StackRadar

CVE-2018-10237

Medium

Advisory

Published 15 Jun 2020In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.051
92nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
164
of 17,781 indexed, latest versions
Container images
155
deployed by those charts
Fix available
1 of 2
affected packages

Denial of Service in Google Guava

Carried by container images the latest versions of 164 of 17,781 indexed charts deploy, on 155 images.

Affected packageAffected versionsFixed inImages
guavamaven11.0.1, 11.0.2, 13.0.1, 14.0+15 more24.1.1-android139
guava-jdk5maven13.0, 17.0no fix listed18
OSV records
GHSA-mvr2-9pj6-7w5j

Charts affected

164 by stars
ChartLatestAffected imagesRadar Score
archivaslamdev0.0.71 of 2See more

archiva slamdev 0.0.7

1 of the 2 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
xetusoss/archiva:v2.2.588f25242b9ee
guava@16.0.1
24.1.1-android

Open the chart page →

6,907
newrelic-private-minionsstarcher0.1.21 of 1See more

newrelic-private-minion sstarcher 0.1.2

1 of the 1 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
guava@21.0
24.1.1-android

Open the chart page →

3,164
cerebrostakaterVerified publisher0.5.11 of 2See more

cerebro stakater 0.5.1

1 of the 2 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
lmenezes/cerebro:0.8.13e860068e403
guava@22.0
24.1.1-android

Open the chart page →

2,956
sonarqubestakaterVerified publisher0.10.31 of 2See more

sonarqube stakater 0.10.3

1 of the 2 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
library/sonarqube:6.7.6-community0ae5169e3d0f
guava@19.0
24.1.1-android

Open the chart page →

11,841
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
guava@19.0
24.1.1-android

Open the chart page →

13,767
streamastreama1.0.11 of 2See more

streama streama 1.0.1

1 of the 2 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
just1not2/streama:1.10.48a2305192dec
guava@19.0
24.1.1-android

Open the chart page →

8,554
zipkin-gcpt3n1.0.01 of 1See more

zipkin-gcp t3n 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
openzipkin/zipkin-gcp:0.15.2b5d51d1144e2
guava@19.0
24.1.1-android

Open the chart page →

4,538
temporaltemporal0.28.91 of 13See more

temporal temporal 0.28.9

1 of the 13 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
guava@18.0
24.1.1-android

Open the chart page →

21,005
queryservicewbstack0.2.11 of 1See more

queryservice wbstack 0.2.1

1 of the 1 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
ghcr.io/wbstack/queryservice:0.3.6_0.6b83b5b81d4b6
guava@22.0
24.1.1-android

Open the chart page →

4,649
queryservice-updaterwbstack0.3.01 of 1See more

queryservice-updater wbstack 0.3.0

1 of the 1 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
ghcr.io/wbstack/queryservice-updater:0.3.84_3.97525a57ac3f1
guava@22.0
24.1.1-android

Open the chart page →

3,176
drillwearefrank1.3.61 of 3See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
apache/drill:1.21.11f96558fd292
guava@13.0.1
24.1.1-android

Open the chart page →

9,397
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
guava@18.0
24.1.1-android

Open the chart page →

10,127
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
guava@18.0
24.1.1-android

Open the chart page →

22,665
opendistro-eswitcom-gmbh1.13.31 of 3See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
guava@19.0
24.1.1-android

