StackRadar

CVE-2024-47554

High

Advisory

Published 3 Oct 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.013
69th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
355
of 17,781 indexed, latest versions
Container images
389
deployed by those charts
Fix available
1 of 1
affected package

Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader

Carried by container images the latest versions of 355 of 17,781 indexed charts deploy, on 389 images.

Affected packageAffected versionsFixed inImages
commons-iomaven2.0, 2.1, 2.2, 2.3+10 more2.14.0389
OSV records
GHSA-78wr-2p64-hpwj

Charts affected

355 by stars
ChartLatestAffected imagesRadar Score
resource-processormicroservices-learningVerified publisher1.2.01 of 1See more

resource-processor microservices-learning 1.2.0

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
maksimkavalenka/microservices-learning.resource-processor:latest64a25afb8748
commons-io@2.11.0
2.14.0

Open the chart page →

3,683
resource-servicemicroservices-learningVerified publisher1.5.01 of 2See more

resource-service microservices-learning 1.5.0

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
maksimkavalenka/microservices-learning.resource-service:latest13ad9bb170a0
commons-io@2.11.0
2.14.0

Open the chart page →

5,129
alluremidokura-communityVerified publisher0.1.31 of 2See more

allure midokura-community 0.1.3

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.19.0cafa03b94dac
commons-io@2.11.0
2.14.0

Open the chart page →

12,847
unifimidokura-communityVerified publisher0.0.61 of 1See more

unifi midokura-community 0.0.6

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:7.3.83ab105cc50322
commons-io@2.11.0
2.14.0

Open the chart page →

11,188
pulsarv2milvus-helm2.7.81 of 4See more

pulsarv2 milvus-helm 2.7.8

1 of the 4 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
commons-io@2.5
2.14.0

Open the chart page →

15,855
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
mintproject/model-catalog-endpoint:29256555a6fbaefae4729d5cd259564708a4ab04ffbb13f20465
commons-io@2.6
2.14.0

Open the chart page →

43,341
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
opensearchproject/opensearch:1.1.0967d7f57f72f
commons-io@2.7
2.14.0

Open the chart page →

10,603
standard-application-stackmintel11.4.01 of 12See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
opensearchproject/opensearch:1.1.0967d7f57f72f
commons-io@2.7
2.14.0

Open the chart page →

10,603
mitre-siphonmitre-siphon0.2.91 of 4See more

mitre-siphon mitre-siphon 0.2.9

1 of the 4 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/mitre-siphon:main503c00321502
commons-io@2.4
2.14.0

Open the chart page →

3,083
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
commons-io@2.8.0
2.14.0

Open the chart page →

25,933
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
commons-io@2.8.0
2.14.0

Open the chart page →

15,675
my-app-namemy-app-name0.0.21 of 1See more

my-app-name my-app-name 0.0.2

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
viniciusfcf/gitops-quarkus-app-jvm:latestbba8ee1b5cd5
commons-io@2.6
2.14.0

Open the chart page →

9,149
Practica_4_helmmy-heml-appVerified publisher0.1.01 of 7See more

Practica_4_helm my-heml-app 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
adagber/planner:v1.0e5c1ed097752
commons-io@2.6
2.14.0

Open the chart page →

27,721
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
commons-io@2.6
2.14.0

Open the chart page →

55,726
neo4jneo4j-helm-old4.3.2-11 of 1See more

neo4j neo4j-helm-old 4.3.2-1

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
library/neo4j:4.3.2-enterprise56a9453c4064
commons-io@2.9.0
2.14.0

Open the chart page →

2,640
ma1sdnetsocVerified publisher0.2.11 of 1See more

ma1sd netsoc 0.2.1

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
ma1uta/ma1sd:2.5.0ee2a56d8b8ca
commons-io@2.8.0
2.14.0

Open the chart page →

3,582
file-system-ms-helm-chartnotesprojectchart0.1.01 of 2See more

file-system-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
vlebediantsev/file-system-ms-final:latest10393a89b4a8
commons-io@2.11.0
2.14.0

