StackRadar

CVE-2024-25710

Medium

Advisory

Published 19 Feb 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.004
37th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
192
of 17,781 indexed, latest versions
Container images
186
deployed by those charts
Fix available
1 of 1
affected package

Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file

Carried by container images the latest versions of 192 of 17,781 indexed charts deploy, on 186 images.

Affected packageAffected versionsFixed inImages
commons-compressmaven1.4, 1.4.1, 1.8.1, 1.9+15 more1.26.0186
OSV records
GHSA-4g9r-vxhx-9pgx

Charts affected

192 by stars
ChartLatestAffected imagesRadar Score
sonarqubesonarqubeVerified publisher10.0.0+5211 of 3See more

sonarqube sonarqube 10.0.0+521

1 of the 3 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
library/sonarqube:10.0.0-communityef9723cf4fe4
commons-compress@1.21
1.26.0

Open the chart page →

6,556
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
commons-compress@1.21
1.26.0

Open the chart page →

32,259
dependency-trackevryfs-ossVerified publisher1.5.51 of 3See more

dependency-track evryfs-oss 1.5.5

1 of the 3 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
dependencytrack/apiserver:4.6.3485ac0952c02
commons-compress@1.21
1.26.0

Open the chart page →

2,503
glasskube-operatorglasskubeOfficialVerified publisher0.12.21 of 3See more

glasskube-operator glasskube 0.12.2

1 of the 3 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
glasskube/operator:0.12.2be5133100d63
commons-compress@1.24.0
1.26.0

Open the chart page →

11,933
apicurio-registryapicurio-registry-helmVerified publisher3.8.02 of 2See more

apicurio-registry apicurio-registry-helm 3.8.0

2 of the 2 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
quay.io/apicurio/apicurio-registry-kube-sync:1.0.170ef31840269
commons-compress@1.21
1.26.0
quay.io/apicurio/apicurio-registry-mem:2.5.8.Final3b036692d546
commons-compress@1.24.0
1.26.0

Open the chart page →

6,675
druiddruid-helmVerified publisher37.0.21 of 3See more

druid druid-helm 37.0.2

1 of the 3 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
commons-compress@1.21
1.26.0

Open the chart page →

3,812
hivemq-operatorhivemqOfficialVerified publisher0.11.621 of 2See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
hivemq/hivemq-operator:4.7.10241d6a8e1963
commons-compress@1.21
1.26.0

Open the chart page →

7,857
neo4jneo4j-helm4.3.2-11 of 1See more

neo4j neo4j-helm 4.3.2-1

1 of the 1 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
library/neo4j:4.3.2-enterprise56a9453c4064
commons-compress@1.20
1.26.0

Open the chart page →

2,640
sonarqube-ltssonarqubeVerified publisher1.0.16+981 of 4See more

sonarqube-lts sonarqube 1.0.16+98

1 of the 4 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
library/sonarqube:8.9.2-community88cd63154d4b
commons-compress@1.20
1.26.0

Open the chart page →

4,099
metabasedeliveryheroVerified publisher0.14.41 of 1See more

metabase deliveryhero 0.14.4

1 of the 1 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
metabase/metabase:v0.45.21fb334ce4820
commons-compress@1.21
1.26.0

Open the chart page →

2,572
hdfsgaffer2.2.11 of 2See more

hdfs gaffer 2.2.1

1 of the 2 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
commons-compress@1.21
1.26.0

Open the chart page →

5,357
sparkmicrosoft1.0.42 of 3See more

spark microsoft 1.0.4

2 of the 3 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
dbanda/livy:0.80ca125e68e53
commons-compress@1.18
1.26.0
dbanda/spark:2.4.6d0e6367876ae
commons-compress@1.8.1
1.26.0

Open the chart page →

13,738
solrpreferred-aiVerified publisher3.2.01 of 3See more

solr preferred-ai 3.2.0

1 of the 3 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
library/solr:8.7.0d124efd81fbb
commons-compress@1.20
1.26.0

Open the chart page →

6,048
hadoopbigdata-chartsVerified publisher1.0.11 of 2See more

hadoop bigdata-charts 1.0.1

1 of the 2 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
5200710/hadoop:3.2.3-java8092d3088a5fb
commons-compress@1.21
1.26.0

