StackRadar

CVE-2017-1000487

Critical

Advisory

Published 13 May 2022In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.065
93rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
20
of 17,781 indexed, latest versions
Container images
20
deployed by those charts
Fix available
1 of 1
affected package

OS Command Injection in Plexus-utils

Carried by container images the latest versions of 20 of 17,781 indexed charts deploy, on 20 images.

Affected packageAffected versionsFixed inImages
plexus-utilsmaven1.5.6, 1.5.8, 1.5.15, 2.0.4+5 more3.0.1620
OSV records
GHSA-8vhq-qq4p-grq3
Also known as
SNYK-JAVA-ORGCODEHAUSPLEXUS-31522

Charts affected

20 by stars
ChartLatestAffected imagesRadar Score
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2017-1000487.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
plexus-utils@2.0.6
3.0.16

Open the chart page →

32,259
hivedmwm-bigdataVerified publisher0.1.62 of 5See more

hive dmwm-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2017-1000487.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
plexus-utils@3.0.15
3.0.16
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
plexus-utils@3.0.15
3.0.16

Open the chart page →

20,837
hive-metastoreslamdev0.0.51 of 2See more

hive-metastore slamdev 0.0.5

1 of the 2 container images this version deploys carry CVE-2017-1000487.

Container imageDigestPackageFixed in
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
plexus-utils@3.0.15
3.0.16

Open the chart page →

8,198
geoserver-cloudcamptocamp20.0.52 of 11See more

geoserver-cloud camptocamp2 0.0.5

2 of the 11 container images this version deploys carry CVE-2017-1000487.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
plexus-utils@1.5.6
3.0.16
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
plexus-utils@1.5.6
3.0.16

Open the chart page →

84,444
geoserverCloudcamptocamp20.0.62 of 11See more

geoserverCloud camptocamp2 0.0.6

2 of the 11 container images this version deploys carry CVE-2017-1000487.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
plexus-utils@1.5.6
3.0.16
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
plexus-utils@1.5.6
3.0.16

Open the chart page →

84,444
hive-metastoredmwm-bigdataVerified publisher0.1.31 of 2See more

hive-metastore dmwm-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2017-1000487.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
plexus-utils@3.0.15
3.0.16

Open the chart page →

6,882
geoservercamptocamp20.0.32 of 12See more

geoserver camptocamp2 0.0.3

2 of the 12 container images this version deploys carry CVE-2017-1000487.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
plexus-utils@1.5.6
3.0.16
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
plexus-utils@1.5.6
3.0.16

Open the chart page →

88,335
prestocloudnativeapp0.1.11 of 1See more

presto cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2017-1000487.

Container imageDigestPackageFixed in
bivas/presto:0.19605545994f806
plexus-utils@2.0.6
3.0.16

Open the chart page →

7,226
riemanncloudnativeapp0.1.21 of 1See more

riemann cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2017-1000487.

Container imageDigestPackageFixed in
raykrueger/riemann:0.2.14c8baf3de57bb
plexus-utils@3.0
3.0.16

Open the chart page →

6,497
pulsarcnieg1.0.81 of 2See more

pulsar cnieg 1.0.8

1 of the 2 container images this version deploys carry CVE-2017-1000487.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.6.14db6ff0b4045
plexus-utils@2.0.6
3.0.16

Open the chart page →

16,860
mod-copycatfolio-org0.1.31 of 1See more

mod-copycat folio-org 0.1.3

1 of the 1 container images this version deploys carry CVE-2017-1000487.

Container imageDigestPackageFixed in
folioci/mod-copycat:latest1513fad2b799
plexus-utils@2.0.4
3.0.16

Open the chart page →

1,466
hivegradiant-bigdataVerified publisher0.1.62 of 5See more

hive gradiant-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2017-1000487.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
plexus-utils@3.0.15
3.0.16
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
plexus-utils@3.0.15
3.0.16

Open the chart page →

20,837
hive-metastoregradiant-bigdataVerified publisher0.1.31 of 2See more

hive-metastore gradiant-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2017-1000487.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
plexus-utils@3.0.15
3.0.16

Open the chart page →

6,882
ibm-microclimateibm-charts0.1.02 of 8See more

ibm-microclimate ibm-charts 0.1.0

2 of the 8 container images this version deploys carry CVE-2017-1000487.

