StackRadar

CVE-2024-47554

High

Advisory

Published 3 Oct 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.013
69th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
355
of 17,781 indexed, latest versions
Container images
389
deployed by those charts
Fix available
1 of 1
affected package

Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader

Carried by container images the latest versions of 355 of 17,781 indexed charts deploy, on 389 images.

Affected packageAffected versionsFixed inImages
commons-iomaven2.0, 2.1, 2.2, 2.3+10 more2.14.0389
OSV records
GHSA-78wr-2p64-hpwj

Charts affected

355 by stars
ChartLatestAffected imagesRadar Score
resource-processormicroservices-learningVerified publisher1.2.01 of 1See more

resource-processor microservices-learning 1.2.0

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
maksimkavalenka/microservices-learning.resource-processor:latest64a25afb8748
commons-io@2.11.0
2.14.0

Open the chart page →

3,683
resource-servicemicroservices-learningVerified publisher1.5.01 of 2See more

resource-service microservices-learning 1.5.0

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
maksimkavalenka/microservices-learning.resource-service:latest13ad9bb170a0
commons-io@2.11.0
2.14.0

Open the chart page →

5,129
alluremidokura-communityVerified publisher0.1.31 of 2See more

allure midokura-community 0.1.3

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.19.0cafa03b94dac
commons-io@2.11.0
2.14.0

Open the chart page →

12,847
unifimidokura-communityVerified publisher0.0.61 of 1See more

unifi midokura-community 0.0.6

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:7.3.83ab105cc50322
commons-io@2.11.0
2.14.0

Open the chart page →

11,188
pulsarv2milvus-helm2.7.81 of 4See more

pulsarv2 milvus-helm 2.7.8

1 of the 4 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
commons-io@2.5
2.14.0

Open the chart page →

15,855
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
mintproject/model-catalog-endpoint:29256555a6fbaefae4729d5cd259564708a4ab04ffbb13f20465
commons-io@2.6
2.14.0

Open the chart page →

43,341
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
opensearchproject/opensearch:1.1.0967d7f57f72f
commons-io@2.7
2.14.0

Open the chart page →

10,603
standard-application-stackmintel11.4.01 of 12See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
opensearchproject/opensearch:1.1.0967d7f57f72f
commons-io@2.7
2.14.0

Open the chart page →

10,603
mitre-siphonmitre-siphon0.2.91 of 4See more

mitre-siphon mitre-siphon 0.2.9

1 of the 4 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/mitre-siphon:main503c00321502
commons-io@2.4
2.14.0

Open the chart page →

3,083
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
commons-io@2.8.0
2.14.0

Open the chart page →

25,933
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
commons-io@2.8.0
2.14.0

Open the chart page →

15,675
my-app-namemy-app-name0.0.21 of 1See more

my-app-name my-app-name 0.0.2

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
viniciusfcf/gitops-quarkus-app-jvm:latestbba8ee1b5cd5
commons-io@2.6
2.14.0

Open the chart page →

9,149
Practica_4_helmmy-heml-appVerified publisher0.1.01 of 7See more

Practica_4_helm my-heml-app 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
adagber/planner:v1.0e5c1ed097752
commons-io@2.6
2.14.0

Open the chart page →

27,721
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
commons-io@2.6
2.14.0

Open the chart page →

55,726
neo4jneo4j-helm-old4.3.2-11 of 1See more

neo4j neo4j-helm-old 4.3.2-1

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
library/neo4j:4.3.2-enterprise56a9453c4064
commons-io@2.9.0
2.14.0

Open the chart page →

2,640
ma1sdnetsocVerified publisher0.2.11 of 1See more

ma1sd netsoc 0.2.1

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
ma1uta/ma1sd:2.5.0ee2a56d8b8ca
commons-io@2.8.0
2.14.0

Open the chart page →

3,582
file-system-ms-helm-chartnotesprojectchart0.1.01 of 2See more

file-system-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
vlebediantsev/file-system-ms-final:latest10393a89b4a8
commons-io@2.11.0
2.14.0