Open the chart page →

12,111
jira-softwaremoxVerified publisher2.7.11 of 3See more

jira-software mox 2.7.1

1 of the 3 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
atlassian/jira-software:9.7.264a75aa4ec4e
commons-compress@1.22
1.26.0

Open the chart page →

8,636
druidwiremindVerified publisher1.22.11 of 3See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
apache/druid:29.0.10cef139b6bf1
commons-compress@1.24.0
1.26.0

Open the chart page →

7,930
seafiledatamateVerified publisher0.6.02 of 6See more

seafile datamate 0.6.0

2 of the 6 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.1-debian-11-r29cfd2df1294d
commons-compress@1.24.0
1.26.0
datamate/seafile-professional:11.0.202dd66b722464
commons-compress@1.21
1.26.0

Open the chart page →

27,267
keycloak-operatorkeycloak-operatorVerified publisher0.0.41 of 1See more

keycloak-operator keycloak-operator 0.0.4

1 of the 1 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
commons-compress@1.21
1.26.0

Open the chart page →

4,652
kubernetes-loggingkubernetes-logging4.8.01 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.10.0c8f3ebd2a934
commons-compress@1.23.0
1.26.0

Open the chart page →

10,530
flinkriskfocus0.2.01 of 1See more

flink riskfocus 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
library/flink:1.11.2-scala_2.121fe4fb22a2a5
commons-compress@1.20
1.26.0

Open the chart page →

3,235
sonarqube-dcesonarqubeVerified publisher0.1.2+1212 of 5See more

sonarqube-dce sonarqube 0.1.2+121

2 of the 5 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
library/sonarqube:9.1.0-datacenter-search7e43ff493a47
commons-compress@1.21
1.26.0
library/sonarqube:9.1.0-datacenter-appa9bc5a3a1fc3
commons-compress@1.21
1.26.0

Open the chart page →

8,698
hivebigdata-chartsVerified publisher0.1.81 of 1See more

hive bigdata-charts 0.1.8

1 of the 1 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
commons-compress@1.21
1.26.0

Open the chart page →

7,166
cloudflowcloudflow-helm-charts0.0.0-NIGHTLY011220201 of 1See more

cloudflow cloudflow-helm-charts 0.0.0-NIGHTLY01122020

1 of the 1 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
lightbend/cloudflow-operator:0.0.0-NIGHTLY011220202647f396de23
commons-compress@1.8.1
1.26.0

Open the chart page →

1,886
cmak-operatorcmak-operatorVerified publisher2.2.21 of 3See more

cmak-operator cmak-operator 2.2.2

1 of the 3 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
ghcr.io/eshepelyuk/dckr/cmak-3.0.0.6:1.2.090a34412c6b5
commons-compress@1.9
1.26.0

Open the chart page →

4,605
hdfsdmwm-bigdataVerified publisher1.0.11 of 2See more

hdfs dmwm-bigdata 1.0.1

1 of the 2 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
gradiant/hdfs:3.2.2e3bf364fe713
commons-compress@1.19
1.26.0

Open the chart page →

7,948
hivedmwm-bigdataVerified publisher0.1.63 of 5See more

hive dmwm-bigdata 0.1.6

3 of the 5 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
commons-compress@1.4.1
1.26.0
gradiant/hdfs:2.7.73b28784ba41f
commons-compress@1.4.1
1.26.0
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
commons-compress@1.4.1
1.26.0

Open the chart page →

20,837
hive-metastoreheva-helm-chartsVerified publisher0.2.01 of 2See more

hive-metastore heva-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
sslhep/hive-metastore:3.1.39e80af083079
commons-compress@1.4.1
1.26.0

Open the chart page →

7,335
skywalkingkubesphere-testVerified publisher3.1.01 of 4See more

skywalking kubesphere-test 3.1.0

1 of the 4 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.1.0-es7641237e0299b
commons-compress@1.19
1.26.0

Open the chart page →

18,042
kafdroplsst-sqre0.1.31 of 1See more

kafdrop lsst-sqre 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
commons-compress@1.21
1.26.0

Open the chart page →

7,901
hive-metastoreslamdev0.0.51 of 2See more

hive-metastore slamdev 0.0.5

1 of the 2 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
commons-compress@1.19
1.26.0

