StackRadar

CVE-2024-29371

High

Advisory

Published 17 Dec 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
17th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
61
of 17,781 indexed, latest versions
Container images
60
deployed by those charts
Fix available
1 of 1
affected package

jose4j is vulnerable to DoS via compressed JWE content

Carried by container images the latest versions of 61 of 17,781 indexed charts deploy, on 60 images.

Affected packageAffected versionsFixed inImages
jose4jmaven0.5.5, 0.6.3, 0.6.5, 0.7.0+11 more0.9.660
OSV records
GHSA-3677-xxcr-wjqv

Charts affected

61 by stars
ChartLatestAffected imagesRadar Score
apicurioone-acre-fundVerified publisher2.3.02 of 5See more

apicurio one-acre-fund 2.3.0

2 of the 5 container images this version deploys carry CVE-2024-29371.

Container imageDigestPackageFixed in
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
jose4j@0.9.2
0.9.6
apicurio/apicurio-studio-ui:0.2.62.Final349c845270c2
jose4j@0.9.2
0.9.6

Open the chart page →

18,667
radar-cp-ksql-serverradar-baseVerified publisher0.0.21 of 2See more

radar-cp-ksql-server radar-base 0.0.2

1 of the 2 container images this version deploys carry CVE-2024-29371.

Container imageDigestPackageFixed in
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
jose4j@0.9.3
0.9.6

Open the chart page →

5,269
simple-keycloaksikalabs0.1.01 of 1See more

simple-keycloak sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-29371.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.18830f76112b6
jose4j@0.7.9
0.9.6

Open the chart page →

6,443
atlassian-confluencesomeblackmagic3.4.11 of 1See more

atlassian-confluence someblackmagic 3.4.1

1 of the 1 container images this version deploys carry CVE-2024-29371.

Container imageDigestPackageFixed in
atlassian/confluence-server:7.10.03b9222ab32ef
jose4j@0.6.3
0.9.6

Open the chart page →

13,605
fdi-dotstatsuite-sfs-solrstatcan1.0.21 of 4See more

fdi-dotstatsuite-sfs-solr statcan 1.0.2

1 of the 4 container images this version deploys carry CVE-2024-29371.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
jose4j@0.6.5
0.9.6

Open the chart page →

6,065
solrstatcan1.5.101 of 3See more

solr statcan 1.5.10

1 of the 3 container images this version deploys carry CVE-2024-29371.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
jose4j@0.6.5
0.9.6

Open the chart page →

8,806
hermestoukVerified publisher0.6.01 of 3See more

hermes touk 0.6.0

1 of the 3 container images this version deploys carry CVE-2024-29371.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
jose4j@0.7.6
0.9.6

Open the chart page →

12,455
zookeepertwomartensVerified publisher0.2.21 of 1See more

zookeeper twomartens 0.2.2

1 of the 1 container images this version deploys carry CVE-2024-29371.

Container imageDigestPackageFixed in
confluentinc/cp-zookeeper:latest7610a50b13e7
jose4j@0.9.4
0.9.6

Open the chart page →

1,733
drillwearefrank1.3.61 of 3See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2024-29371.

Container imageDigestPackageFixed in
apache/drill:1.21.11f96558fd292
jose4j@0.7.9
0.9.6

Open the chart page →

9,397
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2024-29371.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
jose4j@0.7.2
0.9.6

Open the chart page →

28,605
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2024-29371.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
jose4j@0.7.11
0.9.6

