StackRadar

CVE-2018-1257

Medium

Advisory

Published 17 Oct 2018In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.032
88th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
14
of 17,781 indexed, latest versions
Container images
17
deployed by those charts
Fix available
1 of 1
affected package

Denial of Service in org.springframework:spring-core

Carried by container images the latest versions of 14 of 17,781 indexed charts deploy, on 17 images.

Affected packageAffected versionsFixed inImages
spring-coremaven2.5.6, 2.5.6.SEC03, 3.0.7, 3.0.7.RELEASE+9 more4.3.1717
OSV records
GHSA-rcpf-vj53-7h2m

Charts affected

14 by stars
ChartLatestAffected imagesRadar Score
skywalkingkubesphere-testVerified publisher3.1.01 of 4See more

skywalking kubesphere-test 3.1.0

1 of the 4 container images this version deploys carry CVE-2018-1257.

Container imageDigestPackageFixed in
apache/skywalking-ui:8.1.067d50e4deff4
spring-core@4.3.15.RELEASE
4.3.17

Open the chart page →

18,042
distributed-jmetercloudnativeapp1.0.11 of 1See more

distributed-jmeter cloudnativeapp 1.0.1

1 of the 1 container images this version deploys carry CVE-2018-1257.

Container imageDigestPackageFixed in
pedrocesarti/jmeter-docker:3.314851f144f57
spring-core@2.5.6
4.3.17

Open the chart page →

4,532
event-store-servicechoerodon0.8.01 of 2See more

event-store-service choerodon 0.8.0

1 of the 2 container images this version deploys carry CVE-2018-1257.

Container imageDigestPackageFixed in
choerodon/event-store-service:0.8.03c94c97f6f69
spring-core@4.3.8.RELEASE
4.3.17

Open the chart page →

9,808
cosbenchcloudnativeapp1.0.11 of 1See more

cosbench cloudnativeapp 1.0.1

1 of the 1 container images this version deploys carry CVE-2018-1257.

Container imageDigestPackageFixed in
zenko/zenko-cosbench:0.0.6386a1f48ec0e
spring-core@3.0.7
4.3.17

Open the chart page →

4,906
my-chartfleet-web-app0.1.03 of 6See more

my-chart fleet-web-app 0.1.0

3 of the 6 container images this version deploys carry CVE-2018-1257.

Container imageDigestPackageFixed in
richardchesterwood/k8s-fleetman-api-gateway:release2518f946b9f05
spring-core@4.3.7.RELEASE
4.3.17
richardchesterwood/k8s-fleetman-position-simulator:release20b540a28f5a6
spring-core@4.3.2.RELEASE
4.3.17
richardchesterwood/k8s-fleetman-position-tracker:release336c43961214c
spring-core@4.3.2.RELEASE
4.3.17

Open the chart page →

24,296
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2018-1257.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
spring-core@3.2.18.RELEASE
4.3.17

Open the chart page →

27,949
hapi-fhirhapi-fhirVerified publisher0.1.01 of 1See more

hapi-fhir hapi-fhir 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-1257.

Container imageDigestPackageFixed in
polyakov/hapi-fhir-jpaserver-example:latestdbcef69146b8
spring-core@4.3.1.RELEASE
4.3.17

Open the chart page →

6,362
ibm-microclimateibm-charts0.1.02 of 8See more

ibm-microclimate ibm-charts 0.1.0

2 of the 8 container images this version deploys carry CVE-2018-1257.

Container imageDigestPackageFixed in
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
spring-core@4.3.9.RELEASE
4.3.17
ibmcom/microclimate-theia:lateste17bdccc5030
spring-core@4.3.9.RELEASE
4.3.17

Open the chart page →

57,669
ibm-ws-dyn-agent-devibm-charts1.0.01 of 1See more

ibm-ws-dyn-agent-dev ibm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-1257.

Container imageDigestPackageFixed in
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
spring-core@3.0.7.RELEASE
4.3.17

Open the chart page →

19,295
jenkinsjenkins-x0.10.381 of 2See more

jenkins jenkins-x 0.10.38

1 of the 2 container images this version deploys carry CVE-2018-1257.

Container imageDigestPackageFixed in
jenkinsci/jenkins:2.67a1f33f004659
spring-core@2.5.6.SEC03
4.3.17

Open the chart page →

10,682
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2018-1257.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
spring-core@4.3.2.RELEASE
4.3.17

Open the chart page →

55,726
cdn-remoteopencord0.2.41 of 3See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2018-1257.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
spring-core@4.3.6.RELEASE
4.3.17

Open the chart page →

63,223
archivaslamdev0.0.71 of 2See more

archiva slamdev 0.0.7

1 of the 2 container images this version deploys carry CVE-2018-1257.

Container imageDigestPackageFixed in
xetusoss/archiva:v2.2.588f25242b9ee
spring-core@4.2.1.RELEASE
4.3.17

Open the chart page →

6,907
streamastreama1.0.11 of 2See more

streama streama 1.0.1

1 of the 2 container images this version deploys carry CVE-2018-1257.

Container imageDigestPackageFixed in
just1not2/streama:1.10.48a2305192dec
spring-core@4.3.6.RELEASE
4.3.17

Open the chart page →

8,554

Container images carrying it

17 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
apache/skywalking-ui:8.1.067d50e4deff4
spring-core@4.3.15.RELEASE
4.3.17
1
choerodon/event-store-service:0.8.03c94c97f6f69
spring-core@4.3.8.RELEASE
4.3.17
1
craigwillis/c2metadata-bd:latestae317d7e4724
spring-core@4.3.2.RELEASE
4.3.17
1
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
spring-core@3.0.7.RELEASE
4.3.17
1
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
spring-core@4.3.9.RELEASE
4.3.17
1
ibmcom/microclimate-theia:lateste17bdccc5030
spring-core@4.3.9.RELEASE
4.3.17
1
jenkinsci/jenkins:2.67a1f33f004659
spring-core@2.5.6.SEC03
4.3.17
1
just1not2/streama:1.10.48a2305192dec
spring-core@4.3.6.RELEASE
4.3.17
1
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
spring-core@4.3.6.RELEASE
4.3.17
1
openkm/openkm-ce:6.3.113bc465a7461b
spring-core@3.2.18.RELEASE
4.3.17
1
pedrocesarti/jmeter-docker:3.314851f144f57
spring-core@2.5.6
4.3.17
1
polyakov/hapi-fhir-jpaserver-example:latestdbcef69146b8
spring-core@4.3.1.RELEASE
4.3.17
1
richardchesterwood/k8s-fleetman-api-gateway:release2518f946b9f05
spring-core@4.3.7.RELEASE
4.3.17
1
richardchesterwood/k8s-fleetman-position-simulator:release20b540a28f5a6
spring-core@4.3.2.RELEASE
4.3.17
1
richardchesterwood/k8s-fleetman-position-tracker:release336c43961214c
spring-core@4.3.2.RELEASE
4.3.17
1
xetusoss/archiva:v2.2.588f25242b9ee
spring-core@4.2.1.RELEASE
4.3.17
1
zenko/zenko-cosbench:0.0.6386a1f48ec0e
spring-core@3.0.7
4.3.17
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.