Container image	Digest	Package	Fixed in
quay.io/apicurio/apicurio-registry-kube-sync :1.0.1	70ef31840269	commons-compress@1.21	1.26.0
quay.io/apicurio/apicurio-registry-mem :2.5.8.Final	3b036692d546	commons-compress@1.24.0	1.26.0

Open the chart page →

6,675

druiddruid-helm

37.0.2

1 of 3 See more

druid druid-helm 37.0.2

1 of the 3 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
apache/druid :37.0.0	0116fb802786	commons-compress@1.21	1.26.0

Open the chart page →

3,812

hivemq-operatorhivemq

0.11.62

1 of 2 See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
hivemq/hivemq-operator :4.7.10	241d6a8e1963	commons-compress@1.21	1.26.0

Open the chart page →

7,857

metabasedeliveryhero

0.14.4

1 of 1 See more

metabase deliveryhero 0.14.4

1 of the 1 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
metabase/metabase :v0.45.2	1fb334ce4820	commons-compress@1.21	1.26.0

Open the chart page →

2,572

hdfsgaffer

2.2.1

1 of 2 See more

hdfs gaffer 2.2.1

1 of the 2 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
gchq/hdfs :3.3.3	5ec58edbb2db	commons-compress@1.21	1.26.0

Open the chart page →

5,357

hadoopbigdata-charts

1.0.1

1 of 2 See more

hadoop bigdata-charts 1.0.1

1 of the 2 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
5200710/hadoop :3.2.3-java8	092d3088a5fb	commons-compress@1.21	1.26.0

Open the chart page →

12,111

jira-softwaremox

2.7.1

1 of 3 See more

jira-software mox 2.7.1

1 of the 3 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
atlassian/jira-software :9.7.2	64a75aa4ec4e	commons-compress@1.22	1.26.0

Open the chart page →

8,636

druidwiremind

1.22.1

1 of 3 See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
apache/druid :29.0.1	0cef139b6bf1	commons-compress@1.24.0	1.26.0

Open the chart page →

7,930

seafiledatamate

0.6.0

2 of 6 See more

seafile datamate 0.6.0

2 of the 6 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
bitnamilegacy/elasticsearch :8.12.1-debian-11-r2	9cfd2df1294d	commons-compress@1.24.0	1.26.0
datamate/seafile-professional :11.0.20	2dd66b722464	commons-compress@1.21	1.26.0

Open the chart page →

27,267

keycloak-operatorkeycloak-operator

0.0.4

1 of 1 See more

keycloak-operator keycloak-operator 0.0.4

1 of the 1 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak-operator :20.0.2	b1710745fa64	commons-compress@1.21	1.26.0

Open the chart page →

4,652

kubernetes-loggingkubernetes-logging

4.8.0

1 of 6 See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
opensearchproject/opensearch :2.10.0	c8f3ebd2a934	commons-compress@1.23.0	1.26.0

Open the chart page →

10,530

sonarqube-dcesonarqube

0.1.2+121

2 of 5 See more

sonarqube-dce sonarqube 0.1.2+121

2 of the 5 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
library/sonarqube :9.1.0-datacenter-search	7e43ff493a47	commons-compress@1.21	1.26.0
library/sonarqube :9.1.0-datacenter-app	a9bc5a3a1fc3	commons-compress@1.21	1.26.0

Open the chart page →

8,698

hivebigdata-charts

0.1.8

1 of 1 See more

hive bigdata-charts 0.1.8

1 of the 1 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
5200710/hive :3.1.3-postgresql-metastore	e34ab066d2ed	commons-compress@1.21	1.26.0

Open the chart page →

7,166

kafdroplsst-sqre

0.1.3

1 of 1 See more

kafdrop lsst-sqre 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
obsidiandynamics/kafdrop :3.30.0	5337c9e0e2de	commons-compress@1.21	1.26.0

Open the chart page →

7,901

feedbacksystemthm-mni-ii

0.47.1

1 of 10 See more

feedbacksystem thm-mni-ii 0.47.1

1 of the 10 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
thmmniii/fbs-core :v1.27.1	5438517d9fc2	commons-compress@1.23.0	1.26.0

Open the chart page →

28,534

paperless-ngxadnoctem

0.4.2

1 of 5 See more

paperless-ngx adnoctem 0.4.2

1 of the 5 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
apache/tika :2.9.0.0	92d055a84e9e	commons-compress@1.23.0	1.26.0

