StackRadar

CVE-2023-2976

Medium

Advisory

Published 14 Jun 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
16th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
379
of 17,781 indexed, latest versions
Container images
410
deployed by those charts
Fix available
1 of 1
affected package

Guava vulnerable to insecure use of temporary directory

Carried by container images the latest versions of 379 of 17,781 indexed charts deploy, on 410 images.

Affected packageAffected versionsFixed inImages
guavamaven10.0.1, 11.0.1, 11.0.2, 14.0+38 more32.0.0-android410
OSV records
GHSA-7g45-4rm6-3mm3

Charts affected

379 by stars
ChartLatestAffected imagesRadar Score
soarv113assist-iot-cybersecurity-monitoring-soar0.1.33 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

3 of the 5 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
guava@18.0
32.0.0-android
assistiot/cybersecurity-monitoring_ir-elk:latest4228b7a8ef40
guava@27.1-jre
32.0.0-android
assistiot/cybersecurity-monitoring_ir-thv:latestc8b6c7eaa0cd
guava@30.1.1-jre
32.0.0-android

Open the chart page →

17,896
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-elk:latestba1d85ec3739
guava@15.0
32.0.0-android

Open the chart page →

10,730
geoserver-cloudcamptocamp20.0.56 of 11See more

geoserver-cloud camptocamp2 0.0.5

6 of the 11 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
guava@29.0-jre
32.0.0-android
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
guava@29.0-jre
32.0.0-android
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
guava@29.0-jre
32.0.0-android
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
guava@29.0-jre
32.0.0-android
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
guava@29.0-jre
32.0.0-android
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
guava@29.0-jre
32.0.0-android

Open the chart page →

84,444
geoserverCloudcamptocamp20.0.66 of 11See more

geoserverCloud camptocamp2 0.0.6

6 of the 11 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
guava@29.0-jre
32.0.0-android
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
guava@29.0-jre
32.0.0-android
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
guava@29.0-jre
32.0.0-android
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
guava@29.0-jre
32.0.0-android
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
guava@29.0-jre
32.0.0-android
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
guava@29.0-jre
32.0.0-android

Open the chart page →

84,444
hadoopcloudnativeapp1.1.01 of 1See more

hadoop cloudnativeapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
guava@11.0.2
32.0.0-android

Open the chart page →

5,772
ignitecloudnativeapp1.0.01 of 1See more

ignite cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
apacheignite/ignite:2.7.0d7deab68b8fa
guava@25.1-jre
32.0.0-android

Open the chart page →

7,891
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
guava@19.0
32.0.0-android

Open the chart page →

38,346
wiremockdeliveryheroVerified publisher1.4.61 of 2See more

wiremock deliveryhero 1.4.6

1 of the 2 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
rodolpheche/wiremock:2.26.03be08a386092
guava@27.0.1-jre
32.0.0-android

Open the chart page →

2,140
hbasedmwm-bigdataVerified publisher0.1.63 of 5See more

hbase dmwm-bigdata 0.1.6

3 of the 5 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
guava@11.0.2
32.0.0-android
gradiant/hdfs:2.7.73b28784ba41f
guava@11.0.2
32.0.0-android
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
guava@24.0-jre
32.0.0-android

Open the chart page →

13,392
hive-metastoredmwm-bigdataVerified publisher0.1.31 of 2See more

hive-metastore dmwm-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
guava@11.0.2
32.0.0-android

Open the chart page →

6,882
opentsdbdmwm-bigdataVerified publisher0.1.74 of 6See more

opentsdb dmwm-bigdata 0.1.7

4 of the 6 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
guava@11.0.2
32.0.0-android
gradiant/hdfs:2.7.73b28784ba41f
guava@11.0.2
32.0.0-android
gradiant/opentsdb:2.4.0c33d53913869
guava@18.0
32.0.0-android
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
guava@24.0-jre
32.0.0-android

Open the chart page →

17,511
spinnakerdwardu-helm-charts2.2.61 of 2See more

spinnaker dwardu-helm-charts 2.2.6

1 of the 2 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
guava@28.2-jre
32.0.0-android

Open the chart page →

8,752
nifi-registrydysnixVerified publisher1.1.51 of 2See more

nifi-registry dysnix 1.1.5

1 of the 2 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
apache/nifi-registry:0.8.0974efa2f21da
guava@28.0-jre
32.0.0-android

Open the chart page →

6,531
elasticsearch-dataempathyco0.2.01 of 2See more

elasticsearch-data empathyco 0.2.0

1 of the 2 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
empathyco/elasticsearch:6.6.2-memlockbcf4365ee7ec
guava@19.0
32.0.0-android

Open the chart page →

3,703
elasticsearch-masterempathyco0.3.01 of 2See more

elasticsearch-master empathyco 0.3.0

1 of the 2 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
empathyco/elasticsearch:6.6.2-memlockbcf4365ee7ec
guava@19.0
32.0.0-android

