CVE-2023-40827

High

Advisory

Published 29 Aug 2023In the index since 8 Sept 2026

pf4j vulnerable to remote code execution via loadpluginPath parameter

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
pf4jmaven	2.4.0, 3.6.0	no fix listed	2

2 by stars

Chart

Latest

Affected images

Radar Score

ikigaiikigai-chart

1 of the 58 container images this version deploys carry CVE-2023-40827.

Container image	Digest	Package	Fixed in
dremio/dremio-oss :24.1.0	80ed2e3b7c43	pf4j@3.6.0	no fix listed

37,671

1 of the 8 container images this version deploys carry CVE-2023-40827.

Container image	Digest	Package	Fixed in
reportportal/service-api :5.7.2	9df41f8fb320	pf4j@2.4.0	no fix listed

25,737

2 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
dremio/dremio-oss :24.1.0	80ed2e3b7c43	pf4j@3.6.0	no fix listed	1
reportportal/service-api :5.7.2	9df41f8fb320	pf4j@2.4.0	no fix listed	1