StackRadar

CVE-2023-24998

High

Advisory

Published 20 Feb 2023In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.488
99th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
206
of 17,781 indexed, latest versions
Container images
168
deployed by those charts
Fix available
3 of 3
affected packages

Apache Commons FileUpload denial of service vulnerability

Carried by container images the latest versions of 206 of 17,781 indexed charts deploy, on 168 images.

Affected packageAffected versionsFixed inImages
tomcat-embed-coremaven9.0.13, 9.0.16, 9.0.21, 9.0.26+25 more9.0.71113
commons-fileuploadmaven1.2.1, 1.3, 1.3.1, 1.3.1-jenkins-1+3 more1.574
tomcat-coyotemaven9.0.40, 9.0.659.0.712
OSV records
GHSA-hfrx-6qgj-fp6c

Charts affected

206 by stars
ChartLatestAffected imagesRadar Score
metabasedeliveryheroVerified publisher0.14.41 of 1See more

metabase deliveryhero 0.14.4

1 of the 1 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
metabase/metabase:v0.45.21fb334ce4820
commons-fileupload@1.4
1.5

Open the chart page →

2,572
spring-petclinic-cloudplatform9-communityVerified publisher0.2.03 of 6See more

spring-petclinic-cloud platform9-community 0.2.0

3 of the 6 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
platform9community/customers-service:latest2089811e5cc6
tomcat-embed-core@9.0.36
9.0.71
platform9community/vets-service:latestd1165c94dfb3
tomcat-embed-core@9.0.36
9.0.71
platform9community/visits-service:latest8d11b50368c6
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

41,872
puppetserverpuppetserver9.5.22 of 5See more

puppetserver puppetserver 9.5.2

2 of the 5 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
commons-fileupload@1.4
1.5
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
commons-fileupload@1.4
1.5

Open the chart page →

14,184
unifi-controllerqonstruktVerified publisher2.6.11 of 1See more

unifi-controller qonstrukt 2.6.1

1 of the 1 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:8.0.240ae315a3a456
tomcat-embed-core@9.0.65
9.0.71

Open the chart page →

10,469
unifigeek-cookbookVerified publisher5.1.31 of 1See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.4.162b3edc809a3ff
tomcat-embed-core@9.0.65
9.0.71

Open the chart page →

11,839
rocketmqgin1.1.01 of 2See more

rocketmq gin 1.1.0

1 of the 2 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
apacherocketmq/rocketmq-dashboard:1.0.024799aff6cf8
tomcat-embed-core@9.0.29
9.0.71

Open the chart page →

9,154
nzbhydra2halkeye2.30.11 of 2See more

nzbhydra2 halkeye 2.30.1

1 of the 2 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
binhex/arch-nzbhydra2:3.1.0-1-01fb8952921ab6
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

6,711
me-untethr-nostr-relaykronkltdVerified publisher0.1.41 of 1See more

me-untethr-nostr-relay kronkltd 0.1.4

1 of the 1 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
duck1123/me.untethr.nostr-relay:0.2.1119fc5d4cbfb
commons-fileupload@1.4
1.5

Open the chart page →

2,072
vrijbrpvrijbrpVerified publisher0.1.51 of 5See more

vrijbrp vrijbrp 0.1.5

1 of the 5 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
vrijbrp/balie-ws:developc6603cb829ea
commons-fileupload@1.4
1.5

Open the chart page →

8,811
geoserver-cloudcamptocamp20.0.55 of 11See more

geoserver-cloud camptocamp2 0.0.5

5 of the 11 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
commons-fileupload@1.3.3
tomcat-embed-core@9.0.37
1.5
9.0.71
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
commons-fileupload@1.3.3
tomcat-embed-core@9.0.37
1.5
9.0.71
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
commons-fileupload@1.4
tomcat-embed-core@9.0.37
1.5
9.0.71
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
commons-fileupload@1.3.3
tomcat-embed-core@9.0.37
1.5
9.0.71
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
commons-fileupload@1.3.3
tomcat-embed-core@9.0.37
1.5
9.0.71