Open the chart page →

3,703
enavenav-service-architectureVerified publisher0.0.73 of 10See more

enav enav-service-architecture 0.0.7

3 of the 10 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
ghcr.io/gla-rad/enav-aton-admin-service:latestcf85570b1324
guava@22.0
32.0.0-android
ghcr.io/gla-rad/enav-aton-service:latest3be878690629
guava@22.0
32.0.0-android
ghcr.io/gla-rad/enav-msg-broker:latest6fe372e4e481
guava@22.0
32.0.0-android

Open the chart page →

15,860
pitchforkexpediagroup0.1.41 of 1See more

pitchfork expediagroup 0.1.4

1 of the 1 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
expediagroup/pitchfork:1.314f2cf61e7de9
guava@29.0-jre
32.0.0-android

Open the chart page →

3,309
atlas-cmmsf3k-techVerified publisher0.151.51 of 4See more

atlas-cmms f3k-tech 0.151.5

1 of the 4 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
intelloop/atlas-cmms-backend:v1.5.14c61bc3dd3f8
guava@30.1.1-jre
32.0.0-android

Open the chart page →

5,291
omada-controllergeek-cookbookVerified publisher4.4.21 of 1See more

omada-controller geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
guava@27.0.1-jre
32.0.0-android

Open the chart page →

11,553
gentrace-self-hostedgentrace-self-hostedVerified publisher0.1.31 of 9See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

1 of the 9 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
provectuslabs/kafka-ui:latest8f2ff02d64b0
guava@30.1.1-jre
32.0.0-android

Open the chart page →

15,562
temporalglasskubeVerified publisher0.45.2-gk.11 of 14See more

temporal glasskube 0.45.2-gk.1

1 of the 14 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
guava@18.0
32.0.0-android

Open the chart page →

16,346
hbasegradiant-bigdataVerified publisher0.1.63 of 5See more

hbase gradiant-bigdata 0.1.6

3 of the 5 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
guava@11.0.2
32.0.0-android
gradiant/hdfs:2.7.73b28784ba41f
guava@11.0.2
32.0.0-android
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
guava@24.0-jre
32.0.0-android

Open the chart page →

13,392
stormgresearch1.2.01 of 3See more

storm gresearch 1.2.0

1 of the 3 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
library/storm:2.4.0bd5d420506d6
guava@27.0.1-jre
32.0.0-android

Open the chart page →

6,165
gridgaingridgainOfficialVerified publisher1.0.61 of 1See more

gridgain gridgain 1.0.6

1 of the 1 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
gridgain/community:8.9.11d32d182a0e6a
guava@11.0.2
32.0.0-android

Open the chart page →

4,679
seata-serverheidaodageshiwoVerified publisher1.0.01 of 1See more

seata-server heidaodageshiwo 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
seataio/seata-server:1.5.1ee1ed55f4144
guava@27.0.1-jre
32.0.0-android

Open the chart page →

5,624
elasticinseefrlab2.2.01 of 2See more

elastic inseefrlab 2.2.0

1 of the 2 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.35e6ac15bf6a5
guava@19.0
32.0.0-android

Open the chart page →

17,284
jetic-operatorjetic-operatorVerified publisher2.0.21 of 1See more

jetic-operator jetic-operator 2.0.2

1 of the 1 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
apache/camel-k:1.10.43bb13d14f64a
guava@25.1-android
32.0.0-android

Open the chart page →

9,318
kokukokuVerified publisher1.0.01 of 7See more

koku koku 1.0.0

1 of the 7 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
guava@30.1.1-jre
32.0.0-android

Open the chart page →

12,019
hertzbeatkubesphere-testVerified publisher1.4.11 of 4See more

hertzbeat kubesphere-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
apache/iotdb:0.13.3-nodeafa47bf1692a
guava@26.0-jre
32.0.0-android

Open the chart page →

7,710
linstorkvaps1.14.02 of 11See more

linstor kvaps 1.14.0

2 of the 11 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
ghcr.io/kvaps/linstor-controller:v1.14.000ce11c31087
guava@30.1-jre
32.0.0-android
ghcr.io/kvaps/linstor-satellite:v1.14.0a573fb9bc809
guava@30.1-jre
32.0.0-android

Open the chart page →

15,547
magentomagento3.2.31 of 12See more

magento magento 3.2.3

1 of the 12 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
magento/magento-cloud-docker-opensearch:2.5-1.4.059fb6f0f1461
guava@30.1.1-jre
32.0.0-android

Open the chart page →

13,479
Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacionVerified publisher1.0.11 of 6See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

1 of the 6 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
torrespro/mca-worker:2.0.06d3bd305a1ba
guava@28.1-android
32.0.0-android

Open the chart page →

19,187
metabasemetabase-helmVerified publisher2.7.11 of 1See more

metabase metabase-helm 2.7.1

1 of the 1 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
metabase/metabase:v0.46.09ebdc664a6b2
guava@31.1-jre
32.0.0-android

Open the chart page →

2,221
hadoopmiuler1.2.21 of 1See more

hadoop miuler 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
guava@11.0.2
32.0.0-android

