StackRadar

CVE-2021-28170

Medium

Advisory

Published 6 Oct 2021In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.021
81st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
152
of 17,781 indexed, latest versions
Container images
85
deployed by those charts
Fix available
1 of 2
affected packages

Improper Input Validation in Jakarta Expression Language

Carried by container images the latest versions of 152 of 17,781 indexed charts deploy, on 85 images.

Affected packageAffected versionsFixed inImages
jakarta.elmaven3.0.2, 3.0.3, 3.0.3.jbossorg-2, 3.0.3.jbossorg-43.0.455
javax.elmaven3.0.0, 3.0.1-b08, 3.0.1-b11, 3.0.1-b12no fix listed35
OSV records
GHSA-v6w3-2prq-h95f

Charts affected

152 by stars
ChartLatestAffected imagesRadar Score
keycloakcodecentricVerified publisher18.10.01 of 3See more

keycloak codecentric 18.10.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
jakarta.el@3.0.3.jbossorg-4
3.0.4

Open the chart page →

7,713
spring-petclinic-cloudplatform9-communityVerified publisher0.2.04 of 6See more

spring-petclinic-cloud platform9-community 0.2.0

4 of the 6 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
platform9community/api-gateway:latest40a4970de568
jakarta.el@3.0.3
javax.el@3.0.1-b11
3.0.4
no fix listed
platform9community/customers-service:latest2089811e5cc6
jakarta.el@3.0.3
javax.el@3.0.1-b11
3.0.4
no fix listed
platform9community/vets-service:latestd1165c94dfb3
jakarta.el@3.0.3
javax.el@3.0.1-b11
3.0.4
no fix listed
platform9community/visits-service:latest8d11b50368c6
jakarta.el@3.0.3
javax.el@3.0.1-b11
3.0.4
no fix listed

Open the chart page →

41,872
kubernetes-loggingkubernetes-logging4.8.01 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.10.0c8f3ebd2a934
javax.el@3.0.0
no fix listed

Open the chart page →

10,530
hivedmwm-bigdataVerified publisher0.1.62 of 5See more

hive dmwm-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
javax.el@3.0.0
no fix listed
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
javax.el@3.0.0
no fix listed

Open the chart page →

20,837
nzbhydra2halkeye2.30.11 of 2See more

nzbhydra2 halkeye 2.30.1

1 of the 2 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
binhex/arch-nzbhydra2:3.1.0-1-01fb8952921ab6
jakarta.el@3.0.3
3.0.4

Open the chart page →

6,711
hive-metastoreslamdev0.0.51 of 2See more

hive-metastore slamdev 0.0.5

1 of the 2 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
javax.el@3.0.0
no fix listed

Open the chart page →

8,198
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.261 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

1 of the 6 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
thingsboard/tb-node:3.6.0f40a542832c4
javax.el@3.0.0
no fix listed

Open the chart page →

14,566
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-elk:latestba1d85ec3739
javax.el@3.0.0
no fix listed

Open the chart page →

10,730
geoserver-cloudcamptocamp20.0.56 of 11See more

geoserver-cloud camptocamp2 0.0.5

6 of the 11 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
jakarta.el@3.0.3
3.0.4
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
jakarta.el@3.0.3
3.0.4
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
jakarta.el@3.0.3
3.0.4
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
jakarta.el@3.0.3
3.0.4
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
jakarta.el@3.0.3
3.0.4
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
jakarta.el@3.0.3
3.0.4

Open the chart page →

84,444
geoserverCloudcamptocamp20.0.66 of 11See more

geoserverCloud camptocamp2 0.0.6

6 of the 11 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
jakarta.el@3.0.3
3.0.4
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
jakarta.el@3.0.3
3.0.4
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
jakarta.el@3.0.3
3.0.4
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
jakarta.el@3.0.3
3.0.4
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
jakarta.el@3.0.3
3.0.4
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
jakarta.el@3.0.3
3.0.4

Open the chart page →

84,444
hbasedmwm-bigdataVerified publisher0.1.61 of 5See more

hbase dmwm-bigdata 0.1.6

1 of the 5 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
javax.el@3.0.1-b08
no fix listed