Open the chart page →

84,444
geoserverCloudcamptocamp20.0.65 of 11See more

geoserverCloud camptocamp2 0.0.6

5 of the 11 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
commons-fileupload@1.3.3
tomcat-embed-core@9.0.37
1.5
9.0.71
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
commons-fileupload@1.3.3
tomcat-embed-core@9.0.37
1.5
9.0.71
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
commons-fileupload@1.4
tomcat-embed-core@9.0.37
1.5
9.0.71
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
commons-fileupload@1.3.3
tomcat-embed-core@9.0.37
1.5
9.0.71
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
commons-fileupload@1.3.3
tomcat-embed-core@9.0.37
1.5
9.0.71

Open the chart page →

84,444
ignitecloudnativeapp1.0.01 of 1See more

ignite cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
apacheignite/ignite:2.7.0d7deab68b8fa
commons-fileupload@1.3.2
1.5

Open the chart page →

7,891
wiremockdeliveryheroVerified publisher1.4.61 of 2See more

wiremock deliveryhero 1.4.6

1 of the 2 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
rodolpheche/wiremock:2.26.03be08a386092
commons-fileupload@1.4
1.5

Open the chart page →

2,140
spinnakerdwardu-helm-charts2.2.61 of 2See more

spinnaker dwardu-helm-charts 2.2.6

1 of the 2 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
commons-fileupload@1.4
tomcat-embed-core@9.0.30
1.5
9.0.71

Open the chart page →

8,752
omada-controllergeek-cookbookVerified publisher4.4.21 of 1See more

omada-controller geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
commons-fileupload@1.3.3
1.5

Open the chart page →

11,553
gradle-examplegradle-exampleVerified publisher1.1.31 of 1See more

gradle-example gradle-example 1.1.3

1 of the 1 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
quay.io/srcmaxim/gradle-example-app:1.1.37c3fc28746ef
tomcat-embed-core@9.0.46
9.0.71

Open the chart page →

3,393
stormgresearch1.2.01 of 3See more

storm gresearch 1.2.0

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
library/storm:2.4.0bd5d420506d6
commons-fileupload@1.3.3
1.5

Open the chart page →

6,165
seata-serverheidaodageshiwoVerified publisher1.0.01 of 1See more

seata-server heidaodageshiwo 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
seataio/seata-server:1.5.1ee1ed55f4144
tomcat-embed-core@9.0.55
9.0.71

Open the chart page →

5,624
todo-apipavanelthepu0.1.01 of 2See more

todo-api pavanelthepu 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
pavanelthepu/todo-api:1.0.2f47658e3b24c
tomcat-embed-core@9.0.48
9.0.71

Open the chart page →

2,544
spring-boot-api-apppiominVerified publisher0.3.111 of 1See more

spring-boot-api-app piomin 0.3.11

1 of the 1 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
tomcat-embed-core@9.0.65
9.0.71

Open the chart page →

7,576
dev-feedrm3lVerified publisher3.1.21 of 3See more

dev-feed rm3l 3.1.2

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
rm3l/dev-feed-api:latest9a7f732245a3
tomcat-embed-core@9.0.68
9.0.71

Open the chart page →

9,837
service-names-port-numbersrm3lVerified publisher0.26.11 of 1See more

service-names-port-numbers rm3l 0.26.1

1 of the 1 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
rm3l/service-names-port-numbers:0.12.162d1cc4223e5
tomcat-embed-core@9.0.55
9.0.71

Open the chart page →

10,120
sentinel-dashboardsentinel-dashboardVerified publisher0.1.01 of 1See more

sentinel-dashboard sentinel-dashboard 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
royalwang/sentinel-dashboard:1.8.4df99e2499f91
tomcat-embed-core@9.0.60
9.0.71

