StackRadar

CVE-2023-5072

High

Advisory

Published 14 Nov 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.014
72nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
71
of 17,781 indexed, latest versions
Container images
74
deployed by those charts
Fix available
1 of 1
affected package

Java: DoS Vulnerability in JSON-JAVA

Carried by container images the latest versions of 71 of 17,781 indexed charts deploy, on 74 images.

Affected packageAffected versionsFixed inImages
jsonmaven20070829, 20140107, 20160212, 20160810+12 more2023101374
OSV records
GHSA-4jq9-2xhw-jpx7

Charts affected

71 by stars
ChartLatestAffected imagesRadar Score
sonarqubesonarqubeVerified publisher10.0.0+5211 of 3See more

sonarqube sonarqube 10.0.0+521

1 of the 3 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
library/sonarqube:10.0.0-communityef9723cf4fe4
json@20220320
20231013

Open the chart page →

6,556
dependency-trackevryfs-ossVerified publisher1.5.51 of 3See more

dependency-track evryfs-oss 1.5.5

1 of the 3 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
dependencytrack/apiserver:4.6.3485ac0952c02
json@20220924
20231013

Open the chart page →

2,503
sonarqube-ltssonarqubeVerified publisher1.0.16+981 of 4See more

sonarqube-lts sonarqube 1.0.16+98

1 of the 4 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
library/sonarqube:8.9.2-community88cd63154d4b
json@20201115
20231013

Open the chart page →

4,099
jira-softwaremoxVerified publisher2.7.11 of 3See more

jira-software mox 2.7.1

1 of the 3 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
atlassian/jira-software:9.7.264a75aa4ec4e
json@20070829
20231013

Open the chart page →

8,636
kubernetes-loggingkubernetes-logging4.8.01 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.10.0c8f3ebd2a934
json@20230227
20231013

Open the chart page →

10,530
unifi-controllerqonstruktVerified publisher2.6.11 of 1See more

unifi-controller qonstrukt 2.6.1

1 of the 1 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:8.0.240ae315a3a456
json@20190722
20231013

Open the chart page →

10,469
sonarqube-dcesonarqubeVerified publisher0.1.2+1212 of 5See more

sonarqube-dce sonarqube 0.1.2+121

2 of the 5 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
library/sonarqube:9.1.0-datacenter-search7e43ff493a47
json@20201115
20231013
library/sonarqube:9.1.0-datacenter-appa9bc5a3a1fc3
json@20201115
20231013

Open the chart page →

8,698
unifigeek-cookbookVerified publisher5.1.31 of 1See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.4.162b3edc809a3ff
json@20190722
20231013

Open the chart page →

11,839
feedbacksystemthm-mni-iiVerified publisher0.47.11 of 10See more

feedbacksystem thm-mni-ii 0.47.1

1 of the 10 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
thmmniii/fbs-core:v1.27.15438517d9fc2
json@20230618
20231013

Open the chart page →

28,534
activemq-artemisactivemq-artemis-helm0.3.61 of 1See more

activemq-artemis activemq-artemis-helm 0.3.6

1 of the 1 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
vromero/activemq-artemis:2.16.0408d6a46b153
json@20171018
20231013

Open the chart page →

4,419
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-elk:latestba1d85ec3739
json@20180813
20231013

Open the chart page →

10,730
pitchforkexpediagroup0.1.41 of 1See more

pitchfork expediagroup 0.1.4

1 of the 1 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
expediagroup/pitchfork:1.314f2cf61e7de9
json@20201115
20231013

Open the chart page →

3,309
omada-controllergeek-cookbookVerified publisher4.4.21 of 1See more

omada-controller geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
json@20180813
20231013

Open the chart page →

11,553
gentrace-self-hostedgentrace-self-hostedVerified publisher0.1.31 of 9See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

1 of the 9 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
provectuslabs/kafka-ui:latest8f2ff02d64b0
json@20230227
20231013

