StackRadar

CVE-2024-29131

Medium

Advisory

Published 21 Mar 2024In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.021
80th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
52
of 17,781 indexed, latest versions
Container images
47
deployed by those charts
Fix available
1 of 1
affected package

Apache Commons Configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator()

Carried by container images the latest versions of 52 of 17,781 indexed charts deploy, on 47 images.

Affected packageAffected versionsFixed inImages
commons-configuration2maven2.1.1, 2.4, 2.5, 2.7+2 more2.10.147
OSV records
GHSA-xjp4-hw94-mvp5

Charts affected

52 by stars
ChartLatestAffected imagesRadar Score
druiddruid-helmVerified publisher37.0.21 of 3See more

druid druid-helm 37.0.2

1 of the 3 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
commons-configuration2@2.8.0
2.10.1

Open the chart page →

3,812
neo4jneo4j-helm4.3.2-11 of 1See more

neo4j neo4j-helm 4.3.2-1

1 of the 1 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
library/neo4j:4.3.2-enterprise56a9453c4064
commons-configuration2@2.7
2.10.1

Open the chart page →

2,640
hdfsgaffer2.2.11 of 2See more

hdfs gaffer 2.2.1

1 of the 2 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
commons-configuration2@2.1.1
2.10.1

Open the chart page →

5,357
sparkmicrosoft1.0.42 of 3See more

spark microsoft 1.0.4

2 of the 3 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
dbanda/livy:0.80ca125e68e53
commons-configuration2@2.1.1
2.10.1
dbanda/spark:2.4.6d0e6367876ae
commons-configuration2@2.1.1
2.10.1

Open the chart page →

13,738
solrpreferred-aiVerified publisher3.2.01 of 3See more

solr preferred-ai 3.2.0

1 of the 3 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
library/solr:8.7.0d124efd81fbb
commons-configuration2@2.1.1
2.10.1

Open the chart page →

6,048
hadoopbigdata-chartsVerified publisher1.0.11 of 2See more

hadoop bigdata-charts 1.0.1

1 of the 2 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
5200710/hadoop:3.2.3-java8092d3088a5fb
commons-configuration2@2.8.0
2.10.1

Open the chart page →

12,111
druidwiremindVerified publisher1.22.11 of 3See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
apache/druid:29.0.10cef139b6bf1
commons-configuration2@2.8.0
2.10.1

Open the chart page →

7,930
hivebigdata-chartsVerified publisher0.1.81 of 1See more

hive bigdata-charts 0.1.8

1 of the 1 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
commons-configuration2@2.1.1
2.10.1

Open the chart page →

7,166
hdfsdmwm-bigdataVerified publisher1.0.11 of 2See more

hdfs dmwm-bigdata 1.0.1

1 of the 2 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
gradiant/hdfs:3.2.2e3bf364fe713
commons-configuration2@2.1.1
2.10.1

Open the chart page →

7,948
hazelcasthazelcastVerified publisher5.10.21 of 2See more

hazelcast hazelcast 5.10.2

1 of the 2 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
hazelcast/hazelcast:5.5.05dd5d31c7a06
commons-configuration2@2.8.0
2.10.1

Open the chart page →

2,634
hive-metastoreheva-helm-chartsVerified publisher0.2.01 of 2See more

hive-metastore heva-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
sslhep/hive-metastore:3.1.39e80af083079
commons-configuration2@2.1.1
2.10.1

Open the chart page →

7,335
activemq-artemisactivemq-artemis-helm0.3.61 of 1See more

activemq-artemis activemq-artemis-helm 0.3.6

1 of the 1 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
vromero/activemq-artemis:2.16.0408d6a46b153
commons-configuration2@2.7
2.10.1

Open the chart page →

4,419
apache-rangerapache-ranger0.1.01 of 2See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
apache/ranger:2.7.076c176e8a0e4
commons-configuration2@2.8.0
2.10.1

Open the chart page →

7,740
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-thv:latestc8b6c7eaa0cd
commons-configuration2@2.1.1
2.10.1

Open the chart page →

17,896
neo4j-communityequinor-charts1.2.51 of 1See more

neo4j-community equinor-charts 1.2.5

1 of the 1 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
library/neo4j:4.2.4348e3f56faa2
commons-configuration2@2.7
2.10.1

