StackRadar

CVE-2024-47554

High

Advisory

Published 3 Oct 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.013
69th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
355
of 17,781 indexed, latest versions
Container images
389
deployed by those charts
Fix available
1 of 1
affected package

Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader

Carried by container images the latest versions of 355 of 17,781 indexed charts deploy, on 389 images.

Affected packageAffected versionsFixed inImages
commons-iomaven2.0, 2.1, 2.2, 2.3+10 more2.14.0389
OSV records
GHSA-78wr-2p64-hpwj

Charts affected

355 by stars
ChartLatestAffected imagesRadar Score
resource-processormicroservices-learningVerified publisher1.2.01 of 1See more

resource-processor microservices-learning 1.2.0

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
maksimkavalenka/microservices-learning.resource-processor:latest64a25afb8748
commons-io@2.11.0
2.14.0

Open the chart page →

3,683
resource-servicemicroservices-learningVerified publisher1.5.01 of 2See more

resource-service microservices-learning 1.5.0

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
maksimkavalenka/microservices-learning.resource-service:latest13ad9bb170a0
commons-io@2.11.0
2.14.0

Open the chart page →

5,129
alluremidokura-communityVerified publisher0.1.31 of 2See more

allure midokura-community 0.1.3

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.19.0cafa03b94dac
commons-io@2.11.0
2.14.0

Open the chart page →

12,847
unifimidokura-communityVerified publisher0.0.61 of 1See more

unifi midokura-community 0.0.6

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:7.3.83ab105cc50322
commons-io@2.11.0
2.14.0

Open the chart page →

11,188
pulsarv2milvus-helm2.7.81 of 4See more

pulsarv2 milvus-helm 2.7.8

1 of the 4 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
commons-io@2.5
2.14.0

Open the chart page →

15,855
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
mintproject/model-catalog-endpoint:29256555a6fbaefae4729d5cd259564708a4ab04ffbb13f20465
commons-io@2.6
2.14.0

Open the chart page →

43,341
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
opensearchproject/opensearch:1.1.0967d7f57f72f
commons-io@2.7
2.14.0

Open the chart page →

10,603
standard-application-stackmintel11.4.01 of 12See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
opensearchproject/opensearch:1.1.0967d7f57f72f
commons-io@2.7
2.14.0

Open the chart page →

10,603
mitre-siphonmitre-siphon0.2.91 of 4See more

mitre-siphon mitre-siphon 0.2.9

1 of the 4 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/mitre-siphon:main503c00321502
commons-io@2.4
2.14.0

Open the chart page →

3,083
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
commons-io@2.8.0
2.14.0

Open the chart page →

25,933
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
commons-io@2.8.0
2.14.0

Open the chart page →

15,675
my-app-namemy-app-name0.0.21 of 1See more

my-app-name my-app-name 0.0.2

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
viniciusfcf/gitops-quarkus-app-jvm:latestbba8ee1b5cd5
commons-io@2.6
2.14.0

Open the chart page →

9,149
Practica_4_helmmy-heml-appVerified publisher0.1.01 of 7See more

Practica_4_helm my-heml-app 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
adagber/planner:v1.0e5c1ed097752
commons-io@2.6
2.14.0

Open the chart page →

27,721
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
commons-io@2.6
2.14.0

Open the chart page →

55,726
neo4jneo4j-helm-old4.3.2-11 of 1See more

neo4j neo4j-helm-old 4.3.2-1

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
library/neo4j:4.3.2-enterprise56a9453c4064
commons-io@2.9.0
2.14.0

Open the chart page →

2,640
ma1sdnetsocVerified publisher0.2.11 of 1See more

ma1sd netsoc 0.2.1

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
ma1uta/ma1sd:2.5.0ee2a56d8b8ca
commons-io@2.8.0
2.14.0

Open the chart page →

3,582
file-system-ms-helm-chartnotesprojectchart0.1.01 of 2See more

file-system-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
vlebediantsev/file-system-ms-final:latest10393a89b4a8
commons-io@2.11.0
2.14.0