Open the chart page →

13,392
hive-metastoredmwm-bigdataVerified publisher0.1.31 of 2See more

hive-metastore dmwm-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
javax.el@3.0.0
no fix listed

Open the chart page →

6,882
opentsdbdmwm-bigdataVerified publisher0.1.71 of 6See more

opentsdb dmwm-bigdata 0.1.7

1 of the 6 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
javax.el@3.0.1-b08
no fix listed

Open the chart page →

17,511
nifi-registrydysnixVerified publisher1.1.51 of 2See more

nifi-registry dysnix 1.1.5

1 of the 2 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
apache/nifi-registry:0.8.0974efa2f21da
javax.el@3.0.1-b08
no fix listed

Open the chart page →

6,531
omada-controllergeek-cookbookVerified publisher4.4.21 of 1See more

omada-controller geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
javax.el@3.0.0
no fix listed

Open the chart page →

11,553
hbasegradiant-bigdataVerified publisher0.1.61 of 5See more

hbase gradiant-bigdata 0.1.6

1 of the 5 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
javax.el@3.0.1-b08
no fix listed

Open the chart page →

13,392
stormgresearch1.2.01 of 3See more

storm gresearch 1.2.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
library/storm:2.4.0bd5d420506d6
jakarta.el@3.0.2
javax.el@3.0.1-b12
3.0.4
no fix listed

Open the chart page →

6,165
magentomagento3.2.31 of 12See more

magento magento 3.2.3

1 of the 12 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
magento/magento-cloud-docker-opensearch:2.5-1.4.059fb6f0f1461
javax.el@3.0.0
no fix listed

Open the chart page →

13,479
nifi-registryprofyu1.14.0-r0011 of 1See more

nifi-registry profyu 1.14.0-r001

1 of the 1 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
apache/nifi-registry:1.14.0090b7f87ec7f
javax.el@3.0.1-b08
no fix listed

Open the chart page →

4,621
shinyproxyremche0.6.61 of 2See more

shinyproxy remche 0.6.6

1 of the 2 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
remche/shinyproxy:2.6.18bcda8a04d3b
javax.el@3.0.1-b11
no fix listed

Open the chart page →

3,958
keycloakaccount-serviceVerified publisher18.4.51 of 2See more

keycloak account-service 18.4.5

1 of the 2 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
jakarta.el@3.0.3.jbossorg-4
3.0.4

Open the chart page →

7,713
pagesalstom-pages-app1.0.01 of 3See more

pages alstom-pages-app 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jakarta.el@3.0.3
3.0.4

Open the chart page →

20,190
pagesandrei-pages1.0.01 of 3See more

pages andrei-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jakarta.el@3.0.3
3.0.4

Open the chart page →

20,190
omada-controllerandrelote-k8sVerified publisher4.5.01 of 1See more

omada-controller andrelote-k8s 4.5.0

1 of the 1 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
javax.el@3.0.0
no fix listed

Open the chart page →

11,553
inbox-server-distributedappscodeVerified publisher2025.12.251 of 4See more

inbox-server-distributed appscode 2025.12.25

1 of the 4 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.1.04254021a8c71
javax.el@3.0.0
no fix listed

Open the chart page →

15,573
james-komposeappscodeVerified publisher0.1.01 of 4See more

james-kompose appscode 0.1.0

1 of the 4 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.1.04254021a8c71
javax.el@3.0.0
no fix listed

Open the chart page →

16,975
chart-app-vidapp-vid-chartVerified publisher0.0.71 of 2See more

chart-app-vid app-vid-chart 0.0.7

1 of the 2 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
fimperato/sparkvid-api:1.0.5-RELEASE604012b77841
jakarta.el@3.0.3
3.0.4

Open the chart page →

8,866
idmassist-iot-identity-manager0.1.01 of 2See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
assistiot/identity-manager_kc:latest0df4b4fa899a
jakarta.el@3.0.3.jbossorg-4
3.0.4

Open the chart page →

13,352
opendistro-esbeeinventor1.15.11 of 3See more

opendistro-es beeinventor 1.15.1

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
javax.el@3.0.0
no fix listed

Open the chart page →

5,806
pagesberrutig-pages1.0.01 of 3See more

pages berrutig-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jakarta.el@3.0.3
3.0.4

