StackRadar

CVE-2024-30172

Medium

Advisory

Published 14 May 2024In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.008
53rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
35
of 17,781 indexed, latest versions
Container images
37
deployed by those charts
Fix available
3 of 4
affected packages

Bouncy Castle crafted signature and public key can be used to trigger an infinite loop

Carried by container images the latest versions of 35 of 17,781 indexed charts deploy, on 37 images.

Affected packageAffected versionsFixed inImages
bcprov-jdk18onmaven1.73, 1.74, 1.75, 1.76+1 more1.7831
bcprov-jdk15to18maven1.74, 1.75, 1.761.786
BouncyCastlenuget1.8.5no fix listed1
BouncyCastle.Cryptographynuget2.3.02.3.11
OSV records
GHSA-m44j-cfrm-g8qc

Charts affected

35 by stars
ChartLatestAffected imagesRadar Score
glasskube-operatorglasskubeOfficialVerified publisher0.12.21 of 3See more

glasskube-operator glasskube 0.12.2

1 of the 3 container images this version deploys carry CVE-2024-30172.

Container imageDigestPackageFixed in
glasskube/operator:0.12.2be5133100d63
bcprov-jdk15to18@1.76
bcprov-jdk18on@1.74
1.78
1.78

Open the chart page →

11,933
druidwiremindVerified publisher1.22.11 of 3See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2024-30172.

Container imageDigestPackageFixed in
apache/druid:29.0.10cef139b6bf1
bcprov-jdk18on@1.76
1.78

Open the chart page →

7,930
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2024-30172.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.1-debian-11-r29cfd2df1294d
bcprov-jdk18on@1.76
1.78

Open the chart page →

27,267
kubernetes-loggingkubernetes-logging4.8.01 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2024-30172.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.10.0c8f3ebd2a934
bcprov-jdk15to18@1.75
1.78

Open the chart page →

10,530
musicocielmusicocielVerified publisher0.0.01 of 3See more

musicociel musicociel 0.0.0

1 of the 3 container images this version deploys carry CVE-2024-30172.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:23.0.34f72a5b0c076
bcprov-jdk18on@1.74
1.78

Open the chart page →

4,406
flowableflowable-oss7.1.01 of 2See more

flowable flowable-oss 7.1.0

1 of the 2 container images this version deploys carry CVE-2024-30172.

Container imageDigestPackageFixed in
flowable/flowable-rest:7.1.0b7ae287502cd
bcprov-jdk18on@1.77
1.78

Open the chart page →

2,784
oesopsmxVerified publisher4.0.323 of 25See more

oes opsmx 4.0.32

3 of the 25 container images this version deploys carry CVE-2024-30172.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-oes-audit-client:isd-spin-2025.10.01-cb1bfce-20251126103732a5b1887eab
bcprov-jdk18on@1.74
1.78
quay.io/opsmxpublic/ubi8-oes-autopilot:isd-spin-2025.10.01-af26a30d4-20251126105458bd0bcf72f9
bcprov-jdk18on@1.74
1.78
quay.io/opsmxpublic/ubi8-oes-platform:isd-spin-2025.10.01-a7c191ec-2025112611228ed603ab7417
bcprov-jdk18on@1.74
1.78

Open the chart page →

107,811
atlas-cmmsf3k-techVerified publisher0.151.51 of 4See more

atlas-cmms f3k-tech 0.151.5

1 of the 4 container images this version deploys carry CVE-2024-30172.

Container imageDigestPackageFixed in
intelloop/atlas-cmms-backend:v1.5.14c61bc3dd3f8
bcprov-jdk18on@1.77
1.78

Open the chart page →

5,291
clowder2ncsaVerified publisher1.9.71 of 12See more

clowder2 ncsa 1.9.7

1 of the 12 container images this version deploys carry CVE-2024-30172.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.215d4647fd491
bcprov-jdk18on@1.76
1.78

Open the chart page →

37,373
data-prepperopensearch-project-helm-chartsVerified publisher0.3.11 of 1See more

data-prepper opensearch-project-helm-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-30172.

