StackRadar

CVE-2024-47554

High

Advisory

Published 3 Oct 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.013
69th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
355
of 17,781 indexed, latest versions
Container images
389
deployed by those charts
Fix available
1 of 1
affected package

Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader

Carried by container images the latest versions of 355 of 17,781 indexed charts deploy, on 389 images.

Affected packageAffected versionsFixed inImages
commons-iomaven2.0, 2.1, 2.2, 2.3+10 more2.14.0389
OSV records
GHSA-78wr-2p64-hpwj

Charts affected

355 by stars
ChartLatestAffected imagesRadar Score
resource-processormicroservices-learningVerified publisher1.2.01 of 1See more

resource-processor microservices-learning 1.2.0

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
maksimkavalenka/microservices-learning.resource-processor:latest64a25afb8748
commons-io@2.11.0
2.14.0

Open the chart page →

3,683
resource-servicemicroservices-learningVerified publisher1.5.01 of 2See more

resource-service microservices-learning 1.5.0

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
maksimkavalenka/microservices-learning.resource-service:latest13ad9bb170a0
commons-io@2.11.0
2.14.0

Open the chart page →

5,129
alluremidokura-communityVerified publisher0.1.31 of 2See more

allure midokura-community 0.1.3

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.19.0cafa03b94dac
commons-io@2.11.0
2.14.0

Open the chart page →

12,847
unifimidokura-communityVerified publisher0.0.61 of 1See more

unifi midokura-community 0.0.6

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:7.3.83ab105cc50322
commons-io@2.11.0
2.14.0

Open the chart page →

11,188
pulsarv2milvus-helm2.7.81 of 4See more

pulsarv2 milvus-helm 2.7.8

1 of the 4 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
commons-io@2.5
2.14.0

Open the chart page →

15,855
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
mintproject/model-catalog-endpoint:29256555a6fbaefae4729d5cd259564708a4ab04ffbb13f20465
commons-io@2.6
2.14.0

Open the chart page →

43,341
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
opensearchproject/opensearch:1.1.0967d7f57f72f
commons-io@2.7
2.14.0

Open the chart page →

10,603
standard-application-stackmintel11.4.01 of 12See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
opensearchproject/opensearch:1.1.0967d7f57f72f
commons-io@2.7
2.14.0

Open the chart page →

10,603
mitre-siphonmitre-siphon0.2.91 of 4See more

mitre-siphon mitre-siphon 0.2.9

1 of the 4 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/mitre-siphon:main503c00321502
commons-io@2.4
2.14.0

Open the chart page →

3,083
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
commons-io@2.8.0
2.14.0

Open the chart page →

25,933
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
commons-io@2.8.0
2.14.0

Open the chart page →

15,675
my-app-namemy-app-name0.0.21 of 1See more

my-app-name my-app-name 0.0.2

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
viniciusfcf/gitops-quarkus-app-jvm:latestbba8ee1b5cd5
commons-io@2.6
2.14.0

Open the chart page →

9,149
Practica_4_helmmy-heml-appVerified publisher0.1.01 of 7See more

Practica_4_helm my-heml-app 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
adagber/planner:v1.0e5c1ed097752
commons-io@2.6
2.14.0

Open the chart page →

27,721
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
commons-io@2.6
2.14.0

Open the chart page →

55,726
neo4jneo4j-helm-old4.3.2-11 of 1See more

neo4j neo4j-helm-old 4.3.2-1

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
library/neo4j:4.3.2-enterprise56a9453c4064
commons-io@2.9.0
2.14.0

Open the chart page →

2,640
ma1sdnetsocVerified publisher0.2.11 of 1See more

ma1sd netsoc 0.2.1

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
ma1uta/ma1sd:2.5.0ee2a56d8b8ca
commons-io@2.8.0
2.14.0

Open the chart page →

3,582
file-system-ms-helm-chartnotesprojectchart0.1.01 of 2See more

file-system-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
vlebediantsev/file-system-ms-final:latest10393a89b4a8
commons-io@2.11.0
2.14.0

