StackRadar

CVE-2024-21634

High

Advisory

Published 3 Jan 2024In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
55th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
71
of 17,781 indexed, latest versions
Container images
78
deployed by those charts
Fix available
1 of 1
affected package

Ion Java StackOverflow vulnerability

Carried by container images the latest versions of 71 of 17,781 indexed charts deploy, on 78 images.

Affected packageAffected versionsFixed inImages
ion-javamaven1.0.1, 1.0.2, 1.5.1, 1.9.51.10.578
OSV records
GHSA-264p-99wq-f4j6

Charts affected

71 by stars
ChartLatestAffected imagesRadar Score
sparkmicrosoft1.0.42 of 3See more

spark microsoft 1.0.4

2 of the 3 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
dbanda/livy:0.80ca125e68e53
ion-java@1.0.2
no fix listed
dbanda/spark:2.4.6d0e6367876ae
ion-java@1.0.2
no fix listed

Open the chart page →

13,738
jira-softwaremoxVerified publisher2.7.11 of 3See more

jira-software mox 2.7.1

1 of the 3 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
atlassian/jira-software:9.7.264a75aa4ec4e
ion-java@1.0.2
no fix listed

Open the chart page →

8,636
kubernetes-loggingkubernetes-logging4.8.01 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.10.0c8f3ebd2a934
ion-java@1.0.2
no fix listed

Open the chart page →

10,530
hivebigdata-chartsVerified publisher0.1.81 of 1See more

hive bigdata-charts 0.1.8

1 of the 1 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
ion-java@1.0.2
no fix listed

Open the chart page →

7,166
hdfsdmwm-bigdataVerified publisher1.0.11 of 2See more

hdfs dmwm-bigdata 1.0.1

1 of the 2 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
gradiant/hdfs:3.2.2e3bf364fe713
ion-java@1.0.2
no fix listed

Open the chart page →

7,948
hive-metastoreheva-helm-chartsVerified publisher0.2.01 of 2See more

hive-metastore heva-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
sslhep/hive-metastore:3.1.39e80af083079
ion-java@1.0.2
no fix listed

Open the chart page →

7,335
cratedbhmdmph2.0.31 of 2See more

cratedb hmdmph 2.0.3

1 of the 2 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
library/crate:4.7.0c7984a05e15b
ion-java@1.0.2
no fix listed

Open the chart page →

1,335
dynamodbkeyporttech0.1.271 of 2See more

dynamodb keyporttech 0.1.27

1 of the 2 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
amazon/dynamodb-local:1.12.08414d80019b0
ion-java@1.5.1
no fix listed

Open the chart page →

1,304
hive-metastoreslamdev0.0.51 of 2See more

hive-metastore slamdev 0.0.5

1 of the 2 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
ion-java@1.0.2
no fix listed

Open the chart page →

8,198
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.261 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

1 of the 6 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
thingsboard/tb-node:3.6.0f40a542832c4
ion-java@1.0.2
no fix listed

Open the chart page →

14,566
hadoopcloudnativeapp1.1.01 of 1See more

hadoop cloudnativeapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
ion-java@1.0.2
no fix listed

Open the chart page →

5,772
spinnakerdwardu-helm-charts2.2.61 of 2See more

spinnaker dwardu-helm-charts 2.2.6

1 of the 2 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
ion-java@1.0.2
no fix listed

Open the chart page →

8,752
pitchforkexpediagroup0.1.41 of 1See more

pitchfork expediagroup 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
expediagroup/pitchfork:1.314f2cf61e7de9
ion-java@1.0.2
no fix listed

Open the chart page →

3,309
gentrace-self-hostedgentrace-self-hostedVerified publisher0.1.31 of 9See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

1 of the 9 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
provectuslabs/kafka-ui:latest8f2ff02d64b0
ion-java@1.0.2
no fix listed

