StackRadar

CVE-2019-10086

High

Advisory

Published 15 Jun 2020In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.3
base score, highest
EPSS
0.292
98th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
45
of 17,781 indexed, latest versions
Container images
57
deployed by those charts
Fix available
1 of 1
affected package

Insecure Deserialization in Apache Commons Beanutils

Carried by container images the latest versions of 45 of 17,781 indexed charts deploy, on 57 images.

Affected packageAffected versionsFixed inImages
commons-beanutilsmaven1.8.0, 1.8.3, 1.9.2, 1.9.31.9.457
OSV records
GHSA-6phf-73q6-gh87

Charts affected

45 by stars
ChartLatestAffected imagesRadar Score
microcksmicrocksOfficialVerified publisher0.8.0-helm-3.kube-1.171 of 5See more

microcks microcks 0.8.0-helm-3.kube-1.17

1 of the 5 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
microcks/microcks:0.8.0e3a3e0c67b09
commons-beanutils@1.9.3
1.9.4

Open the chart page →

10,732
sparkmicrosoft1.0.42 of 3See more

spark microsoft 1.0.4

2 of the 3 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
dbanda/livy:0.80ca125e68e53
commons-beanutils@1.9.3
1.9.4
dbanda/spark:2.4.6d0e6367876ae
commons-beanutils@1.9.3
1.9.4

Open the chart page →

13,738
unifi-controllerqonstruktVerified publisher2.6.11 of 1See more

unifi-controller qonstrukt 2.6.1

1 of the 1 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:8.0.240ae315a3a456
commons-beanutils@1.9.2
1.9.4

Open the chart page →

10,469
unifigeek-cookbookVerified publisher5.1.31 of 1See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.4.162b3edc809a3ff
commons-beanutils@1.9.2
1.9.4

Open the chart page →

11,839
hive-metastoreheva-helm-chartsVerified publisher0.2.01 of 2See more

hive-metastore heva-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
sslhep/hive-metastore:3.1.39e80af083079
commons-beanutils@1.9.3
1.9.4

Open the chart page →

7,335
distributed-jmetercloudnativeapp1.0.11 of 1See more

distributed-jmeter cloudnativeapp 1.0.1

1 of the 1 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
pedrocesarti/jmeter-docker:3.314851f144f57
commons-beanutils@1.8.3
1.9.4

Open the chart page →

4,532
ignitecloudnativeapp1.0.01 of 1See more

ignite cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
apacheignite/ignite:2.7.0d7deab68b8fa
commons-beanutils@1.9.2
1.9.4

Open the chart page →

7,891
omada-controllergeek-cookbookVerified publisher4.4.21 of 1See more

omada-controller geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
commons-beanutils@1.9.3
1.9.4

Open the chart page →

11,553
graylogt3n1.0.01 of 3See more

graylog t3n 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
graylog2/server:2.4.3-38ff28c66e6c1
commons-beanutils@1.9.3
1.9.4

Open the chart page →

8,063
omada-controllerandrelote-k8sVerified publisher4.5.01 of 1See more

omada-controller andrelote-k8s 4.5.0

1 of the 1 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
commons-beanutils@1.9.3
1.9.4

Open the chart page →

11,553
sdn-controllerassist-iot-sdn-controller2.4.01 of 1See more

sdn-controller assist-iot-sdn-controller 2.4.0

1 of the 1 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
assistiot/sdn_controller:2.4.0ea254b6d8a31
commons-beanutils@1.9.3
1.9.4

Open the chart page →

7,936
tsoragecetic0.4.111 of 8See more

tsorage cetic 0.4.11

1 of the 8 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:5.0.1c87b1c07fb53
commons-beanutils@1.8.3
1.9.4

Open the chart page →

12,018
cassandra-reapercloudnativeapp0.2.01 of 1See more

cassandra-reaper cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
thelastpickle/cassandra-reaper:1.3.09c53996c457d
commons-beanutils@1.8.3
1.9.4

Open the chart page →

5,078
gocdcloudnativeapp1.9.21 of 2See more

gocd cloudnativeapp 1.9.2

1 of the 2 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
gocd/gocd-server:v19.3.02da45cb09d57
commons-beanutils@1.8.3
1.9.4

Open the chart page →

9,144
neo4jcloudnativeapp1.0.01 of 1See more

neo4j cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
library/neo4j:3.4.5-enterprisea1ba477fa412
commons-beanutils@1.9.3
1.9.4