Open the chart page →

5,772
clowder2ncsaVerified publisher1.9.71 of 12See more

clowder2 ncsa 1.9.7

1 of the 12 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
guava@30.1-jre
32.0.0-android

Open the chart page →

37,373
glowrootnovum-rgi-charts1.0.101 of 2See more

glowroot novum-rgi-charts 1.0.10

1 of the 2 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
novumrgi/glowroot-central:0.14.0-beta.38c54790675b1
guava@31.0.1-jre
32.0.0-android

Open the chart page →

2,308
data-prepperopensearch-project-helm-chartsVerified publisher0.3.11 of 1See more

data-prepper opensearch-project-helm-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
opensearchproject/data-prepper:2.8.057c25fa01d3c
guava@30.1.1-jre
32.0.0-android

Open the chart page →

1,692
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.0332c6d416808
guava@27.1-jre
32.0.0-android

Open the chart page →

31,844
nifi-registryprofyu1.14.0-r0011 of 1See more

nifi-registry profyu 1.14.0-r001

1 of the 1 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
apache/nifi-registry:1.14.0090b7f87ec7f
guava@28.0-jre
32.0.0-android

Open the chart page →

4,621
kafka-managerradar-baseVerified publisher2.3.11 of 1See more

kafka-manager radar-base 2.3.1

1 of the 1 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
radarbase/kafka-manager:1.3.3.181d2af7dd5a4e
guava@16.0.1
32.0.0-android

Open the chart page →

4,000
shinyproxyremche0.6.61 of 2See more

shinyproxy remche 0.6.6

1 of the 2 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
remche/shinyproxy:2.6.18bcda8a04d3b
guava@25.0-jre
32.0.0-android

Open the chart page →

3,958
reservation-appreservation-app1.0.91 of 4See more

reservation-app reservation-app 1.0.9

1 of the 4 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
zbalogh/reservation-api-server:1.0.97c247e399a1f
guava@28.1-jre
32.0.0-android

Open the chart page →

6,639
dev-feedrm3lVerified publisher3.1.21 of 3See more

dev-feed rm3l 3.1.2

1 of the 3 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
rm3l/dev-feed-api:latest9a7f732245a3
guava@31.0.1-jre
32.0.0-android

Open the chart page →

9,837
service-names-port-numbersrm3lVerified publisher0.26.11 of 1See more

service-names-port-numbers rm3l 0.26.1

1 of the 1 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
rm3l/service-names-port-numbers:0.12.162d1cc4223e5
guava@30.0-jre
32.0.0-android

Open the chart page →

10,120
elasticsearchromanow-helm-chartsVerified publisher1.7.11 of 2See more

elasticsearch romanow-helm-charts 1.7.1

1 of the 2 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.8fdc73b3249c1
guava@19.0
32.0.0-android

Open the chart page →

6,045
logstashromanow-helm-chartsVerified publisher1.5.01 of 1See more

logstash romanow-helm-charts 1.5.0

1 of the 1 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
library/logstash:7.17.817a4f64e9cf5
guava@24.1.1-jre
32.0.0-android

Open the chart page →

7,529
routrroutr0.0.101 of 2See more

routr routr 0.0.10

1 of the 2 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
fonoster/routr:1.0.0-rc52ca65af17cbc
guava@28.0-jre
32.0.0-android

Open the chart page →

4,983
seldon-coreseldon0.2.72 of 3See more

seldon-core seldon 0.2.7

2 of the 3 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
seldonio/apife:0.2.7ba81b17f00eb
guava@19.0
32.0.0-android
seldonio/cluster-manager:0.2.729e362bb1ba2
guava@19.0
32.0.0-android

Open the chart page →

13,798
signserver-cesignserverOfficialVerified publisher2.3.51 of 1See more

signserver-ce signserver 2.3.5

1 of the 1 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
keyfactor/signserver-ce:7.3.2798fbbe00283
guava@25.0-jre
32.0.0-android

Open the chart page →

2,406
starwhalestarwhaleVerified publisher0.6.151 of 4See more

starwhale starwhale 0.6.15

1 of the 4 container images this version deploys carry CVE-2023-2976.

Container imageDigestPackageFixed in
ghcr.io/star-whale/server:0.6.158368359c8dd0
guava@31.1-jre
32.0.0-android

Open the chart page →

13,486

Container images carrying it

410 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
guava@31.1-jre
32.0.0-android
1
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
guava@30.1-jre
32.0.0-android
1
quay.io/keycloak/keycloak:20.0.18830f76112b6
guava@30.1-jre
32.0.0-android
1
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
guava@30.1-jre
32.0.0-android
1
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
guava@28.1-jre
32.0.0-android
1
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
guava@21.0
32.0.0-android
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
guava@25.1-android
32.0.0-android
1
quay.io/seamware/consent-facade:0.0.14be844c750c7e
guava@31.0.1-jre
32.0.0-android
1
quay.io/snowdrop/spring-boot-rest-http-example:2.7b1a054613715
guava@25.0-jre
32.0.0-android
1
quay.io/wi_stefan/dss-validation-service:0.0.18e928db29ee1
guava@28.1-jre
32.0.0-android
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.