StackRadar

CVE-2024-47554

High

Advisory

Published 3 Oct 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.013
69th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
355
of 17,781 indexed, latest versions
Container images
389
deployed by those charts
Fix available
1 of 1
affected package

Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader

Carried by container images the latest versions of 355 of 17,781 indexed charts deploy, on 389 images.

Affected packageAffected versionsFixed inImages
commons-iomaven2.0, 2.1, 2.2, 2.3+10 more2.14.0389
OSV records
GHSA-78wr-2p64-hpwj

Charts affected

355 by stars
ChartLatestAffected imagesRadar Score
hivegradiant-bigdataVerified publisher0.1.64 of 5See more

hive gradiant-bigdata 0.1.6

4 of the 5 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
commons-io@2.4
2.14.0
gradiant/hdfs:2.7.73b28784ba41f
commons-io@2.4
2.14.0
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
commons-io@2.4
2.14.0
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
commons-io@2.6
2.14.0

Open the chart page →

20,837
hive-metastoregradiant-bigdataVerified publisher0.1.31 of 2See more

hive-metastore gradiant-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
commons-io@2.4
2.14.0

Open the chart page →

6,882
opentsdbgradiant-bigdataVerified publisher0.1.74 of 6See more

opentsdb gradiant-bigdata 0.1.7

4 of the 6 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
commons-io@2.5
2.14.0
gradiant/hdfs:2.7.73b28784ba41f
commons-io@2.4
2.14.0
gradiant/opentsdb:2.4.0c33d53913869
commons-io@2.4
2.14.0
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
commons-io@2.6
2.14.0

Open the chart page →

17,511
spark-standalonegradiant-bigdataVerified publisher0.1.01 of 2See more

spark-standalone gradiant-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
gradiant/spark:2.4.4-python-alpine97657d56e927
commons-io@2.4
2.14.0

Open the chart page →

6,147
gravitino-iceberg-rest-server-helmgravitino-iceberg-rest-server1.3.111 of 1See more

gravitino-iceberg-rest-server-helm gravitino-iceberg-rest-server 1.3.11

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
apache/gravitino-iceberg-rest:1.3.080136ae753ee
commons-io@2.8.0
2.14.0

Open the chart page →

4,556
siembolgresearch0.1.61 of 4See more

siembol gresearch 0.1.6

1 of the 4 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
gresearchdev/siembol-config-editor-rest:latest91863a50afb7
commons-io@2.11.0
2.14.0

Open the chart page →

14,312
ubooquityhalkeye0.1.11 of 1See more

ubooquity halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
linuxserver/ubooquity:2.1.2-ls369932d6759112
commons-io@2.5
2.14.0

Open the chart page →

4,303
hapi-fhirhapi-fhirVerified publisher0.1.01 of 1See more

hapi-fhir hapi-fhir 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
polyakov/hapi-fhir-jpaserver-example:latestdbcef69146b8
commons-io@2.5
2.14.0

Open the chart page →

6,362
hazelcast-jethazelcastVerified publisher1.17.11 of 1See more

hazelcast-jet hazelcast 1.17.1

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
hazelcast/hazelcast-jet:4.5.3a825ecbe9fda
commons-io@2.7
2.14.0

Open the chart page →

6,102
hbasehbase0.1.72 of 4See more

hbase hbase 0.1.7

2 of the 4 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
ghcr.io/fleeksoft/hbase/hbase-base:2.4.13.2c144bdd688d7
commons-io@2.11.0
2.14.0
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
commons-io@2.8.0
2.14.0

Open the chart page →

10,540
nacosheidaodageshiwoVerified publisher0.1.51 of 1See more

nacos heidaodageshiwo 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
nacos/nacos-server:v2.1.0dcf04549c6d7
commons-io@2.7
2.14.0

Open the chart page →

3,978
metabasehelm-charts-nr0.14.41 of 1See more

metabase helm-charts-nr 0.14.4

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
metabase/metabase:v0.45.21fb334ce4820
commons-io@2.11.0
2.14.0

Open the chart page →

2,572
wiremockhelm-charts-nr1.4.61 of 2See more

wiremock helm-charts-nr 1.4.6

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
rodolpheche/wiremock:2.26.03be08a386092
commons-io@2.2
2.14.0

Open the chart page →

2,140
cruise-controlhelm-cruise-controlVerified publisher2.1.11 of 2See more

cruise-control helm-cruise-control 2.1.1

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/kafka-cruise-control:jdk17-cc2.5.146-iam2.3.8e310642de2e2
commons-io@2.11.0
2.14.0