Open the chart page →

8,198
feedbacksystemthm-mni-iiVerified publisher0.47.11 of 10See more

feedbacksystem thm-mni-ii 0.47.1

1 of the 10 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
thmmniii/fbs-core:v1.27.15438517d9fc2
commons-compress@1.23.0
1.26.0

Open the chart page →

28,534
paperless-ngxadnoctemVerified publisher0.4.21 of 5See more

paperless-ngx adnoctem 0.4.2

1 of the 5 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
apache/tika:2.9.0.092d055a84e9e
commons-compress@1.23.0
1.26.0

Open the chart page →

19,691
apache-rangerapache-ranger0.1.01 of 2See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
apache/ranger:2.7.076c176e8a0e4
commons-compress@1.21
1.26.0

Open the chart page →

7,740
soarv113assist-iot-cybersecurity-monitoring-soar0.1.32 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

2 of the 5 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-ctx:latestae8b3d72eb5d
commons-compress@1.23.0
1.26.0
assistiot/cybersecurity-monitoring_ir-thv:latestc8b6c7eaa0cd
commons-compress@1.21
1.26.0

Open the chart page →

17,896
hadoopcloudnativeapp1.1.01 of 1See more

hadoop cloudnativeapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
commons-compress@1.4.1
1.26.0

Open the chart page →

5,772
ignitecloudnativeapp1.0.01 of 1See more

ignite cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
apacheignite/ignite:2.7.0d7deab68b8fa
commons-compress@1.4.1
1.26.0

Open the chart page →

7,891
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
commons-compress@1.19
1.26.0

Open the chart page →

38,346
zammaddevplayer0Verified publisher4.0.51 of 4See more

zammad devplayer0 4.0.5

1 of the 4 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
zammad/zammad-docker-compose:zammad-elasticsearch-4.1.0-318274d75a51fc
commons-compress@1.19
1.26.0

Open the chart page →

6,110
hbasedmwm-bigdataVerified publisher0.1.62 of 5See more

hbase dmwm-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
commons-compress@1.4.1
1.26.0
gradiant/hdfs:2.7.73b28784ba41f
commons-compress@1.4.1
1.26.0

Open the chart page →

13,392
hive-metastoredmwm-bigdataVerified publisher0.1.31 of 2See more

hive-metastore dmwm-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
commons-compress@1.4.1
1.26.0

Open the chart page →

6,882
opentsdbdmwm-bigdataVerified publisher0.1.72 of 6See more

opentsdb dmwm-bigdata 0.1.7

2 of the 6 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
commons-compress@1.4.1
1.26.0
gradiant/hdfs:2.7.73b28784ba41f
commons-compress@1.4.1
1.26.0

Open the chart page →

17,511
spinnakerdwardu-helm-charts2.2.61 of 2See more

spinnaker dwardu-helm-charts 2.2.6

1 of the 2 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
commons-compress@1.19
1.26.0

Open the chart page →

8,752
neo4j-communityequinor-charts1.2.51 of 1See more

neo4j-community equinor-charts 1.2.5

1 of the 1 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
library/neo4j:4.2.4348e3f56faa2
commons-compress@1.20
1.26.0

Open the chart page →

2,751
pitchforkexpediagroup0.1.41 of 1See more

pitchfork expediagroup 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
expediagroup/pitchfork:1.314f2cf61e7de9
commons-compress@1.20
1.26.0

Open the chart page →

3,309
gentrace-self-hostedgentrace-self-hostedVerified publisher0.1.31 of 9See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

1 of the 9 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
provectuslabs/kafka-ui:latest8f2ff02d64b0
commons-compress@1.21
1.26.0

Open the chart page →

15,562
hbasegradiant-bigdataVerified publisher0.1.62 of 5See more

hbase gradiant-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
commons-compress@1.4.1
1.26.0
gradiant/hdfs:2.7.73b28784ba41f
commons-compress@1.4.1
1.26.0

Open the chart page →

13,392
gradle-examplegradle-exampleVerified publisher1.1.31 of 1See more

gradle-example gradle-example 1.1.3

1 of the 1 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
quay.io/srcmaxim/gradle-example-app:1.1.37c3fc28746ef
commons-compress@1.20
1.26.0

Open the chart page →

3,393
stormgresearch1.2.01 of 3See more

storm gresearch 1.2.0

1 of the 3 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
library/storm:2.4.0bd5d420506d6
commons-compress@1.18
1.26.0

Open the chart page →

6,165
hawkhawk1.1.51 of 4See more

hawk hawk 1.1.5

1 of the 4 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
ghcr.io/privacyengineering/hawk-service:latestbfedf47bb5e0
commons-compress@1.24.0
1.26.0

Open the chart page →

13,610
seata-serverheidaodageshiwoVerified publisher1.0.01 of 1See more

seata-server heidaodageshiwo 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-25710.