Container imageDigestPackageFixed in
opensearchproject/data-prepper:2.8.057c25fa01d3c
bcprov-jdk18on@1.76
1.78

Open the chart page →

1,692
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2024-30172.

Container imageDigestPackageFixed in
treskon/portrait:DEV-latest88e813f22347
bcprov-jdk18on@1.76
1.78

Open the chart page →

31,844
jenkinstestchart0.1.91 of 2See more

jenkins testchart 0.1.9

1 of the 2 container images this version deploys carry CVE-2024-30172.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
bcprov-jdk18on@1.73
1.78

Open the chart page →

9,102
jenkinstest-jenkins9.1.01 of 2See more

jenkins test-jenkins 9.1.0

1 of the 2 container images this version deploys carry CVE-2024-30172.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
bcprov-jdk18on@1.73
1.78

Open the chart page →

9,102
amorphieamorphie0.1.21 of 18See more

amorphie amorphie 0.1.2

1 of the 18 container images this version deploys carry CVE-2024-30172.

Container imageDigestPackageFixed in
camunda/zeebe:8.4.5ab5abc09e407
bcprov-jdk18on@1.77
1.78

Open the chart page →

28,131
keycloakbarravarVerified publisher1.0.41 of 1See more

keycloak barravar 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-30172.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:24.0.34d6f22991266
bcprov-jdk18on@1.77
1.78

Open the chart page →

2,381
jenkinsbook-k8sinfra-v25.1.121 of 2See more

jenkins book-k8sinfra-v2 5.1.12

1 of the 2 container images this version deploys carry CVE-2024-30172.

Container imageDigestPackageFixed in
jenkins/jenkins:2.440.3-jdk17de4fea113221
bcprov-jdk18on@1.77
1.78

Open the chart page →

8,323
opensearch-singlenodecaptnbpVerified publisher1.0.91 of 2See more

opensearch-singlenode captnbp 1.0.9

1 of the 2 container images this version deploys carry CVE-2024-30172.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.15.01963b3ece46d
bcprov-jdk15to18@1.74
1.78

Open the chart page →

1,073
entrypoint-balancereclipse-aeriosVerified publisher1.3.01 of 1See more

entrypoint-balancer eclipse-aerios 1.3.0

1 of the 1 container images this version deploys carry CVE-2024-30172.

Container imageDigestPackageFixed in
eclipseaerios/entrypoint-balancer:1.3.043cd999a008d
bcprov-jdk18on@1.77
1.78

Open the chart page →

2,512
fibfibonacci-cluster-appsVerified publisher1.0.03 of 5See more

fib fibonacci-cluster-apps 1.0.0

3 of the 5 container images this version deploys carry CVE-2024-30172.

Container imageDigestPackageFixed in
golenski/fibonacci-msg-relay:1.0.0c863dcb0c513
bcprov-jdk18on@1.77
1.78
golenski/fibonacci-task-manager:2.0.03a2b36df247b
bcprov-jdk18on@1.77
1.78
golenski/fibonacci-worker:2.0.0954caf4aaf6a
bcprov-jdk18on@1.77
1.78

Open the chart page →

16,927
smtp4devimioVerified publisher0.1.11 of 1See more

smtp4dev imio 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-30172.

Container imageDigestPackageFixed in
rnwood/smtp4dev:3.6.1912304153668
BouncyCastle.Cryptography@2.3.0
2.3.1

Open the chart page →

3,192
fpga-operatorinaccelVerified publisher2.8.21 of 7See more

fpga-operator inaccel 2.8.2

1 of the 7 container images this version deploys carry CVE-2024-30172.

Container imageDigestPackageFixed in
inaccel/coral:2.18c53744ed70b
bcprov-jdk18on@1.77
1.78

Open the chart page →

5,759
fpga-operatorkubesphere-stable2.7.41 of 7See more

fpga-operator kubesphere-stable 2.7.4

1 of the 7 container images this version deploys carry CVE-2024-30172.

