StackRadar

CVE-2024-36114

High

Advisory

Published 2 Jun 2024In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
8.6
base score, highest
EPSS
0.005
42nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
39
of 17,781 indexed, latest versions
Container images
44
deployed by those charts
Fix available
1 of 1
affected package

Decompressors can crash the JVM and leak memory content in Aircompressor

Carried by container images the latest versions of 39 of 17,781 indexed charts deploy, on 44 images.

Affected packageAffected versionsFixed inImages
aircompressormaven0.3, 0.8, 0.9, 0.10+4 more0.2744
OSV records
GHSA-973x-65j7-xcf4

Charts affected

39 by stars
ChartLatestAffected imagesRadar Score
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
aircompressor@0.20
0.27

Open the chart page →

32,259
sparkmicrosoft1.0.42 of 3See more

spark microsoft 1.0.4

2 of the 3 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
dbanda/livy:0.80ca125e68e53
aircompressor@0.10
0.27
dbanda/spark:2.4.6d0e6367876ae
aircompressor@0.10
0.27

Open the chart page →

13,738
druidwiremindVerified publisher1.22.11 of 3See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
apache/druid:29.0.10cef139b6bf1
aircompressor@0.21
0.27

Open the chart page →

7,930
hivebigdata-chartsVerified publisher0.1.81 of 1See more

hive bigdata-charts 0.1.8

1 of the 1 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
aircompressor@0.10
0.27

Open the chart page →

7,166
hivedmwm-bigdataVerified publisher0.1.62 of 5See more

hive dmwm-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
aircompressor@0.3
0.27
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
aircompressor@0.3
0.27

Open the chart page →

20,837
hive-metastoreheva-helm-chartsVerified publisher0.2.01 of 2See more

hive-metastore heva-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
sslhep/hive-metastore:3.1.39e80af083079
aircompressor@0.10
0.27

Open the chart page →

7,335
hive-metastoreslamdev0.0.51 of 2See more

hive-metastore slamdev 0.0.5

1 of the 2 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
aircompressor@0.8
0.27

Open the chart page →

8,198
apache-rangerapache-ranger0.1.01 of 2See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
apache/ranger:2.7.076c176e8a0e4
aircompressor@0.10
0.27

Open the chart page →

7,740
geoserver-cloudcamptocamp20.0.55 of 11See more

geoserver-cloud camptocamp2 0.0.5

5 of the 11 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
aircompressor@0.20
0.27
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
aircompressor@0.20
0.27
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
aircompressor@0.20
0.27
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
aircompressor@0.20
0.27
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
aircompressor@0.20
0.27

Open the chart page →

84,444
geoserverCloudcamptocamp20.0.65 of 11See more

geoserverCloud camptocamp2 0.0.6

5 of the 11 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
aircompressor@0.20
0.27
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
aircompressor@0.20
0.27
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
aircompressor@0.20
0.27
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
aircompressor@0.20
0.27
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
aircompressor@0.20
0.27

Open the chart page →

84,444
hive-metastoredmwm-bigdataVerified publisher0.1.31 of 2See more

hive-metastore dmwm-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
aircompressor@0.3
0.27

Open the chart page →

6,882
stormgresearch1.2.01 of 3See more

storm gresearch 1.2.0

1 of the 3 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
library/storm:2.4.0bd5d420506d6
aircompressor@0.3
0.27

Open the chart page →

6,165
kokukokuVerified publisher1.0.01 of 7See more

koku koku 1.0.0

1 of the 7 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
aircompressor@0.10
0.27

Open the chart page →

12,019
data-prepperopensearch-project-helm-chartsVerified publisher0.3.11 of 1See more

data-prepper opensearch-project-helm-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
opensearchproject/data-prepper:2.8.057c25fa01d3c
aircompressor@0.26
0.27

Open the chart page →

1,692
amorphieamorphie0.1.21 of 18See more

amorphie amorphie 0.1.2

1 of the 18 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
hazelcast/hazelcast:5.3.18fe26efde8e1
aircompressor@0.21
0.27

Open the chart page →

28,131
james-komposeappscodeVerified publisher0.1.01 of 4See more

james-kompose appscode 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
aircompressor@0.20
0.27