Container imageDigestPackageFixed in
seataio/seata-server:1.5.1ee1ed55f4144
commons-compress@1.19
1.26.0

Open the chart page →

5,624

Container images carrying it

186 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
vitalii1992/analytics-service:latest8e798836ecea
commons-compress@1.21
1.26.0
1
vitalii1992/quotes-provider-service:latest44d2d6e00ab3
commons-compress@1.21
1.26.0
1
vlebediantsev/file-system-ms-final:latest10393a89b4a8
commons-compress@1.4
1.26.0
1
vlebediantsev/logic-ms:latestdf8bf38c535b
commons-compress@1.4
1.26.0
1
vlebediantsev/registration-ms-final:latest427af418b75e
commons-compress@1.4
1.26.0
1
vlebediantsev/user-data-ms-final-final:latest9319437f3c8f
commons-compress@1.4
1.26.0
1
wavefronthq/proxy:9.2d1064d28f6eb
commons-compress@1.19
1.26.0
1
wistefan/mvf:lateste0887302b2d8
commons-compress@1.21
1.26.0
1
xeotek/kadeck:4.2.94c6b04d9ce55
commons-compress@1.21
1.26.0
1
zahoriaut/zahori-process:0.1.13351f8a220ed7
commons-compress@1.21
1.26.0
1
zammad/zammad-docker-compose:zammad-elasticsearch-4.1.0-318274d75a51fc
commons-compress@1.19
1.26.0
1
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
commons-compress@1.19
1.26.0
1
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
commons-compress@1.24.0
1.26.0
1
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
commons-compress@1.19
1.26.0
1
ghcr.io/eshepelyuk/dckr/cmak-3.0.0.6:1.2.090a34412c6b5
commons-compress@1.9
1.26.0
1
ghcr.io/fleeksoft/hbase/hbase-base:2.4.13.2c144bdd688d7
commons-compress@1.19
1.26.0
1
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
commons-compress@1.21
1.26.0
1
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
commons-compress@1.19
1.26.0
1
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
commons-compress@1.21
1.26.0
1
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
commons-compress@1.21
1.26.0
1
ghcr.io/privacyengineering/hawk-service:latestbfedf47bb5e0
commons-compress@1.24.0
1.26.0
1
ghcr.io/punchplatform/punchline-java:8.1.1d46ce7b96482
commons-compress@1.14
1.26.0
1
ghcr.io/skyoo2003/digdag:0.0.1821fd6a6f2cd
commons-compress@1.10
1.26.0
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
commons-compress@1.21
1.26.0
1
ghcr.io/wbstack/queryservice:0.3.6_0.6b83b5b81d4b6
commons-compress@1.18
1.26.0
1
ghcr.io/wbstack/queryservice-updater:0.3.84_3.97525a57ac3f1
commons-compress@1.18
1.26.0
1
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
commons-compress@1.21
1.26.0
1
quay.io/apicurio/apicurio-registry-kube-sync:1.0.170ef31840269
commons-compress@1.21
1.26.0
1
quay.io/apicurio/apicurio-registry-mem:2.5.8.Final3b036692d546
commons-compress@1.24.0
1.26.0
1
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
commons-compress@1.21
1.26.0
1
quay.io/keycloak/keycloak:20.0.18830f76112b6
commons-compress@1.21
1.26.0
1
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
commons-compress@1.21
1.26.0
1
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
commons-compress@1.21
1.26.0
1
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
commons-compress@1.23.0
1.26.0
1
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
commons-compress@1.19
1.26.0
1
quay.io/srcmaxim/gradle-example-app:1.1.37c3fc28746ef
commons-compress@1.20
1.26.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.