StackRadar

CVE-2021-28170

Medium

Advisory

Published 6 Oct 2021In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.021
81st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
152
of 17,781 indexed, latest versions
Container images
85
deployed by those charts
Fix available
1 of 2
affected packages

Improper Input Validation in Jakarta Expression Language

Carried by container images the latest versions of 152 of 17,781 indexed charts deploy, on 85 images.

Affected packageAffected versionsFixed inImages
jakarta.elmaven3.0.2, 3.0.3, 3.0.3.jbossorg-2, 3.0.3.jbossorg-43.0.455
javax.elmaven3.0.0, 3.0.1-b08, 3.0.1-b11, 3.0.1-b12no fix listed35
OSV records
GHSA-v6w3-2prq-h95f

Charts affected

152 by stars
ChartLatestAffected imagesRadar Score
keycloakcodecentricVerified publisher18.10.01 of 3See more

keycloak codecentric 18.10.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
jakarta.el@3.0.3.jbossorg-4
3.0.4

Open the chart page →

7,713
spring-petclinic-cloudplatform9-communityVerified publisher0.2.04 of 6See more

spring-petclinic-cloud platform9-community 0.2.0

4 of the 6 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
platform9community/api-gateway:latest40a4970de568
jakarta.el@3.0.3
javax.el@3.0.1-b11
3.0.4
no fix listed
platform9community/customers-service:latest2089811e5cc6
jakarta.el@3.0.3
javax.el@3.0.1-b11
3.0.4
no fix listed
platform9community/vets-service:latestd1165c94dfb3
jakarta.el@3.0.3
javax.el@3.0.1-b11
3.0.4
no fix listed
platform9community/visits-service:latest8d11b50368c6
jakarta.el@3.0.3
javax.el@3.0.1-b11
3.0.4
no fix listed

Open the chart page →

41,872
kubernetes-loggingkubernetes-logging4.8.01 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.10.0c8f3ebd2a934
javax.el@3.0.0
no fix listed

Open the chart page →

10,530
hivedmwm-bigdataVerified publisher0.1.62 of 5See more

hive dmwm-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
javax.el@3.0.0
no fix listed
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
javax.el@3.0.0
no fix listed

Open the chart page →

20,837
nzbhydra2halkeye2.30.11 of 2See more

nzbhydra2 halkeye 2.30.1

1 of the 2 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
binhex/arch-nzbhydra2:3.1.0-1-01fb8952921ab6
jakarta.el@3.0.3
3.0.4

Open the chart page →

6,711
hive-metastoreslamdev0.0.51 of 2See more

hive-metastore slamdev 0.0.5

1 of the 2 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
javax.el@3.0.0
no fix listed

Open the chart page →

8,198
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.261 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

1 of the 6 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
thingsboard/tb-node:3.6.0f40a542832c4
javax.el@3.0.0
no fix listed

Open the chart page →

14,566
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-elk:latestba1d85ec3739
javax.el@3.0.0
no fix listed

Open the chart page →

10,730
geoserver-cloudcamptocamp20.0.56 of 11See more

geoserver-cloud camptocamp2 0.0.5

6 of the 11 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
jakarta.el@3.0.3
3.0.4
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
jakarta.el@3.0.3
3.0.4
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
jakarta.el@3.0.3
3.0.4
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
jakarta.el@3.0.3
3.0.4
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
jakarta.el@3.0.3
3.0.4
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
jakarta.el@3.0.3
3.0.4

Open the chart page →

84,444
geoserverCloudcamptocamp20.0.66 of 11See more

geoserverCloud camptocamp2 0.0.6

6 of the 11 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
jakarta.el@3.0.3
3.0.4
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
jakarta.el@3.0.3
3.0.4
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
jakarta.el@3.0.3
3.0.4
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
jakarta.el@3.0.3
3.0.4
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
jakarta.el@3.0.3
3.0.4
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
jakarta.el@3.0.3
3.0.4

Open the chart page →

84,444
hbasedmwm-bigdataVerified publisher0.1.61 of 5See more

hbase dmwm-bigdata 0.1.6

1 of the 5 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
javax.el@3.0.1-b08
no fix listed

Open the chart page →

13,392
hive-metastoredmwm-bigdataVerified publisher0.1.31 of 2See more

hive-metastore dmwm-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
javax.el@3.0.0
no fix listed

