StackRadar

CVE-2023-26464

High

Advisory

Published 10 Mar 2023In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.019
79th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
100
of 17,781 indexed, latest versions
Container images
101
deployed by those charts
Fix available
1 of 1
affected package

Apache Log4j 1.x (EOL) allows Denial of Service (DoS)

Carried by container images the latest versions of 100 of 17,781 indexed charts deploy, on 101 images.

Affected packageAffected versionsFixed inImages
log4jmaven1.2.8, 1.2.14, 1.2.15, 1.2.16+3 more2.0101
OSV records
GHSA-vp98-w2p3-mv35

Charts affected

100 by stars
ChartLatestAffected imagesRadar Score
druiddruid-helmVerified publisher37.0.21 of 3See more

druid druid-helm 37.0.2

1 of the 3 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
log4j@1.2.17
2.0

Open the chart page →

3,812
microcksmicrocksOfficialVerified publisher0.8.0-helm-3.kube-1.171 of 5See more

microcks microcks 0.8.0-helm-3.kube-1.17

1 of the 5 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
microcks/microcks:0.8.0e3a3e0c67b09
log4j@1.2.14
2.0

Open the chart page →

10,732
sparkmicrosoft1.0.42 of 3See more

spark microsoft 1.0.4

2 of the 3 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
dbanda/livy:0.80ca125e68e53
log4j@1.2.17
2.0
dbanda/spark:2.4.6d0e6367876ae
log4j@1.2.17
2.0

Open the chart page →

13,738
hadoopbigdata-chartsVerified publisher1.0.11 of 2See more

hadoop bigdata-charts 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
marcelmay/hadoop-hdfs-fsimage-exporter:1.3abeccb740ef7
log4j@1.2.17
2.0

Open the chart page →

12,111
druidwiremindVerified publisher1.22.11 of 3See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
apache/druid:29.0.10cef139b6bf1
log4j@1.2.17
2.0

Open the chart page →

7,930
hivebigdata-chartsVerified publisher0.1.81 of 1See more

hive bigdata-charts 0.1.8

1 of the 1 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
log4j@1.2.17
2.0

Open the chart page →

7,166
cmak-operatorcmak-operatorVerified publisher2.2.21 of 3See more

cmak-operator cmak-operator 2.2.2

1 of the 3 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
library/zookeeper:3.6.180ad2170ad62
log4j@1.2.17
2.0

Open the chart page →

4,605
hdfsdmwm-bigdataVerified publisher1.0.12 of 2See more

hdfs dmwm-bigdata 1.0.1

2 of the 2 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
gradiant/hdfs:3.2.2e3bf364fe713
log4j@1.2.17
2.0
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
log4j@1.2.17
2.0

Open the chart page →

7,948
hivedmwm-bigdataVerified publisher0.1.64 of 5See more

hive dmwm-bigdata 0.1.6

4 of the 5 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
log4j@1.2.17
2.0
gradiant/hdfs:2.7.73b28784ba41f
log4j@1.2.17
2.0
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
log4j@1.2.17
2.0
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
log4j@1.2.17
2.0

Open the chart page →

20,837
hive-metastoreheva-helm-chartsVerified publisher0.2.01 of 2See more

hive-metastore heva-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
sslhep/hive-metastore:3.1.39e80af083079
log4j@1.2.17
2.0

Open the chart page →

7,335
skywalkingkubesphere-testVerified publisher3.1.01 of 4See more

skywalking kubesphere-test 3.1.0

1 of the 4 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.1.0-es7641237e0299b
log4j@1.2.16
2.0

Open the chart page →

18,042
hive-metastoreslamdev0.0.51 of 2See more

hive-metastore slamdev 0.0.5

1 of the 2 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
log4j@1.2.17
2.0

Open the chart page →

8,198
activemq-artemisactivemq-artemis-helm0.3.61 of 1See more

activemq-artemis activemq-artemis-helm 0.3.6

1 of the 1 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
vromero/activemq-artemis:2.16.0408d6a46b153
log4j@1.2.16
2.0

Open the chart page →

4,419
geoserver-cloudcamptocamp20.0.53 of 11See more

geoserver-cloud camptocamp2 0.0.5

3 of the 11 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
log4j@1.2.17
2.0
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
log4j@1.2.17
2.0
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
log4j@1.2.17
2.0

