StackRadar

CVE-2024-25710

Medium

Advisory

Published 19 Feb 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.004
37th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
192
of 17,781 indexed, latest versions
Container images
186
deployed by those charts
Fix available
1 of 1
affected package

Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file

Carried by container images the latest versions of 192 of 17,781 indexed charts deploy, on 186 images.

Affected packageAffected versionsFixed inImages
commons-compressmaven1.4, 1.4.1, 1.8.1, 1.9+15 more1.26.0186
OSV records
GHSA-4g9r-vxhx-9pgx

Charts affected

192 by stars
ChartLatestAffected imagesRadar Score
traccarjeffrescVerified publisher0.2.01 of 2See more

traccar jeffresc 0.2.0

1 of the 2 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
traccar/traccar:6.7-alpine621c8d6d46fd
commons-compress@1.22
1.26.0

Open the chart page →

1,341
kafka-kraft-on-k8skafka-kraft-on-k8sVerified publisher1.1.01 of 3See more

kafka-kraft-on-k8s kafka-kraft-on-k8s 1.1.0

1 of the 3 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
kafkakraft/kafka-connect:3.7.0062d697db7e5
commons-compress@1.21
1.26.0

Open the chart page →

14,130
kokukokuVerified publisher1.0.01 of 7See more

koku koku 1.0.0

1 of the 7 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
commons-compress@1.21
1.26.0

Open the chart page →

12,019
magentomagento3.2.31 of 12See more

magento magento 3.2.3

1 of the 12 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
magento/magento-cloud-docker-opensearch:2.5-1.4.059fb6f0f1461
commons-compress@1.21
1.26.0

Open the chart page →

13,479
metabasemetabase-helmVerified publisher2.7.11 of 1See more

metabase metabase-helm 2.7.1

1 of the 1 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
metabase/metabase:v0.46.09ebdc664a6b2
commons-compress@1.22
1.26.0

Open the chart page →

2,221
hadoopmiuler1.2.21 of 1See more

hadoop miuler 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
commons-compress@1.4.1
1.26.0

Open the chart page →

5,772
clowder2ncsaVerified publisher1.9.72 of 12See more

clowder2 ncsa 1.9.7

2 of the 12 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.215d4647fd491
commons-compress@1.24.0
1.26.0
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
commons-compress@1.21
1.26.0

Open the chart page →

37,373
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
treskon/portrait:DEV-latest88e813f22347
commons-compress@1.24.0
1.26.0

Open the chart page →

31,844
kafka-managerradar-baseVerified publisher2.3.11 of 1See more

kafka-manager radar-base 2.3.1

1 of the 1 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
radarbase/kafka-manager:1.3.3.181d2af7dd5a4e
commons-compress@1.9
1.26.0

Open the chart page →

4,000
shinyproxyremche0.6.61 of 2See more

shinyproxy remche 0.6.6

1 of the 2 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
remche/shinyproxy:2.6.18bcda8a04d3b
commons-compress@1.19
1.26.0

Open the chart page →

3,958
seldon-coreseldon0.2.72 of 3See more

seldon-core seldon 0.2.7

2 of the 3 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
seldonio/apife:0.2.7ba81b17f00eb
commons-compress@1.18
1.26.0
seldonio/cluster-manager:0.2.729e362bb1ba2
commons-compress@1.18
1.26.0

Open the chart page →

13,798
starwhalestarwhaleVerified publisher0.6.151 of 4See more

starwhale starwhale 0.6.15

1 of the 4 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
ghcr.io/star-whale/server:0.6.158368359c8dd0
commons-compress@1.21
1.26.0

Open the chart page →

13,486
ckanstatcan0.0.351 of 8See more

ckan statcan 0.0.35

1 of the 8 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
commons-compress@1.21
1.26.0

Open the chart page →

24,930
jenkinstestchart0.1.91 of 2See more

jenkins testchart 0.1.9

1 of the 2 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
commons-compress@1.24.0
1.26.0

Open the chart page →

9,102
jenkinstest-jenkins9.1.01 of 2See more

jenkins test-jenkins 9.1.0

1 of the 2 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
commons-compress@1.24.0
1.26.0

Open the chart page →

9,102
wavefront-adapter-for-istiowavefront0.1.41 of 2See more

wavefront-adapter-for-istio wavefront 0.1.4

1 of the 2 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
wavefronthq/proxy:9.2d1064d28f6eb
commons-compress@1.19
1.26.0

