StackRadar

CVE-2017-5929

Critical

Advisory

Published 7 Jun 2021In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.075
94th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
35
of 17,781 indexed, latest versions
Container images
31
deployed by those charts
Fix available
2 of 2
affected packages

QOS.ch Logback vulnerable to Deserialization of Untrusted Data

Carried by container images the latest versions of 35 of 17,781 indexed charts deploy, on 31 images.

Affected packageAffected versionsFixed inImages
logback-classicmaven1.0.11, 1.0.13, 1.1.2, 1.1.3+4 more1.2.031
logback-coremaven1.0.11, 1.0.13, 1.1.2, 1.1.3+4 more1.2.031
OSV records
GHSA-vmfg-rjjm-rjrj

Charts affected

35 by stars
ChartLatestAffected imagesRadar Score
temporallemontechVerified publisher0.37.01 of 13See more

temporal lemontech 0.37.0

1 of the 13 container images this version deploys carry CVE-2017-5929.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
logback-classic@1.1.3
logback-core@1.1.3
1.2.0
1.2.0

Open the chart page →

14,893
microcksmicrocksOfficialVerified publisher0.8.0-helm-3.kube-1.171 of 5See more

microcks microcks 0.8.0-helm-3.kube-1.17

1 of the 5 container images this version deploys carry CVE-2017-5929.

Container imageDigestPackageFixed in
microcks/microcks:0.8.0e3a3e0c67b09
logback-classic@1.1.11
logback-core@1.1.11
1.2.0
1.2.0

Open the chart page →

10,732
guacamolehalkeye0.2.11 of 3See more

guacamole halkeye 0.2.1

1 of the 3 container images this version deploys carry CVE-2017-5929.

Container imageDigestPackageFixed in
guacamole/guacamole:1.1.0333a7f40c145
logback-classic@1.1.2
logback-core@1.1.2
1.2.0
1.2.0

Open the chart page →

4,839
opentsdbdmwm-bigdataVerified publisher0.1.71 of 6See more

opentsdb dmwm-bigdata 0.1.7

1 of the 6 container images this version deploys carry CVE-2017-5929.

Container imageDigestPackageFixed in
gradiant/opentsdb:2.4.0c33d53913869
logback-classic@1.0.13
logback-core@1.0.13
1.2.0
1.2.0

Open the chart page →

17,511
temporalglasskubeVerified publisher0.45.2-gk.11 of 14See more

temporal glasskube 0.45.2-gk.1

1 of the 14 container images this version deploys carry CVE-2017-5929.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
logback-classic@1.1.3
logback-core@1.1.3
1.2.0
1.2.0

Open the chart page →

16,346
kafka-managerradar-baseVerified publisher2.3.11 of 1See more

kafka-manager radar-base 2.3.1

1 of the 1 container images this version deploys carry CVE-2017-5929.

Container imageDigestPackageFixed in
radarbase/kafka-manager:1.3.3.181d2af7dd5a4e
logback-classic@1.1.3
logback-core@1.1.3
1.2.0
1.2.0

Open the chart page →

4,000
seldon-coreseldon0.2.72 of 3See more

seldon-core seldon 0.2.7

2 of the 3 container images this version deploys carry CVE-2017-5929.

Container imageDigestPackageFixed in
seldonio/apife:0.2.7ba81b17f00eb
logback-classic@1.1.11
logback-core@1.1.11
1.2.0
1.2.0
seldonio/cluster-manager:0.2.729e362bb1ba2
logback-classic@1.1.11
logback-core@1.1.11
1.2.0
1.2.0

Open the chart page →

13,798
apache-iotdbapache-iotdb-single-nodeVerified publisher0.1.01 of 1See more

apache-iotdb apache-iotdb-single-node 0.1.0

1 of the 1 container images this version deploys carry CVE-2017-5929.

Container imageDigestPackageFixed in
apache/iotdb:0.11.28647309f95d1
logback-classic@1.1.11
logback-core@1.1.11
1.2.0
1.2.0

Open the chart page →

5,277
jaegerbook-k8sinfra-v23.4.01 of 5See more

jaeger book-k8sinfra-v2 3.4.0

1 of the 5 container images this version deploys carry CVE-2017-5929.

Container imageDigestPackageFixed in
library/cassandra:3.11.65aa8400b4b3b
logback-classic@1.1.3
logback-core@1.1.3
1.2.0
1.2.0

Open the chart page →

19,229
cassandra-clustercassandra-clusterVerified publisher0.1.01 of 1See more

cassandra-cluster cassandra-cluster 0.1.0

1 of the 1 container images this version deploys carry CVE-2017-5929.