Container imageDigestPackageFixed in
inaccel/coral:2.18c53744ed70b
bcprov-jdk18on@1.77
1.78

Open the chart page →

5,759
resource-processormicroservices-learningVerified publisher1.2.01 of 1See more

resource-processor microservices-learning 1.2.0

1 of the 1 container images this version deploys carry CVE-2024-30172.

Container imageDigestPackageFixed in
maksimkavalenka/microservices-learning.resource-processor:latest64a25afb8748
bcprov-jdk18on@1.76
1.78

Open the chart page →

3,683
resource-servicemicroservices-learningVerified publisher1.5.01 of 2See more

resource-service microservices-learning 1.5.0

1 of the 2 container images this version deploys carry CVE-2024-30172.

Container imageDigestPackageFixed in
maksimkavalenka/microservices-learning.resource-service:latest13ad9bb170a0
bcprov-jdk18on@1.73
1.78

Open the chart page →

5,129
song-servicemicroservices-learningVerified publisher1.2.01 of 2See more

song-service microservices-learning 1.2.0

1 of the 2 container images this version deploys carry CVE-2024-30172.

Container imageDigestPackageFixed in
maksimkavalenka/microservices-learning.song-service:latest2bcdac368b07
bcprov-jdk18on@1.73
1.78

Open the chart page →

4,599
incorencsaVerified publisher1.38.01 of 29See more

incore ncsa 1.38.0

1 of the 29 container images this version deploys carry CVE-2024-30172.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
bcprov-jdk18on@1.77
1.78

Open the chart page →

15,369
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2024-30172.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
bcprov-jdk18on@1.77
1.78

Open the chart page →

5,826
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2024-30172.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
bcprov-jdk18on@1.75
1.78

Open the chart page →

9,005
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2024-30172.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
bcprov-jdk18on@1.74
1.78

Open the chart page →

6,037
dfdeweyosdfir-infrastructureVerified publisher1.0.01 of 3See more

dfdewey osdfir-infrastructure 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-30172.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.12.0645d3d9390ad
bcprov-jdk15to18@1.76
bcprov-jdk18on@1.77
1.78
1.78

Open the chart page →

1,190
timesketchosdfir-infrastructureVerified publisher1.0.81 of 6See more

timesketch osdfir-infrastructure 1.0.8

1 of the 6 container images this version deploys carry CVE-2024-30172.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.14.0466a49f379bb
bcprov-jdk15to18@1.75
1.78

Open the chart page →

1,753
radar-cp-ksql-serverradar-baseVerified publisher0.0.21 of 2See more

radar-cp-ksql-server radar-base 0.0.2

1 of the 2 container images this version deploys carry CVE-2024-30172.

Container imageDigestPackageFixed in
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
bcprov-jdk18on@1.77
1.78

Open the chart page →

5,269
sonarquberedhat-cop0.1.131 of 1See more

sonarqube redhat-cop 0.1.13

1 of the 1 container images this version deploys carry CVE-2024-30172.

Container imageDigestPackageFixed in
library/sonarqube:10.7.0-community0842dcd4c8f8
bcprov-jdk18on@1.76
1.78

Open the chart page →

4,203
sonatype-nexus3simcube1.0.11 of 2See more

sonatype-nexus3 simcube 1.0.1

1 of the 2 container images this version deploys carry CVE-2024-30172.

Container imageDigestPackageFixed in
sonatype/nexus3:3.58.1586060431b64
bcprov-jdk15to18@1.75
1.78

Open the chart page →

4,946
webencryptorwebencryptor1.1.01 of 1See more

webencryptor webencryptor 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-30172.

Container imageDigestPackageFixed in
beubi/webencryptor:latesta02c2e200920
BouncyCastle@1.8.5
no fix listed

