Container image	Digest	Package	Fixed in
quay.io/apicurio/apicurio-registry-kube-sync :1.0.1	70ef31840269	commons-compress@1.21	1.26.0
quay.io/apicurio/apicurio-registry-mem :2.5.8.Final	3b036692d546	commons-compress@1.24.0	1.26.0

Open the chart page →

6,675

druiddruid-helm

37.0.2

1 of 3 See more

druid druid-helm 37.0.2

1 of the 3 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
apache/druid :37.0.0	0116fb802786	commons-compress@1.21	1.26.0

Open the chart page →

3,812

hivemq-operatorhivemq

0.11.62

1 of 2 See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
hivemq/hivemq-operator :4.7.10	241d6a8e1963	commons-compress@1.21	1.26.0

Open the chart page →

7,857

metabasedeliveryhero

0.14.4

1 of 1 See more

metabase deliveryhero 0.14.4

1 of the 1 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
metabase/metabase :v0.45.2	1fb334ce4820	commons-compress@1.21	1.26.0

Open the chart page →

2,572

hdfsgaffer

2.2.1

1 of 2 See more

hdfs gaffer 2.2.1

1 of the 2 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
gchq/hdfs :3.3.3	5ec58edbb2db	commons-compress@1.21	1.26.0

Open the chart page →

5,357

hadoopbigdata-charts

1.0.1

1 of 2 See more

hadoop bigdata-charts 1.0.1

1 of the 2 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
5200710/hadoop :3.2.3-java8	092d3088a5fb	commons-compress@1.21	1.26.0

Open the chart page →

12,111

jira-softwaremox

2.7.1

1 of 3 See more

jira-software mox 2.7.1

1 of the 3 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
atlassian/jira-software :9.7.2	64a75aa4ec4e	commons-compress@1.22	1.26.0

Open the chart page →

8,636

druidwiremind

1.22.1

1 of 3 See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
apache/druid :29.0.1	0cef139b6bf1	commons-compress@1.24.0	1.26.0

Open the chart page →

7,930

seafiledatamate

0.6.0

2 of 6 See more

seafile datamate 0.6.0

2 of the 6 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
bitnamilegacy/elasticsearch :8.12.1-debian-11-r2	9cfd2df1294d	commons-compress@1.24.0	1.26.0
datamate/seafile-professional :11.0.20	2dd66b722464	commons-compress@1.21	1.26.0

Open the chart page →

27,267

keycloak-operatorkeycloak-operator

0.0.4

1 of 1 See more

keycloak-operator keycloak-operator 0.0.4

1 of the 1 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak-operator :20.0.2	b1710745fa64	commons-compress@1.21	1.26.0

Open the chart page →

4,652

kubernetes-loggingkubernetes-logging

4.8.0

1 of 6 See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
opensearchproject/opensearch :2.10.0	c8f3ebd2a934	commons-compress@1.23.0	1.26.0

Open the chart page →

10,530

sonarqube-dcesonarqube

0.1.2+121

2 of 5 See more

sonarqube-dce sonarqube 0.1.2+121

2 of the 5 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
library/sonarqube :9.1.0-datacenter-search	7e43ff493a47	commons-compress@1.21	1.26.0
library/sonarqube :9.1.0-datacenter-app	a9bc5a3a1fc3	commons-compress@1.21	1.26.0

Open the chart page →

8,698

hivebigdata-charts

0.1.8

1 of 1 See more

hive bigdata-charts 0.1.8

1 of the 1 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
5200710/hive :3.1.3-postgresql-metastore	e34ab066d2ed	commons-compress@1.21	1.26.0

Open the chart page →

7,166

kafdroplsst-sqre

0.1.3

1 of 1 See more

kafdrop lsst-sqre 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
obsidiandynamics/kafdrop :3.30.0	5337c9e0e2de	commons-compress@1.21	1.26.0

Open the chart page →

7,901

feedbacksystemthm-mni-ii

0.47.1

1 of 10 See more

feedbacksystem thm-mni-ii 0.47.1

1 of the 10 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
thmmniii/fbs-core :v1.27.1	5438517d9fc2	commons-compress@1.23.0	1.26.0

Open the chart page →

28,534

paperless-ngxadnoctem

0.4.2

1 of 5 See more

paperless-ngx adnoctem 0.4.2

1 of the 5 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
apache/tika :2.9.0.0	92d055a84e9e	commons-compress@1.23.0	1.26.0

Open the chart page →

19,691

apache-rangerapache-ranger

0.1.0

1 of 2 See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
apache/ranger :2.7.0	76c176e8a0e4	commons-compress@1.21	1.26.0