Open the chart page →

5,875
logic-ms-helm-chartnotesprojectchart0.1.01 of 2See more

logic-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
vlebediantsev/logic-ms:latestdf8bf38c535b
commons-io@2.11.0
2.14.0

Open the chart page →

6,852
registration-ms-helm-chartnotesprojectchart0.1.01 of 2See more

registration-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-final:latest427af418b75e
commons-io@2.11.0
2.14.0

Open the chart page →

5,916
user-data-ms-helm-chartnotesprojectchart0.1.01 of 2See more

user-data-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
vlebediantsev/user-data-ms-final-final:latest9319437f3c8f
commons-io@2.11.0
2.14.0

Open the chart page →

5,873
zookeeper-helm-chartnotesprojectchart0.1.01 of 1See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
commons-io@2.4
2.14.0

Open the chart page →

41,427
dependency-tracknovum-rgi-charts0.1.81 of 2See more

dependency-track novum-rgi-charts 0.1.8

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
owasp/dependency-track:3.8.0efc65e702ee1
commons-io@2.6
2.14.0

Open the chart page →

3,633
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
commons-io@2.11.0
2.14.0

Open the chart page →

5,826
hive-metastoreolehrgfVerified publisher0.1.01 of 1See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
commons-io@2.8.0
2.14.0

Open the chart page →

8,540
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
commons-io@2.8.0
2.14.0

Open the chart page →

9,005
apicurioone-acre-fundVerified publisher2.3.03 of 5See more

apicurio one-acre-fund 2.3.0

3 of the 5 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
commons-io@2.13.0
2.14.0
apicurio/apicurio-studio-ui:0.2.62.Final349c845270c2
commons-io@2.13.0
2.14.0
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
commons-io@2.11.0
2.14.0

Open the chart page →

18,667
onyx-stackonyx0.3.11 of 12See more

onyx-stack onyx 0.3.1

1 of the 12 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
vespaengine/vespa:8.526.1569b160f58211
commons-io@2.8.0
2.14.0

Open the chart page →

6,338
raspberrymaticopenccuVerified publisher3.83.61 of 1See more

raspberrymatic openccu 3.83.6

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
commons-io@2.5
2.14.0

Open the chart page →

2,421
mockserveropen-charts1.1.01 of 1See more

mockserver open-charts 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
mockserver/mockserver:5.15.00f9ef78c9489
commons-io@2.8.0
2.14.0

Open the chart page →

1,257
cdn-remoteopencord0.2.41 of 3See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
commons-io@2.5
2.14.0

Open the chart page →

63,223
comacopencord1.0.01 of 9See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
omecproject/onos-progran:1.0.05715e5648aa0
commons-io@2.2
2.14.0

Open the chart page →

88,546
onosopencord3.0.21 of 1See more

onos opencord 3.0.2

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
onosproject/onos:2.2.144914a8d4b3f
commons-io@2.6
2.14.0

Open the chart page →

12,927
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
commons-io@2.2
2.14.0

Open the chart page →

38,865
voltha-infraopencord2.14.02 of 10See more

voltha-infra opencord 2.14.0

2 of the 10 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
atomix/atomix:3.1.127738ff4f5c63
commons-io@2.5
2.14.0
voltha/voltha-onos:5.1.8e038acb950d3
commons-io@2.11.0
2.14.0

Open the chart page →

41,044
sentinelopennms-helm-chartsVerified publisher0.4.01 of 2See more

sentinel opennms-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
opennms/sentinel:36.0.288869082a14f
commons-io@2.11.0
2.14.0

Open the chart page →

2,024
bpjstk-serviceopenshift1.0.02 of 6See more

bpjstk-service openshift 1.0.0

2 of the 6 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
andrianrf/backoffice-be:latest6036614803d4
commons-io@2.11.0
2.14.0
andrianrf/iso-server:latest7da47f525c7d
commons-io@2.11.0
2.14.0