Open the chart page →

15,970
spark-operatorwikimedia2.2.71 of 1See more

spark-operator wikimedia 2.2.7

1 of the 1 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
commons-compress@1.21
1.26.0

Open the chart page →

7,835
analyticsaccount-serviceVerified publisher0.4.21 of 1See more

analytics account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
vitalii1992/analytics-service:latest8e798836ecea
commons-compress@1.21
1.26.0

Open the chart page →

2,326
quotes-provideraccount-serviceVerified publisher0.4.21 of 1See more

quotes-provider account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
vitalii1992/quotes-provider-service:latest44d2d6e00ab3
commons-compress@1.21
1.26.0

Open the chart page →

2,205
airbyte-cronairbyteVerified publisher0.40.371 of 1See more

airbyte-cron airbyte 0.40.37

1 of the 1 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
airbyte/cron:0.40.17caf4f551c546
commons-compress@1.21
1.26.0

Open the chart page →

1,413
akto-protectionakto0.1.01 of 4See more

akto-protection akto 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
aktosecurity/akto-api-protection:localbcd7382c9c1b
commons-compress@1.21
1.26.0

Open the chart page →

11,285
akto-source-code-analyserakto0.1.51 of 3See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
aktosecurity/source-code-analyser:a-1703-merge274042ed7a53
commons-compress@1.21
1.26.0

Open the chart page →

4,880
amorphieamorphie0.1.21 of 18See more

amorphie amorphie 0.1.2

1 of the 18 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
hazelcast/hazelcast:5.3.18fe26efde8e1
commons-compress@1.22
1.26.0

Open the chart page →

28,131
james-komposeappscodeVerified publisher0.1.01 of 4See more

james-kompose appscode 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
commons-compress@1.24.0
1.26.0

Open the chart page →

16,975
chart-app-vidapp-vid-chartVerified publisher0.0.71 of 2See more

chart-app-vid app-vid-chart 0.0.7

1 of the 2 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
fimperato/sparkvid-api:1.0.5-RELEASE604012b77841
commons-compress@1.4.1
1.26.0

Open the chart page →

8,866
automatedconfigurationassist-iot-automated-configuration1.0.02 of 5See more

automatedconfiguration assist-iot-automated-configuration 1.0.0

2 of the 5 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
assistiot/automated_configuration:latest23f195a7a26a
commons-compress@1.21
1.26.0
provectuslabs/kafka-ui:latest8f2ff02d64b0
commons-compress@1.21
1.26.0

Open the chart page →

14,728
dashboard-pui9assist-iot-tactile-dashboard0.2.01 of 3See more

dashboard-pui9 assist-iot-tactile-dashboard 0.2.0

1 of the 3 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
assistiot/tacticle_dashboard:api-lateste4414cb72dc4
commons-compress@1.21
1.26.0

Open the chart page →

4,145
firehoseblip-firehoseVerified publisher0.0.181 of 11See more

firehose blip-firehose 0.0.18

1 of the 11 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
commons-compress@1.21
1.26.0

Open the chart page →

13,459
tsoragecetic0.4.111 of 8See more

tsorage cetic 0.4.11

1 of the 8 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:5.0.1c87b1c07fb53
commons-compress@1.8.1
1.26.0

Open the chart page →

12,018
neo4jcloudnativeapp1.0.01 of 1See more

neo4j cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
library/neo4j:3.4.5-enterprisea1ba477fa412
commons-compress@1.16.1
1.26.0

Open the chart page →

2,837
spark-history-servercloudnativeapp1.0.01 of 3See more

spark-history-server cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
lightbend/spark-history-server:2.4.00bedf37f428a
commons-compress@1.8.1
1.26.0

Open the chart page →

14,066
dependency-trackcnieg3.0.81 of 2See more

dependency-track cnieg 3.0.8

1 of the 2 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
dependencytrack/apiserver:4.6.3485ac0952c02
commons-compress@1.21
1.26.0

Open the chart page →

2,503
pulsarcnieg1.0.82 of 2See more

pulsar cnieg 1.0.8

2 of the 2 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.6.14db6ff0b4045
commons-compress@1.19
1.26.0
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
commons-compress@1.8.1
1.26.0

