StackRadar

CVE-2023-2976

Medium

Advisory

Published 14 Jun 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
16th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
379
of 17,781 indexed, latest versions
Container images
410
deployed by those charts
Fix available
1 of 1
affected package

Guava vulnerable to insecure use of temporary directory

Carried by container images the latest versions of 379 of 17,781 indexed charts deploy, on 410 images.

Affected packageAffected versionsFixed inImages
guavamaven10.0.1, 11.0.1, 11.0.2, 14.0+38 more32.0.0-android410
OSV records
GHSA-7g45-4rm6-3mm3

Charts affected

379 by stars
ChartLatestAffected imagesRadar Score
sonarqubesonarqubeVerified publisher10.0.0+5211 of 3See more

sonarqube sonarqube 10.0.0+521

1 of the 3 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
library/sonarqube:10.0.0-communityef9723cf4fe4
guava@28.2-jre
32.0.0-android

Open the chart page →

6,556
keycloakcodecentricVerified publisher18.10.01 of 3See more

keycloak codecentric 18.10.0

1 of the 3 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
guava@30.1-jre
32.0.0-android

Open the chart page →

7,713
trinotrino1.42.21 of 1See more

trino trino 1.42.2

1 of the 1 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
trinodb/trino:4801565e8cac299
guava@29.0-android
32.0.0-android

Open the chart page →

1,309
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
guava@30.1-jre
32.0.0-android

Open the chart page →

32,259
dependency-trackevryfs-ossVerified publisher1.5.51 of 3See more

dependency-track evryfs-oss 1.5.5

1 of the 3 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
dependencytrack/apiserver:4.6.3485ac0952c02
guava@31.1-jre
32.0.0-android

Open the chart page →

2,503
rocketmqrocketmq12.6.01 of 2See more

rocketmq rocketmq 12.6.0

1 of the 2 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
apacherocketmq/rocketmq-dashboard:2.1.0ce78506bd6fe
guava@29.0-jre
32.0.0-android

Open the chart page →

6,328
cerebrowiremindVerified publisher2.4.01 of 1See more

cerebro wiremind 2.4.0

1 of the 1 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
lmenezes/cerebro:0.9.47d9e2b77e459
guava@28.2-jre
32.0.0-android

Open the chart page →

946
apicurio-registryapicurio-registry-helmVerified publisher3.8.01 of 2See more

apicurio-registry apicurio-registry-helm 3.8.0

1 of the 2 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
quay.io/apicurio/apicurio-registry-mem:2.5.8.Final3b036692d546
guava@31.0.1-jre
32.0.0-android

Open the chart page →

6,675
zipkincarlosjgp0.2.01 of 2See more

zipkin carlosjgp 0.2.0

1 of the 2 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
openzipkin/zipkin:2.21.060c3970df479
guava@19.0
32.0.0-android

Open the chart page →

3,229
druiddruid-helmVerified publisher37.0.21 of 3See more

druid druid-helm 37.0.2

1 of the 3 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
guava@14.0.1
32.0.0-android

Open the chart page →

3,812
hivemq-operatorhivemqOfficialVerified publisher0.11.621 of 2See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
hivemq/hivemq-operator:4.7.10241d6a8e1963
guava@25.0-jre
32.0.0-android

Open the chart page →

7,857
neo4jneo4j-helm4.3.2-11 of 1See more

neo4j neo4j-helm 4.3.2-1

1 of the 1 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
library/neo4j:4.3.2-enterprise56a9453c4064
guava@20.0
32.0.0-android

Open the chart page →

2,640
sonarqube-ltssonarqubeVerified publisher1.0.16+981 of 4See more

sonarqube-lts sonarqube 1.0.16+98

1 of the 4 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
library/sonarqube:8.9.2-community88cd63154d4b
guava@30.1.1-jre
32.0.0-android

Open the chart page →

4,099
metabasedeliveryheroVerified publisher0.14.41 of 1See more

metabase deliveryhero 0.14.4

1 of the 1 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
metabase/metabase:v0.45.21fb334ce4820
guava@31.0.1-jre
32.0.0-android

Open the chart page →

2,572
hdfsgaffer2.2.11 of 2See more

hdfs gaffer 2.2.1

1 of the 2 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
guava@30.1.1-jre
32.0.0-android

Open the chart page →

5,357
temporallemontechVerified publisher0.37.01 of 13See more

temporal lemontech 0.37.0

1 of the 13 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
guava@18.0
32.0.0-android

Open the chart page →

14,893
microcksmicrocksOfficialVerified publisher0.8.0-helm-3.kube-1.171 of 5See more

microcks microcks 0.8.0-helm-3.kube-1.17

1 of the 5 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
microcks/microcks:0.8.0e3a3e0c67b09
guava@14.0
32.0.0-android

Open the chart page →

10,732
sparkmicrosoft1.0.42 of 3See more

spark microsoft 1.0.4

2 of the 3 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
dbanda/livy:0.80ca125e68e53
guava@15.0
32.0.0-android
dbanda/spark:2.4.6d0e6367876ae
guava@27.0-jre
32.0.0-android