Open the chart page →

84,444
geoserverCloudcamptocamp20.0.63 of 11See more

geoserverCloud camptocamp2 0.0.6

3 of the 11 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
log4j@1.2.17
2.0
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
log4j@1.2.17
2.0
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
log4j@1.2.17
2.0

Open the chart page →

84,444
hadoopcloudnativeapp1.1.01 of 1See more

hadoop cloudnativeapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
log4j@1.2.17
2.0

Open the chart page →

5,772
ignitecloudnativeapp1.0.01 of 1See more

ignite cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
apacheignite/ignite:2.7.0d7deab68b8fa
log4j@1.2.17
2.0

Open the chart page →

7,891
hbasedmwm-bigdataVerified publisher0.1.63 of 5See more

hbase dmwm-bigdata 0.1.6

3 of the 5 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
log4j@1.2.17
2.0
gradiant/hdfs:2.7.73b28784ba41f
log4j@1.2.17
2.0
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
log4j@1.2.17
2.0

Open the chart page →

13,392
hive-metastoredmwm-bigdataVerified publisher0.1.31 of 2See more

hive-metastore dmwm-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
log4j@1.2.17
2.0

Open the chart page →

6,882
opentsdbdmwm-bigdataVerified publisher0.1.73 of 6See more

opentsdb dmwm-bigdata 0.1.7

3 of the 6 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
log4j@1.2.17
2.0
gradiant/hdfs:2.7.73b28784ba41f
log4j@1.2.17
2.0
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
log4j@1.2.17
2.0

Open the chart page →

17,511
hbasegradiant-bigdataVerified publisher0.1.63 of 5See more

hbase gradiant-bigdata 0.1.6

3 of the 5 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
log4j@1.2.17
2.0
gradiant/hdfs:2.7.73b28784ba41f
log4j@1.2.17
2.0
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
log4j@1.2.17
2.0

Open the chart page →

13,392
gridgaingridgainOfficialVerified publisher1.0.61 of 1See more

gridgain gridgain 1.0.6

1 of the 1 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
gridgain/community:8.9.11d32d182a0e6a
log4j@1.2.17
2.0

Open the chart page →

4,679
seata-serverheidaodageshiwoVerified publisher1.0.01 of 1See more

seata-server heidaodageshiwo 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
seataio/seata-server:1.5.1ee1ed55f4144
log4j@1.2.17
2.0

Open the chart page →

5,624
hadoopmiuler1.2.21 of 1See more

hadoop miuler 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
log4j@1.2.17
2.0

Open the chart page →

5,772
routrroutr0.0.101 of 2See more

routr routr 0.0.10

1 of the 2 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
fonoster/routr:1.0.0-rc52ca65af17cbc
log4j@1.2.17
2.0

Open the chart page →

4,983
seldon-coreseldon0.2.71 of 3See more

seldon-core seldon 0.2.7

1 of the 3 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
seldonio/apife:0.2.7ba81b17f00eb
log4j@1.2.17
2.0

Open the chart page →

13,798
sentinel-dashboardsentinel-dashboardVerified publisher0.1.01 of 1See more

sentinel-dashboard sentinel-dashboard 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
royalwang/sentinel-dashboard:1.8.4df99e2499f91
log4j@1.2.17
2.0

Open the chart page →

4,287
starwhalestarwhaleVerified publisher0.6.151 of 4See more

starwhale starwhale 0.6.15

1 of the 4 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
ghcr.io/star-whale/server:0.6.158368359c8dd0
log4j@1.2.17
2.0

Open the chart page →

13,486
ckanstatcan0.0.351 of 8See more

ckan statcan 0.0.35

1 of the 8 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
library/zookeeper:3.5.5b7a76ec06f68
log4j@1.2.17
2.0

Open the chart page →

24,930
kafka-devwikimedia0.2.01 of 1See more

kafka-dev wikimedia 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
log4j@1.2.15
2.0

Open the chart page →

41,427
airports-kafkaairports-kafka0.1.01 of 2See more

airports-kafka airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
log4j@1.2.17
2.0

Open the chart page →

4,547
chart-app-vidapp-vid-chartVerified publisher0.0.71 of 2See more

chart-app-vid app-vid-chart 0.0.7

1 of the 2 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
fimperato/sparkvid-api:1.0.5-RELEASE604012b77841
log4j@1.2.17
2.0

