CVE-2024-2700

High

Advisory

Published 4 Apr 2024In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.0; base score, highest
EPSS: 0.003; 21st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 25; of 17,781 indexed, latest versions
Container images: 17; deployed by those charts
Fix available: 1 of 1; affected package

quarkus-core leaks local environment variables from Quarkus namespace during application's build

Carried by container images the latest versions of 25 of 17,781 indexed charts deploy, on 17 images.

Affected package	Affected versions	Fixed in	Images
quarkus-coremaven	1.9.0.Final, 1.13.2.Final, 2.4.2.Final, 2.12.3.Final+8 more	3.2.12.Final, 3.8.4	17

OSV records: GHSA-f8h5-v2vg-46rr

Charts affected

25 by stars

Chart

Latest

Affected images

Radar Score

apicurio-registryapicurio-registry-helm

3.8.0

2 of 2 See more

apicurio-registry apicurio-registry-helm 3.8.0

2 of the 2 container images this version deploys carry CVE-2024-2700.

Container image	Digest	Package	Fixed in
quay.io/apicurio/apicurio-registry-kube-sync :1.0.1	70ef31840269	quarkus-core@2.4.2.Final	3.2.12.Final
quay.io/apicurio/apicurio-registry-mem :2.5.8.Final	3b036692d546	quarkus-core@3.2.8.Final	3.2.12.Final

Open the chart page →

6,675

keycloak-operatorkeycloak-operator

0.0.4

1 of 1 See more

keycloak-operator keycloak-operator 0.0.4

1 of the 1 container images this version deploys carry CVE-2024-2700.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak-operator :20.0.2	b1710745fa64	quarkus-core@2.13.3.Final	3.2.12.Final

Open the chart page →

4,652

musicocielmusicociel

0.0.0

1 of 3 See more

musicociel musicociel 0.0.0

1 of the 3 container images this version deploys carry CVE-2024-2700.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :23.0.3	4f72a5b0c076	quarkus-core@3.2.9.Final	3.2.12.Final

Open the chart page →

4,406

clowder2ncsa

1.9.7

1 of 12 See more

clowder2 ncsa 1.9.7

1 of the 12 container images this version deploys carry CVE-2024-2700.

Container image	Digest	Package	Fixed in
bitnamilegacy/keycloak :20.0.5	cb04e49e6eb1	quarkus-core@2.13.7.Final	3.2.12.Final

Open the chart page →

37,373

keycloakbarravar

1.0.4

1 of 1 See more

keycloak barravar 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-2700.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :24.0.3	4d6f22991266	quarkus-core@3.8.3	3.8.4

Open the chart page →

2,381

drogue-cloud-coredrogue-iot

0.7.11

1 of 22 See more

drogue-cloud-core drogue-iot 0.7.11

1 of the 22 container images this version deploys carry CVE-2024-2700.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0	054ef67eb7da	quarkus-core@2.13.7.Final	3.2.12.Final

Open the chart page →

55,666

drogue-cloud-twindrogue-iot

0.7.11

1 of 8 See more

drogue-cloud-twin drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2024-2700.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0	054ef67eb7da	quarkus-core@2.13.7.Final	3.2.12.Final

Open the chart page →

6,915

eoloPlanteolo-planner

0.1.0

1 of 7 See more

eoloPlant eolo-planner 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-2700.

Container image	Digest	Package	Fixed in
mastercloudapps/server :v2.23	f3d24dfe2686	quarkus-core@2.14.3.Final	3.2.12.Final

Open the chart page →

27,537

eoloplannereoloplanner

0.1.0

1 of 7 See more

eoloplanner eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-2700.

Container image	Digest	Package	Fixed in
codeurjc/server :v1.0	310bea5b1ee7	quarkus-core@2.14.3.Final	3.2.12.Final

Open the chart page →

32,205

eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelm

0.1.0

1 of 7 See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-2700.

Container image	Digest	Package	Fixed in
mastercloudapps/server :v2.23	f3d24dfe2686	quarkus-core@2.14.3.Final	3.2.12.Final

Open the chart page →

27,537

eoloplannereoloplanner-molynx-gat

0.1.0

1 of 7 See more

eoloplanner eoloplanner-molynx-gat 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-2700.

Container image	Digest	Package	Fixed in
codeurjc/server :v1.0	310bea5b1ee7	quarkus-core@2.14.3.Final	3.2.12.Final

Open the chart page →

28,482

eoloplanteoloplant

1.0.0

1 of 7 See more

eoloplant eoloplant 1.0.0

1 of the 7 container images this version deploys carry CVE-2024-2700.

Container image	Digest	Package	Fixed in
mastercloudapps/server :v2.23	f3d24dfe2686	quarkus-core@2.14.3.Final	3.2.12.Final

Open the chart page →

27,537

eoloplantseoloplants-urjc

0.1.0

1 of 7 See more

eoloplants eoloplants-urjc 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-2700.

Container image	Digest	Package	Fixed in
codeurjc/server :v1.0	310bea5b1ee7	quarkus-core@2.14.3.Final	3.2.12.Final

Open the chart page →

27,721

servereoloserver

0.1.0

1 of 7 See more

server eoloserver 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-2700.

Container image	Digest	Package	Fixed in
codeurjc/server :v1.0	310bea5b1ee7	quarkus-core@2.14.3.Final	3.2.12.Final

Open the chart page →

32,205

eoloplanthttpd-eoloplant

0.1.0

1 of 7 See more

eoloplant httpd-eoloplant 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-2700.

Container image	Digest	Package	Fixed in
codeurjc/server :v1.0	310bea5b1ee7	quarkus-core@2.14.3.Final	3.2.12.Final

Open the chart page →

32,205

eoloserverihuertas2021-vmartinp2021-helm

0.1.0

1 of 7 See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-2700.

