CVE-2018-1274

High

Advisory

Published 17 Oct 2018In the index since 8 Sept 2026

Spring Data Commons contain a property path parser vulnerability caused by unlimited resource allocation

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
spring-data-commonsmaven	1.12.2.RELEASE, 1.12.4.RELEASE	1.13.11	2

2 by stars

Chart

Latest

Affected images

Radar Score

my-chartfleet-web-app

1 of the 6 container images this version deploys carry CVE-2018-1274.

Container image	Digest	Package	Fixed in
richardchesterwood/k8s-fleetman-position-tracker :release3	36c43961214c	spring-data-commons@1.12.2.RELEASE	1.13.11

24,296

1 of the 1 container images this version deploys carry CVE-2018-1274.

Container image	Digest	Package	Fixed in
polyakov/hapi-fhir-jpaserver-example :latest	dbcef69146b8	spring-data-commons@1.12.4.RELEASE	1.13.11

6,362

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
polyakov/hapi-fhir-jpaserver-example :latest	dbcef69146b8	spring-data-commons@1.12.4.RELEASE	1.13.11	1
richardchesterwood/k8s-fleetman-position-tracker :release3	36c43961214c	spring-data-commons@1.12.2.RELEASE	1.13.11	1