3cb8466
mercurial@3.1.2
3.2.3

Open the chart page →

3,089
twitter-sentimentazure-sample0.1.01 of 3See more

twitter-sentiment azure-sample 0.1.0

1 of the 3 container images this version deploys carry CVE-2014-9390.

Container imageDigestPackageFixed in
neilpeterson/get-tweet:v28b645ac1a23e
mercurial@3.1.2
3.2.3

Open the chart page →

11,833
imap-mailbox-exportercamptocamp32.0.01 of 1See more

imap-mailbox-exporter camptocamp3 2.0.0

1 of the 1 container images this version deploys carry CVE-2014-9390.

Container imageDigestPackageFixed in
camptocamp/imap-mailbox-exporter:latest9dec019e4c62
mercurial@3.1.2
3.2.3

Open the chart page →

2,234
ldap-search-exportercamptocamp31.0.01 of 1See more

ldap-search-exporter camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2014-9390.

Container imageDigestPackageFixed in
camptocamp/ldap-search-exporter:latest5e55370dd292
mercurial@3.1.2
3.2.3

Open the chart page →

2,234
puppet-forgecloudnativeapp0.1.81 of 2See more

puppet-forge cloudnativeapp 0.1.8

1 of the 2 container images this version deploys carry CVE-2014-9390.

Container imageDigestPackageFixed in
hickey/puppet_forge:1.10.0c1148a09ef20
mercurial@3.1.2
3.2.3

Open the chart page →

4,086
bae-activation-servicefiware0.1.21 of 1See more

bae-activation-service fiware 0.1.2

1 of the 1 container images this version deploys carry CVE-2014-9390.

Container imageDigestPackageFixed in
fiware/bae-activation-service:v0.0.33e3ec88d59ed
mercurial@3.1.2
3.2.3

Open the chart page →

3,186
comcastgeek-cookbookVerified publisher6.4.21 of 1See more

comcast geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2014-9390.

Container imageDigestPackageFixed in
billimek/comcastusage-for-influxdb:latest801bba1228ac
mercurial@3.1.2
3.2.3

Open the chart page →

3,245
oauth2-proxyjenkins-x0.2.31 of 1See more

oauth2-proxy jenkins-x 0.2.3

1 of the 1 container images this version deploys carry CVE-2014-9390.

Container imageDigestPackageFixed in
a5huynh/oauth2_proxy:2.20c7307d31ca8
mercurial@3.1.2
3.2.3

Open the chart page →

2,392
zookeeper-helm-chartnotesprojectchart0.1.01 of 1See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2014-9390.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
git@1:1.9.1-1
1:1.9.1-1ubuntu0.1

Open the chart page →

41,427
restful-distributed-lock-managerstakaterVerified publisher1.0.41 of 1See more

restful-distributed-lock-manager stakater 1.0.4

1 of the 1 container images this version deploys carry CVE-2014-9390.

Container imageDigestPackageFixed in
stakater/restful-distributed-lock-manager:0.5.34f8e409f30c2
mercurial@3.1.2
3.2.3

Open the chart page →

3,116

Container images carrying it

15 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
wurstmeister/zookeeper:latest7a7fd44a7210
git@1:1.9.1-1
1:1.9.1-1ubuntu0.1
2
a5huynh/oauth2_proxy:2.20c7307d31ca8
mercurial@3.1.2
3.2.3
1
apacherocketmq/rocketmq-dashboard:1.0.024799aff6cf8
mercurial@3.1.2
3.2.3
1
billimek/comcastusage-for-influxdb:latest801bba1228ac
mercurial@3.1.2
3.2.3
1
camptocamp/imap-mailbox-exporter:latest9dec019e4c62
mercurial@3.1.2
3.2.3
1
camptocamp/ldap-search-exporter:latest5e55370dd292
mercurial@3.1.2
3.2.3
1
fiware/bae-activation-service:v0.0.33e3ec88d59ed
mercurial@3.1.2
3.2.3
1
hickey/puppet_forge:1.10.0c1148a09ef20
mercurial@3.1.2
3.2.3
1
neilpeterson/get-tweet:v28b645ac1a23e
mercurial@3.1.2
3.2.3
1
neilpeterson/osba-container-instances-demo:latest6527b05d5d03
mercurial@3.1.2
3.2.3
1
neilpeterson/osba-cosmos-mongodb-demo:latestf4940e84ed05
mercurial@3.1.2
3.2.3
1
neilpeterson/osba-mysql-demo:latest5859d68a6c9f
mercurial@3.1.2
3.2.3
1
neilpeterson/osba-storage-demo:latest29d229ab446e
mercurial@3.1.2
3.2.3
1
neilpeterson/osba-text-analytics-demo:latest969af3cb8466
mercurial@3.1.2
3.2.3
1
stakater/restful-distributed-lock-manager:0.5.34f8e409f30c2
mercurial@3.1.2
3.2.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.