Open the chart page →

6,016

Container images carrying it

60 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
solsson/kafka:latest41e5d8f6f290
jose4j@0.7.9
0.9.6
5
library/solr:8.11.18c5f7881cebb
jose4j@0.6.5
0.9.6
3
confluentinc/cp-zookeeper:latest7610a50b13e7
jose4j@0.9.4
0.9.6
2
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
jose4j@0.7.9
0.9.6
2
inaccel/coral:2.18c53744ed70b
jose4j@0.9.4
0.9.6
2
quay.io/keycloak/keycloak:20.0054ef67eb7da
jose4j@0.7.11
0.9.6
2
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
jose4j@0.7.9
0.9.6
2
apache/drill:1.21.11f96558fd292
jose4j@0.7.9
0.9.6
1
apache/druid:29.0.10cef139b6bf1
jose4j@0.9.3
0.9.6
1
apache/kafka:3.9.0fbc7d7c428e3
jose4j@0.9.4
0.9.6
1
apachepulsar/pulsar:3.1.016f9fdab3fa6
jose4j@0.9.3
0.9.6
1
apachepulsar/pulsar:2.10.03b262ab7a7d9
jose4j@0.7.6
0.9.6
1
apachepulsar/pulsar:3.0.79c9947de139d
jose4j@0.9.4
0.9.6
1
apachepulsar/pulsar:2.9.0d056c89b7131
jose4j@0.7.6
0.9.6
1
apachepulsar/pulsar:2.8.2d538416d5afe
jose4j@0.7.6
0.9.6
1
apache/skywalking-oap-server:9.2.0133d35d2c263
jose4j@0.7.12
0.9.6
1
apache/skywalking-oap-server:8.1.0-es7641237e0299b
jose4j@0.7.0
0.9.6
1
apache/skywalking-oap-server:8.9.1b4ec8c18d079
jose4j@0.7.9
0.9.6
1
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
jose4j@0.7.6
0.9.6
1
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
jose4j@0.9.2
0.9.6
1
apicurio/apicurio-studio-ui:0.2.62.Final349c845270c2
jose4j@0.9.2
0.9.6
1
assistiot/identity-manager_kc:latest0df4b4fa899a
jose4j@0.7.11
0.9.6
1
atlassian/confluence-server:7.10.03b9222ab32ef
jose4j@0.6.3
0.9.6
1
bitnamilegacy/kafka:3.5.0-debian-11-r08657bb93a581
jose4j@0.9.3
0.9.6
1
bitnamilegacy/kafka:3.4.0-debian-11-r6ac64829e45b3
jose4j@0.7.9
0.9.6
1
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
jose4j@0.7.11
0.9.6
1
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
jose4j@0.6.5
0.9.6
1
confluentinc/cp-enterprise-kafka:6.1.08f1544df1f48
jose4j@0.7.2
0.9.6
1
confluentinc/cp-kafka:7.1.2.amd643bf359d5e340
jose4j@0.7.8
0.9.6
1
confluentinc/cp-kafka:7.6.683dbca3efd2a
jose4j@0.9.4
0.9.6
1
confluentinc/cp-kafka:7.8.0-3-ubi8adc392d28a1e
jose4j@0.9.4
0.9.6
1
confluentinc/cp-kafka:7.4.4c0224a1adf7a
jose4j@0.9.3
0.9.6
1
confluentinc/cp-kafka:7.5.1dc9b972db002
jose4j@0.9.3
0.9.6
1
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
jose4j@0.6.5
0.9.6
1
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
jose4j@0.7.2
0.9.6
1
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
jose4j@0.9.3
0.9.6
1
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
jose4j@0.7.2
0.9.6
1
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
jose4j@0.7.2
0.9.6
1
confluentinc/cp-zookeeper:7.5.10bec03c1f3ce
jose4j@0.9.3
0.9.6
1
confluentinc/cp-zookeeper:7.8.0-3-ubi85ca5f3269814
jose4j@0.9.5
0.9.6
1
guacamole/guacamole:1.1.0333a7f40c145
jose4j@0.5.5
0.9.6
1
guacamole/guacamole:1.3.0739cb6820ae8
jose4j@0.5.5
0.9.6
1
hivemq/hivemq4:dns-4.5.144d194450d48e
jose4j@0.7.9
0.9.6
1
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
jose4j@0.9.4
0.9.6
1
kafkakraft/kafka-connect:3.7.0062d697db7e5
jose4j@0.9.4
0.9.6
1
kafkakraft/kafka-controller:3.7.0f261ad288fce
jose4j@0.9.4
0.9.6
1
kafkakraft/kafkakraft:3.7.02e4b593b878b
jose4j@0.9.4
0.9.6
1
library/solr:8.7.0d124efd81fbb
jose4j@0.6.5
0.9.6
1
ncsa/datawolf:4.7.0af6649d59150
jose4j@0.9.2
0.9.6
1
openhab/openhab:3.2.0d0aa4af452c1
jose4j@0.7.7
0.9.6
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.