CVE-2018-1000613
CriticalAdvisory
Published 17 Oct 2018In the index since 6 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.8
- base score, highest
- EPSS
- 0.048
- 91st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 16
- of 17,781 indexed, latest versions
- Container images
- 13
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Deserialization of Untrusted Data in Bouncy castle
Carried by container images the latest versions of 16 of 17,781 indexed charts deploy, on 13 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| bcprov-jdk15onmaven | 1.57, 1.58, 1.59 | 1.60 | 13 |
- OSV records
- GHSA-4446-656p-f54g
Charts affected
16 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| hbasedmwm-bigdataVerified publisher | 0.1.6 | 1 of 5See more | 13,392 |
| opentsdbdmwm-bigdataVerified publisher | 0.1.7 | 1 of 6See more | 17,511 |
| elasticsearch-dataempathyco | 0.2.0 | 1 of 2See more | 3,703 |
| elasticsearch-masterempathyco | 0.3.0 | 1 of 2See more | 3,703 |
| hbasegradiant-bigdataVerified publisher | 0.1.6 | 1 of 5See more | 13,392 |
| seldon-coreseldon | 0.2.7 | 2 of 3See more | 13,798 |
| gocdcloudnativeapp | 1.9.2 | 1 of 2See more | 9,144 |
| neo4jcloudnativeapp | 1.0.0 | 1 of 1See more | 2,837 |
| opentsdbgradiant-bigdataVerified publisher | 0.1.7 | 1 of 6See more | 17,511 |
| hbasehbase | 0.1.7 | 1 of 4See more | 10,540 |
| tdsfkubebb | 5.7.0 | 1 of 3See more | 6,490 |
| ladeitladeit | 0.4.0 | 1 of 2See more | 26,356 |
| onosopencord | 3.0.2 | 1 of 1See more | 12,927 |
| seldon-core-oauth-gatewayseldon | 0.3.1 | 1 of 2See more | 8,098 |
| drillwearefrank | 1.3.6 | 1 of 3See more | 9,397 |
| zahori-processzahoriVerified publisher | 1.0.1 | 1 of 1See more | 3,480 |
Container images carrying it
13 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| gradiant/ | a1ee6de94c04 | bcprov-jdk15on | 1.60 | 4 |
| empathyco/ | bcf4365ee7ec | bcprov-jdk15on | 1.60 | 2 |
| apache/ | 1f96558fd292 | bcprov-jdk15on | 1.60 | 1 |
| gocd/ | 2da45cb09d57 | bcprov-jdk15on | 1.60 | 1 |
| kubebb/ | a3879931dfa1 | bcprov-jdk15on | 1.60 | 1 |
| ladeit/ | 962b665ffe82 | bcprov-jdk15on | 1.60 | 1 |
| library/ | a1ba477fa412 | bcprov-jdk15on | 1.60 | 1 |
| onosproject/ | 44914a8d4b3f | bcprov-jdk15on | 1.60 | 1 |
| seldonio/ | ba81b17f00eb | bcprov-jdk15on | 1.60 | 1 |
| seldonio/ | eea0d3f578ca | bcprov-jdk15on | 1.60 | 1 |
| seldonio/ | 29e362bb1ba2 | bcprov-jdk15on | 1.60 | 1 |
| zahoriaut/ | 351f8a220ed7 | bcprov-jdk15on | 1.60 | 1 |
| ghcr.io/ | c144bdd688d7 | bcprov-jdk15on | 1.60 | 1 |