Container imageDigestPackageFixed in
library/cassandra:3.11.10b095ff3248c6
logback-classic@1.1.3
logback-core@1.1.3
1.2.0
1.2.0

Open the chart page →

9,473
temporalcastaiVerified publisher0.54.21 of 14See more

temporal castai 0.54.2

1 of the 14 container images this version deploys carry CVE-2017-5929.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
logback-classic@1.1.3
logback-core@1.1.3
1.2.0
1.2.0

Open the chart page →

16,198
tsoragecetic0.4.111 of 8See more

tsorage cetic 0.4.11

1 of the 8 container images this version deploys carry CVE-2017-5929.

Container imageDigestPackageFixed in
library/cassandra:3.11.598531a31f213
logback-classic@1.1.3
logback-core@1.1.3
1.2.0
1.2.0

Open the chart page →

12,018
event-store-servicechoerodon0.8.01 of 2See more

event-store-service choerodon 0.8.0

1 of the 2 container images this version deploys carry CVE-2017-5929.

Container imageDigestPackageFixed in
choerodon/event-store-service:0.8.03c94c97f6f69
logback-classic@1.1.11
logback-core@1.1.11
1.2.0
1.2.0

Open the chart page →

9,808
riemanncloudnativeapp0.1.21 of 1See more

riemann cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2017-5929.

Container imageDigestPackageFixed in
raykrueger/riemann:0.2.14c8baf3de57bb
logback-classic@1.1.3
logback-core@1.1.3
1.2.0
1.2.0

Open the chart page →

6,497
rundeckcloudnativeapp0.1.01 of 2See more

rundeck cloudnativeapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2017-5929.

Container imageDigestPackageFixed in
rundeck/rundeck:3.0.16b13e8059ad72
logback-classic@1.1.11
logback-core@1.1.11
1.2.0
1.2.0

Open the chart page →

23,665
temporaldtrdnk-helm-chartsVerified publisher0.35.01 of 13See more

temporal dtrdnk-helm-charts 0.35.0

1 of the 13 container images this version deploys carry CVE-2017-5929.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
logback-classic@1.1.3
logback-core@1.1.3
1.2.0
1.2.0

Open the chart page →

20,205
my-chartfleet-web-app0.1.03 of 6See more

my-chart fleet-web-app 0.1.0

3 of the 6 container images this version deploys carry CVE-2017-5929.

Container imageDigestPackageFixed in
richardchesterwood/k8s-fleetman-api-gateway:release2518f946b9f05
logback-classic@1.1.11
logback-core@1.1.11
1.2.0
1.2.0
richardchesterwood/k8s-fleetman-position-simulator:release20b540a28f5a6
logback-classic@1.1.7
logback-core@1.1.7
1.2.0
1.2.0
richardchesterwood/k8s-fleetman-position-tracker:release336c43961214c
logback-classic@1.1.7
logback-core@1.1.7
1.2.0
1.2.0

Open the chart page →

24,296
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2017-5929.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
logback-classic@1.1.3
logback-core@1.1.3
1.2.0
1.2.0

Open the chart page →

27,949
jaegergpg-dev3.3.31 of 5See more

jaeger gpg-dev 3.3.3

1 of the 5 container images this version deploys carry CVE-2017-5929.

Container imageDigestPackageFixed in
library/cassandra:3.11.65aa8400b4b3b
logback-classic@1.1.3
logback-core@1.1.3
1.2.0
1.2.0

Open the chart page →

19,229
opentsdbgradiant-bigdataVerified publisher0.1.71 of 6See more

opentsdb gradiant-bigdata 0.1.7

1 of the 6 container images this version deploys carry CVE-2017-5929.

Container imageDigestPackageFixed in
gradiant/opentsdb:2.4.0c33d53913869
logback-classic@1.0.13
logback-core@1.0.13
1.2.0
1.2.0

Open the chart page →

17,511
ubooquityhalkeye0.1.11 of 1See more

ubooquity halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2017-5929.

Container imageDigestPackageFixed in
linuxserver/ubooquity:2.1.2-ls369932d6759112
logback-classic@1.1.3
logback-core@1.1.3
1.2.0
1.2.0

Open the chart page →

4,303
hapi-fhirhapi-fhirVerified publisher0.1.01 of 1See more

hapi-fhir hapi-fhir 0.1.0

1 of the 1 container images this version deploys carry CVE-2017-5929.

