StackRadarChart IndexLive demo

CVE-2024-23454

Low

Advisory

Published 25 Sept 2024In the index since 6 Sept 2026

Severity: Low; worst across findings
CVSS: 3.3; base score, highest
EPSS: 0.004; 32nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 62; of 17,781 indexed, latest versions
Container images: 55; deployed by those charts
Fix available: 1 of 1; affected package

Apache Hadoop: Temporary File Local Information Disclosure

Carried by container images the latest versions of 62 of 17,781 indexed charts deploy, on 55 images.

Affected package	Affected versions	Fixed in	Images
hadoop-commonmaven	2.7.0, 2.7.3, 2.7.4, 2.7.5+22 more	3.4.0	55

OSV records: GHSA-f5fw-25gw-5m92

Charts affected

62 by stars

Chart

Latest

Affected images

Radar Score

delta-sharing-serverinseefrlab

1 of 1 See more

delta-sharing-server inseefrlab 1.2.1

1 of the 1 container images this version deploys carry CVE-2024-23454.

Container image	Digest	Package	Fixed in
deltaio/delta-sharing-server :0.2.0	8b75118187c5	hadoop-common@2.10.1	3.4.0

Open the chart page →

6,174

pinotinseefrlab

1 of 2 See more

pinot inseefrlab 0.2.0

1 of the 2 container images this version deploys carry CVE-2024-23454.

Container image	Digest	Package	Fixed in
apachepinot/pinot :latest-jdk11	0018bb04ced7	hadoop-common@2.7.0	3.4.0

Open the chart page →

10,777

hive-metastoreolehrgf

1 of 1 See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-23454.

Container image	Digest	Package	Fixed in
ghcr.io/melodyyangaws/hive-metastore :3.0.0	e949b0f733f0	hadoop-common@3.3.2	3.4.0

Open the chart page →

8,540

apache-knox-helmpfisterer-knox

1 of 1 See more

apache-knox-helm pfisterer-knox 0.1.11

1 of the 1 container images this version deploys carry CVE-2024-23454.

Container image	Digest	Package	Fixed in
farberg/apache-knox-docker :1.6.1	4b4a22487394	hadoop-common@3.2.1	3.4.0

Open the chart page →

6,237

hive-metastorepresto-loadbalancer

1 of 1 See more

hive-metastore presto-loadbalancer 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-23454.

Container image	Digest	Package	Fixed in
datappeal/hive-metastore :latest	e38c085a3567	hadoop-common@3.2.0	3.4.0

Open the chart page →

9,606

punchline-javapunchplatform

1 of 1 See more

punchline-java punchplatform 8.1.1

1 of the 1 container images this version deploys carry CVE-2024-23454.

Container image	Digest	Package	Fixed in
ghcr.io/punchplatform/punchline-java :8.1.1	d46ce7b96482	hadoop-common@3.3.4	3.4.0

Open the chart page →

1,995

rada-platformrada-platform

1 of 7 See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-23454.

Container image	Digest	Package	Fixed in
trinodb/trino :450	38c6f24ab1a4	hadoop-common@3.2.4	3.4.0

Open the chart page →

21,211

fdi-dotstatsuite-sfs-solrstatcan

1 of 4 See more

fdi-dotstatsuite-sfs-solr statcan 1.0.2

1 of the 4 container images this version deploys carry CVE-2024-23454.

Container image	Digest	Package	Fixed in
library/solr :8.11.1	8c5f7881cebb	hadoop-common@3.2.2	3.4.0

Open the chart page →

6,065

solrstatcan

1 of 3 See more

solr statcan 1.5.10

1 of the 3 container images this version deploys carry CVE-2024-23454.

Container image	Digest	Package	Fixed in
library/solr :8.11.1	8c5f7881cebb	hadoop-common@3.2.2	3.4.0

Open the chart page →

8,806

trinostatcan

1 of 2 See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2024-23454.

Container image	Digest	Package	Fixed in
trinodb/trino :405	ee80ab5eeab2	hadoop-common@3.1.3	3.4.0

Open the chart page →

13,767

hadoop-deploymenttejaswita-hadoop-helmchart

1 of 1 See more

hadoop-deployment tejaswita-hadoop-helmchart 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-23454.

Container image	Digest	Package	Fixed in
apache/hadoop :3	af361b20bec0	hadoop-common@3.3.6	3.4.0

Open the chart page →

4,240

drillwearefrank

1 of 3 See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2024-23454.

Container image	Digest	Package	Fixed in
apache/drill :1.21.1	1f96558fd292	hadoop-common@3.2.4	3.4.0

Open the chart page →

9,397

Container images carrying it

55 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/kubeflow/spark-operator/controller :2.2.1	865ff4da5686	hadoop-common@3.3.4	3.4.0	1
ghcr.io/melodyyangaws/hive-metastore :3.0.0	e949b0f733f0	hadoop-common@3.3.2	3.4.0	1
ghcr.io/punchplatform/punchline-java :8.1.1	d46ce7b96482	hadoop-common@3.3.4	3.4.0	1
ghcr.io/star-whale/server :0.6.15	8368359c8dd0	hadoop-common@2.10.1	3.4.0	1
public.ecr.aws/v0r6c2e2/hive-metastore :latest	794b3bff9510	hadoop-common@3.3.6	3.4.0	1