Open the chart page →

19,691

apache-rangerapache-ranger

0.1.0

1 of 2 See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
apache/ranger :2.7.0	76c176e8a0e4	commons-compress@1.21	1.26.0

Open the chart page →

7,740

soarv113assist-iot-cybersecurity-monitoring-soar

0.1.3

2 of 5 See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

2 of the 5 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
assistiot/cybersecurity-monitoring_ir-ctx :latest	ae8b3d72eb5d	commons-compress@1.23.0	1.26.0
assistiot/cybersecurity-monitoring_ir-thv :latest	c8b6c7eaa0cd	commons-compress@1.21	1.26.0

Open the chart page →

17,896

gentrace-self-hostedgentrace-self-hosted

0.1.3

1 of 9 See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

1 of the 9 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
provectuslabs/kafka-ui :latest	8f2ff02d64b0	commons-compress@1.21	1.26.0

Open the chart page →

15,562

hawkhawk

1.1.5

1 of 4 See more

hawk hawk 1.1.5

1 of the 4 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
ghcr.io/privacyengineering/hawk-service :latest	bfedf47bb5e0	commons-compress@1.24.0	1.26.0

Open the chart page →

13,610

traccarjeffresc

0.2.0

1 of 2 See more

traccar jeffresc 0.2.0

1 of the 2 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
traccar/traccar :6.7-alpine	621c8d6d46fd	commons-compress@1.22	1.26.0

Open the chart page →

1,341

kafka-kraft-on-k8skafka-kraft-on-k8s

1.1.0

1 of 3 See more

kafka-kraft-on-k8s kafka-kraft-on-k8s 1.1.0

1 of the 3 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
kafkakraft/kafka-connect :3.7.0	062d697db7e5	commons-compress@1.21	1.26.0

Open the chart page →

14,130

kokukoku

1.0.0

1 of 7 See more

koku koku 1.0.0

1 of the 7 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
public.ecr.aws/v0r6c2e2/hive-metastore :latest	794b3bff9510	commons-compress@1.21	1.26.0

Open the chart page →

12,019

magentomagento

3.2.3

1 of 12 See more

magento magento 3.2.3

1 of the 12 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
magento/magento-cloud-docker-opensearch :2.5-1.4.0	59fb6f0f1461	commons-compress@1.21	1.26.0

Open the chart page →

13,479

metabasemetabase-helm

2.7.1

1 of 1 See more

metabase metabase-helm 2.7.1

1 of the 1 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
metabase/metabase :v0.46.0	9ebdc664a6b2	commons-compress@1.22	1.26.0

Open the chart page →

2,221

clowder2ncsa

1.9.7

2 of 12 See more

clowder2 ncsa 1.9.7

2 of the 12 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
bitnamilegacy/elasticsearch :8.12.2	15d4647fd491	commons-compress@1.24.0	1.26.0
bitnamilegacy/keycloak :20.0.5	cb04e49e6eb1	commons-compress@1.21	1.26.0

Open the chart page →

37,373

portraitportrait

0.2.13

1 of 8 See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
treskon/portrait :DEV-latest	88e813f22347	commons-compress@1.24.0	1.26.0

Open the chart page →

31,844

starwhalestarwhale

0.6.15

1 of 4 See more

starwhale starwhale 0.6.15

1 of the 4 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
ghcr.io/star-whale/server :0.6.15	8368359c8dd0	commons-compress@1.21	1.26.0

Open the chart page →

13,486

ckanstatcan

0.0.35

1 of 8 See more

ckan statcan 0.0.35

1 of the 8 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
library/solr :8.11.1	8c5f7881cebb	commons-compress@1.21	1.26.0

Open the chart page →

24,930

jenkinstestchart

0.1.9

1 of 2 See more

jenkins testchart 0.1.9

1 of the 2 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.426.1-jdk11	b470bcdc4ecd	commons-compress@1.24.0	1.26.0

Open the chart page →

9,102

jenkinstest-jenkins

9.1.0

1 of 2 See more

jenkins test-jenkins 9.1.0

1 of the 2 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.426.1-jdk11	b470bcdc4ecd	commons-compress@1.24.0	1.26.0