Open the chart page →

2,751
kokukokuVerified publisher1.0.01 of 7See more

koku koku 1.0.0

1 of the 7 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
commons-configuration2@2.8.0
2.10.1

Open the chart page →

12,019
magentomagento3.2.31 of 12See more

magento magento 3.2.3

1 of the 12 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
magento/magento-cloud-docker-opensearch:2.5-1.4.059fb6f0f1461
commons-configuration2@2.1.1
2.10.1

Open the chart page →

13,479
data-prepperopensearch-project-helm-chartsVerified publisher0.3.11 of 1See more

data-prepper opensearch-project-helm-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
opensearchproject/data-prepper:2.8.057c25fa01d3c
commons-configuration2@2.8.0
2.10.1

Open the chart page →

1,692
nifi-registryprofyu1.14.0-r0011 of 1See more

nifi-registry profyu 1.14.0-r001

1 of the 1 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
apache/nifi-registry:1.14.0090b7f87ec7f
commons-configuration2@2.7
2.10.1

Open the chart page →

4,621
ckanstatcan0.0.351 of 8See more

ckan statcan 0.0.35

1 of the 8 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
commons-configuration2@2.1.1
2.10.1

Open the chart page →

24,930
spark-operatorwikimedia2.2.71 of 1See more

spark-operator wikimedia 2.2.7

1 of the 1 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
commons-configuration2@2.1.1
2.10.1

Open the chart page →

7,835
zunivers-ninjaalexpressoVerified publisher1.31.21 of 2See more

zunivers-ninja alexpresso 1.31.2

1 of the 2 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
library/neo4j:5.18.18f01f7bb053e
commons-configuration2@2.9.0
2.10.1

Open the chart page →

1,165
amorphieamorphie0.1.21 of 18See more

amorphie amorphie 0.1.2

1 of the 18 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
hazelcast/hazelcast:5.3.18fe26efde8e1
commons-configuration2@2.8.0
2.10.1

Open the chart page →

28,131
james-komposeappscodeVerified publisher0.1.01 of 4See more

james-kompose appscode 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
commons-configuration2@2.9.0
2.10.1

Open the chart page →

16,975
gocdcloudnativeapp1.9.21 of 2See more

gocd cloudnativeapp 1.9.2

1 of the 2 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
gocd/gocd-server:v19.3.02da45cb09d57
commons-configuration2@2.4
2.10.1

Open the chart page →

9,144
apache-ranger-admindata-platform-stableVerified publisher0.2.01 of 2See more

apache-ranger-admin data-platform-stable 0.2.0

1 of the 2 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
commons-configuration2@2.1.1
2.10.1

Open the chart page →

8,245
accumulogaffer2.2.12 of 4See more

accumulo gaffer 2.2.1

2 of the 4 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
gchq/accumulo:2.0.1c460bb587d6d
commons-configuration2@2.1.1
2.10.1
gchq/hdfs:3.3.35ec58edbb2db
commons-configuration2@2.1.1
2.10.1

Open the chart page →

16,892
gaffer-road-trafficgaffer2.2.11 of 8See more

gaffer-road-traffic gaffer 2.2.1

1 of the 8 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
commons-configuration2@2.1.1
2.10.1

Open the chart page →

9,342
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
commons-configuration2@2.7
2.10.1

Open the chart page →

18,230
booksonic-airgeek-cookbookVerified publisher6.4.21 of 1See more

booksonic-air geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
commons-configuration2@2.7
2.10.1

Open the chart page →

19,215
komgageek-cookbookVerified publisher2.4.21 of 1See more

komga geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
gotson/komga:0.99.49b15ea6bfc30
commons-configuration2@2.7
2.10.1

Open the chart page →

12,581
gravitino-iceberg-rest-server-helmgravitino-iceberg-rest-server1.3.111 of 1See more

gravitino-iceberg-rest-server-helm gravitino-iceberg-rest-server 1.3.11

1 of the 1 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
apache/gravitino-iceberg-rest:1.3.080136ae753ee
commons-configuration2@2.8.0
2.10.1

Open the chart page →

4,556
hazelcast-jethazelcastVerified publisher1.17.11 of 1See more

hazelcast-jet hazelcast 1.17.1

1 of the 1 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
hazelcast/hazelcast-jet:4.5.3a825ecbe9fda
commons-configuration2@2.1.1
2.10.1