Open the chart page →

20,190
pagesbrian-pages1.0.01 of 3See more

pages brian-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jakarta.el@3.0.3
3.0.4

Open the chart page →

20,190
pagesbrixton-mayuribhavsar23-pages1.0.01 of 3See more

pages brixton-mayuribhavsar23-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jakarta.el@3.0.3
3.0.4

Open the chart page →

20,190
pagesbrixton-pages1.0.01 of 3See more

pages brixton-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jakarta.el@3.0.3
3.0.4

Open the chart page →

20,190
category-microservicebusi-adsVerified publisher1.0.01 of 2See more

category-microservice busi-ads 1.0.0

1 of the 2 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
dellcloud/category:distributed02fc234353a9
jakarta.el@3.0.3
3.0.4

Open the chart page →

11,869
pagescamden-pages1.0.01 of 3See more

pages camden-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jakarta.el@3.0.3
3.0.4

Open the chart page →

20,190
geoservercamptocamp20.0.36 of 12See more

geoserver camptocamp2 0.0.3

6 of the 12 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
jakarta.el@3.0.3
3.0.4
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
jakarta.el@3.0.3
3.0.4
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
jakarta.el@3.0.3
3.0.4
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
jakarta.el@3.0.3
3.0.4
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
jakarta.el@3.0.3
3.0.4
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
jakarta.el@3.0.3
3.0.4

Open the chart page →

88,335
pagescarina-pages1.0.01 of 3See more

pages carina-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jakarta.el@3.0.3
3.0.4

Open the chart page →

20,190
pagescarmel-pages-dell1.0.01 of 3See more

pages carmel-pages-dell 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jakarta.el@3.0.3
3.0.4

Open the chart page →

20,190
cassandra-reapercloudnativeapp0.2.01 of 1See more

cassandra-reaper cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
thelastpickle/cassandra-reaper:1.3.09c53996c457d
javax.el@3.0.0
no fix listed

Open the chart page →

5,078
robot-shopcloud-native-toolkit1.1.11 of 12See more

robot-shop cloud-native-toolkit 1.1.1

1 of the 12 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
robotshop/rs-shipping:latest89753ab48919
jakarta.el@3.0.3
3.0.4

Open the chart page →

29,555
clamapicnieg2.0.51 of 2See more

clamapi cnieg 2.0.5

1 of the 2 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
audig/clamapi:2.1.62c3fe34ee430
jakarta.el@3.0.3
3.0.4

Open the chart page →

4,671
cp-helm-chartscp-helm-charts0.6.15 of 8See more

cp-helm-charts cp-helm-charts 0.6.1

5 of the 8 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
jakarta.el@3.0.3
3.0.4
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
jakarta.el@3.0.3
3.0.4
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
jakarta.el@3.0.3
3.0.4
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
jakarta.el@3.0.3
3.0.4
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
jakarta.el@3.0.3
3.0.4

Open the chart page →

58,857
pagescrypticcode-helmchart1.0.01 of 3See more

pages crypticcode-helmchart 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jakarta.el@3.0.3
3.0.4

Open the chart page →

20,190
pagesdalston-pages1.0.01 of 3See more

pages dalston-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jakarta.el@3.0.3
3.0.4

Open the chart page →

20,190
pagesdaman-dell-kuber1.0.01 of 3See more

pages daman-dell-kuber 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jakarta.el@3.0.3
3.0.4

Open the chart page →

20,190
pagesdavid-pages1.0.01 of 3See more

pages david-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jakarta.el@3.0.3
3.0.4

Open the chart page →

20,190
pagesdebasish-pages1.0.01 of 3See more

pages debasish-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jakarta.el@3.0.3
3.0.4

Open the chart page →

20,190
pagesdipak1.0.01 of 3See more

pages dipak 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jakarta.el@3.0.3
3.0.4

Open the chart page →

20,190
pagesedgwarepages1.0.01 of 3See more

pages edgwarepages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jakarta.el@3.0.3
3.0.4

Open the chart page →

20,190
shenyuerdeng2.4.211 of 2See more

shenyu erdeng 2.4.21

1 of the 2 container images this version deploys carry CVE-2021-28170.