Open the chart page →

6,882
opentsdbdmwm-bigdataVerified publisher0.1.71 of 6See more

opentsdb dmwm-bigdata 0.1.7

1 of the 6 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
javax.el@3.0.1-b08
no fix listed

Open the chart page →

17,511
nifi-registrydysnixVerified publisher1.1.51 of 2See more

nifi-registry dysnix 1.1.5

1 of the 2 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
apache/nifi-registry:0.8.0974efa2f21da
javax.el@3.0.1-b08
no fix listed

Open the chart page →

6,531
omada-controllergeek-cookbookVerified publisher4.4.21 of 1See more

omada-controller geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
javax.el@3.0.0
no fix listed

Open the chart page →

11,553
hbasegradiant-bigdataVerified publisher0.1.61 of 5See more

hbase gradiant-bigdata 0.1.6

1 of the 5 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
javax.el@3.0.1-b08
no fix listed

Open the chart page →

13,392
stormgresearch1.2.01 of 3See more

storm gresearch 1.2.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
library/storm:2.4.0bd5d420506d6
jakarta.el@3.0.2
javax.el@3.0.1-b12
3.0.4
no fix listed

Open the chart page →

6,165
magentomagento3.2.31 of 12See more

magento magento 3.2.3

1 of the 12 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
magento/magento-cloud-docker-opensearch:2.5-1.4.059fb6f0f1461
javax.el@3.0.0
no fix listed

Open the chart page →

13,479
nifi-registryprofyu1.14.0-r0011 of 1See more

nifi-registry profyu 1.14.0-r001

1 of the 1 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
apache/nifi-registry:1.14.0090b7f87ec7f
javax.el@3.0.1-b08
no fix listed

Open the chart page →

4,621
shinyproxyremche0.6.61 of 2See more

shinyproxy remche 0.6.6

1 of the 2 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
remche/shinyproxy:2.6.18bcda8a04d3b
javax.el@3.0.1-b11
no fix listed

Open the chart page →

3,958
keycloakaccount-serviceVerified publisher18.4.51 of 2See more

keycloak account-service 18.4.5

1 of the 2 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
jakarta.el@3.0.3.jbossorg-4
3.0.4

Open the chart page →

7,713
pagesalstom-pages-app1.0.01 of 3See more

pages alstom-pages-app 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jakarta.el@3.0.3
3.0.4

Open the chart page →

20,190
pagesandrei-pages1.0.01 of 3See more

pages andrei-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jakarta.el@3.0.3
3.0.4

Open the chart page →

20,190
omada-controllerandrelote-k8sVerified publisher4.5.01 of 1See more

omada-controller andrelote-k8s 4.5.0

1 of the 1 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
javax.el@3.0.0
no fix listed

Open the chart page →

11,553
inbox-server-distributedappscodeVerified publisher2025.12.251 of 4See more

inbox-server-distributed appscode 2025.12.25

1 of the 4 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.1.04254021a8c71
javax.el@3.0.0
no fix listed

Open the chart page →

15,573
james-komposeappscodeVerified publisher0.1.01 of 4See more

james-kompose appscode 0.1.0

1 of the 4 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.1.04254021a8c71
javax.el@3.0.0
no fix listed

Open the chart page →

16,975
chart-app-vidapp-vid-chartVerified publisher0.0.71 of 2See more

chart-app-vid app-vid-chart 0.0.7

1 of the 2 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
fimperato/sparkvid-api:1.0.5-RELEASE604012b77841
jakarta.el@3.0.3
3.0.4

Open the chart page →

8,866
idmassist-iot-identity-manager0.1.01 of 2See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
assistiot/identity-manager_kc:latest0df4b4fa899a
jakarta.el@3.0.3.jbossorg-4
3.0.4

Open the chart page →

13,352
opendistro-esbeeinventor1.15.11 of 3See more

opendistro-es beeinventor 1.15.1

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
javax.el@3.0.0
no fix listed

Open the chart page →

5,806
pagesberrutig-pages1.0.01 of 3See more

pages berrutig-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jakarta.el@3.0.3
3.0.4

Open the chart page →

20,190
pagesbrian-pages1.0.01 of 3See more

pages brian-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jakarta.el@3.0.3
3.0.4