Open the chart page →

5,875
logic-ms-helm-chartnotesprojectchart0.1.01 of 2See more

logic-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
vlebediantsev/logic-ms:latestdf8bf38c535b
commons-io@2.11.0
2.14.0

Open the chart page →

6,852
registration-ms-helm-chartnotesprojectchart0.1.01 of 2See more

registration-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-final:latest427af418b75e
commons-io@2.11.0
2.14.0

Open the chart page →

5,916
user-data-ms-helm-chartnotesprojectchart0.1.01 of 2See more

user-data-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
vlebediantsev/user-data-ms-final-final:latest9319437f3c8f
commons-io@2.11.0
2.14.0

Open the chart page →

5,873
zookeeper-helm-chartnotesprojectchart0.1.01 of 1See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
commons-io@2.4
2.14.0

Open the chart page →

41,427
dependency-tracknovum-rgi-charts0.1.81 of 2See more

dependency-track novum-rgi-charts 0.1.8

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
owasp/dependency-track:3.8.0efc65e702ee1
commons-io@2.6
2.14.0

Open the chart page →

3,633
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
commons-io@2.11.0
2.14.0

Open the chart page →

5,826
hive-metastoreolehrgfVerified publisher0.1.01 of 1See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
commons-io@2.8.0
2.14.0

Open the chart page →

8,540
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
commons-io@2.8.0
2.14.0

Open the chart page →

9,005
apicurioone-acre-fundVerified publisher2.3.03 of 5See more

apicurio one-acre-fund 2.3.0

3 of the 5 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
commons-io@2.13.0
2.14.0
apicurio/apicurio-studio-ui:0.2.62.Final349c845270c2
commons-io@2.13.0
2.14.0
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
commons-io@2.11.0
2.14.0

Open the chart page →

18,667
onyx-stackonyx0.3.11 of 12See more

onyx-stack onyx 0.3.1

1 of the 12 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
vespaengine/vespa:8.526.1569b160f58211
commons-io@2.8.0
2.14.0

Open the chart page →

6,338
raspberrymaticopenccuVerified publisher3.83.61 of 1See more

raspberrymatic openccu 3.83.6

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
commons-io@2.5
2.14.0

Open the chart page →

2,421
mockserveropen-charts1.1.01 of 1See more

mockserver open-charts 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
mockserver/mockserver:5.15.00f9ef78c9489
commons-io@2.8.0
2.14.0

Open the chart page →

1,257
cdn-remoteopencord0.2.41 of 3See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
commons-io@2.5
2.14.0

Open the chart page →

63,223
comacopencord1.0.01 of 9See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
omecproject/onos-progran:1.0.05715e5648aa0
commons-io@2.2
2.14.0

Open the chart page →

88,546
onosopencord3.0.21 of 1See more

onos opencord 3.0.2

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
onosproject/onos:2.2.144914a8d4b3f
commons-io@2.6
2.14.0

Open the chart page →

12,927
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
commons-io@2.2
2.14.0

Open the chart page →

38,865
voltha-infraopencord2.14.02 of 10See more

voltha-infra opencord 2.14.0

2 of the 10 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
atomix/atomix:3.1.127738ff4f5c63
commons-io@2.5
2.14.0
voltha/voltha-onos:5.1.8e038acb950d3
commons-io@2.11.0
2.14.0

Open the chart page →

41,044
sentinelopennms-helm-chartsVerified publisher0.4.01 of 2See more

sentinel opennms-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
opennms/sentinel:36.0.288869082a14f
commons-io@2.11.0
2.14.0

Open the chart page →

2,024
bpjstk-serviceopenshift1.0.02 of 6See more

bpjstk-service openshift 1.0.0

2 of the 6 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
andrianrf/backoffice-be:latest6036614803d4
commons-io@2.11.0
2.14.0
andrianrf/iso-server:latest7da47f525c7d
commons-io@2.11.0
2.14.0