Open the chart page →

16,975
chart-app-vidapp-vid-chartVerified publisher0.0.71 of 2See more

chart-app-vid app-vid-chart 0.0.7

1 of the 2 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
fimperato/sparkvid-api:1.0.5-RELEASE604012b77841
aircompressor@0.10
0.27

Open the chart page →

8,866
geoservercamptocamp20.0.35 of 12See more

geoserver camptocamp2 0.0.3

5 of the 12 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
aircompressor@0.20
0.27
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
aircompressor@0.20
0.27
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
aircompressor@0.20
0.27
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
aircompressor@0.20
0.27
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
aircompressor@0.20
0.27

Open the chart page →

88,335
prestocloudnativeapp0.1.11 of 1See more

presto cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
bivas/presto:0.19605545994f806
aircompressor@0.9
0.27

Open the chart page →

7,226
spark-history-servercloudnativeapp1.0.01 of 3See more

spark-history-server cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
lightbend/spark-history-server:2.4.00bedf37f428a
aircompressor@0.10
0.27

Open the chart page →

14,066
pulsarcnieg1.0.81 of 2See more

pulsar cnieg 1.0.8

1 of the 2 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.6.14db6ff0b4045
aircompressor@0.16
0.27

Open the chart page →

16,860
spark-standalonedmwm-bigdataVerified publisher0.1.01 of 2See more

spark-standalone dmwm-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
gradiant/spark:2.4.4-python-alpine97657d56e927
aircompressor@0.10
0.27

Open the chart page →

6,147
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.81 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
jingking/geonetwork-hnap:4.2.843e74ab234e1
aircompressor@0.20
0.27

Open the chart page →

34,754
hivegradiant-bigdataVerified publisher0.1.62 of 5See more

hive gradiant-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
aircompressor@0.3
0.27
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
aircompressor@0.3
0.27

Open the chart page →

20,837
hive-metastoregradiant-bigdataVerified publisher0.1.31 of 2See more

hive-metastore gradiant-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
aircompressor@0.3
0.27

Open the chart page →

6,882
spark-standalonegradiant-bigdataVerified publisher0.1.01 of 2See more

spark-standalone gradiant-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
gradiant/spark:2.4.4-python-alpine97657d56e927
aircompressor@0.10
0.27

Open the chart page →

6,147
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
dremio/dremio-oss:24.1.080ed2e3b7c43
aircompressor@0.10
0.27

Open the chart page →

37,671
delta-sharing-serverinseefrlab1.2.11 of 1See more

delta-sharing-server inseefrlab 1.2.1

1 of the 1 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
deltaio/delta-sharing-server:0.2.08b75118187c5
aircompressor@0.10
0.27

Open the chart page →

6,174
pinotinseefrlab0.2.01 of 2See more

pinot inseefrlab 0.2.0

1 of the 2 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
apachepinot/pinot:latest-jdk110018bb04ced7
aircompressor@0.10
0.27

Open the chart page →

10,777
miot-modulithmicroboxlabs0.6.01 of 1See more

miot-modulith microboxlabs 0.6.0

1 of the 1 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
ghcr.io/microboxlabs/miot-srv:latest5796553b41ae
aircompressor@0.20
0.27

Open the chart page →

1,414
modulariotmicroboxlabs0.9.01 of 4See more

modulariot microboxlabs 0.9.0

1 of the 4 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
ghcr.io/microboxlabs/miot-srv:latest4ec11d229028
aircompressor@0.20
0.27

Open the chart page →

2,256
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
aircompressor@0.20
0.27

Open the chart page →

25,933
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
aircompressor@0.20
0.27

Open the chart page →

15,675
hive-metastoreolehrgfVerified publisher0.1.01 of 1See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
aircompressor@0.8
0.27

Open the chart page →

8,540
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
aircompressor@0.20
0.27

Open the chart page →

9,005
hive-metastorepresto-loadbalancer0.2.31 of 1See more

hive-metastore presto-loadbalancer 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
datappeal/hive-metastore:lateste38c085a3567
aircompressor@0.8
0.27

Open the chart page →

9,606
shenyushenyu0.6.31 of 2See more

shenyu shenyu 0.6.3

1 of the 2 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
apache/shenyu-bootstrap:2.5.11bd5756f6273
aircompressor@0.20
0.27

Open the chart page →

8,804
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
aircompressor@0.21
0.27

Open the chart page →

13,767
drillwearefrank1.3.61 of 3See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2024-36114.