Open the chart page →

9,102

spark-operatorwikimedia

2.2.7

1 of 1 See more

spark-operator wikimedia 2.2.7

1 of the 1 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
ghcr.io/kubeflow/spark-operator/controller :2.2.1	865ff4da5686	commons-compress@1.21	1.26.0

Open the chart page →

7,835

analyticsaccount-service

0.4.2

1 of 1 See more

analytics account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
vitalii1992/analytics-service :latest	8e798836ecea	commons-compress@1.21	1.26.0

Open the chart page →

2,326

quotes-provideraccount-service

0.4.2

1 of 1 See more

quotes-provider account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
vitalii1992/quotes-provider-service :latest	44d2d6e00ab3	commons-compress@1.21	1.26.0

Open the chart page →

2,205

airbyte-cronairbyte

0.40.37

1 of 1 See more

airbyte-cron airbyte 0.40.37

1 of the 1 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
airbyte/cron :0.40.17	caf4f551c546	commons-compress@1.21	1.26.0

Open the chart page →

1,413

akto-protectionakto

0.1.0

1 of 4 See more

akto-protection akto 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
aktosecurity/akto-api-protection :local	bcd7382c9c1b	commons-compress@1.21	1.26.0

Open the chart page →

11,285

akto-source-code-analyserakto

0.1.5

1 of 3 See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
aktosecurity/source-code-analyser :a-1703-merge	274042ed7a53	commons-compress@1.21	1.26.0

Open the chart page →

4,880

amorphieamorphie

0.1.2

1 of 18 See more

amorphie amorphie 0.1.2

1 of the 18 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
hazelcast/hazelcast :5.3.1	8fe26efde8e1	commons-compress@1.22	1.26.0

Open the chart page →

28,131

james-komposeappscode

0.1.0

1 of 4 See more

james-kompose appscode 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/inbox-server :MailetGroup	4a2824296412	commons-compress@1.24.0	1.26.0

Open the chart page →

16,975

automatedconfigurationassist-iot-automated-configuration

1.0.0

2 of 5 See more

automatedconfiguration assist-iot-automated-configuration 1.0.0

2 of the 5 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
assistiot/automated_configuration :latest	23f195a7a26a	commons-compress@1.21	1.26.0
provectuslabs/kafka-ui :latest	8f2ff02d64b0	commons-compress@1.21	1.26.0

Open the chart page →

14,728

dashboard-pui9assist-iot-tactile-dashboard

0.2.0

1 of 3 See more

dashboard-pui9 assist-iot-tactile-dashboard 0.2.0

1 of the 3 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
assistiot/tacticle_dashboard :api-latest	e4414cb72dc4	commons-compress@1.21	1.26.0

Open the chart page →

4,145

firehoseblip-firehose

0.0.18

1 of 11 See more

firehose blip-firehose 0.0.18

1 of the 11 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
obsidiandynamics/kafdrop :3.30.0	5337c9e0e2de	commons-compress@1.21	1.26.0

Open the chart page →

13,459

dependency-trackcnieg

3.0.8

1 of 2 See more

dependency-track cnieg 3.0.8

1 of the 2 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
dependencytrack/apiserver :4.6.3	485ac0952c02	commons-compress@1.21	1.26.0

Open the chart page →

2,503

sumo-besu-genesisconsensys

0.1.75

1 of 1 See more

sumo-besu-genesis consensys 0.1.75

1 of the 1 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
hyperledger/besu :22.4-openjdk-latest	a674d35eec9a	commons-compress@1.21	1.26.0

Open the chart page →

7,963

sumo-besu-nodeconsensys

0.1.75

1 of 4 See more

sumo-besu-node consensys 0.1.75

1 of the 4 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
hyperledger/besu :22.4-openjdk-latest	a674d35eec9a	commons-compress@1.21	1.26.0

Open the chart page →

7,963

drogue-cloud-coredrogue-iot

0.7.11

1 of 22 See more

drogue-cloud-core drogue-iot 0.7.11

1 of the 22 container images this version deploys carry CVE-2024-26308.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0	054ef67eb7da	commons-compress@1.21	1.26.0