Container image	Digest	Package	Fixed in
codeurjc/server :v1.0	310bea5b1ee7	quarkus-core@2.14.3.Final	3.2.12.Final

Open the chart page →

27,721

my-app-namemy-app-name

0.0.2

1 of 1 See more

my-app-name my-app-name 0.0.2

1 of the 1 container images this version deploys carry CVE-2024-2700.

Container image	Digest	Package	Fixed in
viniciusfcf/gitops-quarkus-app-jvm :latest	bba8ee1b5cd5	quarkus-core@2.12.3.Final	3.2.12.Final

Open the chart page →

9,149

Practica_4_helmmy-heml-app

0.1.0

1 of 7 See more

Practica_4_helm my-heml-app 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-2700.

Container image	Digest	Package	Fixed in
codeurjc/server :v1.0	310bea5b1ee7	quarkus-core@2.14.3.Final	3.2.12.Final

Open the chart page →

27,721

apicurioone-acre-fund

2.3.0

3 of 5 See more

apicurio one-acre-fund 2.3.0

3 of the 5 container images this version deploys carry CVE-2024-2700.

Container image	Digest	Package	Fixed in
apicurio/apicurio-studio-api :0.2.62.Final	302d202ed149	quarkus-core@2.16.4.Final	3.2.12.Final
apicurio/apicurio-studio-ui :0.2.62.Final	349c845270c2	quarkus-core@2.16.4.Final	3.2.12.Final
apicurio/apicurio-studio-ws :0.2.62.Final	27a91978a388	quarkus-core@2.16.4.Final	3.2.12.Final

Open the chart page →

18,667

p4p4

0.1.0

1 of 7 See more

p4 p4 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-2700.

Container image	Digest	Package	Fixed in
mastercloudapps/server :v2.23	f3d24dfe2686	quarkus-core@2.14.3.Final	3.2.12.Final

Open the chart page →

27,537

Practica_4_helmpr04helm

0.1.0

1 of 7 See more

Practica_4_helm pr04helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-2700.

Container image	Digest	Package	Fixed in
codeurjc/server :v1.0	310bea5b1ee7	quarkus-core@2.14.3.Final	3.2.12.Final

Open the chart page →

27,558

simple-keycloaksikalabs

0.1.0

1 of 1 See more

simple-keycloak sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-2700.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.1	8830f76112b6	quarkus-core@2.13.3.Final	3.2.12.Final

Open the chart page →

6,443

hermestouk

0.6.0

1 of 3 See more

hermes touk 0.6.0

1 of the 3 container images this version deploys carry CVE-2024-2700.

Container image	Digest	Package	Fixed in
apicurio/apicurio-registry-kafkasql :2.1.0.Final	a97d67487532	quarkus-core@1.13.2.Final	3.2.12.Final

Open the chart page →

12,455

apicurio-registry-sqlwitcom-gmbh

0.1.0

1 of 1 See more

apicurio-registry-sql witcom-gmbh 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-2700.

Container image	Digest	Package	Fixed in
apicurio/apicurio-registry-jpa :1.3.2.Final	44eeddd3562c	quarkus-core@1.9.0.Final	3.2.12.Final

Open the chart page →

3,424

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2024-2700.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	quarkus-core@2.13.6.Final	3.2.12.Final

Open the chart page →

6,016

Container images carrying it

17 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
codeurjc/server :v1.0	310bea5b1ee7	quarkus-core@2.14.3.Final	3.2.12.Final	8
mastercloudapps/server :v2.23	f3d24dfe2686	quarkus-core@2.14.3.Final	3.2.12.Final	4
quay.io/keycloak/keycloak :20.0	054ef67eb7da	quarkus-core@2.13.7.Final	3.2.12.Final	2
apicurio/apicurio-registry-jpa :1.3.2.Final	44eeddd3562c	quarkus-core@1.9.0.Final	3.2.12.Final	1
apicurio/apicurio-registry-kafkasql :2.1.0.Final	a97d67487532	quarkus-core@1.13.2.Final	3.2.12.Final	1
apicurio/apicurio-studio-api :0.2.62.Final	302d202ed149	quarkus-core@2.16.4.Final	3.2.12.Final	1
apicurio/apicurio-studio-ui :0.2.62.Final	349c845270c2	quarkus-core@2.16.4.Final	3.2.12.Final	1
apicurio/apicurio-studio-ws :0.2.62.Final	27a91978a388	quarkus-core@2.16.4.Final	3.2.12.Final	1
bitnamilegacy/keycloak :20.0.5	cb04e49e6eb1	quarkus-core@2.13.7.Final	3.2.12.Final	1
viniciusfcf/gitops-quarkus-app-jvm :latest	bba8ee1b5cd5	quarkus-core@2.12.3.Final	3.2.12.Final	1
quay.io/apicurio/apicurio-registry-kube-sync :1.0.1	70ef31840269	quarkus-core@2.4.2.Final	3.2.12.Final	1
quay.io/apicurio/apicurio-registry-mem :2.5.8.Final	3b036692d546	quarkus-core@3.2.8.Final	3.2.12.Final	1
quay.io/keycloak/keycloak :24.0.3	4d6f22991266	quarkus-core@3.8.3	3.8.4	1
quay.io/keycloak/keycloak :23.0.3	4f72a5b0c076	quarkus-core@3.2.9.Final	3.2.12.Final	1
quay.io/keycloak/keycloak :20.0.1	8830f76112b6	quarkus-core@2.13.3.Final	3.2.12.Final	1
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	quarkus-core@2.13.6.Final	3.2.12.Final	1
quay.io/keycloak/keycloak-operator :20.0.2	b1710745fa64	quarkus-core@2.13.3.Final	3.2.12.Final	1