CVE-2019-12402
HighAdvisory
Published 11 Oct 2019In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.162
- 97th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 15
- of 17,781 indexed, latest versions
- Container images
- 18
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Denial of Service in Apache Commons Compress
Carried by container images the latest versions of 15 of 17,781 indexed charts deploy, on 18 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| commons-compressmaven | 1.16.1, 1.17, 1.18 | 1.19 | 18 |
- OSV records
- GHSA-53x6-4x5p-rrvv
Charts affected
15 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| sparkmicrosoft | 1.0.4 | 2 of 3See more | 13,738 |
| stormgresearch | 1.2.0 | 1 of 3See more | 6,165 |
| seldon-coreseldon | 0.2.7 | 2 of 3See more | 13,798 |
| neo4jcloudnativeapp | 1.0.0 | 1 of 1See more | 2,837 |
| teedygeek-cookbookVerified publisher | 6.2.0 | 1 of 1See more | 26,944 |
| ibm-app-navigatoribm-charts | 1.0.1 | 2 of 5See more | 32,915 |
| ibm-business-automation-insights-devibm-charts | 3.2.0 | 1 of 6See more | 39,349 |
| thehiveittrident-oss | 0.1.0 | 1 of 6See more | 6,122 |
| ladeitladeit | 0.4.0 | 1 of 2See more | 26,356 |
| MINTmint | 8.0.2 | 1 of 15See more | 43,341 |
| seldon-core-oauth-gatewayseldon | 0.3.1 | 1 of 2See more | 8,098 |
| trinostatcan | 1.23.4 | 1 of 2See more | 13,767 |
| queryservicewbstack | 0.2.1 | 1 of 1See more | 4,649 |
| queryservice-updaterwbstack | 0.3.0 | 1 of 1See more | 3,176 |
| sonarqubewebencryptor | 6.7.3 | 1 of 3See more | 5,460 |
Container images carrying it
18 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| dbanda/ | 0ca125e68e53 | commons-compress | 1.19 | 1 |
| dbanda/ | d0e6367876ae | commons-compress | 1.19 | 1 |
| ibmcom/ | ce9d2a564273 | commons-compress | 1.19 | 1 |
| ibmcom/ | a6748792da26 | commons-compress | 1.19 | 1 |
| ibmcom/ | e31ff09e8aad | commons-compress | 1.19 | 1 |
| ladeit/ | 962b665ffe82 | commons-compress | 1.19 | 1 |
| library/ | a1ba477fa412 | commons-compress | 1.19 | 1 |
| library/ | a246bc64207e | commons-compress | 1.19 | 1 |
| library/ | bd5d420506d6 | commons-compress | 1.19 | 1 |
| mintproject/ | ffbb13f20465 | commons-compress | 1.19 | 1 |
| seldonio/ | ba81b17f00eb | commons-compress | 1.19 | 1 |
| seldonio/ | eea0d3f578ca | commons-compress | 1.19 | 1 |
| seldonio/ | 29e362bb1ba2 | commons-compress | 1.19 | 1 |
| sismics/ | f4b0ef019cf1 | commons-compress | 1.19 | 1 |
| thehiveproject/ | f4bc64fb8844 | commons-compress | 1.19 | 1 |
| trinodb/ | ee80ab5eeab2 | commons-compress | 1.19 | 1 |
| ghcr.io/ | b83b5b81d4b6 | commons-compress | 1.19 | 1 |
| ghcr.io/ | 7525a57ac3f1 | commons-compress | 1.19 | 1 |