Open the chart page →

34,671
redhat-springboot-restopenshift0.0.11 of 1See more

redhat-springboot-rest openshift 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
quay.io/snowdrop/spring-boot-rest-http-example:2.7b1a054613715
commons-io@2.5
2.14.0

Open the chart page →

3,063
smsf-configurationopenshift1.0.41 of 1See more

smsf-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
gurolakman/smsf-configuration:1.0.49abb3882bcbd
commons-io@2.1
2.14.0

Open the chart page →

13,607
smsf-dispatcheropenshift1.0.41 of 1See more

smsf-dispatcher openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
commons-io@2.1
2.14.0

Open the chart page →

11,738
smsf-momtopenshift1.0.41 of 1See more

smsf-momt openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
gurolakman/smsf-momt:1.0.4ce23b20a8a17
commons-io@2.1
2.14.0

Open the chart page →

13,568
smsf-registrationopenshift1.0.41 of 1See more

smsf-registration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
gurolakman/smsf-registration:1.0.4b22e746edd5d
commons-io@2.1
2.14.0

Open the chart page →

13,551
ussigw-configurationopenshift1.0.41 of 1See more

ussigw-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
commons-io@2.11.0
2.14.0

Open the chart page →

13,455
ussigw-coreopenshift1.0.41 of 1See more

ussigw-core openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
gurolakman/ussigw-core:1.0.48739565c3ea2
commons-io@2.11.0
2.14.0

Open the chart page →

13,100
openwhiskopenwhisk1.0.02 of 10See more

openwhisk openwhisk 1.0.0

2 of the 10 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
library/zookeeper:3.43882d9493d38
commons-io@2.6
2.14.0
openwhisk/invoker:1.0.0f5831ec85525
commons-io@2.6
2.14.0

Open the chart page →

36,215
dfdeweyosdfir-infrastructureVerified publisher1.0.01 of 3See more

dfdewey osdfir-infrastructure 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.12.0645d3d9390ad
commons-io@2.8.0
2.14.0

Open the chart page →

1,190
timesketchosdfir-infrastructureVerified publisher1.0.81 of 6See more

timesketch osdfir-infrastructure 1.0.8

1 of the 6 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.14.0466a49f379bb
commons-io@2.7
2.14.0

Open the chart page →

1,753
p4p40.1.01 of 7See more

p4 p4 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
commons-io@2.6
2.14.0

Open the chart page →

27,537
apache-knox-helmpfisterer-knox0.1.111 of 1See more

apache-knox-helm pfisterer-knox 0.1.11

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
farberg/apache-knox-docker:1.6.14b4a22487394
commons-io@2.8.0
2.14.0

Open the chart page →

6,237
Practica_4_helmpr04helm0.1.01 of 7See more

Practica_4_helm pr04helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
pcarrascoponce/planner:v1.0981fc482442c
commons-io@2.6
2.14.0

Open the chart page →

27,558
hive-metastorepresto-loadbalancer0.2.31 of 1See more

hive-metastore presto-loadbalancer 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-47554.

Container imageDigestPackageFixed in
datappeal/hive-metastore:lateste38c085a3567
commons-io@2.5
2.14.0

