StackRadar

CVE-2018-10237

Medium

Advisory

Published 15 Jun 2020In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.051
92nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
164
of 17,781 indexed, latest versions
Container images
155
deployed by those charts
Fix available
1 of 2
affected packages

Denial of Service in Google Guava

Carried by container images the latest versions of 164 of 17,781 indexed charts deploy, on 155 images.

Affected packageAffected versionsFixed inImages
guavamaven11.0.1, 11.0.2, 13.0.1, 14.0+15 more24.1.1-android139
guava-jdk5maven13.0, 17.0no fix listed18
OSV records
GHSA-mvr2-9pj6-7w5j

Charts affected

164 by stars
ChartLatestAffected imagesRadar Score
archivaslamdev0.0.71 of 2See more

archiva slamdev 0.0.7

1 of the 2 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
xetusoss/archiva:v2.2.588f25242b9ee
guava@16.0.1
24.1.1-android

Open the chart page →

6,907
newrelic-private-minionsstarcher0.1.21 of 1See more

newrelic-private-minion sstarcher 0.1.2

1 of the 1 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
guava@21.0
24.1.1-android

Open the chart page →

3,164
cerebrostakaterVerified publisher0.5.11 of 2See more

cerebro stakater 0.5.1

1 of the 2 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
lmenezes/cerebro:0.8.13e860068e403
guava@22.0
24.1.1-android

Open the chart page →

2,956
sonarqubestakaterVerified publisher0.10.31 of 2See more

sonarqube stakater 0.10.3

1 of the 2 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
library/sonarqube:6.7.6-community0ae5169e3d0f
guava@19.0
24.1.1-android

Open the chart page →

11,841
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
guava@19.0
24.1.1-android

Open the chart page →

13,767
streamastreama1.0.11 of 2See more

streama streama 1.0.1

1 of the 2 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
just1not2/streama:1.10.48a2305192dec
guava@19.0
24.1.1-android

Open the chart page →

8,554
zipkin-gcpt3n1.0.01 of 1See more

zipkin-gcp t3n 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
openzipkin/zipkin-gcp:0.15.2b5d51d1144e2
guava@19.0
24.1.1-android

Open the chart page →

4,538
temporaltemporal0.28.91 of 13See more

temporal temporal 0.28.9

1 of the 13 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
guava@18.0
24.1.1-android

Open the chart page →

21,005
queryservicewbstack0.2.11 of 1See more

queryservice wbstack 0.2.1

1 of the 1 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
ghcr.io/wbstack/queryservice:0.3.6_0.6b83b5b81d4b6
guava@22.0
24.1.1-android

Open the chart page →

4,649
queryservice-updaterwbstack0.3.01 of 1See more

queryservice-updater wbstack 0.3.0

1 of the 1 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
ghcr.io/wbstack/queryservice-updater:0.3.84_3.97525a57ac3f1
guava@22.0
24.1.1-android

Open the chart page →

3,176
drillwearefrank1.3.61 of 3See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
apache/drill:1.21.11f96558fd292
guava@13.0.1
24.1.1-android

Open the chart page →

9,397
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
guava@18.0
24.1.1-android

Open the chart page →

10,127
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
guava@18.0
24.1.1-android

Open the chart page →

22,665
opendistro-eswitcom-gmbh1.13.31 of 3See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
guava@19.0
24.1.1-android