Container imageDigestPackageFixed in
polyakov/hapi-fhir-jpaserver-example:latestdbcef69146b8
logback-classic@1.1.7
logback-core@1.1.7
1.2.0
1.2.0

Open the chart page →

6,362
ibm-microclimateibm-charts0.1.02 of 8See more

ibm-microclimate ibm-charts 0.1.0

2 of the 8 container images this version deploys carry CVE-2017-5929.

Container imageDigestPackageFixed in
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
logback-classic@1.1.11
logback-core@1.1.11
1.2.0
1.2.0
ibmcom/microclimate-theia:lateste17bdccc5030
logback-classic@1.1.11
logback-core@1.1.11
1.2.0
1.2.0

Open the chart page →

57,669
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2017-5929.

Container imageDigestPackageFixed in
mintproject/model-catalog-endpoint:29256555a6fbaefae4729d5cd259564708a4ab04ffbb13f20465
logback-classic@1.0.11
logback-core@1.0.11
1.2.0
1.2.0

Open the chart page →

43,341
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2017-5929.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
logback-classic@1.0.13
logback-core@1.0.13
1.2.0
1.2.0

Open the chart page →

55,726
cdn-remoteopencord0.2.41 of 3See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2017-5929.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
logback-classic@1.1.9
logback-core@1.1.9
1.2.0
1.2.0

Open the chart page →

63,223
omec-control-planeopencord0.1.312 of 8See more

omec-control-plane opencord 0.1.31

2 of the 8 container images this version deploys carry CVE-2017-5929.

Container imageDigestPackageFixed in
library/cassandra:2.1.20cb079c0d7a57
logback-classic@1.1.2
logback-core@1.1.2
1.2.0
1.2.0
omecproject/c3po-hssdb:master-latest28a90cc26716
logback-classic@1.1.2
logback-core@1.1.2
1.2.0
1.2.0

Open the chart page →

40,715
voltha-infraopencord2.14.01 of 10See more

voltha-infra opencord 2.14.0

1 of the 10 container images this version deploys carry CVE-2017-5929.

Container imageDigestPackageFixed in
atomix/atomix:3.1.127738ff4f5c63
logback-classic@1.1.2
logback-core@1.1.2
1.2.0
1.2.0

Open the chart page →

41,044
seldon-core-oauth-gatewayseldon0.3.11 of 2See more

seldon-core-oauth-gateway seldon 0.3.1

1 of the 2 container images this version deploys carry CVE-2017-5929.

Container imageDigestPackageFixed in
seldonio/apife:0.3.1eea0d3f578ca
logback-classic@1.1.11
logback-core@1.1.11
1.2.0
1.2.0

Open the chart page →

8,098
digdagskyoo20030.5.21 of 4See more

digdag skyoo2003 0.5.2

1 of the 4 container images this version deploys carry CVE-2017-5929.

Container imageDigestPackageFixed in
ghcr.io/skyoo2003/digdag:0.0.1821fd6a6f2cd
logback-classic@1.1.5
logback-core@1.1.5
1.2.0
1.2.0

Open the chart page →

6,949
sonarqubestakaterVerified publisher0.10.31 of 2See more

sonarqube stakater 0.10.3

1 of the 2 container images this version deploys carry CVE-2017-5929.

Container imageDigestPackageFixed in
library/sonarqube:6.7.6-community0ae5169e3d0f
logback-classic@1.1.2
logback-core@1.1.2
1.2.0
1.2.0

Open the chart page →

11,841
temporaltemporal0.28.91 of 13See more

temporal temporal 0.28.9

1 of the 13 container images this version deploys carry CVE-2017-5929.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
logback-classic@1.1.3
logback-core@1.1.3
1.2.0
1.2.0

Open the chart page →

21,005
ubooquityvhdirkVerified publisher0.1.31 of 1See more

ubooquity vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2017-5929.

Container imageDigestPackageFixed in
linuxserver/ubooquity:2.1.2-ls369932d6759112
logback-classic@1.1.3
logback-core@1.1.3
1.2.0
1.2.0

Open the chart page →

4,303
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2017-5929.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
logback-classic@1.1.3
logback-core@1.1.3
1.2.0
1.2.0

Open the chart page →

10,127
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2017-5929.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
logback-classic@1.1.3
logback-core@1.1.3
1.2.0
1.2.0