Open the chart page →

15,562
amgraviteeioVerified publisher4.12.62 of 3See more

am graviteeio 4.12.6

2 of the 3 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
graviteeio/am-gateway:4.12.607b7f6dc267a
json@20230227
20231013
graviteeio/am-management-api:4.12.6a8eb04ee0c70
json@20230227
20231013

Open the chart page →

2,088
magentomagento3.2.31 of 12See more

magento magento 3.2.3

1 of the 12 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
magento/magento-cloud-docker-opensearch:2.5-1.4.059fb6f0f1461
json@20220924
20231013

Open the chart page →

13,479
jenkinstestchart0.1.91 of 2See more

jenkins testchart 0.1.9

1 of the 2 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
json@20230227
20231013

Open the chart page →

9,102
jenkinstest-jenkins9.1.01 of 2See more

jenkins test-jenkins 9.1.0

1 of the 2 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
json@20230227
20231013

Open the chart page →

9,102
tocktock0.6.32 of 9See more

tock tock 0.6.3

2 of the 9 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
tock/build_worker:25.10.7080cb6b08d5b
json@20170516
20231013
tock/nlp_api:25.10.7c04ffe67b977
json@20170516
20231013

Open the chart page →

12,907
akto-protectionakto0.1.01 of 4See more

akto-protection akto 0.1.0

1 of the 4 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
aktosecurity/akto-api-protection:localbcd7382c9c1b
json@20230227
20231013

Open the chart page →

11,285
akto-source-code-analyserakto0.1.51 of 3See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
aktosecurity/source-code-analyser:a-1703-merge274042ed7a53
json@20230227
20231013

Open the chart page →

4,880
amorphieamorphie0.1.22 of 18See more

amorphie amorphie 0.1.2

2 of the 18 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
hazelcast/hazelcast:5.3.18fe26efde8e1
json@20230227
20231013
hazelcast/management-center:5.3.2f9d34300d330
json@20230227
20231013

Open the chart page →

28,131
omada-controllerandrelote-k8sVerified publisher4.5.01 of 1See more

omada-controller andrelote-k8s 4.5.0

1 of the 1 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
json@20180813
20231013

Open the chart page →

11,553
inbox-server-distributedappscodeVerified publisher2025.12.251 of 4See more

inbox-server-distributed appscode 2025.12.25

1 of the 4 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.1.04254021a8c71
json@20180813
20231013

Open the chart page →

15,573
james-komposeappscodeVerified publisher0.1.01 of 4See more

james-kompose appscode 0.1.0

1 of the 4 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.1.04254021a8c71
json@20180813
20231013

Open the chart page →

16,975
automatedconfigurationassist-iot-automated-configuration1.0.02 of 5See more

automatedconfiguration assist-iot-automated-configuration 1.0.0

2 of the 5 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
assistiot/automated_configuration:latest23f195a7a26a
json@20201115.0.0
20231013
provectuslabs/kafka-ui:latest8f2ff02d64b0
json@20230227
20231013

Open the chart page →

14,728
axelor-open-suiteaxelor-open-suiteVerified publisher7.2.581 of 2See more

axelor-open-suite axelor-open-suite 7.2.58

1 of the 2 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
pmoscode/axelor-open-suite:v7.2.57a58f4d762f5c
json@20210307
20231013

Open the chart page →

9,722
opendistro-esbeeinventor1.15.11 of 3See more

opendistro-es beeinventor 1.15.1

1 of the 3 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
json@20180813
20231013

Open the chart page →

5,806
unificloudnativeapp0.4.21 of 1See more

unifi cloudnativeapp 0.4.2

1 of the 1 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
jacobalberty/unifi:5.10.19c409924e2463
json@20180813
20231013

Open the chart page →

22,442
dependency-trackcnieg3.0.81 of 2See more

dependency-track cnieg 3.0.8

1 of the 2 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
dependencytrack/apiserver:4.6.3485ac0952c02
json@20220924
20231013

Open the chart page →

2,503
cp-helm-chartscp-helm-charts0.6.15 of 8See more

cp-helm-charts cp-helm-charts 0.6.1

5 of the 8 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
json@20190722
20231013
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
json@20190722
20231013
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
json@20190722
20231013
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
json@20190722
20231013
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
json@20190722
20231013