Open the chart page →

6,102
hbasehbase0.1.71 of 4See more

hbase hbase 0.1.7

1 of the 4 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
commons-configuration2@2.1.1
2.10.1

Open the chart page →

10,540
ckanhelmforgeVerified publisher1.3.81 of 6See more

ckan helmforge 1.3.8

1 of the 6 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
commons-configuration2@2.8.0
2.10.1

Open the chart page →

9,920
druidhelmforgeVerified publisher1.3.61 of 4See more

druid helmforge 1.3.6

1 of the 4 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
commons-configuration2@2.8.0
2.10.1

Open the chart page →

8,541
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
dremio/dremio-oss:24.1.080ed2e3b7c43
commons-configuration2@2.1.1
2.10.1

Open the chart page →

37,671
metabase-k8smetabase-k8s1.0.01 of 1See more

metabase-k8s metabase-k8s 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
metabase/metabase:v0.53.4.17807bc5cad17
commons-configuration2@2.8.0
2.10.1

Open the chart page →

2,589
neo4jneo4j-helm-old4.3.2-11 of 1See more

neo4j neo4j-helm-old 4.3.2-1

1 of the 1 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
library/neo4j:4.3.2-enterprise56a9453c4064
commons-configuration2@2.7
2.10.1

Open the chart page →

2,640
hive-metastoreolehrgfVerified publisher0.1.01 of 1See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
commons-configuration2@2.1.1
2.10.1

Open the chart page →

8,540
apache-knox-helmpfisterer-knox0.1.111 of 1See more

apache-knox-helm pfisterer-knox 0.1.11

1 of the 1 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
farberg/apache-knox-docker:1.6.14b4a22487394
commons-configuration2@2.1.1
2.10.1

Open the chart page →

6,237
hive-metastorepresto-loadbalancer0.2.31 of 1See more

hive-metastore presto-loadbalancer 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
datappeal/hive-metastore:lateste38c085a3567
commons-configuration2@2.1.1
2.10.1

Open the chart page →

9,606
punchline-javapunchplatform8.1.11 of 1See more

punchline-java punchplatform 8.1.1

1 of the 1 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
ghcr.io/punchplatform/punchline-java:8.1.1d46ce7b96482
commons-configuration2@2.1.1
2.10.1

Open the chart page →

1,995
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
trinodb/trino:45038c6f24ab1a4
commons-configuration2@2.1.1
2.10.1

Open the chart page →

21,211
atlassian-confluencesomeblackmagic3.4.11 of 1See more

atlassian-confluence someblackmagic 3.4.1

1 of the 1 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
atlassian/confluence-server:7.10.03b9222ab32ef
commons-configuration2@2.5
2.10.1

Open the chart page →

13,605
fdi-dotstatsuite-sfs-solrstatcan1.0.21 of 4See more

fdi-dotstatsuite-sfs-solr statcan 1.0.2

1 of the 4 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
commons-configuration2@2.1.1
2.10.1

Open the chart page →

6,065
solrstatcan1.5.101 of 3See more

solr statcan 1.5.10

1 of the 3 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
commons-configuration2@2.1.1
2.10.1

Open the chart page →

8,806
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
commons-configuration2@2.1.1
2.10.1

Open the chart page →

13,767
hadoop-deploymenttejaswita-hadoop-helmchart1.0.01 of 1See more

hadoop-deployment tejaswita-hadoop-helmchart 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
apache/hadoop:3af361b20bec0
commons-configuration2@2.8.0
2.10.1

Open the chart page →

4,240
drillwearefrank1.3.61 of 3See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2024-29131.

Container imageDigestPackageFixed in
apache/drill:1.21.11f96558fd292
commons-configuration2@2.1.1
2.10.1

