StackRadarChart IndexLive demo

CVE-2020-1953

Critical

Advisory

Published 21 May 2020In the index since 8 Sept 2026

Severity: Critical; worst across findings
CVSS: 10.0; base score, highest
EPSS: 0.068; 94th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3; of 17,781 indexed, latest versions
Container images: 3; deployed by those charts
Fix available: 1 of 1; affected package

Remote code execution in Apache Commons Configuration

Carried by container images the latest versions of 3 of 17,781 indexed charts deploy, on 3 images.

Affected package	Affected versions	Fixed in	Images
commons-configuration2maven	2.4, 2.5	2.7	3

OSV records: GHSA-7qx4-pp76-vrqh

Charts affected

3 by stars

Chart

Latest

Affected images

Radar Score

gocdcloudnativeapp

1 of 2 See more

gocd cloudnativeapp 1.9.2

1 of the 2 container images this version deploys carry CVE-2020-1953.

Container image	Digest	Package	Fixed in
gocd/gocd-server :v19.3.0	2da45cb09d57	commons-configuration2@2.4	2.7

Open the chart page →

9,144

1 of 4 See more

accumulo gaffer 2.2.1

1 of the 4 container images this version deploys carry CVE-2020-1953.

Container image	Digest	Package	Fixed in
gchq/accumulo :2.0.1	c460bb587d6d	commons-configuration2@2.5	2.7

Open the chart page →

16,892

atlassian-confluencesomeblackmagic

1 of 1 See more

atlassian-confluence someblackmagic 3.4.1

1 of the 1 container images this version deploys carry CVE-2020-1953.

Container image	Digest	Package	Fixed in
atlassian/confluence-server :7.10.0	3b9222ab32ef	commons-configuration2@2.5	2.7

Open the chart page →

13,605

Container images carrying it

3 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
atlassian/confluence-server :7.10.0	3b9222ab32ef	commons-configuration2@2.5	2.7	1
gchq/accumulo :2.0.1	c460bb587d6d	commons-configuration2@2.5	2.7	1
gocd/gocd-server :v19.3.0	2da45cb09d57	commons-configuration2@2.4	2.7	1