Open the chart page →

5,875
logic-ms-helm-chartnotesprojectchart0.1.01 of 2See more

logic-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
vlebediantsev/logic-ms:latestdf8bf38c535b
commons-io@2.11.0
2.14.0

Open the chart page →

6,852
registration-ms-helm-chartnotesprojectchart0.1.01 of 2See more

registration-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-final:latest427af418b75e
commons-io@2.11.0
2.14.0

Open the chart page →

5,916
user-data-ms-helm-chartnotesprojectchart0.1.01 of 2See more

user-data-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
vlebediantsev/user-data-ms-final-final:latest9319437f3c8f
commons-io@2.11.0
2.14.0

Open the chart page →

5,873
zookeeper-helm-chartnotesprojectchart0.1.01 of 1See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
commons-io@2.4
2.14.0

Open the chart page →

41,427
dependency-tracknovum-rgi-charts0.1.81 of 2See more

dependency-track novum-rgi-charts 0.1.8

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
owasp/dependency-track:3.8.0efc65e702ee1
commons-io@2.6
2.14.0

Open the chart page →

3,633
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
commons-io@2.11.0
2.14.0

Open the chart page →

5,826
hive-metastoreolehrgfVerified publisher0.1.01 of 1See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
commons-io@2.8.0
2.14.0

Open the chart page →

8,540
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
commons-io@2.8.0
2.14.0

Open the chart page →

9,005
apicurioone-acre-fundVerified publisher2.3.03 of 5See more

apicurio one-acre-fund 2.3.0

3 of the 5 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
commons-io@2.13.0
2.14.0
apicurio/apicurio-studio-ui:0.2.62.Final349c845270c2
commons-io@2.13.0
2.14.0
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
commons-io@2.11.0
2.14.0

Open the chart page →

18,667
onyx-stackonyx0.3.11 of 12See more

onyx-stack onyx 0.3.1

1 of the 12 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
vespaengine/vespa:8.526.1569b160f58211
commons-io@2.8.0
2.14.0

Open the chart page →

6,338
raspberrymaticopenccuVerified publisher3.83.61 of 1See more

raspberrymatic openccu 3.83.6

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
commons-io@2.5
2.14.0

Open the chart page →

2,421
mockserveropen-charts1.1.01 of 1See more

mockserver open-charts 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
mockserver/mockserver:5.15.00f9ef78c9489
commons-io@2.8.0
2.14.0

Open the chart page →

1,257
cdn-remoteopencord0.2.41 of 3See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
commons-io@2.5
2.14.0

Open the chart page →

63,223
comacopencord1.0.01 of 9See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
omecproject/onos-progran:1.0.05715e5648aa0
commons-io@2.2
2.14.0

Open the chart page →

88,546
onosopencord3.0.21 of 1See more

onos opencord 3.0.2

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
onosproject/onos:2.2.144914a8d4b3f
commons-io@2.6
2.14.0

Open the chart page →

12,927
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
commons-io@2.2
2.14.0

Open the chart page →

38,865
voltha-infraopencord2.14.02 of 10See more

voltha-infra opencord 2.14.0

2 of the 10 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
atomix/atomix:3.1.127738ff4f5c63
commons-io@2.5
2.14.0
voltha/voltha-onos:5.1.8e038acb950d3
commons-io@2.11.0
2.14.0

Open the chart page →

41,044
sentinelopennms-helm-chartsVerified publisher0.4.01 of 2See more

sentinel opennms-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
opennms/sentinel:36.0.288869082a14f
commons-io@2.11.0
2.14.0

Open the chart page →

2,024
bpjstk-serviceopenshift1.0.02 of 6See more

bpjstk-service openshift 1.0.0

2 of the 6 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
andrianrf/backoffice-be:latest6036614803d4
commons-io@2.11.0
2.14.0
andrianrf/iso-server:latest7da47f525c7d
commons-io@2.11.0
2.14.0