Open the chart page →

5,806

Container images carrying it

155 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
metabase/metabase:v0.31.2ffb2dccacefc
guava@18.0
guava-jdk5@17.0
24.1.1-android
no fix listed
1
microcks/microcks:0.8.0e3a3e0c67b09
guava@14.0
24.1.1-android
1
muluder/prograncontrollermcord:0.1.843b597a93da7
guava@19.0
24.1.1-android
1
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
guava@18.0
24.1.1-android
1
omecproject/c3po-hssdb:master-latest28a90cc26716
guava@16.0
24.1.1-android
1
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
guava@21.0
24.1.1-android
1
omecproject/onos-progran:1.0.05715e5648aa0
guava@19.0
24.1.1-android
1
onosproject/onos:2.2.144914a8d4b3f
guava@22.0
24.1.1-android
1
openkm/openkm-ce:6.3.113bc465a7461b
guava@20.0
24.1.1-android
1
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
guava@18.0
24.1.1-android
1
openzipkin/zipkin:2.21.060c3970df479
guava@19.0
24.1.1-android
1
openzipkin/zipkin-gcp:0.15.2b5d51d1144e2
guava@19.0
24.1.1-android
1
penpotapp/exporter:2.2.15c835ffd87ab
guava@20.0
24.1.1-android
1
polyakov/hapi-fhir-jpaserver-example:latestdbcef69146b8
guava@19.0
24.1.1-android
1
radarbase/kafka-manager:1.3.3.181d2af7dd5a4e
guava@16.0.1
24.1.1-android
1
raykrueger/riemann:0.2.14c8baf3de57bb
guava@19.0
24.1.1-android
1
richardchesterwood/k8s-fleetman-api-gateway:release2518f946b9f05
guava@18.0
24.1.1-android
1
sdandey/dandey-apps:kanban-board-kanban-appbef0f599737b
guava@20.0
24.1.1-android
1
seldonio/apife:0.2.7ba81b17f00eb
guava@19.0
24.1.1-android
1
seldonio/apife:0.3.1eea0d3f578ca
guava@19.0
24.1.1-android
1
seldonio/cluster-manager:0.2.729e362bb1ba2
guava@19.0
24.1.1-android
1
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
guava@14.0.1
24.1.1-android
1
snappydatainc/spark-shuffle:v2.2.0-kubernetes-0.5.1fd4b2070466f
guava@14.0.1
24.1.1-android
1
sslhep/hive-metastore:3.1.39e80af083079
guava@11.0.2
24.1.1-android
1
thelastpickle/cassandra-reaper:1.3.09c53996c457d
guava@20.0
24.1.1-android
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
guava@20.0-SNAPSHOT
24.1.1-android
1
trinodb/trino:405ee80ab5eeab2
guava@19.0
24.1.1-android
1
voltha/voltha-onos:5.1.8e038acb950d3
guava@22.0
24.1.1-android
1
xetusoss/archiva:v2.2.588f25242b9ee
guava@16.0.1
24.1.1-android
1
zenko/zenko-cosbench:0.0.6386a1f48ec0e
guava-jdk5@13.0
no fix listed
1
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
guava@19.0
24.1.1-android
1
ghcr.io/eshepelyuk/dckr/cmak-3.0.0.6:1.2.090a34412c6b5
guava@23.6.1-jre
24.1.1-android
1
ghcr.io/fleeksoft/hbase/hbase-base:2.4.13.2c144bdd688d7
guava@11.0.2
24.1.1-android
1
ghcr.io/gla-rad/enav-aton-admin-service:latestcf85570b1324
guava@22.0
24.1.1-android
1
ghcr.io/gla-rad/enav-aton-service:latest3be878690629
guava@22.0
24.1.1-android
1
ghcr.io/gla-rad/enav-msg-broker:latest6fe372e4e481
guava@22.0
24.1.1-android
1
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
guava@19.0
24.1.1-android
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
guava@20.0
24.1.1-android
1
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
guava@14.0.1
24.1.1-android
1
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
guava@19.0
24.1.1-android
1
ghcr.io/wbstack/queryservice:0.3.6_0.6b83b5b81d4b6
guava@22.0
24.1.1-android
1
ghcr.io/wbstack/queryservice-updater:0.3.84_3.97525a57ac3f1
guava@22.0
24.1.1-android
1
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:1.66.9138c8b82c398
guava-jdk5@17.0
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:latestf669a6eacf8c
guava-jdk5@17.0
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime4d3a8042c761
guava-jdk5@17.0
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:latest5d55a742a2bc
guava-jdk5@17.0
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:latest8be3ed26f746
guava-jdk5@17.0
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:1.54.4_localb2b97137aef5
guava-jdk5@17.0
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:1.74.1_localf2e2d816ef82
guava-jdk5@17.0
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:1.72.6_local43316f900242
guava-jdk5@17.0
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.