Open the chart page →

15,562
kokukokuVerified publisher1.0.01 of 7See more

koku koku 1.0.0

1 of the 7 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
ion-java@1.0.2
no fix listed

Open the chart page →

12,019
metabasemetabase-helmVerified publisher2.7.11 of 1See more

metabase metabase-helm 2.7.1

1 of the 1 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
metabase/metabase:v0.46.09ebdc664a6b2
ion-java@1.0.2
no fix listed

Open the chart page →

2,221
hadoopmiuler1.2.21 of 1See more

hadoop miuler 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
ion-java@1.0.2
no fix listed

Open the chart page →

5,772
shinyproxyremche0.6.61 of 2See more

shinyproxy remche 0.6.6

1 of the 2 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
remche/shinyproxy:2.6.18bcda8a04d3b
ion-java@1.0.2
no fix listed

Open the chart page →

3,958
ckanstatcan0.0.351 of 8See more

ckan statcan 0.0.35

1 of the 8 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
ion-java@1.0.2
no fix listed

Open the chart page →

24,930
graylogt3n1.0.01 of 3See more

graylog t3n 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
graylog2/server:2.4.3-38ff28c66e6c1
ion-java@1.0.2
no fix listed

Open the chart page →

8,063
wavefront-adapter-for-istiowavefront0.1.41 of 2See more

wavefront-adapter-for-istio wavefront 0.1.4

1 of the 2 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
wavefronthq/proxy:9.2d1064d28f6eb
ion-java@1.0.2
no fix listed

Open the chart page →

15,970
airbyte-cronairbyteVerified publisher0.40.371 of 1See more

airbyte-cron airbyte 0.40.37

1 of the 1 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
airbyte/cron:0.40.17caf4f551c546
ion-java@1.0.2
no fix listed

Open the chart page →

1,413
amorphieamorphie0.1.21 of 18See more

amorphie amorphie 0.1.2

1 of the 18 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
hazelcast/hazelcast:5.3.18fe26efde8e1
ion-java@1.0.2
no fix listed

Open the chart page →

28,131
automatedconfigurationassist-iot-automated-configuration1.0.01 of 5See more

automatedconfiguration assist-iot-automated-configuration 1.0.0

1 of the 5 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
provectuslabs/kafka-ui:latest8f2ff02d64b0
ion-java@1.0.2
no fix listed

Open the chart page →

14,728
asya-playgroundasya1.1.31 of 1See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
localstack/localstack:3.19d278167f2b7
ion-java@1.5.1
no fix listed

Open the chart page →

9,412
prestocloudnativeapp0.1.11 of 1See more

presto cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
bivas/presto:0.19605545994f806
ion-java@1.0.2
no fix listed

Open the chart page →

7,226
prometheus-cloudwatch-exportercloudnativeapp0.4.51 of 1See more

prometheus-cloudwatch-exporter cloudnativeapp 0.4.5

1 of the 1 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
prom/cloudwatch-exporter:cloudwatch_exporter-0.5.0923705b2ae77
ion-java@1.0.1
no fix listed

Open the chart page →

2,629
riemanncloudnativeapp0.1.21 of 1See more

riemann cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
raykrueger/riemann:0.2.14c8baf3de57bb
ion-java@1.0.2
no fix listed

Open the chart page →

6,497
cp-helm-chartscp-helm-charts0.6.16 of 8See more

cp-helm-charts cp-helm-charts 0.6.1

6 of the 8 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
ion-java@1.0.2
no fix listed
confluentinc/cp-enterprise-kafka:6.1.08f1544df1f48
ion-java@1.0.2
no fix listed
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
ion-java@1.0.2
no fix listed
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
ion-java@1.0.2
no fix listed
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
ion-java@1.0.2
no fix listed
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
ion-java@1.0.2
no fix listed

Open the chart page →

58,857
rundeckdwardu-helm-charts0.3.41 of 2See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
rundeck/rundeck:3.2.74d64fe56f767
ion-java@1.0.2
no fix listed