Open the chart page →

2,837
rundeckcloudnativeapp0.1.01 of 2See more

rundeck cloudnativeapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
rundeck/rundeck:3.0.16b13e8059ad72
commons-beanutils@1.9.3
1.9.4

Open the chart page →

23,665
unificloudnativeapp0.4.21 of 1See more

unifi cloudnativeapp 0.4.2

1 of the 1 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
jacobalberty/unifi:5.10.19c409924e2463
commons-beanutils@1.9.3
1.9.4

Open the chart page →

22,442
spark-standalonedmwm-bigdataVerified publisher0.1.01 of 2See more

spark-standalone dmwm-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
gradiant/spark:2.4.4-python-alpine97657d56e927
commons-beanutils@1.9.3
1.9.4

Open the chart page →

6,147
mod-marccatfolio-org0.1.301 of 1See more

mod-marccat folio-org 0.1.30

1 of the 1 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
folioci/mod-marccat:latest1b57d690d568
commons-beanutils@1.9.2
1.9.4

Open the chart page →

6,988
accumulogaffer2.2.11 of 4See more

accumulo gaffer 2.2.1

1 of the 4 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
gchq/accumulo:2.0.1c460bb587d6d
commons-beanutils@1.9.3
1.9.4

Open the chart page →

16,892
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
commons-beanutils@1.8.3
1.9.4

Open the chart page →

27,949
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.81 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
commons-beanutils@1.8.0
1.9.4

Open the chart page →

34,754
spark-standalonegradiant-bigdataVerified publisher0.1.01 of 2See more

spark-standalone gradiant-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
gradiant/spark:2.4.4-python-alpine97657d56e927
commons-beanutils@1.9.3
1.9.4

Open the chart page →

6,147
ibm-business-automation-insights-devibm-charts3.2.01 of 6See more

ibm-business-automation-insights-dev ibm-charts 3.2.0

1 of the 6 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
ibmcom/bai-flink-dev:19.0.2e31ff09e8aad
commons-beanutils@1.9.3
1.9.4

Open the chart page →

39,349
ibm-kerify-devibm-charts1.0.01 of 1See more

ibm-kerify-dev ibm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
ibmcom/icp-sert-bats:3.2.0b558f2b444ae
commons-beanutils@1.9.3
1.9.4

Open the chart page →

8,221
itm-mqtt-brokerintelVerified publisher1.0.01 of 1See more

itm-mqtt-broker intel 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
hivemq/hivemq4:dns-4.5.144d194450d48e
commons-beanutils@1.9.2
1.9.4

Open the chart page →

2,653
jenkinsjenkins-x0.10.381 of 2See more

jenkins jenkins-x 0.10.38

1 of the 2 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
jenkinsci/jenkins:2.67a1f33f004659
commons-beanutils@1.8.3
1.9.4

Open the chart page →

10,682
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
ladeit/ladeit:latest962b665ffe82
commons-beanutils@1.9.3
1.9.4

Open the chart page →

26,356
unifimidokura-communityVerified publisher0.0.61 of 1See more

unifi midokura-community 0.0.6

1 of the 1 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:7.3.83ab105cc50322
commons-beanutils@1.9.2
1.9.4

Open the chart page →

11,188
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
mintproject/model-catalog-endpoint:29256555a6fbaefae4729d5cd259564708a4ab04ffbb13f20465
commons-beanutils@1.8.3
1.9.4

Open the chart page →

43,341
polyglotncsaVerified publisher0.1.114 of 18See more

polyglot ncsa 0.1.1

14 of the 18 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
commons-beanutils@1.8.3
1.9.4
ncsapolyglot/converters-avconv:latestc44b22eb58bb
commons-beanutils@1.8.3
1.9.4
ncsapolyglot/converters-ebook-convert:latest438d82cdbdb5
commons-beanutils@1.8.3
1.9.4
ncsapolyglot/converters-ffmpeg:latest48c852c1204b
commons-beanutils@1.8.3
1.9.4
ncsapolyglot/converters-flac:latest072cf5bc6f99
commons-beanutils@1.8.3
1.9.4
ncsapolyglot/converters-gdal:latestf746049515c1
commons-beanutils@1.8.3
1.9.4
ncsapolyglot/converters-ghostscript:latestf350da56dd55
commons-beanutils@1.8.3
1.9.4
ncsapolyglot/converters-htmldoc:latest317dd9e56922
commons-beanutils@1.8.3
1.9.4
ncsapolyglot/converters-imagemagick:latestd244ea8c32ac
commons-beanutils@1.8.3
1.9.4
ncsapolyglot/converters-openjpeg:latest2ba4af461d51
commons-beanutils@1.8.3
1.9.4
ncsapolyglot/converters-txt2html:latest30ee96508c0b
commons-beanutils@1.8.3
1.9.4
ncsapolyglot/converters-unoconv:latest1d9cebe3022b
commons-beanutils@1.8.3
1.9.4
ncsapolyglot/converters-zip:latestf889fe30e2c7
commons-beanutils@1.8.3
1.9.4
ncsapolyglot/polyglot:2.4.097a8c01c076e
commons-beanutils@1.8.3
1.9.4