Open the chart page →

4,287
starwhalestarwhaleVerified publisher0.6.151 of 4See more

starwhale starwhale 0.6.15

1 of the 4 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
ghcr.io/star-whale/server:0.6.158368359c8dd0
tomcat-embed-core@9.0.70
9.0.71

Open the chart page →

13,486
accountaccount-serviceVerified publisher0.4.21 of 1See more

account account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
vitalii1992/account-service:latest0e694d94551d
commons-fileupload@1.4
1.5

Open the chart page →

2,168
analyticsaccount-serviceVerified publisher0.4.21 of 1See more

analytics account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
vitalii1992/analytics-service:latest8e798836ecea
commons-fileupload@1.4
1.5

Open the chart page →

2,326
gatewayaccount-serviceVerified publisher0.4.21 of 1See more

gateway account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
vitalii1992/api-gateway-service:latestaabe6ac39356
commons-fileupload@1.4
1.5

Open the chart page →

2,853
orderaccount-serviceVerified publisher0.4.21 of 1See more

order account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
vitalii1992/order-service:latest07c4a8833ce4
commons-fileupload@1.4
1.5

Open the chart page →

2,221
quotes-provideraccount-serviceVerified publisher0.4.21 of 1See more

quotes-provider account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
vitalii1992/quotes-provider-service:latest44d2d6e00ab3
commons-fileupload@1.4
1.5

Open the chart page →

2,205
akto-ai-guardrails-v2akto0.3.01 of 6See more

akto-ai-guardrails-v2 akto 0.3.0

1 of the 6 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
aktosecurity/data-ingestion-service:1.4.946ed5bcb04b2
commons-fileupload@1.4
1.5

Open the chart page →

9,321
akto-testing-db-layerakto1.42.161 of 2See more

akto-testing-db-layer akto 1.42.16

1 of the 2 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer:1.59.3_local8cdcb7e83f9f
commons-fileupload@1.4
1.5

Open the chart page →

5,489
data-ingestion-serviceakto0.1.61 of 1See more

data-ingestion-service akto 0.1.6

1 of the 1 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
aktosecurity/data-ingestion-servicedigest-pinned213aded7adc5
commons-fileupload@1.4
1.5

Open the chart page →

3,442
pagesalstom-pages-app1.0.01 of 3See more

pages alstom-pages-app 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

20,190
pagesandrei-pages1.0.01 of 3See more

pages andrei-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

20,190
omada-controllerandrelote-k8sVerified publisher4.5.01 of 1See more

omada-controller andrelote-k8s 4.5.0

1 of the 1 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
commons-fileupload@1.3.3
1.5

Open the chart page →

11,553
chart-app-vidapp-vid-chartVerified publisher0.0.71 of 2See more

chart-app-vid app-vid-chart 0.0.7

1 of the 2 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
fimperato/sparkvid-api:1.0.5-RELEASE604012b77841
tomcat-embed-core@9.0.38
9.0.71

Open the chart page →

8,866
sdn-controllerassist-iot-sdn-controller2.4.01 of 1See more

sdn-controller assist-iot-sdn-controller 2.4.0

1 of the 1 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
assistiot/sdn_controller:2.4.0ea254b6d8a31
commons-fileupload@1.4
1.5

Open the chart page →

7,936
dashboard-pui9assist-iot-tactile-dashboard0.2.01 of 3See more

dashboard-pui9 assist-iot-tactile-dashboard 0.2.0

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
assistiot/tacticle_dashboard:api-lateste4414cb72dc4
commons-fileupload@1.4
tomcat-coyote@9.0.65
1.5
9.0.71

Open the chart page →

4,145
url-shortenerbeastob1.0.21 of 3See more

url-shortener beastob 1.0.2

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
beastob/url-shortener:1.0.299a49885ab33
tomcat-embed-core@9.0.53
9.0.71

Open the chart page →

3,607
pagesberrutig-pages1.0.01 of 3See more

pages berrutig-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

20,190
pagesbrian-pages1.0.01 of 3See more

pages brian-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

20,190
pagesbrixton-mayuribhavsar23-pages1.0.01 of 3See more

pages brixton-mayuribhavsar23-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