Container imageDigestPackageFixed in
apache/drill:1.21.11f96558fd292
aircompressor@0.10
0.27

Open the chart page →

9,397

Container images carrying it

44 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
bde2020/hive:2.3.2-postgresql-metastore620267768985
aircompressor@0.3
0.27
4
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
aircompressor@0.20
0.27
2
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
aircompressor@0.20
0.27
2
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
aircompressor@0.20
0.27
2
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
aircompressor@0.20
0.27
2
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
aircompressor@0.20
0.27
2
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
aircompressor@0.3
0.27
2
gradiant/spark:2.4.4-python-alpine97657d56e927
aircompressor@0.10
0.27
2
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
aircompressor@0.10
0.27
1
apache/drill:1.21.11f96558fd292
aircompressor@0.10
0.27
1
apache/druid:29.0.10cef139b6bf1
aircompressor@0.21
0.27
1
apachepinot/pinot:latest-jdk110018bb04ced7
aircompressor@0.10
0.27
1
apachepulsar/pulsar:3.1.016f9fdab3fa6
aircompressor@0.20
0.27
1
apachepulsar/pulsar:2.10.03b262ab7a7d9
aircompressor@0.20
0.27
1
apachepulsar/pulsar:2.6.14db6ff0b4045
aircompressor@0.16
0.27
1
apachepulsar/pulsar:2.9.0d056c89b7131
aircompressor@0.20
0.27
1
apachepulsar/pulsar:2.8.2d538416d5afe
aircompressor@0.20
0.27
1
apache/ranger:2.7.076c176e8a0e4
aircompressor@0.10
0.27
1
apache/shenyu-bootstrap:2.5.11bd5756f6273
aircompressor@0.20
0.27
1
bivas/presto:0.19605545994f806
aircompressor@0.9
0.27
1
datappeal/hive-metastore:lateste38c085a3567
aircompressor@0.8
0.27
1
dbanda/livy:0.80ca125e68e53
aircompressor@0.10
0.27
1
dbanda/spark:2.4.6d0e6367876ae
aircompressor@0.10
0.27
1
deltaio/delta-sharing-server:0.2.08b75118187c5
aircompressor@0.10
0.27
1
dremio/dremio-oss:24.1.080ed2e3b7c43
aircompressor@0.10
0.27
1
fimperato/sparkvid-api:1.0.5-RELEASE604012b77841
aircompressor@0.10
0.27
1
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
aircompressor@0.20
0.27
1
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
aircompressor@0.20
0.27
1
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
aircompressor@0.20
0.27
1
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
aircompressor@0.20
0.27
1
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
aircompressor@0.20
0.27
1
hazelcast/hazelcast:5.3.18fe26efde8e1
aircompressor@0.21
0.27
1
jingking/geonetwork-hnap:4.2.843e74ab234e1
aircompressor@0.20
0.27
1
library/storm:2.4.0bd5d420506d6
aircompressor@0.3
0.27
1
lightbend/spark-history-server:2.4.00bedf37f428a
aircompressor@0.10
0.27
1
opensearchproject/data-prepper:2.8.057c25fa01d3c
aircompressor@0.26
0.27
1
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
aircompressor@0.8
0.27
1
sslhep/hive-metastore:3.1.39e80af083079
aircompressor@0.10
0.27
1
trinodb/trino:405ee80ab5eeab2
aircompressor@0.21
0.27
1
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
aircompressor@0.20
0.27
1
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
aircompressor@0.8
0.27
1
ghcr.io/microboxlabs/miot-srv:latest4ec11d229028
aircompressor@0.20
0.27
1
ghcr.io/microboxlabs/miot-srv:latest5796553b41ae
aircompressor@0.20
0.27
1
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
aircompressor@0.10
0.27
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.