Open the chart page →

7,740

soarv113assist-iot-cybersecurity-monitoring-soar

0.1.3

2 of 5 See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

2 of the 5 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
assistiot/cybersecurity-monitoring_ir-ctx :latest	ae8b3d72eb5d	commons-compress@1.23.0	1.26.0
assistiot/cybersecurity-monitoring_ir-thv :latest	c8b6c7eaa0cd	commons-compress@1.21	1.26.0

Open the chart page →

17,896

gentrace-self-hostedgentrace-self-hosted

0.1.3

1 of 9 See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

1 of the 9 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
provectuslabs/kafka-ui :latest	8f2ff02d64b0	commons-compress@1.21	1.26.0

Open the chart page →

15,562

hawkhawk

1.1.5

1 of 4 See more

hawk hawk 1.1.5

1 of the 4 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
ghcr.io/privacyengineering/hawk-service :latest	bfedf47bb5e0	commons-compress@1.24.0	1.26.0

Open the chart page →

13,610

traccarjeffresc

0.2.0

1 of 2 See more

traccar jeffresc 0.2.0

1 of the 2 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
traccar/traccar :6.7-alpine	621c8d6d46fd	commons-compress@1.22	1.26.0

Open the chart page →

1,341

kafka-kraft-on-k8skafka-kraft-on-k8s

1.1.0

1 of 3 See more

kafka-kraft-on-k8s kafka-kraft-on-k8s 1.1.0

1 of the 3 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
kafkakraft/kafka-connect :3.7.0	062d697db7e5	commons-compress@1.21	1.26.0

Open the chart page →

14,130

kokukoku

1.0.0

1 of 7 See more

koku koku 1.0.0

1 of the 7 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
public.ecr.aws/v0r6c2e2/hive-metastore :latest	794b3bff9510	commons-compress@1.21	1.26.0

Open the chart page →

12,019

magentomagento

3.2.3

1 of 12 See more

magento magento 3.2.3

1 of the 12 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
magento/magento-cloud-docker-opensearch :2.5-1.4.0	59fb6f0f1461	commons-compress@1.21	1.26.0

Open the chart page →

13,479

metabasemetabase-helm

2.7.1

1 of 1 See more

metabase metabase-helm 2.7.1

1 of the 1 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
metabase/metabase :v0.46.0	9ebdc664a6b2	commons-compress@1.22	1.26.0

Open the chart page →

2,221

clowder2ncsa

1.9.7

2 of 12 See more

clowder2 ncsa 1.9.7

2 of the 12 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
bitnamilegacy/elasticsearch :8.12.2	15d4647fd491	commons-compress@1.24.0	1.26.0
bitnamilegacy/keycloak :20.0.5	cb04e49e6eb1	commons-compress@1.21	1.26.0

Open the chart page →

37,373

portraitportrait

0.2.13

1 of 8 See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
treskon/portrait :DEV-latest	88e813f22347	commons-compress@1.24.0	1.26.0

Open the chart page →

31,844

starwhalestarwhale

0.6.15

1 of 4 See more

starwhale starwhale 0.6.15

1 of the 4 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
ghcr.io/star-whale/server :0.6.15	8368359c8dd0	commons-compress@1.21	1.26.0

Open the chart page →

13,486

ckanstatcan

0.0.35

1 of 8 See more

ckan statcan 0.0.35

1 of the 8 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
library/solr :8.11.1	8c5f7881cebb	commons-compress@1.21	1.26.0

Open the chart page →

24,930

jenkinstestchart

0.1.9

1 of 2 See more

jenkins testchart 0.1.9

1 of the 2 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.426.1-jdk11	b470bcdc4ecd	commons-compress@1.24.0	1.26.0

Open the chart page →

9,102

jenkinstest-jenkins

9.1.0

1 of 2 See more

jenkins test-jenkins 9.1.0

1 of the 2 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.426.1-jdk11	b470bcdc4ecd	commons-compress@1.24.0	1.26.0

Open the chart page →

9,102

spark-operatorwikimedia

2.2.7

1 of 1 See more

spark-operator wikimedia 2.2.7

1 of the 1 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
ghcr.io/kubeflow/spark-operator/controller :2.2.1	865ff4da5686	commons-compress@1.21	1.26.0

Open the chart page →

7,835

analyticsaccount-service

0.4.2

1 of 1 See more

analytics account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
vitalii1992/analytics-service :latest	8e798836ecea	commons-compress@1.21	1.26.0

Open the chart page →

2,326

quotes-provideraccount-service

0.4.2

1 of 1 See more

quotes-provider account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
vitalii1992/quotes-provider-service :latest	44d2d6e00ab3	commons-compress@1.21	1.26.0