Open the chart page →

5,875
logic-ms-helm-chartnotesprojectchart0.1.01 of 2See more

logic-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
vlebediantsev/logic-ms:latestdf8bf38c535b
commons-io@2.11.0
2.14.0

Open the chart page →

6,852
registration-ms-helm-chartnotesprojectchart0.1.01 of 2See more

registration-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-final:latest427af418b75e
commons-io@2.11.0
2.14.0

Open the chart page →

5,916
user-data-ms-helm-chartnotesprojectchart0.1.01 of 2See more

user-data-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
vlebediantsev/user-data-ms-final-final:latest9319437f3c8f
commons-io@2.11.0
2.14.0

Open the chart page →

5,873
zookeeper-helm-chartnotesprojectchart0.1.01 of 1See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
commons-io@2.4
2.14.0

Open the chart page →

41,427
dependency-tracknovum-rgi-charts0.1.81 of 2See more

dependency-track novum-rgi-charts 0.1.8

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
owasp/dependency-track:3.8.0efc65e702ee1
commons-io@2.6
2.14.0

Open the chart page →

3,633
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
commons-io@2.11.0
2.14.0

Open the chart page →

5,826
hive-metastoreolehrgfVerified publisher0.1.01 of 1See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
commons-io@2.8.0
2.14.0

Open the chart page →

8,540
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
commons-io@2.8.0
2.14.0

Open the chart page →

9,005
apicurioone-acre-fundVerified publisher2.3.03 of 5See more

apicurio one-acre-fund 2.3.0

3 of the 5 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
commons-io@2.13.0
2.14.0
apicurio/apicurio-studio-ui:0.2.62.Final349c845270c2
commons-io@2.13.0
2.14.0
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
commons-io@2.11.0
2.14.0

Open the chart page →

18,667
onyx-stackonyx0.3.11 of 12See more

onyx-stack onyx 0.3.1

1 of the 12 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
vespaengine/vespa:8.526.1569b160f58211
commons-io@2.8.0
2.14.0

Open the chart page →

6,338
raspberrymaticopenccuVerified publisher3.83.61 of 1See more

raspberrymatic openccu 3.83.6

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
commons-io@2.5
2.14.0

Open the chart page →

2,421
mockserveropen-charts1.1.01 of 1See more

mockserver open-charts 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
mockserver/mockserver:5.15.00f9ef78c9489
commons-io@2.8.0
2.14.0

Open the chart page →

1,257
cdn-remoteopencord0.2.41 of 3See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
commons-io@2.5
2.14.0

Open the chart page →

63,223
comacopencord1.0.01 of 9See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
omecproject/onos-progran:1.0.05715e5648aa0
commons-io@2.2
2.14.0

Open the chart page →

88,546
onosopencord3.0.21 of 1See more

onos opencord 3.0.2

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
onosproject/onos:2.2.144914a8d4b3f
commons-io@2.6
2.14.0

Open the chart page →

12,927
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
commons-io@2.2
2.14.0

Open the chart page →

38,865
voltha-infraopencord2.14.02 of 10See more

voltha-infra opencord 2.14.0

2 of the 10 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
atomix/atomix:3.1.127738ff4f5c63
commons-io@2.5
2.14.0
voltha/voltha-onos:5.1.8e038acb950d3
commons-io@2.11.0
2.14.0

Open the chart page →

41,044
sentinelopennms-helm-chartsVerified publisher0.4.01 of 2See more

sentinel opennms-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
opennms/sentinel:36.0.288869082a14f
commons-io@2.11.0
2.14.0

Open the chart page →

2,024
bpjstk-serviceopenshift1.0.02 of 6See more

bpjstk-service openshift 1.0.0

2 of the 6 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
andrianrf/backoffice-be:latest6036614803d4
commons-io@2.11.0
2.14.0
andrianrf/iso-server:latest7da47f525c7d
commons-io@2.11.0
2.14.0

Open the chart page →

34,671
redhat-springboot-restopenshift0.0.11 of 1See more

redhat-springboot-rest openshift 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
quay.io/snowdrop/spring-boot-rest-http-example:2.7b1a054613715
commons-io@2.5
2.14.0