Open the chart page →

58,857
api-postsdniel0.9.11 of 1See more

api-posts dniel 0.9.1

1 of the 1 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
dniel/api-posts:master45a667852f2a
json@20171018
20231013

Open the chart page →

8,986
forwardauthdniel2.0.131 of 1See more

forwardauth dniel 2.0.13

1 of the 1 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
dniel/forwardauth:latestf67129ea1c64
json@20160212
20231013

Open the chart page →

4,592
mod-marccatfolio-org0.1.301 of 1See more

mod-marccat folio-org 0.1.30

1 of the 1 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
folioci/mod-marccat:latest1b57d690d568
json@20180813
20231013

Open the chart page →

6,988
komgageek-cookbookVerified publisher2.4.21 of 1See more

komga geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
gotson/komga:0.99.49b15ea6bfc30
json@20171018
20231013

Open the chart page →

12,581
promcordgeek-cookbookVerified publisher5.4.21 of 1See more

promcord geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
biospheere/promcord:latest16d4fd269e66
json@20170516
20231013

Open the chart page →

1,147
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.82 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

2 of the 5 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
json@20140107
20231013
jingking/geonetwork-hnap:4.2.843e74ab234e1
json@20180813
20231013

Open the chart page →

34,754
chart-bookhelm-deploy-book0.1.01 of 3See more

chart-book helm-deploy-book 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
dannielkil/book-backend:lateste3b479a55a69
json@20180813
20231013

Open the chart page →

9,122
mvfi4trustVerified publisher1.1.21 of 1See more

mvf i4trust 1.1.2

1 of the 1 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
wistefan/mvf:lateste0887302b2d8
json@20220924
20231013

Open the chart page →

7,144
vcwaltidi4trustVerified publisher0.0.191 of 1See more

vcwaltid i4trust 0.0.19

1 of the 1 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
json@20220924
20231013

Open the chart page →

7,862
itm-mqtt-brokerintelVerified publisher1.0.01 of 1See more

itm-mqtt-broker intel 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
hivemq/hivemq4:dns-4.5.144d194450d48e
json@20201115
20231013

Open the chart page →

2,653
kadeck-webkadeck0.6.01 of 1See more

kadeck-web kadeck 0.6.0

1 of the 1 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
xeotek/kadeck:4.2.94c6b04d9ce55
json@20220320
20231013

Open the chart page →

7,254
sonarqubekubesphereVerified publisher6.7.01 of 3See more

sonarqube kubesphere 6.7.0

1 of the 3 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
library/sonarqube:8.9-communityeb2f0be32efd
json@20201115
20231013

Open the chart page →

2,273
kafka-connect-wrapperlsmhun0.1.01 of 1See more

kafka-connect-wrapper lsmhun 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
lsmaster/kafka-connect-wrapper:6.1.0-0.1061eb5fbfa00
json@20201115
20231013

Open the chart page →

2,391
opendistro-eslsst-sqre1.4.11 of 3See more

opendistro-es lsst-sqre 1.4.1

1 of the 3 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.4.06df71eb04639
json@20180813
20231013

Open the chart page →

7,929
filebot-botluiscajl0.0.111 of 1See more

filebot-bot luiscajl 0.0.11

1 of the 1 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
lavandadelpatio/filebot-bot:0.0.1-SNAPSHOTd2cba20aa4d8
json@20180813
20231013

Open the chart page →

3,679
unifimidokura-communityVerified publisher0.0.61 of 1See more

unifi midokura-community 0.0.6

1 of the 1 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:7.3.83ab105cc50322
json@20190722
20231013

Open the chart page →

11,188
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
opensearchproject/opensearch:1.1.0967d7f57f72f
json@20180813
20231013

Open the chart page →

10,603
standard-application-stackmintel11.4.01 of 12See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
opensearchproject/opensearch:1.1.0967d7f57f72f
json@20180813
20231013

Open the chart page →

10,603
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2023-5072.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
json@20190722
20231013