Open the chart page →

5,806

Container images carrying it

155 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
guava@24.0-jre
24.1.1-android
8
gradiant/hdfs:2.7.73b28784ba41f
guava@11.0.2
24.1.1-android
7
library/cassandra:3.11.3ce85468c5bad
guava@18.0
24.1.1-android
7
bde2020/hive:2.3.2-postgresql-metastore620267768985
guava@11.0.2
24.1.1-android
4
gradiant/hbase-base:2.0.1a1ee6de94c04
guava@11.0.2
24.1.1-android
4
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
guava@19.0
24.1.1-android
2
apache/druid:37.0.00116fb802786
guava@14.0.1
24.1.1-android
2
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
guava@11.0.2
24.1.1-android
2
danisla/hadoop:2.9.0255ba2dd739b
guava@11.0.2
24.1.1-android
2
empathyco/elasticsearch:6.6.2-memlockbcf4365ee7ec
guava@19.0
24.1.1-android
2
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
guava@11.0.2
24.1.1-android
2
gradiant/opentsdb:2.4.0c33d53913869
guava@18.0
24.1.1-android
2
gradiant/spark:2.4.4-python-alpine97657d56e927
guava@14.0.1
24.1.1-android
2
library/cassandra:3.11.65aa8400b4b3b
guava@18.0
24.1.1-android
2
library/elasticsearch:7.17.35e6ac15bf6a5
guava@19.0
24.1.1-android
2
library/neo4j:4.3.2-enterprise56a9453c4064
guava@20.0
24.1.1-android
2
opensearchproject/opensearch:1.1.0967d7f57f72f
guava@15.0
24.1.1-android
2
scorpiobroker/scorpio:eureka-server_2.1.03f05a113a4be
guava@19.0
24.1.1-android
2
scorpiobroker/scorpio:gateway_2.1.062dae3dd0eeb
guava@19.0
24.1.1-android
2
scorpiobroker/scorpio:config-server_1.1.0c46c1517e523
guava@20.0
24.1.1-android
2
wurstmeister/zookeeper:latest7a7fd44a7210
guava@18.0
24.1.1-android
2
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
guava@11.0.2
24.1.1-android
1
aktosecurity/akto-api-protection:localbcd7382c9c1b
guava-jdk5@17.0
no fix listed
1
aktosecurity/mini-runtime:1.72.15498e3e35ecc2
guava-jdk5@17.0
no fix listed
1
aktosecurity/source-code-analyser:a-1703-merge274042ed7a53
guava-jdk5@17.0
no fix listed
1
amazon/opendistro-for-elasticsearch:1.4.06df71eb04639
guava@15.0
24.1.1-android
1
apache/drill:1.21.11f96558fd292
guava@13.0.1
24.1.1-android
1
apache/druid:29.0.10cef139b6bf1
guava@14.0.1
24.1.1-android
1
apacheignite/ignite:2.7.0d7deab68b8fa
guava@16.0.1
guava-jdk5@17.0
24.1.1-android
no fix listed
1
apache/iotdb:0.11.28647309f95d1
guava@21.0
24.1.1-android
1
apachepinot/pinot:latest-jdk110018bb04ced7
guava@14.0.1
24.1.1-android
1
apache/ranger:2.7.076c176e8a0e4
guava@11.0.2
24.1.1-android
1
apache/rocketmq-exporter:0.0.2c8fb51195444
guava@19.0
24.1.1-android
1
apache/shenyu-bootstrap:2.5.11bd5756f6273
guava@21.0
24.1.1-android
1
apache/skywalking-ui:8.1.067d50e4deff4
guava@18.0
24.1.1-android
1
assistiot/cybersecurity-monitoring_id-elk:latestba1d85ec3739
guava@15.0
24.1.1-android
1
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
guava@18.0
24.1.1-android
1
assistiot/cybersecurity-monitoring_ir-elk:latest4228b7a8ef40
guava@19.0
24.1.1-android
1
assistiot/sdn_controller:2.4.0ea254b6d8a31
guava@22.0
24.1.1-android
1
atlassian/jira-software:9.7.264a75aa4ec4e
guava@19.0
24.1.1-android
1
atomix/atomix:3.1.127738ff4f5c63
guava@22.0
24.1.1-android
1
binhex/arch-nzbhydra2:3.1.0-1-01fb8952921ab6
guava@20.0
24.1.1-android
1
bivas/presto:0.19605545994f806
guava@21.0
24.1.1-android
1
choerodon/event-store-service:0.8.03c94c97f6f69
guava@18.0
24.1.1-android
1
confluentinc/cp-kafka:5.4.01bbda887bc53
guava@20.0
24.1.1-android
1
confluentinc/cp-kafka:5.0.1c87b1c07fb53
guava@11.0.2
24.1.1-android
1
craigwillis/c2metadata-bd:latestae317d7e4724
guava@20.0
24.1.1-android
1
datappeal/hive-metastore:lateste38c085a3567
guava@11.0.2
24.1.1-android
1
dbanda/livy:0.80ca125e68e53
guava@15.0
24.1.1-android
1
dbanda/spark:2.4.6d0e6367876ae
guava@11.0.2
24.1.1-android
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.