20,190
pagesbrixton-pages1.0.01 of 3See more

pages brixton-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

20,190
category-microservicebusi-adsVerified publisher1.0.01 of 2See more

category-microservice busi-ads 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
dellcloud/category:distributed02fc234353a9
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

11,869
pagescamden-pages1.0.01 of 3See more

pages camden-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

20,190
geoservercamptocamp20.0.35 of 12See more

geoserver camptocamp2 0.0.3

5 of the 12 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
commons-fileupload@1.3.3
tomcat-embed-core@9.0.37
1.5
9.0.71
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
commons-fileupload@1.3.3
tomcat-embed-core@9.0.37
1.5
9.0.71
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
commons-fileupload@1.4
tomcat-embed-core@9.0.37
1.5
9.0.71
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
commons-fileupload@1.3.3
tomcat-embed-core@9.0.37
1.5
9.0.71
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
commons-fileupload@1.3.3
tomcat-embed-core@9.0.37
1.5
9.0.71

Open the chart page →

88,335
puppetservercamptocamp31.0.11 of 2See more

puppetserver camptocamp3 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
commons-fileupload@1.4
1.5

Open the chart page →

5,886
pagescarina-pages1.0.01 of 3See more

pages carina-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

20,190
pagescarmel-pages-dell1.0.01 of 3See more

pages carmel-pages-dell 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

20,190
Chart-Oracle-Host-Appchart-oracle-host-appVerified publisher0.1.21 of 1See more

Chart-Oracle-Host-App chart-oracle-host-app 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
stanislovesid/oracle-host-app:14fe1ed26e194
tomcat-embed-core@9.0.54
9.0.71