Container imageDigestPackageFixed in
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
plexus-utils@1.5.15
3.0.16
ibmcom/microclimate-theia:lateste17bdccc5030
plexus-utils@2.0.5
3.0.16

Open the chart page →

57,669
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2017-1000487.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
plexus-utils@2.0.6
3.0.16

Open the chart page →

25,933
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2017-1000487.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
plexus-utils@2.0.6
3.0.16

Open the chart page →

15,675
issuegenopsmxVerified publisher1.0.21 of 1See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2017-1000487.

Container imageDigestPackageFixed in
opsmx11/issuegen:v2.1.05c50ca123d88
plexus-utils@1.5.8
3.0.16

Open the chart page →

26,339
digdagskyoo20030.5.21 of 4See more

digdag skyoo2003 0.5.2

1 of the 4 container images this version deploys carry CVE-2017-1000487.

Container imageDigestPackageFixed in
ghcr.io/skyoo2003/digdag:0.0.1821fd6a6f2cd
plexus-utils@3.0.10
3.0.16

Open the chart page →

6,949
archivaslamdev0.0.71 of 2See more

archiva slamdev 0.0.7

1 of the 2 container images this version deploys carry CVE-2017-1000487.

Container imageDigestPackageFixed in
xetusoss/archiva:v2.2.588f25242b9ee
plexus-utils@3.0.15
3.0.16

Open the chart page →

6,907
sonarqubestakaterVerified publisher0.10.31 of 2See more

sonarqube stakater 0.10.3

1 of the 2 container images this version deploys carry CVE-2017-1000487.

Container imageDigestPackageFixed in
library/sonarqube:6.7.6-community0ae5169e3d0f
plexus-utils@2.0.6
3.0.16

Open the chart page →

11,841

Container images carrying it

20 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
bde2020/hive:2.3.2-postgresql-metastore620267768985
plexus-utils@3.0.15
3.0.16
4
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
plexus-utils@1.5.6
3.0.16
2
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
plexus-utils@1.5.6
3.0.16
2
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
plexus-utils@3.0.15
3.0.16
2
apachepulsar/pulsar:2.10.03b262ab7a7d9
plexus-utils@2.0.6
3.0.16
1
apachepulsar/pulsar:2.6.14db6ff0b4045
plexus-utils@2.0.6
3.0.16
1
apachepulsar/pulsar:2.9.0d056c89b7131
plexus-utils@2.0.6
3.0.16
1
apachepulsar/pulsar:2.8.2d538416d5afe
plexus-utils@2.0.6
3.0.16
1
bivas/presto:0.19605545994f806
plexus-utils@2.0.6
3.0.16
1
folioci/mod-copycat:latest1513fad2b799
plexus-utils@2.0.4
3.0.16
1
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
plexus-utils@1.5.6
3.0.16
1
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
plexus-utils@1.5.6
3.0.16
1
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
plexus-utils@1.5.15
3.0.16
1
ibmcom/microclimate-theia:lateste17bdccc5030
plexus-utils@2.0.5
3.0.16
1
library/sonarqube:6.7.6-community0ae5169e3d0f
plexus-utils@2.0.6
3.0.16
1
opsmx11/issuegen:v2.1.05c50ca123d88
plexus-utils@1.5.8
3.0.16
1
raykrueger/riemann:0.2.14c8baf3de57bb
plexus-utils@3.0
3.0.16
1
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
plexus-utils@3.0.15
3.0.16
1
xetusoss/archiva:v2.2.588f25242b9ee
plexus-utils@3.0.15
3.0.16
1
ghcr.io/skyoo2003/digdag:0.0.1821fd6a6f2cd
plexus-utils@3.0.10
3.0.16
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.