Open the chart page →

19,802
shenyuerdeng2.4.211 of 2See more

shenyu erdeng 2.4.21

1 of the 2 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
ion-java@1.0.2
no fix listed

Open the chart page →

12,513
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.81 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
jingking/geonetwork-hnap:4.2.843e74ab234e1
ion-java@1.0.2
no fix listed

Open the chart page →

34,754
video-analytics-demogpu-operator0.1.91 of 3See more

video-analytics-demo gpu-operator 0.1.9

1 of the 3 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
anguda/ant-media:2.5c435285fc241
ion-java@1.0.2
no fix listed

Open the chart page →

15,722
hazelcast-jethazelcastVerified publisher1.17.11 of 1See more

hazelcast-jet hazelcast 1.17.1

1 of the 1 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
hazelcast/hazelcast-jet:4.5.3a825ecbe9fda
ion-java@1.0.2
no fix listed

Open the chart page →

6,102
hbasehbase0.1.71 of 4See more

hbase hbase 0.1.7

1 of the 4 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
ion-java@1.0.2
no fix listed

Open the chart page →

10,540
mvfi4trustVerified publisher1.1.21 of 1See more

mvf i4trust 1.1.2

1 of the 1 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
wistefan/mvf:lateste0887302b2d8
ion-java@1.0.2
no fix listed

Open the chart page →

7,144
ibm-ws-dyn-agent-devibm-charts1.0.01 of 1See more

ibm-ws-dyn-agent-dev ibm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
ion-java@1.0.2
no fix listed

Open the chart page →

19,295
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
dremio/dremio-oss:24.1.080ed2e3b7c43
ion-java@1.0.2
no fix listed

Open the chart page →

37,671
delta-sharing-serverinseefrlab1.2.11 of 1See more

delta-sharing-server inseefrlab 1.2.1

1 of the 1 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
deltaio/delta-sharing-server:0.2.08b75118187c5
ion-java@1.0.2
no fix listed

Open the chart page →

6,174
nexusjenkins-x0.1.371 of 1See more

nexus jenkins-x 0.1.37

1 of the 1 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
ion-java@1.0.2
no fix listed

Open the chart page →

12,856
dynamo-dbk8s-home-lab-repo0.0.31 of 1See more

dynamo-db k8s-home-lab-repo 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
amazon/dynamodb-local:1.20.01ed00881c937
ion-java@1.9.5
1.10.5

Open the chart page →

444
kadeck-teamskadeck1.1.211 of 1See more

kadeck-teams kadeck 1.1.21

1 of the 1 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
xeotek/kadeck:6.3.439a3b37a17c5
ion-java@1.0.2
no fix listed

Open the chart page →

3,576
kadeck-webkadeck0.6.01 of 1See more

kadeck-web kadeck 0.6.0

1 of the 1 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
xeotek/kadeck:4.2.94c6b04d9ce55
ion-java@1.0.2
no fix listed

Open the chart page →

7,254
penpotkubitodevVerified publisher1.2.11 of 5See more

penpot kubitodev 1.2.1

1 of the 5 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
penpotapp/exporter:2.2.15c835ffd87ab
ion-java@1.0.2
no fix listed

Open the chart page →

16,877
elastictranscoderluiscajl0.46.04 of 4See more

elastictranscoder luiscajl 0.46.0

4 of the 4 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
elastictranscoder/media:627e21dc963ab3858c6b
ion-java@1.0.2
no fix listed
elastictranscoder/media-storage:f6d861a026208b8c2359
ion-java@1.0.2
no fix listed
elastictranscoder/transcoder:627e21dcb4a0327029e6
ion-java@1.0.2
no fix listed
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
ion-java@1.0.2
no fix listed

Open the chart page →

58,160
filebot-botluiscajl0.0.111 of 1See more

filebot-bot luiscajl 0.0.11

1 of the 1 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
lavandadelpatio/filebot-bot:0.0.1-SNAPSHOTd2cba20aa4d8
ion-java@1.0.2
no fix listed