Open the chart page →

34,671
redhat-springboot-restopenshift0.0.11 of 1See more

redhat-springboot-rest openshift 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
quay.io/snowdrop/spring-boot-rest-http-example:2.7b1a054613715
commons-io@2.5
2.14.0

Open the chart page →

3,063
smsf-configurationopenshift1.0.41 of 1See more

smsf-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
gurolakman/smsf-configuration:1.0.49abb3882bcbd
commons-io@2.1
2.14.0

Open the chart page →

13,607
smsf-dispatcheropenshift1.0.41 of 1See more

smsf-dispatcher openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
commons-io@2.1
2.14.0

Open the chart page →

11,738
smsf-momtopenshift1.0.41 of 1See more

smsf-momt openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
gurolakman/smsf-momt:1.0.4ce23b20a8a17
commons-io@2.1
2.14.0

Open the chart page →

13,568
smsf-registrationopenshift1.0.41 of 1See more

smsf-registration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
gurolakman/smsf-registration:1.0.4b22e746edd5d
commons-io@2.1
2.14.0

Open the chart page →

13,551
ussigw-configurationopenshift1.0.41 of 1See more

ussigw-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
commons-io@2.11.0
2.14.0

Open the chart page →

13,455
ussigw-coreopenshift1.0.41 of 1See more

ussigw-core openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
gurolakman/ussigw-core:1.0.48739565c3ea2
commons-io@2.11.0
2.14.0

Open the chart page →

13,100
openwhiskopenwhisk1.0.02 of 10See more

openwhisk openwhisk 1.0.0

2 of the 10 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
library/zookeeper:3.43882d9493d38
commons-io@2.6
2.14.0
openwhisk/invoker:1.0.0f5831ec85525
commons-io@2.6
2.14.0

Open the chart page →

36,215
dfdeweyosdfir-infrastructureVerified publisher1.0.01 of 3See more

dfdewey osdfir-infrastructure 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.12.0645d3d9390ad
commons-io@2.8.0
2.14.0

Open the chart page →

1,190
timesketchosdfir-infrastructureVerified publisher1.0.81 of 6See more

timesketch osdfir-infrastructure 1.0.8

1 of the 6 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.14.0466a49f379bb
commons-io@2.7
2.14.0

Open the chart page →

1,753
p4p40.1.01 of 7See more

p4 p4 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
commons-io@2.6
2.14.0

Open the chart page →

27,537
apache-knox-helmpfisterer-knox0.1.111 of 1See more

apache-knox-helm pfisterer-knox 0.1.11

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
farberg/apache-knox-docker:1.6.14b4a22487394
commons-io@2.8.0
2.14.0

Open the chart page →

6,237
Practica_4_helmpr04helm0.1.01 of 7See more

Practica_4_helm pr04helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
pcarrascoponce/planner:v1.0981fc482442c
commons-io@2.6
2.14.0

Open the chart page →

27,558
hive-metastorepresto-loadbalancer0.2.31 of 1See more

hive-metastore presto-loadbalancer 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
datappeal/hive-metastore:lateste38c085a3567
commons-io@2.5
2.14.0