Open the chart page →

13,738
solrpreferred-aiVerified publisher3.2.01 of 3See more

solr preferred-ai 3.2.0

1 of the 3 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
library/solr:8.7.0d124efd81fbb
guava@25.0-jre
32.0.0-android

Open the chart page →

6,048
selenium3selenium31.2.41 of 1See more

selenium3 selenium3 1.2.4

1 of the 1 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
guava@25.0-jre
32.0.0-android

Open the chart page →

11,782
hadoopbigdata-chartsVerified publisher1.0.12 of 2See more

hadoop bigdata-charts 1.0.1

2 of the 2 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
5200710/hadoop:3.2.3-java8092d3088a5fb
guava@27.0-jre
32.0.0-android
marcelmay/hadoop-hdfs-fsimage-exporter:1.3abeccb740ef7
guava@27.1-jre
32.0.0-android

Open the chart page →

12,111
jira-softwaremoxVerified publisher2.7.11 of 3See more

jira-software mox 2.7.1

1 of the 3 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
atlassian/jira-software:9.7.264a75aa4ec4e
guava@19.0
32.0.0-android

Open the chart page →

8,636
thehivestrangebee-helmOfficialVerified publisher1.0.61 of 7See more

thehive strangebee-helm 1.0.6

1 of the 7 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
bitnamilegacy/cassandra:4.1.7-debian-12-r32b7a217999a1
guava@27.0-jre
32.0.0-android

Open the chart page →

16,210
druidwiremindVerified publisher1.22.11 of 3See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
apache/druid:29.0.10cef139b6bf1
guava@30.1.1-jre
32.0.0-android

Open the chart page →

7,930
guacamolehalkeye0.2.11 of 3See more

guacamole halkeye 0.2.1

1 of the 3 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
guacamole/guacamole:1.1.0333a7f40c145
guava@19.0
32.0.0-android

Open the chart page →

4,839
hertzbeathertzbeatOfficialVerified publisher1.8.12 of 4See more

hertzbeat hertzbeat 1.8.1

2 of the 4 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
apache/hertzbeat:1.8.075d48a62748f
guava@30.1-jre
32.0.0-android
apache/hertzbeat-collector:1.8.0a2bab1be574c
guava@30.1-jre
32.0.0-android

Open the chart page →

14,000
kubernetes-loggingkubernetes-logging4.8.01 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
guava@31.1-jre
32.0.0-android

Open the chart page →

10,530
unifi-controllerqonstruktVerified publisher2.6.11 of 1See more

unifi-controller qonstrukt 2.6.1

1 of the 1 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:8.0.240ae315a3a456
guava@31.0.1-jre
32.0.0-android

Open the chart page →

10,469
flinkriskfocus0.2.01 of 1See more

flink riskfocus 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
library/flink:1.11.2-scala_2.121fe4fb22a2a5
guava@26.0-jre
32.0.0-android

Open the chart page →

3,235
sonarqube-dcesonarqubeVerified publisher0.1.2+1212 of 5See more

sonarqube-dce sonarqube 0.1.2+121

2 of the 5 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
library/sonarqube:9.1.0-datacenter-search7e43ff493a47
guava@10.0.1
32.0.0-android
library/sonarqube:9.1.0-datacenter-appa9bc5a3a1fc3
guava@28.2-jre
32.0.0-android

Open the chart page →

8,698
hivebigdata-chartsVerified publisher0.1.81 of 1See more

hive bigdata-charts 0.1.8

1 of the 1 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
guava@11.0.2
32.0.0-android

Open the chart page →

7,166
cloudflowcloudflow-helm-charts0.0.0-NIGHTLY011220201 of 1See more

cloudflow cloudflow-helm-charts 0.0.0-NIGHTLY01122020

1 of the 1 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
lightbend/cloudflow-operator:0.0.0-NIGHTLY011220202647f396de23
guava@11.0.2
32.0.0-android

Open the chart page →

1,886
cmak-operatorcmak-operatorVerified publisher2.2.21 of 3See more

cmak-operator cmak-operator 2.2.2

1 of the 3 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
ghcr.io/eshepelyuk/dckr/cmak-3.0.0.6:1.2.090a34412c6b5
guava@23.6.1-jre
32.0.0-android

Open the chart page →

4,605
hdfsdmwm-bigdataVerified publisher1.0.12 of 2See more

hdfs dmwm-bigdata 1.0.1

2 of the 2 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
gradiant/hdfs:3.2.2e3bf364fe713
guava@27.0-jre
32.0.0-android
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
guava@24.0-jre
32.0.0-android

Open the chart page →

7,948
hivedmwm-bigdataVerified publisher0.1.64 of 5See more

hive dmwm-bigdata 0.1.6

4 of the 5 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
guava@11.0.2
32.0.0-android
gradiant/hdfs:2.7.73b28784ba41f
guava@11.0.2
32.0.0-android
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
guava@11.0.2
32.0.0-android
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
guava@24.0-jre
32.0.0-android