Open the chart page →

3,679
lavandaluiscajl0.0.1343 of 5See more

lavanda luiscajl 0.0.134

3 of the 5 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
lavandadelpatio/automated-download-films:0.0.2094e225a5a6f8
ion-java@1.0.2
no fix listed
lavandadelpatio/automated-download-shows:0.0.492de3c3426d2
ion-java@1.0.2
no fix listed
lavandadelpatio/filebot:0.0.671f2ccec8c0d
ion-java@1.0.2
no fix listed

Open the chart page →

18,248
crowdmoxVerified publisher2.4.31 of 3See more

crowd mox 2.4.3

1 of the 3 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
atlassian/crowd:5.2.2ebf761c7d437
ion-java@1.0.2
no fix listed

Open the chart page →

5,663
hive-metastoreolehrgfVerified publisher0.1.01 of 1See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
ion-java@1.0.2
no fix listed

Open the chart page →

8,540
cdn-remoteopencord0.2.41 of 3See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2024-21634.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
ion-java@1.0.2
no fix listed

Open the chart page →

63,223

Container images carrying it

78 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
penpotapp/exporter:2.2.15c835ffd87ab
ion-java@1.0.2
no fix listed
1
prom/cloudwatch-exporter:cloudwatch_exporter-0.5.0923705b2ae77
ion-java@1.0.1
no fix listed
1
prom/cloudwatch-exporter:cloudwatch_exporter-0.8.0fc4b9b9f5e15
ion-java@1.0.2
no fix listed
1
raykrueger/riemann:0.2.14c8baf3de57bb
ion-java@1.0.2
no fix listed
1
remche/shinyproxy:2.6.18bcda8a04d3b
ion-java@1.0.2
no fix listed
1
rundeck/rundeck:3.2.74d64fe56f767
ion-java@1.0.2
no fix listed
1
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
ion-java@1.0.2
no fix listed
1
sonatype/nexus3:3.58.1586060431b64
ion-java@1.0.2
no fix listed
1
sslhep/hive-metastore:3.1.39e80af083079
ion-java@1.0.2
no fix listed
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
ion-java@1.0.2
no fix listed
1
thingsboard/tb-coap-transport:3.4.1bd45a09d85d9
ion-java@1.0.2
no fix listed
1
thingsboard/tb-http-transport:3.4.1a06f53c5e2da
ion-java@1.0.2
no fix listed
1
thingsboard/tb-mqtt-transport:3.4.1030f316ce301
ion-java@1.0.2
no fix listed
1
thingsboard/tb-node:3.4.1645f43b688f7
ion-java@1.0.2
no fix listed
1
thingsboard/tb-node:3.6.0f40a542832c4
ion-java@1.0.2
no fix listed
1
trinodb/trino:405ee80ab5eeab2
ion-java@1.0.2
no fix listed
1
wavefronthq/proxy:9.2d1064d28f6eb
ion-java@1.0.2
no fix listed
1
wistefan/mvf:lateste0887302b2d8
ion-java@1.0.2
no fix listed
1
xeotek/kadeck:6.3.439a3b37a17c5
ion-java@1.0.2
no fix listed
1
xeotek/kadeck:4.2.94c6b04d9ce55
ion-java@1.0.2
no fix listed
1
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
ion-java@1.0.2
no fix listed
1
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
ion-java@1.0.2
no fix listed
1
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
ion-java@1.0.2
no fix listed
1
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
ion-java@1.0.2
no fix listed
1
ghcr.io/punchplatform/punchline-java:8.1.1d46ce7b96482
ion-java@1.0.2
no fix listed
1
ghcr.io/skyoo2003/digdag:0.0.1821fd6a6f2cd
ion-java@1.0.2
no fix listed
1
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
ion-java@1.0.2
no fix listed
1
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
ion-java@1.0.2
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.