Open the chart page →

9,606

Container images carrying it

389 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
freeipa/freeipa-server:fedora-37-4.10.1c87d77342bf5
commons-io@2.11.0
2.14.0
1
gchq/accumulo:2.0.1c460bb587d6d
commons-io@2.6
2.14.0
1
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
commons-io@2.7
2.14.0
1
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
commons-io@2.10.0
2.14.0
1
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
commons-io@2.10.0
2.14.0
1
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
commons-io@2.10.0
2.14.0
1
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
commons-io@2.10.0
2.14.0
1
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
commons-io@2.10.0
2.14.0
1
gocd/gocd-agent-alpine-3.9:v19.3.053588bd3221f
commons-io@2.6
2.14.0
1
gocd/gocd-server:v19.3.02da45cb09d57
commons-io@2.6
2.14.0
1
gotson/komga:0.99.49b15ea6bfc30
commons-io@2.9.0
2.14.0
1
gradiant/hdfs:3.2.2e3bf364fe713
commons-io@2.5
2.14.0
1
graviteeio/am-gateway:4.12.607b7f6dc267a
commons-io@2.11.0
2.14.0
1
graviteeio/am-management-api:4.12.6a8eb04ee0c70
commons-io@2.11.0
2.14.0
1
graylog2/server:2.4.3-38ff28c66e6c1
commons-io@2.5
2.14.0
1
graylog/graylog-enterprise:7.1.88a1f641cd7aa
commons-io@2.8.0
2.14.0
1
gresearchdev/siembol-config-editor-rest:latest91863a50afb7
commons-io@2.11.0
2.14.0
1
gridgain/community:8.9.11d32d182a0e6a
commons-io@2.4
2.14.0
1
gurolakman/smsf-configuration:1.0.49abb3882bcbd
commons-io@2.1
2.14.0
1
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
commons-io@2.1
2.14.0
1
gurolakman/smsf-momt:1.0.4ce23b20a8a17
commons-io@2.1
2.14.0
1
gurolakman/smsf-registration:1.0.4b22e746edd5d
commons-io@2.1
2.14.0
1
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
commons-io@2.11.0
2.14.0
1
gurolakman/ussigw-core:1.0.48739565c3ea2
commons-io@2.11.0
2.14.0
1
hazelcast/hazelcast:5.3.18fe26efde8e1
commons-io@2.11.0
2.14.0
1
hazelcast/hazelcast-jet:4.5.3a825ecbe9fda
commons-io@2.7
2.14.0
1
hazelcast/management-center:5.3.2f9d34300d330
commons-io@2.7
2.14.0
1
hivemq/hivemq4:dns-4.5.144d194450d48e
commons-io@2.11.0
2.14.0
1
housewrecker/gaps:latestf417dd0a7547
commons-io@2.11.0
2.14.0
1
huertaslopez/i.huertas.2021-v.martinp.2021-planner:2.0.0e2c18bd65472
commons-io@2.6
2.14.0
1
hugohg34/planner:0.0.2171f61e8d7e2
commons-io@2.6
2.14.0
1
iamdorsah/bastillion:v0.1db83a0254d81
commons-io@2.2
2.14.0
1
ibmcom/bai-flink-dev:19.0.2e31ff09e8aad
commons-io@2.4
2.14.0
1
ibmcom/icp-sert-bats:3.2.0b558f2b444ae
commons-io@2.6
2.14.0
1
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
commons-io@2.2
2.14.0
1
ibmcom/microclimate-portal:latested5505e5c7ec
commons-io@2.5
2.14.0
1
ibmcom/microclimate-theia:lateste17bdccc5030
commons-io@2.2
2.14.0
1
jacobalberty/unifi:v7.1.664a3616625dda
commons-io@2.6
2.14.0
1
jacobalberty/unifi:v7.4.162b3edc809a3ff
commons-io@2.11.0
2.14.0
1
jacobalberty/unifi:5.10.19c409924e2463
commons-io@2.6
2.14.0
1
jenkinsci/jenkins:2.67a1f33f004659
commons-io@2.4
2.14.0
1
jingking/geonetwork-hnap:4.2.843e74ab234e1
commons-io@2.7
2.14.0
1
just1not2/streama:1.10.48a2305192dec
commons-io@2.4
2.14.0
1
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
commons-io@2.11.0
2.14.0
1
kafkakraft/kafka-connect:3.7.0062d697db7e5
commons-io@2.11.0
2.14.0
1
kafkakraft/kafka-controller:3.7.0f261ad288fce
commons-io@2.11.0
2.14.0
1
kafkakraft/kafkakraft:3.7.02e4b593b878b
commons-io@2.11.0
2.14.0
1
keyfactor/signserver-ce:7.3.2798fbbe00283
commons-io@2.6
2.14.0
1
krontechnology/aapm-agent:1.1.07feef7d2ab42
commons-io@2.5
2.14.0
1
ladeit/ladeit:latest962b665ffe82
commons-io@2.4
2.14.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.