Open the chart page →

55,726

Container images carrying it

74 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
provectuslabs/kafka-ui:latest8f2ff02d64b0
json@20230227
20231013
3
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
json@20180813
20231013
2
dependencytrack/apiserver:4.6.3485ac0952c02
json@20220924
20231013
2
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
json@20230227
20231013
2
mbentley/omada-controller:4.3f4e682274bed
json@20180813
20231013
2
opensearchproject/opensearch:2.1.04254021a8c71
json@20180813
20231013
2
opensearchproject/opensearch:1.1.0967d7f57f72f
json@20180813
20231013
2
aktosecurity/akto-api-protection:localbcd7382c9c1b
json@20230227
20231013
1
aktosecurity/source-code-analyser:a-1703-merge274042ed7a53
json@20230227
20231013
1
amazon/opendistro-for-elasticsearch:1.4.06df71eb04639
json@20180813
20231013
1
apicurio/apicurio-registry-jpa:1.3.2.Final44eeddd3562c
json@20190722
20231013
1
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
json@20201115
20231013
1
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
json@20230618
20231013
1
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
json@20230618
20231013
1
assistiot/automated_configuration:latest23f195a7a26a
json@20201115.0.0
20231013
1
assistiot/cybersecurity-monitoring_id-elk:latestba1d85ec3739
json@20180813
20231013
1
atlassian/confluence-server:7.10.03b9222ab32ef
json@20070829
20231013
1
atlassian/jira-software:8.14.037bc46cbec1a
json@20070829
20231013
1
atlassian/jira-software:9.7.264a75aa4ec4e
json@20070829
20231013
1
biospheere/promcord:latest16d4fd269e66
json@20170516
20231013
1
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
json@20190722
20231013
1
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
json@20190722
20231013
1
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
json@20190722
20231013
1
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
json@20190722
20231013
1
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
json@20190722
20231013
1
craigwillis/c2metadata-bd:latestae317d7e4724
json@20190722
20231013
1
dannielkil/book-backend:lateste3b479a55a69
json@20180813
20231013
1
dniel/api-posts:master45a667852f2a
json@20171018
20231013
1
dniel/forwardauth:latestf67129ea1c64
json@20160212
20231013
1
expediagroup/pitchfork:1.314f2cf61e7de9
json@20201115
20231013
1
folioci/mod-marccat:latest1b57d690d568
json@20180813
20231013
1
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
json@20140107
20231013
1
gotson/komga:0.99.49b15ea6bfc30
json@20171018
20231013
1
graviteeio/am-gateway:4.12.607b7f6dc267a
json@20230227
20231013
1
graviteeio/am-management-api:4.12.6a8eb04ee0c70
json@20230227
20231013
1
gurolakman/smsf-configuration:1.0.49abb3882bcbd
json@20140107
20231013
1
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
json@20140107
20231013
1
gurolakman/smsf-momt:1.0.4ce23b20a8a17
json@20140107
20231013
1
gurolakman/smsf-registration:1.0.4b22e746edd5d
json@20140107
20231013
1
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
json@20220320
20231013
1
hazelcast/hazelcast:5.3.18fe26efde8e1
json@20230227
20231013
1
hazelcast/management-center:5.3.2f9d34300d330
json@20230227
20231013
1
hivemq/hivemq4:dns-4.5.144d194450d48e
json@20201115
20231013
1
jacobalberty/unifi:v7.1.664a3616625dda
json@20190722
20231013
1
jacobalberty/unifi:v7.4.162b3edc809a3ff
json@20190722
20231013
1
jacobalberty/unifi:5.10.19c409924e2463
json@20180813
20231013
1
jingking/geonetwork-hnap:4.2.843e74ab234e1
json@20180813
20231013
1
lavandadelpatio/filebot-bot:0.0.1-SNAPSHOTd2cba20aa4d8
json@20180813
20231013
1
library/sonarqube:9.1.0-datacenter-search7e43ff493a47
json@20201115
20231013
1
library/sonarqube:8.9.2-community88cd63154d4b
json@20201115
20231013
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.