Open the chart page →

2,205

airbyte-cronairbyte

0.40.37

1 of 1 See more

airbyte-cron airbyte 0.40.37

1 of the 1 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
airbyte/cron :0.40.17	caf4f551c546	commons-compress@1.21	1.26.0

Open the chart page →

1,413

akto-protectionakto

0.1.0

1 of 4 See more

akto-protection akto 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
aktosecurity/akto-api-protection :local	bcd7382c9c1b	commons-compress@1.21	1.26.0

Open the chart page →

11,285

akto-source-code-analyserakto

0.1.5

1 of 3 See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
aktosecurity/source-code-analyser :a-1703-merge	274042ed7a53	commons-compress@1.21	1.26.0

Open the chart page →

4,880

amorphieamorphie

0.1.2

1 of 18 See more

amorphie amorphie 0.1.2

1 of the 18 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
hazelcast/hazelcast :5.3.1	8fe26efde8e1	commons-compress@1.22	1.26.0

Open the chart page →

28,131

james-komposeappscode

0.1.0

1 of 4 See more

james-kompose appscode 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/inbox-server :MailetGroup	4a2824296412	commons-compress@1.24.0	1.26.0

Open the chart page →

16,975

automatedconfigurationassist-iot-automated-configuration

1.0.0

2 of 5 See more

automatedconfiguration assist-iot-automated-configuration 1.0.0

2 of the 5 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
assistiot/automated_configuration :latest	23f195a7a26a	commons-compress@1.21	1.26.0
provectuslabs/kafka-ui :latest	8f2ff02d64b0	commons-compress@1.21	1.26.0

Open the chart page →

14,728

dashboard-pui9assist-iot-tactile-dashboard

0.2.0

1 of 3 See more

dashboard-pui9 assist-iot-tactile-dashboard 0.2.0

1 of the 3 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
assistiot/tacticle_dashboard :api-latest	e4414cb72dc4	commons-compress@1.21	1.26.0

Open the chart page →

4,145

firehoseblip-firehose

0.0.18

1 of 11 See more

firehose blip-firehose 0.0.18

1 of the 11 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
obsidiandynamics/kafdrop :3.30.0	5337c9e0e2de	commons-compress@1.21	1.26.0

Open the chart page →

13,459

dependency-trackcnieg

3.0.8

1 of 2 See more

dependency-track cnieg 3.0.8

1 of the 2 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
dependencytrack/apiserver :4.6.3	485ac0952c02	commons-compress@1.21	1.26.0

Open the chart page →

2,503

sumo-besu-genesisconsensys

0.1.75

1 of 1 See more

sumo-besu-genesis consensys 0.1.75

1 of the 1 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
hyperledger/besu :22.4-openjdk-latest	a674d35eec9a	commons-compress@1.21	1.26.0

Open the chart page →

7,963

sumo-besu-nodeconsensys

0.1.75

1 of 4 See more

sumo-besu-node consensys 0.1.75

1 of the 4 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
hyperledger/besu :22.4-openjdk-latest	a674d35eec9a	commons-compress@1.21	1.26.0

Open the chart page →

7,963

drogue-cloud-coredrogue-iot

0.7.11

1 of 22 See more

drogue-cloud-core drogue-iot 0.7.11

1 of the 22 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0	054ef67eb7da	commons-compress@1.21	1.26.0