Open the chart page →

1,453
druidhelmforgeVerified publisher1.3.61 of 4See more

druid helmforge 1.3.6

1 of the 4 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
commons-io@2.8.0
2.14.0

Open the chart page →

8,541
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
openbas/platform:2.0.5d986d80b0a75
commons-io@2.8.0
2.14.0

Open the chart page →

25,017
heronheron0.20.5-incubating1 of 2See more

heron heron 0.20.5-incubating

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
apache/bookkeeper:4.14.5a7d9970c148f
commons-io@2.7
2.14.0

Open the chart page →

1,449
eoloplanthttpd-eoloplant0.1.01 of 7See more

eoloplant httpd-eoloplant 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
commons-io@2.6
2.14.0

Open the chart page →

32,205
prometheushuangchengwu-helm-chart0.1.01 of 3See more

prometheus huangchengwu-helm-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:9.2.0133d35d2c263
commons-io@2.7
2.14.0

Open the chart page →

16,401
skywalking-v1huangchengwu-helm-chart0.1.01 of 4See more

skywalking-v1 huangchengwu-helm-chart 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.9.1b4ec8c18d079
commons-io@2.6
2.14.0

Open the chart page →

20,650
mvfi4trustVerified publisher1.1.21 of 1See more

mvf i4trust 1.1.2

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
wistefan/mvf:lateste0887302b2d8
commons-io@2.11.0
2.14.0

Open the chart page →

7,144
vcwaltidi4trustVerified publisher0.0.191 of 1See more

vcwaltid i4trust 0.0.19

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
commons-io@2.11.0
2.14.0

Open the chart page →

7,862
ibm-business-automation-insights-devibm-charts3.2.01 of 6See more

ibm-business-automation-insights-dev ibm-charts 3.2.0

1 of the 6 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
ibmcom/bai-flink-dev:19.0.2e31ff09e8aad
commons-io@2.4
2.14.0

Open the chart page →

39,349
ibm-kerify-devibm-charts1.0.01 of 1See more

ibm-kerify-dev ibm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
ibmcom/icp-sert-bats:3.2.0b558f2b444ae
commons-io@2.6
2.14.0

Open the chart page →

8,221
ibm-microclimateibm-charts0.1.03 of 8See more

ibm-microclimate ibm-charts 0.1.0

3 of the 8 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
commons-io@2.2
2.14.0
ibmcom/microclimate-portal:latested5505e5c7ec
commons-io@2.5
2.14.0
ibmcom/microclimate-theia:lateste17bdccc5030
commons-io@2.2
2.14.0

Open the chart page →

57,669
eoloserverihuertas2021-vmartinp2021-helm0.1.01 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
huertaslopez/i.huertas.2021-v.martinp.2021-planner:2.0.0e2c18bd65472
commons-io@2.6
2.14.0

Open the chart page →

27,721
ikigaiikigai-chartVerified publisher0.0.92 of 58See more

ikigai ikigai-chart 0.0.9

2 of the 58 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
dremio/dremio-oss:24.1.080ed2e3b7c43
commons-io@2.11.0
2.14.0
library/zookeeper:3.8-temurin55d1e5b2e601
commons-io@2.11.0
2.14.0

Open the chart page →

37,671
freeipaimprowisedVerified publisher0.4.11 of 1See more

freeipa improwised 0.4.1

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
freeipa/freeipa-server:fedora-37-4.10.1c87d77342bf5
commons-io@2.11.0
2.14.0

Open the chart page →

1,218
delta-sharing-serverinseefrlab1.2.11 of 1See more

delta-sharing-server inseefrlab 1.2.1

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
deltaio/delta-sharing-server:0.2.08b75118187c5
commons-io@2.4
2.14.0

Open the chart page →

6,174
openrefineinseefrlab3.5.01 of 1See more

openrefine inseefrlab 3.5.0

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
easypi/openrefine:3.7.0d2950a36a576
commons-io@2.11.0
2.14.0

Open the chart page →

1,754
pinotinseefrlab0.2.01 of 2See more

pinot inseefrlab 0.2.0

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
apachepinot/pinot:latest-jdk110018bb04ced7
commons-io@2.11.0
2.14.0

Open the chart page →

10,777
itm-mqtt-brokerintelVerified publisher1.0.01 of 1See more

itm-mqtt-broker intel 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
hivemq/hivemq4:dns-4.5.144d194450d48e
commons-io@2.11.0
2.14.0

