StackRadar

CVE-2018-15756

High

Advisory

Published 15 Jun 2020In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.092
95th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
16
of 17,781 indexed, latest versions
Container images
18
deployed by those charts
Fix available
1 of 1
affected package

Denial of Service in Spring Framework

Carried by container images the latest versions of 16 of 17,781 indexed charts deploy, on 18 images.

Affected packageAffected versionsFixed inImages
spring-coremaven4.2.1.RELEASE, 4.3.1.RELEASE, 4.3.2.RELEASE, 4.3.6.RELEASE+7 more4.3.20.RELEASE, 5.0.10.RELEASE18
OSV records
GHSA-ffvq-7w96-97p7

Charts affected

16 by stars
ChartLatestAffected imagesRadar Score
skywalkingkubesphere-testVerified publisher3.1.01 of 4See more

skywalking kubesphere-test 3.1.0

1 of the 4 container images this version deploys carry CVE-2018-15756.

Container imageDigestPackageFixed in
apache/skywalking-ui:8.1.067d50e4deff4
spring-core@4.3.15.RELEASE
4.3.20.RELEASE

Open the chart page →

18,042
ignitecloudnativeapp1.0.01 of 1See more

ignite cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-15756.

Container imageDigestPackageFixed in
apacheignite/ignite:2.7.0d7deab68b8fa
spring-core@5.0.8.RELEASE
5.0.10.RELEASE

Open the chart page →

7,891
apache-iotdbapache-iotdb-single-nodeVerified publisher0.1.01 of 1See more

apache-iotdb apache-iotdb-single-node 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-15756.

Container imageDigestPackageFixed in
apache/iotdb:0.11.28647309f95d1
spring-core@4.3.18.RELEASE
4.3.20.RELEASE

Open the chart page →

5,277
event-store-servicechoerodon0.8.01 of 2See more

event-store-service choerodon 0.8.0

1 of the 2 container images this version deploys carry CVE-2018-15756.

Container imageDigestPackageFixed in
choerodon/event-store-service:0.8.03c94c97f6f69
spring-core@4.3.8.RELEASE
4.3.20.RELEASE

Open the chart page →

9,808
rundeckcloudnativeapp0.1.01 of 2See more

rundeck cloudnativeapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2018-15756.

Container imageDigestPackageFixed in
rundeck/rundeck:3.0.16b13e8059ad72
spring-core@4.3.18.RELEASE
4.3.20.RELEASE

Open the chart page →

23,665
pulsarcnieg1.0.81 of 2See more

pulsar cnieg 1.0.8

1 of the 2 container images this version deploys carry CVE-2018-15756.

Container imageDigestPackageFixed in
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
spring-core@5.0.6.RELEASE
5.0.10.RELEASE

Open the chart page →

16,860
my-chartfleet-web-app0.1.03 of 6See more

my-chart fleet-web-app 0.1.0

3 of the 6 container images this version deploys carry CVE-2018-15756.

Container imageDigestPackageFixed in
richardchesterwood/k8s-fleetman-api-gateway:release2518f946b9f05
spring-core@4.3.7.RELEASE
4.3.20.RELEASE
richardchesterwood/k8s-fleetman-position-simulator:release20b540a28f5a6
spring-core@4.3.2.RELEASE
4.3.20.RELEASE
richardchesterwood/k8s-fleetman-position-tracker:release336c43961214c
spring-core@4.3.2.RELEASE
4.3.20.RELEASE

Open the chart page →

24,296
hapi-fhirhapi-fhirVerified publisher0.1.01 of 1See more

hapi-fhir hapi-fhir 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-15756.

Container imageDigestPackageFixed in
polyakov/hapi-fhir-jpaserver-example:latestdbcef69146b8
spring-core@4.3.1.RELEASE
4.3.20.RELEASE

Open the chart page →

6,362
springboothelmcharts1.0.01 of 1See more

springboot helmcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-15756.

Container imageDigestPackageFixed in
kimb88/hello-world-spring-boot:latest0639155241cb
spring-core@5.0.8.RELEASE
5.0.10.RELEASE

Open the chart page →

6,451
ibm-microclimateibm-charts0.1.02 of 8See more

ibm-microclimate ibm-charts 0.1.0

2 of the 8 container images this version deploys carry CVE-2018-15756.