Open the chart page →

55,666

Container images carrying it

88 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
gchq/hdfs :3.3.3	5ec58edbb2db	commons-compress@1.21	1.26.0	3
library/solr :8.11.1	8c5f7881cebb	commons-compress@1.21	1.26.0	3
provectuslabs/kafka-ui :latest	8f2ff02d64b0	commons-compress@1.21	1.26.0	3
apache/druid :37.0.0	0116fb802786	commons-compress@1.21	1.26.0	2
dependencytrack/apiserver :4.6.3	485ac0952c02	commons-compress@1.21	1.26.0	2
hyperledger/besu :22.4-openjdk-latest	a674d35eec9a	commons-compress@1.21	1.26.0	2
inaccel/coral :2.1	8c53744ed70b	commons-compress@1.25.0	1.26.0	2
jenkins/jenkins :2.426.1-jdk11	b470bcdc4ecd	commons-compress@1.24.0	1.26.0	2
metabase/metabase :v0.45.2	1fb334ce4820	commons-compress@1.21	1.26.0	2
obsidiandynamics/kafdrop :3.30.0	5337c9e0e2de	commons-compress@1.21	1.26.0	2
quay.io/keycloak/keycloak :20.0	054ef67eb7da	commons-compress@1.21	1.26.0	2
5200710/hadoop :3.2.3-java8	092d3088a5fb	commons-compress@1.21	1.26.0	1
5200710/hive :3.1.3-postgresql-metastore	e34ab066d2ed	commons-compress@1.21	1.26.0	1
airbyte/cron :0.40.17	caf4f551c546	commons-compress@1.21	1.26.0	1
aktosecurity/akto-api-protection :local	bcd7382c9c1b	commons-compress@1.21	1.26.0	1
aktosecurity/source-code-analyser :a-1703-merge	274042ed7a53	commons-compress@1.21	1.26.0	1
apache/drill :1.21.1	1f96558fd292	commons-compress@1.21	1.26.0	1
apache/druid :29.0.1	0cef139b6bf1	commons-compress@1.24.0	1.26.0	1
apache/gravitino-iceberg-rest :1.3.0	80136ae753ee	commons-compress@1.21	1.26.0	1
apache/hadoop :3	af361b20bec0	commons-compress@1.21	1.26.0	1
apachepinot/pinot :latest-jdk11	0018bb04ced7	commons-compress@1.21	1.26.0	1
apachepulsar/pulsar :3.1.0	16f9fdab3fa6	commons-compress@1.21	1.26.0	1
apachepulsar/pulsar :2.10.0	3b262ab7a7d9	commons-compress@1.21	1.26.0	1
apachepulsar/pulsar :2.9.0	d056c89b7131	commons-compress@1.21	1.26.0	1
apachepulsar/pulsar :2.8.2	d538416d5afe	commons-compress@1.21	1.26.0	1
apache/ranger :2.7.0	76c176e8a0e4	commons-compress@1.21	1.26.0	1
apache/shenyu-bootstrap :2.5.1	1bd5756f6273	commons-compress@1.21	1.26.0	1
apache/skywalking-oap-server :9.2.0	133d35d2c263	commons-compress@1.21	1.26.0	1
apache/skywalking-oap-server :8.9.1	b4ec8c18d079	commons-compress@1.21	1.26.0	1
apache/tika :2.9.0.0	92d055a84e9e	commons-compress@1.23.0	1.26.0	1
assistiot/automated_configuration :latest	23f195a7a26a	commons-compress@1.21	1.26.0	1
assistiot/cybersecurity-monitoring_ir-ctx :latest	ae8b3d72eb5d	commons-compress@1.23.0	1.26.0	1
assistiot/cybersecurity-monitoring_ir-thv :latest	c8b6c7eaa0cd	commons-compress@1.21	1.26.0	1
assistiot/tacticle_dashboard :api-latest	e4414cb72dc4	commons-compress@1.21	1.26.0	1
atlassian/jira-software :9.7.2	64a75aa4ec4e	commons-compress@1.22	1.26.0	1
bitnamilegacy/elasticsearch :8.12.2	15d4647fd491	commons-compress@1.24.0	1.26.0	1
bitnamilegacy/elasticsearch :8.12.1-debian-11-r2	9cfd2df1294d	commons-compress@1.24.0	1.26.0	1
bitnamilegacy/keycloak :20.0.5	cb04e49e6eb1	commons-compress@1.21	1.26.0	1
ckan/ckan-solr :2.11-solr9	ef8e5d3e6be1	commons-compress@1.24.0	1.26.0	1
confluentinc/cp-ksqldb-server :7.6.0	8ec46c27982f	commons-compress@1.21	1.26.0	1
datamate/seafile-professional :11.0.20	2dd66b722464	commons-compress@1.21	1.26.0	1
dremio/dremio-oss :24.1.0	80ed2e3b7c43	commons-compress@1.22	1.26.0	1
easypi/openrefine :3.7.0	d2950a36a576	commons-compress@1.22	1.26.0	1
folioci/mod-calendar :latest	22f65982efd7	commons-compress@1.24.0	1.26.0	1
folioci/mod-email :latest	79ea8e2e7ebf	commons-compress@1.24.0	1.26.0	1
folioci/mod-oai-pmh :latest	5cd5ef063f2a	commons-compress@1.24.0	1.26.0	1
gchq/accumulo :2.0.1	c460bb587d6d	commons-compress@1.21	1.26.0	1
glasskube/operator :0.12.2	be5133100d63	commons-compress@1.24.0	1.26.0	1
hazelcast/hazelcast :5.3.1	8fe26efde8e1	commons-compress@1.22	1.26.0	1
hazelcast/hazelcast-jet :4.5.3	a825ecbe9fda	commons-compress@1.21	1.26.0	1