Container imageDigestPackageFixed in
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
jakarta.el@3.0.3
3.0.4

Open the chart page →

12,513

Container images carrying it

85 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
lavandadelpatio/automated-download-films:0.0.2094e225a5a6f8
jakarta.el@3.0.3
3.0.4
1
lavandadelpatio/automated-download-shows:0.0.492de3c3426d2
jakarta.el@3.0.3
3.0.4
1
lavandadelpatio/filebot:0.0.671f2ccec8c0d
jakarta.el@3.0.3
3.0.4
1
lavandadelpatio/tmdb:0.0.2f36af885e915
jakarta.el@3.0.3
3.0.4
1
library/storm:2.4.0bd5d420506d6
jakarta.el@3.0.2
javax.el@3.0.1-b12
3.0.4
no fix listed
1
lsmaster/kafka-connect-wrapper:6.1.0-0.1061eb5fbfa00
jakarta.el@3.0.3
3.0.4
1
magento/magento-cloud-docker-opensearch:2.5-1.4.059fb6f0f1461
javax.el@3.0.0
no fix listed
1
ncsa/datawolf:4.7.0af6649d59150
javax.el@3.0.0
no fix listed
1
opensearchproject/opensearch:2.12.0645d3d9390ad
javax.el@3.0.0
no fix listed
1
opensearchproject/opensearch:2.10.0c8f3ebd2a934
javax.el@3.0.0
no fix listed
1
openwhisk/invoker:1.0.0f5831ec85525
javax.el@3.0.1-b11
no fix listed
1
owasp/dependency-track:3.8.0efc65e702ee1
jakarta.el@3.0.2
3.0.4
1
platform9community/api-gateway:latest40a4970de568
jakarta.el@3.0.3
javax.el@3.0.1-b11
3.0.4
no fix listed
1
platform9community/customers-service:latest2089811e5cc6
jakarta.el@3.0.3
javax.el@3.0.1-b11
3.0.4
no fix listed
1
platform9community/vets-service:latestd1165c94dfb3
jakarta.el@3.0.3
javax.el@3.0.1-b11
3.0.4
no fix listed
1
platform9community/visits-service:latest8d11b50368c6
jakarta.el@3.0.3
javax.el@3.0.1-b11
3.0.4
no fix listed
1
polyakov/hapi-fhir-jpaserver-example:latestdbcef69146b8
javax.el@3.0.0
no fix listed
1
refar/apm-api:v5.7.1241373fa2972
jakarta.el@3.0.3
3.0.4
1
refar/apm-operator-server:v5.7.1e5490f050f9f
jakarta.el@3.0.3
3.0.4
1
remche/shinyproxy:2.6.18bcda8a04d3b
javax.el@3.0.1-b11
no fix listed
1
reportportal/service-jobs:5.7.2dc166c58485a
jakarta.el@3.0.3
3.0.4
1
robotshop/rs-shipping:latest89753ab48919
jakarta.el@3.0.3
3.0.4
1
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
javax.el@3.0.0
no fix listed
1
someblackmagic/smtp-fake-server:latest0d63ba37a560
jakarta.el@3.0.3
3.0.4
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
javax.el@3.0.1-b12
no fix listed
1
thelastpickle/cassandra-reaper:1.3.09c53996c457d
javax.el@3.0.0
no fix listed
1
thingsboard/tb-node:3.4.1645f43b688f7
javax.el@3.0.0
no fix listed
1
thingsboard/tb-node:3.6.0f40a542832c4
javax.el@3.0.0
no fix listed
1
trinodb/trino:45038c6f24ab1a4
javax.el@3.0.1-b08
no fix listed
1
trinodb/trino:405ee80ab5eeab2
javax.el@3.0.1-b12
no fix listed
1
ghcr.io/fleeksoft/hbase/hbase-base:2.4.13.2c144bdd688d7
javax.el@3.0.1-b08
no fix listed
1
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
jakarta.el@3.0.3
3.0.4
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
jakarta.el@3.0.3
3.0.4
1
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
jakarta.el@3.0.3.jbossorg-2
3.0.4
1
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
javax.el@3.0.0
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.