Open the chart page →

3,063
smsf-configurationopenshift1.0.41 of 1See more

smsf-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
gurolakman/smsf-configuration:1.0.49abb3882bcbd
commons-io@2.1
2.14.0

Open the chart page →

13,607
smsf-dispatcheropenshift1.0.41 of 1See more

smsf-dispatcher openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
commons-io@2.1
2.14.0

Open the chart page →

11,738
smsf-momtopenshift1.0.41 of 1See more

smsf-momt openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
gurolakman/smsf-momt:1.0.4ce23b20a8a17
commons-io@2.1
2.14.0

Open the chart page →

13,568
smsf-registrationopenshift1.0.41 of 1See more

smsf-registration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
gurolakman/smsf-registration:1.0.4b22e746edd5d
commons-io@2.1
2.14.0

Open the chart page →

13,551
ussigw-configurationopenshift1.0.41 of 1See more

ussigw-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
commons-io@2.11.0
2.14.0

Open the chart page →

13,455
ussigw-coreopenshift1.0.41 of 1See more

ussigw-core openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
gurolakman/ussigw-core:1.0.48739565c3ea2
commons-io@2.11.0
2.14.0

Open the chart page →

13,100
openwhiskopenwhisk1.0.02 of 10See more

openwhisk openwhisk 1.0.0

2 of the 10 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
library/zookeeper:3.43882d9493d38
commons-io@2.6
2.14.0
openwhisk/invoker:1.0.0f5831ec85525
commons-io@2.6
2.14.0

Open the chart page →

36,215
dfdeweyosdfir-infrastructureVerified publisher1.0.01 of 3See more

dfdewey osdfir-infrastructure 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.12.0645d3d9390ad
commons-io@2.8.0
2.14.0

Open the chart page →

1,190
timesketchosdfir-infrastructureVerified publisher1.0.81 of 6See more

timesketch osdfir-infrastructure 1.0.8

1 of the 6 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.14.0466a49f379bb
commons-io@2.7
2.14.0

Open the chart page →

1,753
p4p40.1.01 of 7See more

p4 p4 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
commons-io@2.6
2.14.0

Open the chart page →

27,537
apache-knox-helmpfisterer-knox0.1.111 of 1See more

apache-knox-helm pfisterer-knox 0.1.11

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
farberg/apache-knox-docker:1.6.14b4a22487394
commons-io@2.8.0
2.14.0

Open the chart page →

6,237
Practica_4_helmpr04helm0.1.01 of 7See more

Practica_4_helm pr04helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
pcarrascoponce/planner:v1.0981fc482442c
commons-io@2.6
2.14.0

Open the chart page →

27,558
hive-metastorepresto-loadbalancer0.2.31 of 1See more

hive-metastore presto-loadbalancer 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
datappeal/hive-metastore:lateste38c085a3567
commons-io@2.5
2.14.0

