StackRadarChart IndexLive demo

CVE-2018-10237

Medium

Advisory

Published 15 Jun 2020In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.051; 92nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 164; of 17,781 indexed, latest versions
Container images: 155; deployed by those charts
Fix available: 1 of 2; affected packages

Denial of Service in Google Guava

Carried by container images the latest versions of 164 of 17,781 indexed charts deploy, on 155 images.

Affected package	Affected versions	Fixed in	Images
guavamaven	11.0.1, 11.0.2, 13.0.1, 14.0+15 more	24.1.1-android	139
guava-jdk5maven	13.0, 17.0	no fix listed	18

OSV records: GHSA-mvr2-9pj6-7w5j

Charts affected

164 by stars

Chart

Latest

Affected images

Radar Score

archivaslamdev

1 of 2 See more

archiva slamdev 0.0.7

1 of the 2 container images this version deploys carry CVE-2018-10237.

Container image	Digest	Package	Fixed in
xetusoss/archiva :v2.2.5	88f25242b9ee	guava@16.0.1	24.1.1-android

Open the chart page →

6,907

newrelic-private-minionsstarcher

1 of 1 See more

newrelic-private-minion sstarcher 0.1.2

1 of the 1 container images this version deploys carry CVE-2018-10237.

Container image	Digest	Package	Fixed in
quay.io/newrelic/synthetics-minion :2.2.21	98c26e1b8f70	guava@21.0	24.1.1-android

Open the chart page →

3,164

cerebrostakater

1 of 2 See more

cerebro stakater 0.5.1

1 of the 2 container images this version deploys carry CVE-2018-10237.

Container image	Digest	Package	Fixed in
lmenezes/cerebro :0.8.1	3e860068e403	guava@22.0	24.1.1-android

Open the chart page →

2,956

sonarqubestakater

1 of 2 See more

sonarqube stakater 0.10.3

1 of the 2 container images this version deploys carry CVE-2018-10237.

Container image	Digest	Package	Fixed in
library/sonarqube :6.7.6-community	0ae5169e3d0f	guava@19.0	24.1.1-android

Open the chart page →

11,841

trinostatcan

1 of 2 See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2018-10237.

Container image	Digest	Package	Fixed in
trinodb/trino :405	ee80ab5eeab2	guava@19.0	24.1.1-android

Open the chart page →

13,767

streamastreama

1 of 2 See more

streama streama 1.0.1

1 of the 2 container images this version deploys carry CVE-2018-10237.

Container image	Digest	Package	Fixed in
just1not2/streama :1.10.4	8a2305192dec	guava@19.0	24.1.1-android

Open the chart page →

8,554

1 of 1 See more

zipkin-gcp t3n 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-10237.

Container image	Digest	Package	Fixed in
openzipkin/zipkin-gcp :0.15.2	b5d51d1144e2	guava@19.0	24.1.1-android

Open the chart page →

4,538

temporaltemporal

1 of 13 See more

temporal temporal 0.28.9

1 of the 13 container images this version deploys carry CVE-2018-10237.

Container image	Digest	Package	Fixed in
library/cassandra :3.11.3	ce85468c5bad	guava@18.0	24.1.1-android

Open the chart page →

21,005

queryservicewbstack

1 of 1 See more

queryservice wbstack 0.2.1

1 of the 1 container images this version deploys carry CVE-2018-10237.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/queryservice :0.3.6_0.6	b83b5b81d4b6	guava@22.0	24.1.1-android

Open the chart page →

4,649

queryservice-updaterwbstack

1 of 1 See more

queryservice-updater wbstack 0.3.0

1 of the 1 container images this version deploys carry CVE-2018-10237.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/queryservice-updater :0.3.84_3.9	7525a57ac3f1	guava@22.0	24.1.1-android

Open the chart page →

3,176

drillwearefrank

1 of 3 See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2018-10237.

Container image	Digest	Package	Fixed in
apache/drill :1.21.1	1f96558fd292	guava@13.0.1	24.1.1-android

Open the chart page →

9,397

cadencewenerme

1 of 5 See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2018-10237.

Container image	Digest	Package	Fixed in
library/cassandra :3.11.3	ce85468c5bad	guava@18.0	24.1.1-android

Open the chart page →

10,127

temporalwenerme

1 of 13 See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2018-10237.

Container image	Digest	Package	Fixed in
library/cassandra :3.11.3	ce85468c5bad	guava@18.0	24.1.1-android

Open the chart page →

22,665

opendistro-eswitcom-gmbh

1 of 3 See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry CVE-2018-10237.

Container image	Digest	Package	Fixed in
amazon/opendistro-for-elasticsearch :1.13.3	2acfa1dcc5f8	guava@19.0	24.1.1-android

Open the chart page →

5,806

Container images carrying it

155 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
public.ecr.aws/aktosecurity/akto-api-security-mini-testing :1.74.1_local	75f00caa6f3f	guava-jdk5@17.0	no fix listed	1
public.ecr.aws/aktosecurity/akto-api-security-mini-testing :improve-testing-performance	8e9d15ed71c7	guava-jdk5@17.0	no fix listed	1
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer :1.59.3_local	8cdcb7e83f9f	guava-jdk5@17.0	no fix listed	1
public.ecr.aws/v0r6c2e2/hive-metastore :latest	794b3bff9510	guava@19.0	24.1.1-android	1
quay.io/newrelic/synthetics-minion :2.2.21	98c26e1b8f70	guava@21.0	24.1.1-android	1