Open the chart page →

34,671
redhat-springboot-restopenshift0.0.11 of 1See more

redhat-springboot-rest openshift 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
quay.io/snowdrop/spring-boot-rest-http-example:2.7b1a054613715
commons-io@2.5
2.14.0

Open the chart page →

3,063
smsf-configurationopenshift1.0.41 of 1See more

smsf-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
gurolakman/smsf-configuration:1.0.49abb3882bcbd
commons-io@2.1
2.14.0

Open the chart page →

13,607
smsf-dispatcheropenshift1.0.41 of 1See more

smsf-dispatcher openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
commons-io@2.1
2.14.0

Open the chart page →

11,738
smsf-momtopenshift1.0.41 of 1See more

smsf-momt openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
gurolakman/smsf-momt:1.0.4ce23b20a8a17
commons-io@2.1
2.14.0

Open the chart page →

13,568
smsf-registrationopenshift1.0.41 of 1See more

smsf-registration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
gurolakman/smsf-registration:1.0.4b22e746edd5d
commons-io@2.1
2.14.0

Open the chart page →

13,551
ussigw-configurationopenshift1.0.41 of 1See more

ussigw-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
commons-io@2.11.0
2.14.0

Open the chart page →

13,455
ussigw-coreopenshift1.0.41 of 1See more

ussigw-core openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
gurolakman/ussigw-core:1.0.48739565c3ea2
commons-io@2.11.0
2.14.0

Open the chart page →

13,100
openwhiskopenwhisk1.0.02 of 10See more

openwhisk openwhisk 1.0.0

2 of the 10 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
library/zookeeper:3.43882d9493d38
commons-io@2.6
2.14.0
openwhisk/invoker:1.0.0f5831ec85525
commons-io@2.6
2.14.0

Open the chart page →

36,215
dfdeweyosdfir-infrastructureVerified publisher1.0.01 of 3See more

dfdewey osdfir-infrastructure 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.12.0645d3d9390ad
commons-io@2.8.0
2.14.0

Open the chart page →

1,190
timesketchosdfir-infrastructureVerified publisher1.0.81 of 6See more

timesketch osdfir-infrastructure 1.0.8

1 of the 6 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.14.0466a49f379bb
commons-io@2.7
2.14.0

Open the chart page →

1,753
p4p40.1.01 of 7See more

p4 p4 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
commons-io@2.6
2.14.0

Open the chart page →

27,537
apache-knox-helmpfisterer-knox0.1.111 of 1See more

apache-knox-helm pfisterer-knox 0.1.11

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
farberg/apache-knox-docker:1.6.14b4a22487394
commons-io@2.8.0
2.14.0

Open the chart page →

6,237
Practica_4_helmpr04helm0.1.01 of 7See more

Practica_4_helm pr04helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
pcarrascoponce/planner:v1.0981fc482442c
commons-io@2.6
2.14.0

Open the chart page →

27,558
hive-metastorepresto-loadbalancer0.2.31 of 1See more

hive-metastore presto-loadbalancer 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
datappeal/hive-metastore:lateste38c085a3567
commons-io@2.5
2.14.0