Open the chart page →

1,968

Container images carrying it

37 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
inaccel/coral:2.18c53744ed70b
bcprov-jdk18on@1.77
1.78
2
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
bcprov-jdk18on@1.73
1.78
2
1dev/server:11.9.0cd5b12fe5471
bcprov-jdk18on@1.74
1.78
1
apache/druid:29.0.10cef139b6bf1
bcprov-jdk18on@1.76
1.78
1
apachepulsar/pulsar:3.1.016f9fdab3fa6
bcprov-jdk18on@1.75
1.78
1
beubi/webencryptor:latesta02c2e200920
BouncyCastle@1.8.5
no fix listed
1
bitnamilegacy/elasticsearch:8.12.215d4647fd491
bcprov-jdk18on@1.76
1.78
1
bitnamilegacy/elasticsearch:8.12.1-debian-11-r29cfd2df1294d
bcprov-jdk18on@1.76
1.78
1
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
bcprov-jdk18on@1.77
1.78
1
camunda/zeebe:8.4.5ab5abc09e407
bcprov-jdk18on@1.77
1.78
1
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
bcprov-jdk18on@1.77
1.78
1
eclipseaerios/entrypoint-balancer:1.3.043cd999a008d
bcprov-jdk18on@1.77
1.78
1
flowable/flowable-rest:7.1.0b7ae287502cd
bcprov-jdk18on@1.77
1.78
1
glasskube/operator:0.12.2be5133100d63
bcprov-jdk15to18@1.76
bcprov-jdk18on@1.74
1.78
1.78
1
golenski/fibonacci-msg-relay:1.0.0c863dcb0c513
bcprov-jdk18on@1.77
1.78
1
golenski/fibonacci-task-manager:2.0.03a2b36df247b
bcprov-jdk18on@1.77
1.78
1
golenski/fibonacci-worker:2.0.0954caf4aaf6a
bcprov-jdk18on@1.77
1.78
1
intelloop/atlas-cmms-backend:v1.5.14c61bc3dd3f8
bcprov-jdk18on@1.77
1.78
1
jenkins/jenkins:2.440.3-jdk17de4fea113221
bcprov-jdk18on@1.77
1.78
1
library/sonarqube:10.7.0-community0842dcd4c8f8
bcprov-jdk18on@1.76
1.78
1
maksimkavalenka/microservices-learning.resource-processor:latest64a25afb8748
bcprov-jdk18on@1.76
1.78
1
maksimkavalenka/microservices-learning.resource-service:latest13ad9bb170a0
bcprov-jdk18on@1.73
1.78
1
maksimkavalenka/microservices-learning.song-service:latest2bcdac368b07
bcprov-jdk18on@1.73
1.78
1
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
bcprov-jdk18on@1.77
1.78
1
opensearchproject/data-prepper:2.8.057c25fa01d3c
bcprov-jdk18on@1.76
1.78
1
opensearchproject/opensearch:2.15.01963b3ece46d
bcprov-jdk15to18@1.74
1.78
1
opensearchproject/opensearch:2.14.0466a49f379bb
bcprov-jdk15to18@1.75
1.78
1
opensearchproject/opensearch:2.12.0645d3d9390ad
bcprov-jdk15to18@1.76
bcprov-jdk18on@1.77
1.78
1.78
1
opensearchproject/opensearch:2.10.0c8f3ebd2a934
bcprov-jdk15to18@1.75
1.78
1
rnwood/smtp4dev:3.6.1912304153668
BouncyCastle.Cryptography@2.3.0
2.3.1
1
sonatype/nexus3:3.58.1586060431b64
bcprov-jdk15to18@1.75
1.78
1
treskon/portrait:DEV-latest88e813f22347
bcprov-jdk18on@1.76
1.78
1
quay.io/keycloak/keycloak:24.0.34d6f22991266
bcprov-jdk18on@1.77
1.78
1
quay.io/keycloak/keycloak:23.0.34f72a5b0c076
bcprov-jdk18on@1.74
1.78
1
quay.io/opsmxpublic/ubi8-oes-audit-client:isd-spin-2025.10.01-cb1bfce-20251126103732a5b1887eab
bcprov-jdk18on@1.74
1.78
1
quay.io/opsmxpublic/ubi8-oes-autopilot:isd-spin-2025.10.01-af26a30d4-20251126105458bd0bcf72f9
bcprov-jdk18on@1.74
1.78
1
quay.io/opsmxpublic/ubi8-oes-platform:isd-spin-2025.10.01-a7c191ec-2025112611228ed603ab7417
bcprov-jdk18on@1.74
1.78
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.