Open the chart page →

8,866
authorizationassist-iot-authorisation0.1.01 of 2See more

authorization assist-iot-authorisation 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
assistiot/authorization_svr:latestdb9361dad79b
log4j@1.2.16
2.0

Open the chart page →

5,537
geoservercamptocamp20.0.33 of 12See more

geoserver camptocamp2 0.0.3

3 of the 12 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
log4j@1.2.17
2.0
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
log4j@1.2.17
2.0
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
log4j@1.2.17
2.0

Open the chart page →

88,335
tsoragecetic0.4.112 of 8See more

tsorage cetic 0.4.11

2 of the 8 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:5.0.1c87b1c07fb53
log4j@1.2.17
2.0
library/zookeeper:3.5.5b7a76ec06f68
log4j@1.2.17
2.0

Open the chart page →

12,018
cosbenchcloudnativeapp1.0.11 of 1See more

cosbench cloudnativeapp 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
zenko/zenko-cosbench:0.0.6386a1f48ec0e
log4j@1.2.15
2.0

Open the chart page →

4,906
metabasecloudnativeapp0.5.01 of 1See more

metabase cloudnativeapp 0.5.0

1 of the 1 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
metabase/metabase:v0.31.2ffb2dccacefc
log4j@1.2.17
2.0

Open the chart page →

4,601
prestocloudnativeapp0.1.11 of 1See more

presto cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
bivas/presto:0.19605545994f806
log4j@1.2.17
2.0

Open the chart page →

7,226
rundeckcloudnativeapp0.1.01 of 2See more

rundeck cloudnativeapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
rundeck/rundeck:3.0.16b13e8059ad72
log4j@1.2.17
2.0

Open the chart page →

23,665
spark-history-servercloudnativeapp1.0.01 of 3See more

spark-history-server cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
lightbend/spark-history-server:2.4.00bedf37f428a
log4j@1.2.17
2.0

Open the chart page →

14,066
pulsarcnieg1.0.82 of 2See more

pulsar cnieg 1.0.8

2 of the 2 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.6.14db6ff0b4045
log4j@1.2.17
2.0
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
log4j@1.2.17
2.0

Open the chart page →

16,860
apache-ranger-admindata-platform-stableVerified publisher0.2.01 of 2See more

apache-ranger-admin data-platform-stable 0.2.0

1 of the 2 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
log4j@1.2.17
2.0

Open the chart page →

8,245
spark-standalonedmwm-bigdataVerified publisher0.1.01 of 2See more

spark-standalone dmwm-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
gradiant/spark:2.4.4-python-alpine97657d56e927
log4j@1.2.17
2.0

Open the chart page →

6,147
spark-shuffleduyet0.2.01 of 1See more

spark-shuffle duyet 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
snappydatainc/spark-shuffle:v2.2.0-kubernetes-0.5.1fd4b2070466f
log4j@1.2.17
2.0

Open the chart page →

5,639
rundeckdwardu-helm-charts0.3.41 of 2See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
rundeck/rundeck:3.2.74d64fe56f767
log4j@1.2.17
2.0

Open the chart page →

19,802
accumulogaffer2.2.12 of 4See more

accumulo gaffer 2.2.1

2 of the 4 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
gchq/accumulo:2.0.1c460bb587d6d
log4j@1.2.17
2.0
library/zookeeper:3.5.5b7a76ec06f68
log4j@1.2.17
2.0

Open the chart page →

16,892
gaffer-road-trafficgaffer2.2.11 of 8See more

gaffer-road-traffic gaffer 2.2.1

1 of the 8 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
library/zookeeper:3.5.5b7a76ec06f68
log4j@1.2.17
2.0

Open the chart page →

9,342
teedygeek-cookbookVerified publisher6.2.01 of 1See more

teedy geek-cookbook 6.2.0

1 of the 1 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
sismics/docs:v1.10f4b0ef019cf1
log4j@1.2.17
2.0

Open the chart page →

26,944
kafkagengxiankun-charts0.2.01 of 1See more

kafka gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
log4j@1.2.17
2.0

Open the chart page →

4,547
zookeepergengxiankun-charts0.2.01 of 1See more

zookeeper gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-26464.

Container imageDigestPackageFixed in
library/zookeeper:3.6.24c8a6d3b2338
log4j@1.2.17
2.0

Open the chart page →

1,913

Container images carrying it

101 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
log4j@1.2.17
2.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.