Open the chart page →

20,190
pagesbrixton-mayuribhavsar23-pages1.0.01 of 3See more

pages brixton-mayuribhavsar23-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jakarta.el@3.0.3
3.0.4

Open the chart page →

20,190
pagesbrixton-pages1.0.01 of 3See more

pages brixton-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jakarta.el@3.0.3
3.0.4

Open the chart page →

20,190
category-microservicebusi-adsVerified publisher1.0.01 of 2See more

category-microservice busi-ads 1.0.0

1 of the 2 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
dellcloud/category:distributed02fc234353a9
jakarta.el@3.0.3
3.0.4

Open the chart page →

11,869
pagescamden-pages1.0.01 of 3See more

pages camden-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jakarta.el@3.0.3
3.0.4

Open the chart page →

20,190
geoservercamptocamp20.0.36 of 12See more

geoserver camptocamp2 0.0.3

6 of the 12 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
jakarta.el@3.0.3
3.0.4
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
jakarta.el@3.0.3
3.0.4
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
jakarta.el@3.0.3
3.0.4
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
jakarta.el@3.0.3
3.0.4
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
jakarta.el@3.0.3
3.0.4
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
jakarta.el@3.0.3
3.0.4

Open the chart page →

88,335
pagescarina-pages1.0.01 of 3See more

pages carina-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jakarta.el@3.0.3
3.0.4

Open the chart page →

20,190
pagescarmel-pages-dell1.0.01 of 3See more

pages carmel-pages-dell 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jakarta.el@3.0.3
3.0.4

Open the chart page →

20,190
cassandra-reapercloudnativeapp0.2.01 of 1See more

cassandra-reaper cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
thelastpickle/cassandra-reaper:1.3.09c53996c457d
javax.el@3.0.0
no fix listed

Open the chart page →

5,078
robot-shopcloud-native-toolkit1.1.11 of 12See more

robot-shop cloud-native-toolkit 1.1.1

1 of the 12 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
robotshop/rs-shipping:latest89753ab48919
jakarta.el@3.0.3
3.0.4

Open the chart page →

29,555
clamapicnieg2.0.51 of 2See more

clamapi cnieg 2.0.5

1 of the 2 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
audig/clamapi:2.1.62c3fe34ee430
jakarta.el@3.0.3
3.0.4

Open the chart page →

4,671
cp-helm-chartscp-helm-charts0.6.15 of 8See more

cp-helm-charts cp-helm-charts 0.6.1

5 of the 8 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
jakarta.el@3.0.3
3.0.4
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
jakarta.el@3.0.3
3.0.4
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
jakarta.el@3.0.3
3.0.4
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
jakarta.el@3.0.3
3.0.4
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
jakarta.el@3.0.3
3.0.4

Open the chart page →

58,857
pagescrypticcode-helmchart1.0.01 of 3See more

pages crypticcode-helmchart 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jakarta.el@3.0.3
3.0.4

Open the chart page →

20,190
pagesdalston-pages1.0.01 of 3See more

pages dalston-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jakarta.el@3.0.3
3.0.4

Open the chart page →

20,190
pagesdaman-dell-kuber1.0.01 of 3See more

pages daman-dell-kuber 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jakarta.el@3.0.3
3.0.4

Open the chart page →

20,190
pagesdavid-pages1.0.01 of 3See more

pages david-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jakarta.el@3.0.3
3.0.4

Open the chart page →

20,190
pagesdebasish-pages1.0.01 of 3See more

pages debasish-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jakarta.el@3.0.3
3.0.4

Open the chart page →

20,190
pagesdipak1.0.01 of 3See more

pages dipak 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jakarta.el@3.0.3
3.0.4

Open the chart page →

20,190
pagesedgwarepages1.0.01 of 3See more

pages edgwarepages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jakarta.el@3.0.3
3.0.4

Open the chart page →

20,190
shenyuerdeng2.4.211 of 2See more

shenyu erdeng 2.4.21

1 of the 2 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
jakarta.el@3.0.3
3.0.4