Open the chart page →

22,665

Container images carrying it

31 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
library/cassandra:3.11.3ce85468c5bad
logback-classic@1.1.3
logback-core@1.1.3
1.2.0
1.2.0
7
gradiant/opentsdb:2.4.0c33d53913869
logback-classic@1.0.13
logback-core@1.0.13
1.2.0
1.2.0
2
library/cassandra:3.11.65aa8400b4b3b
logback-classic@1.1.3
logback-core@1.1.3
1.2.0
1.2.0
2
linuxserver/ubooquity:2.1.2-ls369932d6759112
logback-classic@1.1.3
logback-core@1.1.3
1.2.0
1.2.0
2
apache/iotdb:0.11.28647309f95d1
logback-classic@1.1.11
logback-core@1.1.11
1.2.0
1.2.0
1
atomix/atomix:3.1.127738ff4f5c63
logback-classic@1.1.2
logback-core@1.1.2
1.2.0
1.2.0
1
choerodon/event-store-service:0.8.03c94c97f6f69
logback-classic@1.1.11
logback-core@1.1.11
1.2.0
1.2.0
1
craigwillis/c2metadata-bd:latestae317d7e4724
logback-classic@1.0.13
logback-core@1.0.13
1.2.0
1.2.0
1
guacamole/guacamole:1.1.0333a7f40c145
logback-classic@1.1.2
logback-core@1.1.2
1.2.0
1.2.0
1
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
logback-classic@1.1.11
logback-core@1.1.11
1.2.0
1.2.0
1
ibmcom/microclimate-theia:lateste17bdccc5030
logback-classic@1.1.11
logback-core@1.1.11
1.2.0
1.2.0
1
library/cassandra:3.11.598531a31f213
logback-classic@1.1.3
logback-core@1.1.3
1.2.0
1.2.0
1
library/cassandra:3.11.10b095ff3248c6
logback-classic@1.1.3
logback-core@1.1.3
1.2.0
1.2.0
1
library/cassandra:2.1.20cb079c0d7a57
logback-classic@1.1.2
logback-core@1.1.2
1.2.0
1.2.0
1
library/sonarqube:6.7.6-community0ae5169e3d0f
logback-classic@1.1.2
logback-core@1.1.2
1.2.0
1.2.0
1
microcks/microcks:0.8.0e3a3e0c67b09
logback-classic@1.1.11
logback-core@1.1.11
1.2.0
1.2.0
1
mintproject/model-catalog-endpoint:29256555a6fbaefae4729d5cd259564708a4ab04ffbb13f20465
logback-classic@1.0.11
logback-core@1.0.11
1.2.0
1.2.0
1
omecproject/c3po-hssdb:master-latest28a90cc26716
logback-classic@1.1.2
logback-core@1.1.2
1.2.0
1.2.0
1
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
logback-classic@1.1.9
logback-core@1.1.9
1.2.0
1.2.0
1
openkm/openkm-ce:6.3.113bc465a7461b
logback-classic@1.1.3
logback-core@1.1.3
1.2.0
1.2.0
1
polyakov/hapi-fhir-jpaserver-example:latestdbcef69146b8
logback-classic@1.1.7
logback-core@1.1.7
1.2.0
1.2.0
1
radarbase/kafka-manager:1.3.3.181d2af7dd5a4e
logback-classic@1.1.3
logback-core@1.1.3
1.2.0
1.2.0
1
raykrueger/riemann:0.2.14c8baf3de57bb
logback-classic@1.1.3
logback-core@1.1.3
1.2.0
1.2.0
1
richardchesterwood/k8s-fleetman-api-gateway:release2518f946b9f05
logback-classic@1.1.11
logback-core@1.1.11
1.2.0
1.2.0
1
richardchesterwood/k8s-fleetman-position-simulator:release20b540a28f5a6
logback-classic@1.1.7
logback-core@1.1.7
1.2.0
1.2.0
1
richardchesterwood/k8s-fleetman-position-tracker:release336c43961214c
logback-classic@1.1.7
logback-core@1.1.7
1.2.0
1.2.0
1
rundeck/rundeck:3.0.16b13e8059ad72
logback-classic@1.1.11
logback-core@1.1.11
1.2.0
1.2.0
1
seldonio/apife:0.2.7ba81b17f00eb
logback-classic@1.1.11
logback-core@1.1.11
1.2.0
1.2.0
1
seldonio/apife:0.3.1eea0d3f578ca
logback-classic@1.1.11
logback-core@1.1.11
1.2.0
1.2.0
1
seldonio/cluster-manager:0.2.729e362bb1ba2
logback-classic@1.1.11
logback-core@1.1.11
1.2.0
1.2.0
1
ghcr.io/skyoo2003/digdag:0.0.1821fd6a6f2cd
logback-classic@1.1.5
logback-core@1.1.5
1.2.0
1.2.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.