Open the chart page →

2,653
thehiveittrident-oss0.1.01 of 6See more

thehive ittrident-oss 0.1.0

1 of the 6 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
thehiveproject/cortex:3.1.7f4bc64fb8844
commons-io@2.5
2.14.0

Open the chart page →

6,122
jenkinsjenkins-x0.10.381 of 2See more

jenkins jenkins-x 0.10.38

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
jenkinsci/jenkins:2.67a1f33f004659
commons-io@2.4
2.14.0

Open the chart page →

10,682
nexusjenkins-x0.1.371 of 1See more

nexus jenkins-x 0.1.37

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
commons-io@2.6
2.14.0

Open the chart page →

12,856
kadeck-webkadeck0.6.01 of 1See more

kadeck-web kadeck 0.6.0

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
xeotek/kadeck:4.2.94c6b04d9ce55
commons-io@2.11.0
2.14.0

Open the chart page →

7,254
allurekfirfer0.1.81 of 2See more

allure kfirfer 0.1.8

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.21.08a4d7e9308de
commons-io@2.11.0
2.14.0

Open the chart page →

12,527
kron-aapm-agentkron-aapm-agent1.1.01 of 1See more

kron-aapm-agent kron-aapm-agent 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
krontechnology/aapm-agent:1.1.07feef7d2ab42
commons-io@2.5
2.14.0

Open the chart page →

8,884
dinsrokronkltdVerified publisher0.1.71 of 2See more

dinsro kronkltd 0.1.7

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
duck1123/dinsro:latest9568c5961d5d
commons-io@2.10.0
2.14.0

Open the chart page →

1,628
tapm-componentkubebb5.7.11 of 3See more

tapm-component kubebb 5.7.1

1 of the 3 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
refar/apm-api:v5.7.1241373fa2972
commons-io@2.2
2.14.0

Open the chart page →

10,264
sonarqubekubesphereVerified publisher6.7.01 of 3See more

sonarqube kubesphere 6.7.0

1 of the 3 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
library/sonarqube:8.9-communityeb2f0be32efd
commons-io@2.8.0
2.14.0

Open the chart page →

2,273
nacoskubesphere-testVerified publisher0.1.11 of 1See more

nacos kubesphere-test 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
nacos/nacos-server:1.4.1fe6e5688cdf3
commons-io@2.2
2.14.0

Open the chart page →

4,153
penpotkubitodevVerified publisher1.2.11 of 5See more

penpot kubitodev 1.2.1

1 of the 5 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
penpotapp/exporter:2.2.15c835ffd87ab
commons-io@2.5
2.14.0

Open the chart page →

16,877
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
ladeit/ladeit:latest962b665ffe82
commons-io@2.4
2.14.0

Open the chart page →

26,356
wiremocklebenitzaVerified publisher0.3.11 of 1See more

wiremock lebenitza 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
rodolpheche/wiremock:2.27.22328a9fce2bf
commons-io@2.2
2.14.0

Open the chart page →

2,427
elastictranscoderluiscajl0.46.03 of 4See more

elastictranscoder luiscajl 0.46.0

3 of the 4 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
elastictranscoder/media:627e21dc963ab3858c6b
commons-io@2.7
2.14.0
elastictranscoder/media-storage:f6d861a026208b8c2359
commons-io@2.7
2.14.0
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
commons-io@2.7
2.14.0

Open the chart page →

58,160
filebot-botluiscajl0.0.111 of 1See more

filebot-bot luiscajl 0.0.11

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
lavandadelpatio/filebot-bot:0.0.1-SNAPSHOTd2cba20aa4d8
commons-io@2.8.0
2.14.0

Open the chart page →

3,679
lavandaluiscajl0.0.1341 of 5See more

lavanda luiscajl 0.0.134

1 of the 5 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
lavandadelpatio/tmdb:0.0.2f36af885e915
commons-io@2.2
2.14.0

Open the chart page →

18,248
torznab-atomohdluiscajl0.0.31 of 1See more

torznab-atomohd luiscajl 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
lavandadelpatio/torznab-atomohd:latest214eaef5444c
commons-io@2.11.0
2.14.0

Open the chart page →

3,290
eoloplantmca-eoloplaner0.1.01 of 7See more

eoloplant mca-eoloplaner 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
hugohg34/planner:0.0.2171f61e8d7e2
commons-io@2.6
2.14.0

