StackRadarChart IndexLive demo

CVE-2023-34149

Medium

Advisory

Published 14 Jun 2023In the index since 8 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.054; 92nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2; of 17,781 indexed, latest versions
Container images: 2; deployed by those charts
Fix available: 1 of 1; affected package

Apache Struts vulnerable to memory exhaustion

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
struts2-coremaven	2.5.30, 2.5.30-atlassian-1	2.5.31	2

OSV records: GHSA-8f6x-v685-g2xc

Charts affected

2 by stars

Chart

Latest

Affected images

Radar Score

akto-testing-db-layerakto

1 of 2 See more

akto-testing-db-layer akto 1.42.16

1 of the 2 container images this version deploys carry CVE-2023-34149.

Container image	Digest	Package	Fixed in
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer :1.59.3_local	8cdcb7e83f9f	struts2-core@2.5.30	2.5.31

Open the chart page →

5,489

1 of 3 See more

crowd mox 2.4.3

1 of the 3 container images this version deploys carry CVE-2023-34149.

Container image	Digest	Package	Fixed in
atlassian/crowd :5.2.2	ebf761c7d437	struts2-core@2.5.30-atlassian-1	2.5.31

Open the chart page →

5,663

Container images carrying it

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
atlassian/crowd :5.2.2	ebf761c7d437	struts2-core@2.5.30-atlassian-1	2.5.31	1
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer :1.59.3_local	8cdcb7e83f9f	struts2-core@2.5.30	2.5.31	1