Open the chart page →

16,860
sumo-besu-genesisconsensys0.1.751 of 1See more

sumo-besu-genesis consensys 0.1.75

1 of the 1 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
commons-compress@1.21
1.26.0

Open the chart page →

7,963
sumo-besu-nodeconsensys0.1.751 of 4See more

sumo-besu-node consensys 0.1.75

1 of the 4 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
commons-compress@1.21
1.26.0

Open the chart page →

7,963
cp-helm-chartscp-helm-charts0.6.15 of 8See more

cp-helm-charts cp-helm-charts 0.6.1

5 of the 8 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
commons-compress@1.19
1.26.0
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
commons-compress@1.19
1.26.0
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
commons-compress@1.19
1.26.0
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
commons-compress@1.19
1.26.0
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
commons-compress@1.19
1.26.0

Open the chart page →

58,857
apache-ranger-admindata-platform-stableVerified publisher0.2.01 of 2See more

apache-ranger-admin data-platform-stable 0.2.0

1 of the 2 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
commons-compress@1.4.1
1.26.0

Open the chart page →

8,245
spark-standalonedmwm-bigdataVerified publisher0.1.01 of 2See more

spark-standalone dmwm-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
gradiant/spark:2.4.4-python-alpine97657d56e927
commons-compress@1.8.1
1.26.0

Open the chart page →

6,147
drogue-cloud-coredrogue-iotVerified publisher0.7.111 of 22See more

drogue-cloud-core drogue-iot 0.7.11

1 of the 22 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
commons-compress@1.21
1.26.0

Open the chart page →

55,666
drogue-cloud-twindrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-twin drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
commons-compress@1.21
1.26.0

Open the chart page →

6,915
amundsenduyet1.1.01 of 7See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
library/neo4j:3.3.0d4eaa8484246
commons-compress@1.12
1.26.0

Open the chart page →

11,174
spark-shuffleduyet0.2.01 of 1See more

spark-shuffle duyet 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
snappydatainc/spark-shuffle:v2.2.0-kubernetes-0.5.1fd4b2070466f
commons-compress@1.4.1
1.26.0

Open the chart page →

5,639
mod-calendarfolio-org0.1.341 of 1See more

mod-calendar folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
folioci/mod-calendar:latest22f65982efd7
commons-compress@1.24.0
1.26.0

Open the chart page →

415
mod-emailfolio-org0.1.341 of 1See more

mod-email folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
folioci/mod-email:latest79ea8e2e7ebf
commons-compress@1.24.0
1.26.0

Open the chart page →

866
mod-oai-pmhfolio-org0.1.341 of 1See more

mod-oai-pmh folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
folioci/mod-oai-pmh:latest5cd5ef063f2a
commons-compress@1.24.0
1.26.0

Open the chart page →

962
papermcgabibbo970.1.111 of 1See more

papermc gabibbo97 0.1.11

1 of the 1 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
gabibbo97/papermc:1.15.241d276a37570
commons-compress@1.4.1
1.26.0

Open the chart page →

157
accumulogaffer2.2.12 of 4See more

accumulo gaffer 2.2.1

2 of the 4 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
gchq/accumulo:2.0.1c460bb587d6d
commons-compress@1.21
1.26.0
gchq/hdfs:3.3.35ec58edbb2db
commons-compress@1.21
1.26.0

Open the chart page →

16,892
gaffer-road-trafficgaffer2.2.11 of 8See more

gaffer-road-traffic gaffer 2.2.1

1 of the 8 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
commons-compress@1.21
1.26.0

Open the chart page →

9,342
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
commons-compress@1.20
1.26.0

Open the chart page →

18,230
komgageek-cookbookVerified publisher2.4.21 of 1See more

komga geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
gotson/komga:0.99.49b15ea6bfc30
commons-compress@1.20
1.26.0