Open the chart page →

9,606

Container images carrying it

389 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
commons-io@2.6
2.14.0
8
gradiant/hdfs:2.7.73b28784ba41f
commons-io@2.4
2.14.0
7
bde2020/hive:2.3.2-postgresql-metastore620267768985
commons-io@2.4
2.14.0
4
gradiant/hbase-base:2.0.1a1ee6de94c04
commons-io@2.5
2.14.0
4
mastercloudapps/planner:v1.2340a950b311b2
commons-io@2.6
2.14.0
4
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
commons-io@2.4
2.14.0
3
codeurjc/planner:v1.0800cf520c245
commons-io@2.6
2.14.0
3
gchq/hdfs:3.3.35ec58edbb2db
commons-io@2.8.0
2.14.0
3
library/solr:8.11.18c5f7881cebb
commons-io@2.8.0
2.14.0
3
mockserver/mockserver:5.15.0:mockserver-5.15.00f9ef78c9489
commons-io@2.8.0
2.14.0
3
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
commons-io@2.3
2.14.0
2
apache/druid:37.0.00116fb802786
commons-io@2.8.0
2.14.0
2
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
commons-io@2.5
2.14.0
2
bitnamilegacy/zookeeper:3.9.0-debian-11-r1110ed1ea3c8d1
commons-io@2.11.0
2.14.0
2
danisla/hadoop:2.9.0255ba2dd739b
commons-io@2.4
2.14.0
2
dependencytrack/apiserver:4.6.3485ac0952c02
commons-io@2.11.0
2.14.0
2
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
commons-io@2.10.0
2.14.0
2
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
commons-io@2.10.0
2.14.0
2
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
commons-io@2.10.0
2.14.0
2
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
commons-io@2.10.0
2.14.0
2
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
commons-io@2.10.0
2.14.0
2
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
commons-io@2.4
2.14.0
2
gradiant/opentsdb:2.4.0c33d53913869
commons-io@2.4
2.14.0
2
gradiant/spark:2.4.4-python-alpine97657d56e927
commons-io@2.4
2.14.0
2
hazelcast/management-center:5.5.2991ddb27c251
commons-io@2.7
2.14.0
2
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
commons-io@2.11.0
2.14.0
2
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
commons-io@2.13.0
2.14.0
2
library/neo4j:4.3.2-enterprise56a9453c4064
commons-io@2.9.0
2.14.0
2
linuxserver/ubooquity:2.1.2-ls369932d6759112
commons-io@2.5
2.14.0
2
mbentley/omada-controller:4.3f4e682274bed
commons-io@2.2
2.14.0
2
metabase/metabase:v0.45.21fb334ce4820
commons-io@2.11.0
2.14.0
2
nacos/nacos-server:v2.1.0dcf04549c6d7
commons-io@2.7
2.14.0
2
opensearchproject/opensearch:2.1.04254021a8c71
commons-io@2.7
2.14.0
2
opensearchproject/opensearch:1.1.0967d7f57f72f
commons-io@2.7
2.14.0
2
rodolpheche/wiremock:2.26.03be08a386092
commons-io@2.2
2.14.0
2
scorpiobroker/scorpio:RegistrySubscriptionManager_2.1.001e11d800459
commons-io@2.7
2.14.0
2
scorpiobroker/scorpio:AtContextServer_2.1.05073ceef2fa0
commons-io@2.7
2.14.0
2
scorpiobroker/scorpio:RegistryManager_2.1.0a2cfcf0947fd
commons-io@2.7
2.14.0
2
scorpiobroker/scorpio:QueryManager_2.1.0b742a53b2803
commons-io@2.7
2.14.0
2
scorpiobroker/scorpio:HistoryManager_2.1.0b7fe27a06ff5
commons-io@2.7
2.14.0
2
scorpiobroker/scorpio:SubscriptionManager_2.1.0e08036670d66
commons-io@2.7
2.14.0
2
scorpiobroker/scorpio:EntityManager_2.1.0f02e8a429a08
commons-io@2.7
2.14.0
2
stakater/stakater-nordmart-review:1.0.35954d2be66e95
commons-io@2.6
2.14.0
2
wurstmeister/zookeeper:latest7a7fd44a7210
commons-io@2.4
2.14.0
2
quay.io/keycloak/keycloak:20.0054ef67eb7da
commons-io@2.7
2.14.0
2
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
commons-io@2.8.0
2.14.0
2
quay.io/strimzi/operator:0.39.002f6f143fc6d
commons-io@2.11.0
2.14.0
2
5200710/hadoop:3.2.3-java8092d3088a5fb
commons-io@2.8.0
2.14.0
1
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
commons-io@2.8.0
2.14.0
1
adagber/planner:v1.0e5c1ed097752
commons-io@2.6
2.14.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.