Open the chart page →

9,397

Container images carrying it

47 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
gchq/hdfs:3.3.35ec58edbb2db
commons-configuration2@2.1.1
2.10.1
3
library/solr:8.11.18c5f7881cebb
commons-configuration2@2.1.1
2.10.1
3
apache/druid:37.0.00116fb802786
commons-configuration2@2.8.0
2.10.1
2
hazelcast/hazelcast:5.5.05dd5d31c7a06
commons-configuration2@2.8.0
2.10.1
2
library/neo4j:4.3.2-enterprise56a9453c4064
commons-configuration2@2.7
2.10.1
2
5200710/hadoop:3.2.3-java8092d3088a5fb
commons-configuration2@2.8.0
2.10.1
1
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
commons-configuration2@2.1.1
2.10.1
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
commons-configuration2@2.7
2.10.1
1
apache/drill:1.21.11f96558fd292
commons-configuration2@2.1.1
2.10.1
1
apache/druid:29.0.10cef139b6bf1
commons-configuration2@2.8.0
2.10.1
1
apache/gravitino-iceberg-rest:1.3.080136ae753ee
commons-configuration2@2.8.0
2.10.1
1
apache/hadoop:3af361b20bec0
commons-configuration2@2.8.0
2.10.1
1
apache/nifi-registry:1.14.0090b7f87ec7f
commons-configuration2@2.7
2.10.1
1
apache/ranger:2.7.076c176e8a0e4
commons-configuration2@2.8.0
2.10.1
1
assistiot/cybersecurity-monitoring_ir-thv:latestc8b6c7eaa0cd
commons-configuration2@2.1.1
2.10.1
1
atlassian/confluence-server:7.10.03b9222ab32ef
commons-configuration2@2.5
2.10.1
1
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
commons-configuration2@2.8.0
2.10.1
1
datappeal/hive-metastore:lateste38c085a3567
commons-configuration2@2.1.1
2.10.1
1
dbanda/livy:0.80ca125e68e53
commons-configuration2@2.1.1
2.10.1
1
dbanda/spark:2.4.6d0e6367876ae
commons-configuration2@2.1.1
2.10.1
1
dremio/dremio-oss:24.1.080ed2e3b7c43
commons-configuration2@2.1.1
2.10.1
1
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
commons-configuration2@2.1.1
2.10.1
1
farberg/apache-knox-docker:1.6.14b4a22487394
commons-configuration2@2.1.1
2.10.1
1
gchq/accumulo:2.0.1c460bb587d6d
commons-configuration2@2.1.1
2.10.1
1
gocd/gocd-server:v19.3.02da45cb09d57
commons-configuration2@2.4
2.10.1
1
gotson/komga:0.99.49b15ea6bfc30
commons-configuration2@2.7
2.10.1
1
gradiant/hdfs:3.2.2e3bf364fe713
commons-configuration2@2.1.1
2.10.1
1
hazelcast/hazelcast:5.3.18fe26efde8e1
commons-configuration2@2.8.0
2.10.1
1
hazelcast/hazelcast-jet:4.5.3a825ecbe9fda
commons-configuration2@2.1.1
2.10.1
1
library/neo4j:4.2.4348e3f56faa2
commons-configuration2@2.7
2.10.1
1
library/neo4j:5.18.18f01f7bb053e
commons-configuration2@2.9.0
2.10.1
1
library/solr:8.7.0d124efd81fbb
commons-configuration2@2.1.1
2.10.1
1
magento/magento-cloud-docker-opensearch:2.5-1.4.059fb6f0f1461
commons-configuration2@2.1.1
2.10.1
1
metabase/metabase:v0.53.4.17807bc5cad17
commons-configuration2@2.8.0
2.10.1
1
opensearchproject/data-prepper:2.8.057c25fa01d3c
commons-configuration2@2.8.0
2.10.1
1
sslhep/hive-metastore:3.1.39e80af083079
commons-configuration2@2.1.1
2.10.1
1
trinodb/trino:45038c6f24ab1a4
commons-configuration2@2.1.1
2.10.1
1
trinodb/trino:405ee80ab5eeab2
commons-configuration2@2.1.1
2.10.1
1
vromero/activemq-artemis:2.16.0408d6a46b153
commons-configuration2@2.7
2.10.1
1
zahoriaut/zahori-process:0.1.13351f8a220ed7
commons-configuration2@2.1.1
2.10.1
1
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
commons-configuration2@2.9.0
2.10.1
1
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
commons-configuration2@2.1.1
2.10.1
1
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
commons-configuration2@2.1.1
2.10.1
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
commons-configuration2@2.7
2.10.1
1
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
commons-configuration2@2.1.1
2.10.1
1
ghcr.io/punchplatform/punchline-java:8.1.1d46ce7b96482
commons-configuration2@2.1.1
2.10.1
1
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
commons-configuration2@2.8.0
2.10.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.