Open the chart page →

55,726
cdn-remoteopencord0.2.41 of 3See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
commons-beanutils@1.9.3
1.9.4

Open the chart page →

63,223
onosopencord3.0.21 of 1See more

onos opencord 3.0.2

1 of the 1 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
onosproject/onos:2.2.144914a8d4b3f
commons-beanutils@1.9.3
1.9.4

Open the chart page →

12,927
voltha-infraopencord2.14.01 of 10See more

voltha-infra opencord 2.14.0

1 of the 10 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
voltha/voltha-onos:5.1.8e038acb950d3
commons-beanutils@1.9.3
1.9.4

Open the chart page →

41,044
smsf-configurationopenshift1.0.41 of 1See more

smsf-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
gurolakman/smsf-configuration:1.0.49abb3882bcbd
commons-beanutils@1.8.0
1.9.4

Open the chart page →

13,607
smsf-momtopenshift1.0.41 of 1See more

smsf-momt openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
gurolakman/smsf-momt:1.0.4ce23b20a8a17
commons-beanutils@1.8.0
1.9.4

Open the chart page →

13,568
smsf-registrationopenshift1.0.41 of 1See more

smsf-registration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
gurolakman/smsf-registration:1.0.4b22e746edd5d
commons-beanutils@1.8.0
1.9.4

Open the chart page →

13,551
ussigw-configurationopenshift1.0.41 of 1See more

ussigw-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
commons-beanutils@1.8.0
1.9.4

Open the chart page →

13,455
ussigw-coreopenshift1.0.41 of 1See more

ussigw-core openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
gurolakman/ussigw-core:1.0.48739565c3ea2
commons-beanutils@1.8.0
1.9.4

Open the chart page →

13,100
hive-metastorepresto-loadbalancer0.2.31 of 1See more

hive-metastore presto-loadbalancer 0.2.3

1 of the 1 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
datappeal/hive-metastore:lateste38c085a3567
commons-beanutils@1.9.3
1.9.4

Open the chart page →

9,606
archivaslamdev0.0.71 of 2See more

archiva slamdev 0.0.7

1 of the 2 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
xetusoss/archiva:v2.2.588f25242b9ee
commons-beanutils@1.8.3
1.9.4

Open the chart page →

6,907
newrelic-private-minionsstarcher0.1.21 of 1See more

newrelic-private-minion sstarcher 0.1.2

1 of the 1 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
commons-beanutils@1.9.2
1.9.4

Open the chart page →

3,164
sonarqubestakaterVerified publisher0.10.31 of 2See more

sonarqube stakater 0.10.3

1 of the 2 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
library/sonarqube:6.7.6-community0ae5169e3d0f
commons-beanutils@1.9.3
1.9.4

Open the chart page →

11,841
unifistartechnicaVerified publisher0.1.31 of 2See more

unifi startechnica 0.1.3

1 of the 2 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.1.664a3616625dda
commons-beanutils@1.9.2
1.9.4

Open the chart page →

14,493
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2019-10086.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
commons-beanutils@1.9.3
1.9.4

Open the chart page →

13,767

Container images carrying it

57 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
rundeck/rundeck:3.0.16b13e8059ad72
commons-beanutils@1.9.3
1.9.4
1
sslhep/hive-metastore:3.1.39e80af083079
commons-beanutils@1.9.3
1.9.4
1
thelastpickle/cassandra-reaper:1.3.09c53996c457d
commons-beanutils@1.8.3
1.9.4
1
trinodb/trino:405ee80ab5eeab2
commons-beanutils@1.9.3
1.9.4
1
voltha/voltha-onos:5.1.8e038acb950d3
commons-beanutils@1.9.3
1.9.4
1
xetusoss/archiva:v2.2.588f25242b9ee
commons-beanutils@1.8.3
1.9.4
1
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
commons-beanutils@1.9.2
1.9.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.