Open the chart page →

9,606

Container images carrying it

389 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/fiware/credentials-config-service:3.4.3f2fbced76da8
commons-io@2.11.0
2.14.0
1
quay.io/fiware/endpoint-configuration-service:0.4.30dc38a87b844
commons-io@2.6
2.14.0
1
quay.io/fiware/tmforum-account:1.18.06b25aac03414
commons-io@2.11.0
2.14.0
1
quay.io/fiware/tmforum-agreement:1.18.081e7025dc16d
commons-io@2.11.0
2.14.0
1
quay.io/fiware/tmforum-customer-bill-management:1.18.0dee901f1f75d
commons-io@2.11.0
2.14.0
1
quay.io/fiware/tmforum-customer-management:1.18.0d3519cebecd0
commons-io@2.11.0
2.14.0
1
quay.io/fiware/tmforum-party-catalog:1.18.07d6969a7393a
commons-io@2.11.0
2.14.0
1
quay.io/fiware/tmforum-party-role:1.18.052db89f17863
commons-io@2.11.0
2.14.0
1
quay.io/fiware/tmforum-product-catalog:1.18.0e409338726da
commons-io@2.11.0
2.14.0
1
quay.io/fiware/tmforum-product-inventory:1.18.03a5d6dd30f1d
commons-io@2.11.0
2.14.0
1
quay.io/fiware/tmforum-product-ordering-management:1.18.042c81c291f6f
commons-io@2.11.0
2.14.0
1
quay.io/fiware/tmforum-quote:1.18.0d9ca3a334352
commons-io@2.11.0
2.14.0
1
quay.io/fiware/tmforum-resource-catalog:1.18.0b0d853627c59
commons-io@2.11.0
2.14.0
1
quay.io/fiware/tmforum-resource-function-activation:1.18.062a5acb63fd1
commons-io@2.11.0
2.14.0
1
quay.io/fiware/tmforum-resource-inventory:1.18.0553b4a47730b
commons-io@2.11.0
2.14.0
1
quay.io/fiware/tmforum-resource-order-management:1.18.0dd1778ad6203
commons-io@2.11.0
2.14.0
1
quay.io/fiware/tmforum-service-catalog:1.18.074b0fad9e155
commons-io@2.11.0
2.14.0
1
quay.io/fiware/tmforum-service-inventory:1.18.04be54e8cb5c0
commons-io@2.11.0
2.14.0
1
quay.io/fiware/tmforum-service-order-management:1.18.0d2091785d544
commons-io@2.11.0
2.14.0
1
quay.io/fiware/tmforum-software-management:1.18.01b74a2f7ba67
commons-io@2.11.0
2.14.0
1
quay.io/fiware/tmforum-usage-management:1.18.042f190c42926
commons-io@2.11.0
2.14.0
1
quay.io/fiware/trusted-issuers-registry:0.11.1a8a9ec461034
commons-io@2.6
2.14.0
1
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
commons-io@2.11.0
2.14.0
1
quay.io/freeipa/freeipa-server:fedora-39-4.11.1d422ee50c2c3
commons-io@2.11.0
2.14.0
1
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
commons-io@2.8.0
2.14.0
1
quay.io/keycloak/keycloak:23.0.34f72a5b0c076
commons-io@2.13.0
2.14.0
1
quay.io/keycloak/keycloak:20.0.18830f76112b6
commons-io@2.7
2.14.0
1
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
commons-io@2.7
2.14.0
1
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
commons-io@2.7
2.14.0
1
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
commons-io@2.6
2.14.0
1
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
commons-io@2.6
2.14.0
1
quay.io/opsmxpublic/ubi8-gate:isd-spin-2025.10.01-5c720954-2025112608102b3554029737
commons-io@2.8.0
2.14.0
1
quay.io/opsmxpublic/ubi8-oes-audit-client:isd-spin-2025.10.01-cb1bfce-20251126103732a5b1887eab
commons-io@2.11.0
2.14.0
1
quay.io/opsmxpublic/ubi8-oes-platform:isd-spin-2025.10.01-a7c191ec-2025112611228ed603ab7417
commons-io@2.11.0
2.14.0
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
commons-io@2.5
2.14.0
1
quay.io/seamware/consent-facade:0.0.14be844c750c7e
commons-io@2.11.0
2.14.0
1
quay.io/snowdrop/spring-boot-rest-http-example:2.7b1a054613715
commons-io@2.5
2.14.0
1
quay.io/strimzi/operator:0.45.158c727cd2e68
commons-io@2.11.0
2.14.0
1
quay.io/wi_stefan/dss-validation-service:0.0.18e928db29ee1
commons-io@2.6
2.14.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.