Container imageDigestPackageFixed in
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
spring-core@4.3.9.RELEASE
4.3.20.RELEASE
ibmcom/microclimate-theia:lateste17bdccc5030
spring-core@4.3.9.RELEASE
4.3.20.RELEASE

Open the chart page →

57,669
pulsarv2milvus-helm2.7.81 of 4See more

pulsarv2 milvus-helm 2.7.8

1 of the 4 container images this version deploys carry CVE-2018-15756.

Container imageDigestPackageFixed in
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
spring-core@5.0.6.RELEASE
5.0.10.RELEASE

Open the chart page →

15,855
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2018-15756.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
spring-core@4.3.2.RELEASE
4.3.20.RELEASE

Open the chart page →

55,726
cdn-remoteopencord0.2.41 of 3See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2018-15756.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
spring-core@4.3.6.RELEASE
4.3.20.RELEASE

Open the chart page →

63,223
ves-agentopencord1.0.21 of 1See more

ves-agent opencord 1.0.2

1 of the 1 container images this version deploys carry CVE-2018-15756.

Container imageDigestPackageFixed in
opencord/ves-agent:1.0.04187e2a8c918
spring-core@5.0.6.RELEASE
5.0.10.RELEASE

Open the chart page →

6,350
archivaslamdev0.0.71 of 2See more

archiva slamdev 0.0.7

1 of the 2 container images this version deploys carry CVE-2018-15756.

Container imageDigestPackageFixed in
xetusoss/archiva:v2.2.588f25242b9ee
spring-core@4.2.1.RELEASE
4.3.20.RELEASE

Open the chart page →

6,907
streamastreama1.0.11 of 2See more

streama streama 1.0.1

1 of the 2 container images this version deploys carry CVE-2018-15756.

Container imageDigestPackageFixed in
just1not2/streama:1.10.48a2305192dec
spring-core@4.3.6.RELEASE
4.3.20.RELEASE

Open the chart page →

8,554

Container images carrying it

18 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
spring-core@5.0.6.RELEASE
5.0.10.RELEASE
2
apacheignite/ignite:2.7.0d7deab68b8fa
spring-core@5.0.8.RELEASE
5.0.10.RELEASE
1
apache/iotdb:0.11.28647309f95d1
spring-core@4.3.18.RELEASE
4.3.20.RELEASE
1
apache/skywalking-ui:8.1.067d50e4deff4
spring-core@4.3.15.RELEASE
4.3.20.RELEASE
1
choerodon/event-store-service:0.8.03c94c97f6f69
spring-core@4.3.8.RELEASE
4.3.20.RELEASE
1
craigwillis/c2metadata-bd:latestae317d7e4724
spring-core@4.3.2.RELEASE
4.3.20.RELEASE
1
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
spring-core@4.3.9.RELEASE
4.3.20.RELEASE
1
ibmcom/microclimate-theia:lateste17bdccc5030
spring-core@4.3.9.RELEASE
4.3.20.RELEASE
1
just1not2/streama:1.10.48a2305192dec
spring-core@4.3.6.RELEASE
4.3.20.RELEASE
1
kimb88/hello-world-spring-boot:latest0639155241cb
spring-core@5.0.8.RELEASE
5.0.10.RELEASE
1
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
spring-core@4.3.6.RELEASE
4.3.20.RELEASE
1
opencord/ves-agent:1.0.04187e2a8c918
spring-core@5.0.6.RELEASE
5.0.10.RELEASE
1
polyakov/hapi-fhir-jpaserver-example:latestdbcef69146b8
spring-core@4.3.1.RELEASE
4.3.20.RELEASE
1
richardchesterwood/k8s-fleetman-api-gateway:release2518f946b9f05
spring-core@4.3.7.RELEASE
4.3.20.RELEASE
1
richardchesterwood/k8s-fleetman-position-simulator:release20b540a28f5a6
spring-core@4.3.2.RELEASE
4.3.20.RELEASE
1
richardchesterwood/k8s-fleetman-position-tracker:release336c43961214c
spring-core@4.3.2.RELEASE
4.3.20.RELEASE
1
rundeck/rundeck:3.0.16b13e8059ad72
spring-core@4.3.18.RELEASE
4.3.20.RELEASE
1
xetusoss/archiva:v2.2.588f25242b9ee
spring-core@4.2.1.RELEASE
4.3.20.RELEASE
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.