Open the chart page →

12,581

Container images carrying it

186 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
atlassian/jira-software:8.14.037bc46cbec1a
commons-compress@1.8.1
1.26.0
1
atlassian/jira-software:9.7.264a75aa4ec4e
commons-compress@1.22
1.26.0
1
bitnamilegacy/elasticsearch:8.12.215d4647fd491
commons-compress@1.24.0
1.26.0
1
bitnamilegacy/elasticsearch:8.12.1-debian-11-r29cfd2df1294d
commons-compress@1.24.0
1.26.0
1
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
commons-compress@1.21
1.26.0
1
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
commons-compress@1.24.0
1.26.0
1
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
commons-compress@1.19
1.26.0
1
confluentinc/cp-kafka:5.4.01bbda887bc53
commons-compress@1.19
1.26.0
1
confluentinc/cp-kafka:5.0.1c87b1c07fb53
commons-compress@1.8.1
1.26.0
1
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
commons-compress@1.19
1.26.0
1
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
commons-compress@1.19
1.26.0
1
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
commons-compress@1.21
1.26.0
1
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
commons-compress@1.19
1.26.0
1
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
commons-compress@1.19
1.26.0
1
datamate/seafile-professional:11.0.202dd66b722464
commons-compress@1.21
1.26.0
1
datappeal/hive-metastore:lateste38c085a3567
commons-compress@1.4.1
1.26.0
1
dbanda/livy:0.80ca125e68e53
commons-compress@1.18
1.26.0
1
dbanda/spark:2.4.6d0e6367876ae
commons-compress@1.8.1
1.26.0
1
deltaio/delta-sharing-server:0.2.08b75118187c5
commons-compress@1.19
1.26.0
1
dremio/dremio-oss:24.1.080ed2e3b7c43
commons-compress@1.22
1.26.0
1
easypi/openrefine:3.7.0d2950a36a576
commons-compress@1.22
1.26.0
1
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
commons-compress@1.4.1
1.26.0
1
expediagroup/pitchfork:1.314f2cf61e7de9
commons-compress@1.20
1.26.0
1
farberg/apache-knox-docker:1.6.14b4a22487394
commons-compress@1.20
1.26.0
1
fimperato/sparkvid-api:1.0.5-RELEASE604012b77841
commons-compress@1.4.1
1.26.0
1
folioci/mod-calendar:latest22f65982efd7
commons-compress@1.24.0
1.26.0
1
folioci/mod-email:latest79ea8e2e7ebf
commons-compress@1.24.0
1.26.0
1
folioci/mod-oai-pmh:latest5cd5ef063f2a
commons-compress@1.24.0
1.26.0
1
gabibbo97/papermc:1.15.241d276a37570
commons-compress@1.4.1
1.26.0
1
gchq/accumulo:2.0.1c460bb587d6d
commons-compress@1.21
1.26.0
1
glasskube/operator:0.12.2be5133100d63
commons-compress@1.24.0
1.26.0
1
gotson/komga:0.99.49b15ea6bfc30
commons-compress@1.20
1.26.0
1
gradiant/hdfs:3.2.2e3bf364fe713
commons-compress@1.19
1.26.0
1
gurolakman/smsf-configuration:1.0.49abb3882bcbd
commons-compress@1.19
1.26.0
1
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
commons-compress@1.19
1.26.0
1
gurolakman/smsf-momt:1.0.4ce23b20a8a17
commons-compress@1.19
1.26.0
1
gurolakman/smsf-registration:1.0.4b22e746edd5d
commons-compress@1.19
1.26.0
1
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
commons-compress@1.19
1.26.0
1
gurolakman/ussigw-core:1.0.48739565c3ea2
commons-compress@1.19
1.26.0
1
hazelcast/hazelcast:5.3.18fe26efde8e1
commons-compress@1.22
1.26.0
1
hazelcast/hazelcast-jet:4.5.3a825ecbe9fda
commons-compress@1.21
1.26.0
1
hivemq/hivemq4:dns-4.5.144d194450d48e
commons-compress@1.21
1.26.0
1
hivemq/hivemq-operator:4.7.10241d6a8e1963
commons-compress@1.21
1.26.0
1
ibmcom/app-nav-api:1.0.1ce9d2a564273
commons-compress@1.18
1.26.0
1
ibmcom/app-nav-was-controller:1.0.1a6748792da26
commons-compress@1.9
1.26.0
1
ibmcom/bai-flink-dev:19.0.2e31ff09e8aad
commons-compress@1.18
1.26.0
1
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
commons-compress@1.11
1.26.0
1
ibmcom/microclimate-theia:lateste17bdccc5030
commons-compress@1.11
1.26.0
1
jenkinsci/jenkins:2.67a1f33f004659
commons-compress@1.10
1.26.0
1
jhipster/jhipster-registry:latest7184525acd4d
commons-compress@1.21
1.26.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.