Open the chart page →

29,588

Container images carrying it

389 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/fiware/credentials-config-service:3.4.3f2fbced76da8
commons-io@2.11.0
2.14.0
1
quay.io/fiware/endpoint-configuration-service:0.4.30dc38a87b844
commons-io@2.6
2.14.0
1
quay.io/fiware/tmforum-account:1.18.06b25aac03414
commons-io@2.11.0
2.14.0
1
quay.io/fiware/tmforum-agreement:1.18.081e7025dc16d
commons-io@2.11.0
2.14.0
1
quay.io/fiware/tmforum-customer-bill-management:1.18.0dee901f1f75d
commons-io@2.11.0
2.14.0
1
quay.io/fiware/tmforum-customer-management:1.18.0d3519cebecd0
commons-io@2.11.0
2.14.0
1
quay.io/fiware/tmforum-party-catalog:1.18.07d6969a7393a
commons-io@2.11.0
2.14.0
1
quay.io/fiware/tmforum-party-role:1.18.052db89f17863
commons-io@2.11.0
2.14.0
1
quay.io/fiware/tmforum-product-catalog:1.18.0e409338726da
commons-io@2.11.0
2.14.0
1
quay.io/fiware/tmforum-product-inventory:1.18.03a5d6dd30f1d
commons-io@2.11.0
2.14.0
1
quay.io/fiware/tmforum-product-ordering-management:1.18.042c81c291f6f
commons-io@2.11.0
2.14.0
1
quay.io/fiware/tmforum-quote:1.18.0d9ca3a334352
commons-io@2.11.0
2.14.0
1
quay.io/fiware/tmforum-resource-catalog:1.18.0b0d853627c59
commons-io@2.11.0
2.14.0
1
quay.io/fiware/tmforum-resource-function-activation:1.18.062a5acb63fd1
commons-io@2.11.0
2.14.0
1
quay.io/fiware/tmforum-resource-inventory:1.18.0553b4a47730b
commons-io@2.11.0
2.14.0
1
quay.io/fiware/tmforum-resource-order-management:1.18.0dd1778ad6203
commons-io@2.11.0
2.14.0
1
quay.io/fiware/tmforum-service-catalog:1.18.074b0fad9e155
commons-io@2.11.0
2.14.0
1
quay.io/fiware/tmforum-service-inventory:1.18.04be54e8cb5c0
commons-io@2.11.0
2.14.0
1
quay.io/fiware/tmforum-service-order-management:1.18.0d2091785d544
commons-io@2.11.0
2.14.0
1
quay.io/fiware/tmforum-software-management:1.18.01b74a2f7ba67
commons-io@2.11.0
2.14.0
1
quay.io/fiware/tmforum-usage-management:1.18.042f190c42926
commons-io@2.11.0
2.14.0
1
quay.io/fiware/trusted-issuers-registry:0.11.1a8a9ec461034
commons-io@2.6
2.14.0
1
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
commons-io@2.11.0
2.14.0
1
quay.io/freeipa/freeipa-server:fedora-39-4.11.1d422ee50c2c3
commons-io@2.11.0
2.14.0
1
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
commons-io@2.8.0
2.14.0
1
quay.io/keycloak/keycloak:23.0.34f72a5b0c076
commons-io@2.13.0
2.14.0
1
quay.io/keycloak/keycloak:20.0.18830f76112b6
commons-io@2.7
2.14.0
1
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
commons-io@2.7
2.14.0
1
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
commons-io@2.7
2.14.0
1
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
commons-io@2.6
2.14.0
1
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
commons-io@2.6
2.14.0
1
quay.io/opsmxpublic/ubi8-gate:isd-spin-2025.10.01-5c720954-2025112608102b3554029737
commons-io@2.8.0
2.14.0
1
quay.io/opsmxpublic/ubi8-oes-audit-client:isd-spin-2025.10.01-cb1bfce-20251126103732a5b1887eab
commons-io@2.11.0
2.14.0
1
quay.io/opsmxpublic/ubi8-oes-platform:isd-spin-2025.10.01-a7c191ec-2025112611228ed603ab7417
commons-io@2.11.0
2.14.0
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
commons-io@2.5
2.14.0
1
quay.io/seamware/consent-facade:0.0.14be844c750c7e
commons-io@2.11.0
2.14.0
1
quay.io/snowdrop/spring-boot-rest-http-example:2.7b1a054613715
commons-io@2.5
2.14.0
1
quay.io/strimzi/operator:0.45.158c727cd2e68
commons-io@2.11.0
2.14.0
1
quay.io/wi_stefan/dss-validation-service:0.0.18e928db29ee1
commons-io@2.6
2.14.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.