Open the chart page →

9,606

Container images carrying it

389 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
lavandadelpatio/filebot-bot:0.0.1-SNAPSHOTd2cba20aa4d8
commons-io@2.8.0
2.14.0
1
lavandadelpatio/tmdb:0.0.2f36af885e915
commons-io@2.2
2.14.0
1
lavandadelpatio/torznab-atomohd:latest214eaef5444c
commons-io@2.11.0
2.14.0
1
library/flink:1.11.2-scala_2.121fe4fb22a2a5
commons-io@2.4
2.14.0
1
library/logstash:7.17.817a4f64e9cf5
commons-io@2.8.0
2.14.0
1
library/neo4j:4.2.4348e3f56faa2
commons-io@2.7
2.14.0
1
library/neo4j:3.4.5-enterprisea1ba477fa412
commons-io@2.6
2.14.0
1
library/neo4j:3.3.0d4eaa8484246
commons-io@2.4
2.14.0
1
library/solr:8.7.0d124efd81fbb
commons-io@2.8.0
2.14.0
1
library/sonarqube:10.7.0-community0842dcd4c8f8
commons-io@2.8.0
2.14.0
1
library/sonarqube:6.7.6-community0ae5169e3d0f
commons-io@2.4
2.14.0
1
library/sonarqube:9.1.0-datacenter-search7e43ff493a47
commons-io@2.8.0
2.14.0
1
library/sonarqube:8.9.2-community88cd63154d4b
commons-io@2.8.0
2.14.0
1
library/sonarqube:8.2-communitya246bc64207e
commons-io@2.6
2.14.0
1
library/sonarqube:9.1.0-datacenter-appa9bc5a3a1fc3
commons-io@2.8.0
2.14.0
1
library/sonarqube:8.9-communityeb2f0be32efd
commons-io@2.8.0
2.14.0
1
library/sonarqube:10.0.0-communityef9723cf4fe4
commons-io@2.8.0
2.14.0
1
library/storm:2.4.0bd5d420506d6
commons-io@2.6
2.14.0
1
library/zookeeper:3.43882d9493d38
commons-io@2.6
2.14.0
1
library/zookeeper:3.8-temurin55d1e5b2e601
commons-io@2.11.0
2.14.0
1
lightbend/cloudflow-operator:0.0.0-NIGHTLY011220202647f396de23
commons-io@2.7
2.14.0
1
lightbend/spark-history-server:2.4.00bedf37f428a
commons-io@2.4
2.14.0
1
linuxserver/unifi-controller:8.0.240ae315a3a456
commons-io@2.11.0
2.14.0
1
linuxserver/unifi-controller:7.3.83ab105cc50322
commons-io@2.11.0
2.14.0
1
liukunup/jmeter:5.59c079617a81b
commons-io@2.11.0
2.14.0
1
localstack/localstack:3.19d278167f2b7
commons-io@2.11.0
2.14.0
1
lourdesmorente/new-planner:1.0.0608745878cdb
commons-io@2.6
2.14.0
1
ma1uta/ma1sd:2.5.0ee2a56d8b8ca
commons-io@2.8.0
2.14.0
1
magento/magento-cloud-docker-opensearch:2.5-1.4.059fb6f0f1461
commons-io@2.11.0
2.14.0
1
maksimkavalenka/microservices-learning.resource-processor:latest64a25afb8748
commons-io@2.11.0
2.14.0
1
maksimkavalenka/microservices-learning.resource-service:latest13ad9bb170a0
commons-io@2.11.0
2.14.0
1
marcelmay/hadoop-hdfs-fsimage-exporter:1.3abeccb740ef7
commons-io@2.6
2.14.0
1
massimolauri/wso2is:5.11.0-centose08abf0ce767
commons-io@2.0
2.14.0
1
metabase/metabase:v0.46.09ebdc664a6b2
commons-io@2.11.0
2.14.0
1
metabase/metabase:v0.31.2ffb2dccacefc
commons-io@2.5
2.14.0
1
microcks/microcks:0.8.0e3a3e0c67b09
commons-io@2.4
2.14.0
1
mintproject/model-catalog-endpoint:29256555a6fbaefae4729d5cd259564708a4ab04ffbb13f20465
commons-io@2.6
2.14.0
1
molynx/planner:v1441c9f52f092
commons-io@2.6
2.14.0
1
muluder/prograncontrollermcord:0.1.843b597a93da7
commons-io@2.2
2.14.0
1
nacos/nacos-server:1.4.1fe6e5688cdf3
commons-io@2.2
2.14.0
1
novumrgi/glowroot-central:0.14.0-beta.38c54790675b1
commons-io@2.2
2.14.0
1
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
commons-io@2.11.0
2.14.0
1
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
commons-io@2.5
2.14.0
1
omecproject/onos-progran:1.0.05715e5648aa0
commons-io@2.2
2.14.0
1
onosproject/onos:2.2.144914a8d4b3f
commons-io@2.6
2.14.0
1
openbas/platform:2.0.5d986d80b0a75
commons-io@2.8.0
2.14.0
1
openhab/openhab:3.2.0d0aa4af452c1
commons-io@2.11.0
2.14.0
1
openkm/openkm-ce:6.3.113bc465a7461b
commons-io@2.4
2.14.0
1
opennms/sentinel:36.0.288869082a14f
commons-io@2.11.0
2.14.0
1
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
commons-io@2.13.0
2.14.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.