Open the chart page →

55,666

Container images carrying it

88 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
hivemq/hivemq4 :dns-4.5.14	4d194450d48e	commons-compress@1.21	1.26.0	1
hivemq/hivemq-operator :4.7.10	241d6a8e1963	commons-compress@1.21	1.26.0	1
jhipster/jhipster-registry :latest	7184525acd4d	commons-compress@1.21	1.26.0	1
kafkakraft/kafka-connect :3.7.0	062d697db7e5	commons-compress@1.21	1.26.0	1
library/sonarqube :9.1.0-datacenter-search	7e43ff493a47	commons-compress@1.21	1.26.0	1
library/sonarqube :9.1.0-datacenter-app	a9bc5a3a1fc3	commons-compress@1.21	1.26.0	1
library/sonarqube :10.0.0-community	ef9723cf4fe4	commons-compress@1.21	1.26.0	1
magento/magento-cloud-docker-opensearch :2.5-1.4.0	59fb6f0f1461	commons-compress@1.21	1.26.0	1
maksimkavalenka/microservices-learning.resource-processor :latest	64a25afb8748	commons-compress@1.23.0	1.26.0	1
metabase/metabase :v0.46.0	9ebdc664a6b2	commons-compress@1.22	1.26.0	1
ncsa/datawolf :4.7.0	af6649d59150	commons-compress@1.22	1.26.0	1
opensearchproject/opensearch :2.12.0	645d3d9390ad	commons-compress@1.24.0	1.26.0	1
opensearchproject/opensearch :2.10.0	c8f3ebd2a934	commons-compress@1.23.0	1.26.0	1
refar/apm-api :v5.7.1	241373fa2972	commons-compress@1.21	1.26.0	1
sonatype/nexus3 :3.58.1	586060431b64	commons-compress@1.23.0	1.26.0	1
thmmniii/fbs-core :v1.27.1	5438517d9fc2	commons-compress@1.23.0	1.26.0	1
traccar/traccar :6.7-alpine	621c8d6d46fd	commons-compress@1.22	1.26.0	1
treskon/portrait :DEV-latest	88e813f22347	commons-compress@1.24.0	1.26.0	1
trinodb/trino :405	ee80ab5eeab2	commons-compress@1.21	1.26.0	1
vitalii1992/analytics-service :latest	8e798836ecea	commons-compress@1.21	1.26.0	1
vitalii1992/quotes-provider-service :latest	44d2d6e00ab3	commons-compress@1.21	1.26.0	1
wistefan/mvf :latest	e0887302b2d8	commons-compress@1.21	1.26.0	1
xeotek/kadeck :4.2.9	4c6b04d9ce55	commons-compress@1.21	1.26.0	1
zahoriaut/zahori-process :0.1.13	351f8a220ed7	commons-compress@1.21	1.26.0	1
ghcr.io/appscode/inbox-server :MailetGroup	4a2824296412	commons-compress@1.24.0	1.26.0	1
ghcr.io/fleeksoft/hbase/hdfs :3.3.3.2	ac62269785ac	commons-compress@1.21	1.26.0	1
ghcr.io/kubeflow/spark-operator/controller :2.2.1	865ff4da5686	commons-compress@1.21	1.26.0	1
ghcr.io/melodyyangaws/hive-metastore :3.0.0	e949b0f733f0	commons-compress@1.21	1.26.0	1
ghcr.io/privacyengineering/hawk-service :latest	bfedf47bb5e0	commons-compress@1.24.0	1.26.0	1
ghcr.io/star-whale/server :0.6.15	8368359c8dd0	commons-compress@1.21	1.26.0	1
public.ecr.aws/v0r6c2e2/hive-metastore :latest	794b3bff9510	commons-compress@1.21	1.26.0	1
quay.io/apicurio/apicurio-registry-kube-sync :1.0.1	70ef31840269	commons-compress@1.21	1.26.0	1
quay.io/apicurio/apicurio-registry-mem :2.5.8.Final	3b036692d546	commons-compress@1.24.0	1.26.0	1
quay.io/fiware/waltid :1.14.1-SNAPSHOT	93889c3d8a34	commons-compress@1.21	1.26.0	1
quay.io/keycloak/keycloak :20.0.1	8830f76112b6	commons-compress@1.21	1.26.0	1
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	commons-compress@1.21	1.26.0	1
quay.io/keycloak/keycloak-operator :20.0.2	b1710745fa64	commons-compress@1.21	1.26.0	1
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	commons-compress@1.23.0	1.26.0	1