Open the chart page →

2,434

Container images carrying it

168 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.71
79
apache/shenyu-admin:2.4.2e8b7c4ddd069
tomcat-embed-core@9.0.29
9.0.71
3
pavanelthepu/todo-api:1.0.2f47658e3b24c
tomcat-embed-core@9.0.48
9.0.71
3
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
commons-fileupload@1.3.3
tomcat-embed-core@9.0.37
1.5
9.0.71
2
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
commons-fileupload@1.3.3
tomcat-embed-core@9.0.37
1.5
9.0.71
2
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
commons-fileupload@1.4
tomcat-embed-core@9.0.37
1.5
9.0.71
2
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
commons-fileupload@1.3.3
tomcat-embed-core@9.0.37
1.5
9.0.71
2
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
commons-fileupload@1.3.3
tomcat-embed-core@9.0.37
1.5
9.0.71
2
mbentley/omada-controller:4.3f4e682274bed
commons-fileupload@1.3.3
1.5
2
metabase/metabase:v0.45.21fb334ce4820
commons-fileupload@1.4
1.5
2
nacos/nacos-server:v2.1.0dcf04549c6d7
tomcat-embed-core@9.0.38
9.0.71
2
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
tomcat-embed-core@9.0.65
9.0.71
2
rodolpheche/wiremock:2.26.03be08a386092
commons-fileupload@1.4
1.5
2
scorpiobroker/scorpio:RegistrySubscriptionManager_2.1.001e11d800459
tomcat-embed-core@9.0.55
9.0.71
2
scorpiobroker/scorpio:eureka-server_2.1.03f05a113a4be
tomcat-embed-core@9.0.55
9.0.71
2
scorpiobroker/scorpio:AtContextServer_2.1.05073ceef2fa0
tomcat-embed-core@9.0.55
9.0.71
2
scorpiobroker/scorpio:gateway_2.1.062dae3dd0eeb
tomcat-embed-core@9.0.55
9.0.71
2
scorpiobroker/scorpio:RegistryManager_2.1.0a2cfcf0947fd
tomcat-embed-core@9.0.55
9.0.71
2
scorpiobroker/scorpio:QueryManager_2.1.0b742a53b2803
tomcat-embed-core@9.0.55
9.0.71
2
scorpiobroker/scorpio:HistoryManager_2.1.0b7fe27a06ff5
tomcat-embed-core@9.0.55
9.0.71
2
scorpiobroker/scorpio:config-server_1.1.0c46c1517e523
tomcat-embed-core@9.0.26
9.0.71
2
scorpiobroker/scorpio:SubscriptionManager_2.1.0e08036670d66
tomcat-embed-core@9.0.55
9.0.71
2
scorpiobroker/scorpio:EntityManager_2.1.0f02e8a429a08
tomcat-embed-core@9.0.55
9.0.71
2
stakater/stakater-nordmart-review:1.0.35954d2be66e95
tomcat-embed-core@9.0.65
9.0.71
2
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
commons-fileupload@1.4
tomcat-embed-core@9.0.46
1.5
9.0.71
1
aktosecurity/data-ingestion-service213aded7adc5
commons-fileupload@1.4
1.5
1
aktosecurity/data-ingestion-service:1.4.946ed5bcb04b2
commons-fileupload@1.4
1.5
1
andrianrf/bpjstk-service:latest46abe878d9d8
tomcat-embed-core@9.0.38
9.0.71
1
andrianrf/bpjstk-simulator:latestb63fdb51d39d
tomcat-embed-core@9.0.38
9.0.71
1
andrianrf/iso-client:latestba560086ce15
tomcat-embed-core@9.0.38
9.0.71
1
andrianrf/iso-server:latest7da47f525c7d
tomcat-embed-core@9.0.36
9.0.71
1
apacheignite/ignite:2.7.0d7deab68b8fa
commons-fileupload@1.3.2
1.5
1
apacherocketmq/rocketmq-dashboard:1.0.024799aff6cf8
tomcat-embed-core@9.0.29
9.0.71
1
apache/shenyu-admin:2.5.1e2be712fc4f4
tomcat-embed-core@9.0.63
9.0.71
1
arturisimo/webapp-db-java:v2c95524e90b57
tomcat-embed-core@9.0.56
9.0.71
1
assistiot/sdn_controller:2.4.0ea254b6d8a31
commons-fileupload@1.4
1.5
1
assistiot/tacticle_dashboard:api-lateste4414cb72dc4
commons-fileupload@1.4
tomcat-coyote@9.0.65
1.5
9.0.71
1
atlassian/confluence-server:7.10.03b9222ab32ef
commons-fileupload@1.4
tomcat-coyote@9.0.40
1.5
9.0.71
1
atlassian/jira-software:8.14.037bc46cbec1a
commons-fileupload@1.3.3
1.5
1
audig/clamapi:2.1.62c3fe34ee430
tomcat-embed-core@9.0.37
9.0.71
1
beastob/url-shortener:1.0.299a49885ab33
tomcat-embed-core@9.0.53
9.0.71
1
binhex/arch-nzbhydra2:3.1.0-1-01fb8952921ab6
tomcat-embed-core@9.0.36
9.0.71
1
chandanteekinavar/findery-market-order-service:1.00cf52bf5ee9a
tomcat-embed-core@9.0.53
9.0.71
1
cnieg/gantt:1.1.2d4b478d76f2a
tomcat-embed-core@9.0.65
9.0.71
1
craigwillis/c2metadata-bd:latestae317d7e4724
commons-fileupload@1.3.1
1.5
1
dannielkil/book-backend:lateste3b479a55a69
tomcat-embed-core@9.0.65
9.0.71
1
dellcloud/category:distributed02fc234353a9
tomcat-embed-core@9.0.36
9.0.71
1
dellcloud/pages:1.04d2eb25b9225
tomcat-embed-core@9.0.43
9.0.71
1
dniel/forwardauth:latestf67129ea1c64
tomcat-embed-core@9.0.21
9.0.71
1
duck1123/dinsro:latest9568c5961d5d
commons-fileupload@1.4
1.5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.