Open the chart page →

12,513

Container images carrying it

85 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
dellcloud/pages:monitor6ba7b22caacd
jakarta.el@3.0.3
3.0.4
79
bde2020/hive:2.3.2-postgresql-metastore620267768985
javax.el@3.0.0
no fix listed
4
gradiant/hbase-base:2.0.1a1ee6de94c04
javax.el@3.0.1-b08
no fix listed
4
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
jakarta.el@3.0.3
3.0.4
3
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
javax.el@3.0.0
no fix listed
2
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
jakarta.el@3.0.3
3.0.4
2
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
jakarta.el@3.0.3
3.0.4
2
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
jakarta.el@3.0.3
3.0.4
2
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
jakarta.el@3.0.3
3.0.4
2
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
jakarta.el@3.0.3
3.0.4
2
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
jakarta.el@3.0.3
3.0.4
2
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
javax.el@3.0.0
no fix listed
2
mbentley/omada-controller:4.3f4e682274bed
javax.el@3.0.0
no fix listed
2
opensearchproject/opensearch:2.1.04254021a8c71
javax.el@3.0.0
no fix listed
2
opensearchproject/opensearch:1.1.0967d7f57f72f
javax.el@3.0.0
no fix listed
2
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
jakarta.el@3.0.3.jbossorg-4
3.0.4
2
1dev/server:11.9.0cd5b12fe5471
javax.el@3.0.0
no fix listed
1
andrianrf/bpjstk-service:latest46abe878d9d8
jakarta.el@3.0.3
3.0.4
1
andrianrf/bpjstk-simulator:latestb63fdb51d39d
jakarta.el@3.0.3
3.0.4
1
andrianrf/iso-client:latestba560086ce15
jakarta.el@3.0.3
3.0.4
1
andrianrf/iso-server:latest7da47f525c7d
jakarta.el@3.0.3
3.0.4
1
apache/drill:1.21.11f96558fd292
javax.el@3.0.0
no fix listed
1
apache/nifi-registry:1.14.0090b7f87ec7f
javax.el@3.0.1-b08
no fix listed
1
apache/nifi-registry:0.8.0974efa2f21da
javax.el@3.0.1-b08
no fix listed
1
apache/skywalking-ui:8.9.180530f0308a5
jakarta.el@3.0.3
3.0.4
1
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
jakarta.el@3.0.3
3.0.4
1
assistiot/cybersecurity-monitoring_id-elk:latestba1d85ec3739
javax.el@3.0.0
no fix listed
1
assistiot/identity-manager_kc:latest0df4b4fa899a
jakarta.el@3.0.3.jbossorg-4
3.0.4
1
audig/clamapi:2.1.62c3fe34ee430
jakarta.el@3.0.3
3.0.4
1
binhex/arch-nzbhydra2:3.1.0-1-01fb8952921ab6
jakarta.el@3.0.3
3.0.4
1
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
jakarta.el@3.0.3
3.0.4
1
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
jakarta.el@3.0.3
3.0.4
1
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
jakarta.el@3.0.3
3.0.4
1
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
jakarta.el@3.0.3
3.0.4
1
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
jakarta.el@3.0.3
3.0.4
1
dellcloud/category:distributed02fc234353a9
jakarta.el@3.0.3
3.0.4
1
dellcloud/pages:1.04d2eb25b9225
jakarta.el@3.0.3
3.0.4
1
dremio/dremio-oss:24.1.080ed2e3b7c43
javax.el@3.0.1-b11
no fix listed
1
fimperato/sparkvid-api:1.0.5-RELEASE604012b77841
jakarta.el@3.0.3
3.0.4
1
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
jakarta.el@3.0.3
3.0.4
1
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
jakarta.el@3.0.3
3.0.4
1
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
jakarta.el@3.0.3
3.0.4
1
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
jakarta.el@3.0.3
3.0.4
1
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
jakarta.el@3.0.3
3.0.4
1
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
jakarta.el@3.0.3
3.0.4
1
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
jakarta.el@3.0.3
3.0.4
1
gotson/komga:0.99.49b15ea6bfc30
jakarta.el@3.0.3
3.0.4
1
gradiant/jmxproxy:3.4.045eceb1bc55c
javax.el@3.0.0
no fix listed
1
jhidalgo3/spring-echo-example:lateste08733191ea0
jakarta.el@3.0.3
3.0.4
1
krontechnology/aapm-agent:1.1.07feef7d2ab42
jakarta.el@3.0.3
3.0.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.