Open the chart page →

20,837
unifigeek-cookbookVerified publisher5.1.31 of 1See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.4.162b3edc809a3ff
guava@31.0.1-jre
32.0.0-android

Open the chart page →

11,839
rocketmqgin1.1.02 of 2See more

rocketmq gin 1.1.0

2 of the 2 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
apache/rocketmq:4.9.35ac2a4e0f627
guava@31.0.1-jre
32.0.0-android
apacherocketmq/rocketmq-dashboard:1.0.024799aff6cf8
guava@29.0-jre
32.0.0-android

Open the chart page →

9,154
nzbhydra2halkeye2.30.11 of 2See more

nzbhydra2 halkeye 2.30.1

1 of the 2 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
binhex/arch-nzbhydra2:3.1.0-1-01fb8952921ab6
guava@20.0
32.0.0-android

Open the chart page →

6,711
hive-metastoreheva-helm-chartsVerified publisher0.2.01 of 2See more

hive-metastore heva-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
sslhep/hive-metastore:3.1.39e80af083079
guava@11.0.2
32.0.0-android

Open the chart page →

7,335
cratedbhmdmph2.0.31 of 2See more

cratedb hmdmph 2.0.3

1 of the 2 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
library/crate:4.7.0c7984a05e15b
guava@30.0-jre
32.0.0-android

Open the chart page →

1,335
me-untethr-nostr-relaykronkltdVerified publisher0.1.41 of 1See more

me-untethr-nostr-relay kronkltd 0.1.4

1 of the 1 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
duck1123/me.untethr.nostr-relay:0.2.1119fc5d4cbfb
guava@31.0.1-android
32.0.0-android

Open the chart page →

2,072
skywalkingkubesphere-testVerified publisher3.1.02 of 4See more

skywalking kubesphere-test 3.1.0

2 of the 4 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.1.0-es7641237e0299b
guava@28.1-jre
32.0.0-android
apache/skywalking-ui:8.1.067d50e4deff4
guava@18.0
32.0.0-android

Open the chart page →

18,042
kafdroplsst-sqre0.1.31 of 1See more

kafdrop lsst-sqre 0.1.3

1 of the 1 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
guava@30.1.1-android
32.0.0-android

Open the chart page →

7,901
rocketmq-clusterrocketmq12.6.01 of 2See more

rocketmq-cluster rocketmq 12.6.0

1 of the 2 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
apacherocketmq/rocketmq-dashboard:2.1.0ce78506bd6fe
guava@29.0-jre
32.0.0-android

Open the chart page →

6,328
hive-metastoreslamdev0.0.51 of 2See more

hive-metastore slamdev 0.0.5

1 of the 2 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
guava@14.0.1
32.0.0-android

Open the chart page →

8,198
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.261 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

1 of the 6 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
thingsboard/tb-node:3.6.0f40a542832c4
guava@31.1-jre
32.0.0-android

Open the chart page →

14,566
vrijbrpvrijbrpVerified publisher0.1.52 of 5See more

vrijbrp vrijbrp 0.1.5

2 of the 5 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
vrijbrp/balie:developbc85c89530b9
guava@31.1-jre
32.0.0-android
vrijbrp/balie-ws:developc6603cb829ea
guava@31.1-jre
32.0.0-android

Open the chart page →

8,811
activemq-artemisactivemq-artemis-helm0.3.61 of 1See more

activemq-artemis activemq-artemis-helm 0.3.6

1 of the 1 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
vromero/activemq-artemis:2.16.0408d6a46b153
guava@27.1-jre
32.0.0-android

Open the chart page →

4,419
aerospike-graphaerospike-helmOfficialVerified publisher3.7.01 of 1See more

aerospike-graph aerospike-helm 3.7.0

1 of the 1 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
aerospike/aerospike-graph-service:3.3.1781ba5213efd
guava@31.1-jre
32.0.0-android

Open the chart page →

322
apache-rangerapache-ranger0.1.01 of 2See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
apache/ranger:2.7.076c176e8a0e4
guava@30.1.1-jre
32.0.0-android

Open the chart page →

7,740

Container images carrying it

410 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
guava@31.1-jre
32.0.0-android
1
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
guava@30.1-jre
32.0.0-android
1
quay.io/keycloak/keycloak:20.0.18830f76112b6
guava@30.1-jre
32.0.0-android
1
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
guava@30.1-jre
32.0.0-android
1
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
guava@28.1-jre
32.0.0-android
1
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
guava@21.0
32.0.0-android
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
guava@25.1-android
32.0.0-android
1
quay.io/seamware/consent-facade:0.0.14be844c750c7e
guava@31.0.1-jre
32.0.0-android
1
quay.io/snowdrop/spring-boot-rest-http-example:2.7b1a054613715
guava@25.0-jre
32.0.0-android
1
quay.io/wi_stefan/dss-validation-service:0.0.18e928db29ee1
guava@28.1-jre
32.0.0-android
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.