StackRadarChart IndexLive demo

CVE-2016-1000340

High

Advisory

Published 17 Oct 2018In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.023; 82nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 14; of 17,781 indexed, latest versions
Container images: 15; deployed by those charts
Fix available: 1 of 1; affected package

The Bouncy Castle JCE Provider carry a propagation bug

Carried by container images the latest versions of 14 of 17,781 indexed charts deploy, on 15 images.

Affected package	Affected versions	Fixed in	Images
bcprov-jdk15onmaven	1.51, 1.52, 1.53, 1.54+1 more	1.56	15

OSV records: GHSA-r97x-3g8f-gx3m

Charts affected

14 by stars

Chart

Latest

Affected images

Radar Score

sparkmicrosoft

1 of 3 See more

spark microsoft 1.0.4

1 of the 3 container images this version deploys carry CVE-2016-1000340.

Container image	Digest	Package	Fixed in
dbanda/livy :0.8	0ca125e68e53	bcprov-jdk15on@1.51	1.56

Open the chart page →

13,738

skywalkingkubesphere-test

1 of 4 See more

skywalking kubesphere-test 3.1.0

1 of the 4 container images this version deploys carry CVE-2016-1000340.

Container image	Digest	Package	Fixed in
apache/skywalking-ui :8.1.0	67d50e4deff4	bcprov-jdk15on@1.55	1.56

Open the chart page →

18,042

event-store-servicechoerodon

1 of 2 See more

event-store-service choerodon 0.8.0

1 of the 2 container images this version deploys carry CVE-2016-1000340.

Container image	Digest	Package	Fixed in
choerodon/event-store-service :0.8.0	3c94c97f6f69	bcprov-jdk15on@1.55	1.56

Open the chart page →

9,808

prestocloudnativeapp

1 of 1 See more

presto cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2016-1000340.

Container image	Digest	Package	Fixed in
bivas/presto :0.196	05545994f806	bcprov-jdk15on@1.51	1.56

Open the chart page →

7,226

rundeckcloudnativeapp

1 of 2 See more

rundeck cloudnativeapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2016-1000340.

Container image	Digest	Package	Fixed in
rundeck/rundeck :3.0.16	b13e8059ad72	bcprov-jdk15on@1.51	1.56

Open the chart page →

23,665

1 of 7 See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2016-1000340.

Container image	Digest	Package	Fixed in
library/neo4j :3.3.0	d4eaa8484246	bcprov-jdk15on@1.53	1.56

Open the chart page →

11,174

spark-shuffleduyet

1 of 1 See more

spark-shuffle duyet 0.2.0

1 of the 1 container images this version deploys carry CVE-2016-1000340.

Container image	Digest	Package	Fixed in
snappydatainc/spark-shuffle :v2.2.0-kubernetes-0.5.1	fd4b2070466f	bcprov-jdk15on@1.54	1.56

Open the chart page →

5,639

my-chartfleet-web-app

1 of 6 See more

my-chart fleet-web-app 0.1.0

1 of the 6 container images this version deploys carry CVE-2016-1000340.

Container image	Digest	Package	Fixed in
richardchesterwood/k8s-fleetman-api-gateway :release2	518f946b9f05	bcprov-jdk15on@1.55	1.56

Open the chart page →

24,296

openkmgeek-cookbook

1 of 1 See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2016-1000340.

Container image	Digest	Package	Fixed in
openkm/openkm-ce :6.3.11	3bc465a7461b	bcprov-jdk15on@1.52	1.56

Open the chart page →

27,949

ubooquityhalkeye

1 of 1 See more

ubooquity halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2016-1000340.

Container image	Digest	Package	Fixed in
linuxserver/ubooquity :2.1.2-ls36	9932d6759112	bcprov-jdk15on@1.53	1.56

Open the chart page →

4,303

ibm-microclimateibm-charts

2 of 8 See more

ibm-microclimate ibm-charts 0.1.0

2 of the 8 container images this version deploys carry CVE-2016-1000340.

Container image	Digest	Package	Fixed in
ibmcom/microclimate-file-watcher :latest	ab3fd1fdfa18	bcprov-jdk15on@1.55	1.56
ibmcom/microclimate-theia :latest	e17bdccc5030	bcprov-jdk15on@1.55	1.56

Open the chart page →

57,669

jenkinsjenkins-x

1 of 2 See more

jenkins jenkins-x 0.10.38

1 of the 2 container images this version deploys carry CVE-2016-1000340.

Container image	Digest	Package	Fixed in
jenkinsci/jenkins :2.67	a1f33f004659	bcprov-jdk15on@1.54	1.56

Open the chart page →

10,682

bpjstk-serviceopenshift

2 of 6 See more

bpjstk-service openshift 1.0.0

2 of the 6 container images this version deploys carry CVE-2016-1000340.

Container image	Digest	Package	Fixed in
andrianrf/iso-client :latest	ba560086ce15	bcprov-jdk15on@1.51	1.56
andrianrf/iso-server :latest	7da47f525c7d	bcprov-jdk15on@1.51	1.56

Open the chart page →

34,671

ubooquityvhdirk

1 of 1 See more

ubooquity vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2016-1000340.

Container image	Digest	Package	Fixed in
linuxserver/ubooquity :2.1.2-ls36	9932d6759112	bcprov-jdk15on@1.53	1.56

Open the chart page →

4,303

Container images carrying it

15 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
linuxserver/ubooquity :2.1.2-ls36	9932d6759112	bcprov-jdk15on@1.53	1.56	2
andrianrf/iso-client :latest	ba560086ce15	bcprov-jdk15on@1.51	1.56	1
andrianrf/iso-server :latest	7da47f525c7d	bcprov-jdk15on@1.51	1.56	1
apache/skywalking-ui :8.1.0	67d50e4deff4	bcprov-jdk15on@1.55	1.56	1
bivas/presto :0.196	05545994f806	bcprov-jdk15on@1.51	1.56	1
choerodon/event-store-service :0.8.0	3c94c97f6f69	bcprov-jdk15on@1.55	1.56	1
dbanda/livy :0.8	0ca125e68e53	bcprov-jdk15on@1.51	1.56	1
ibmcom/microclimate-file-watcher :latest	ab3fd1fdfa18	bcprov-jdk15on@1.55	1.56	1
ibmcom/microclimate-theia :latest	e17bdccc5030	bcprov-jdk15on@1.55	1.56	1
jenkinsci/jenkins :2.67	a1f33f004659	bcprov-jdk15on@1.54	1.56	1
library/neo4j :3.3.0	d4eaa8484246	bcprov-jdk15on@1.53	1.56	1
openkm/openkm-ce :6.3.11	3bc465a7461b	bcprov-jdk15on@1.52	1.56	1
richardchesterwood/k8s-fleetman-api-gateway :release2	518f946b9f05	bcprov-jdk15on@1.55	1.56	1
rundeck/rundeck :3.0.16	b13e8059ad72	bcprov-jdk15on@1.51	1.56	1
snappydatainc/spark-shuffle :v2.2.0-kubernetes-0.5.1	fd4b2070466f	bcprov-jdk15on@1.54	1.56	1