StackRadar

CVE-2025-48924

Medium

Advisory

Published 11 Jul 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.023
82nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
627
of 17,787 indexed, latest versions
Container images
678
deployed by those charts
Fix available
2 of 3
affected packages

Apache Commons Lang is vulnerable to Uncontrolled Recursion when processing long inputs

Carried by container images the latest versions of 627 of 17,787 indexed charts deploy, on 678 images.

Affected packageAffected versionsFixed inImages
commons-lang3maven3.0, 3.1, 3.2, 3.2.1+17 more3.18.0594
commons-langmaven2.1, 2.2, 2.4, 2.5+1 moreno fix listed306
libcommons-lang3-javadeb3.8-23.8-2ubuntu0.1~esm11
OSV records
GHSA-j288-q9x7-2f5vUBUNTU-CVE-2025-48924
Also known as
USN-8364-1

Charts affected

627 by stars
ChartLatestAffected imagesRadar Score
sumo-besu-genesisconsensys0.1.751 of 1See more

sumo-besu-genesis consensys 0.1.75

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
commons-lang3@3.12.0
3.18.0

Open the chart page →

7,963
sumo-besu-nodeconsensys0.1.751 of 4See more

sumo-besu-node consensys 0.1.75

1 of the 4 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
commons-lang3@3.12.0
3.18.0

Open the chart page →

7,963
cp-helm-chartscp-helm-charts0.6.17 of 8See more

cp-helm-charts cp-helm-charts 0.6.1

7 of the 8 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
commons-lang3@3.8.1
3.18.0
confluentinc/cp-enterprise-kafka:6.1.08f1544df1f48
commons-lang3@3.8.1
3.18.0
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
commons-lang@2.6
commons-lang3@3.8.1
no fix listed
3.18.0
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
commons-lang3@3.8.1
3.18.0
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
commons-lang@2.6
commons-lang3@3.8.1
no fix listed
3.18.0
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
commons-lang3@3.8.1
3.18.0
confluentinc/cp-zookeeper:6.1.078c190f4472c
commons-lang3@3.8.1
3.18.0

Open the chart page →

58,857
ldapd4nVerified publisher0.1.01 of 1See more

ldap d4n 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
dwimberger/ldap-ad-it:latest0c636e55eb82
commons-lang@2.6
no fix listed

Open the chart page →

1,657
nifi-registryd4nVerified publisher1.0.01 of 2See more

nifi-registry d4n 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
apache/nifi-registry:1.26.07cdfd8deec92
commons-lang3@3.14.0
3.18.0

Open the chart page →

5,398
dadosfake-helmdadosfake-app0.1.01 of 1See more

dadosfake-helm dadosfake-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
javaaurelio/dadosfake_web_springboot:latest8541a3cd021a
commons-lang3@3.13.0
3.18.0

Open the chart page →

2,064
damap-chartdamapVerified publisher0.3.02 of 5See more

damap-chart damap 0.3.0

2 of the 5 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8f29984bd1e22
commons-lang3@3.12.0
3.18.0
ghcr.io/damap-org/damap-backend:5.0.0f3d0c7d35498
commons-lang3@3.14.0
3.18.0

Open the chart page →

13,936
dara-chartsdara-charts0.1.01 of 2See more

dara-charts dara-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
razzy10/product-service:latest702e411956db
commons-lang3@3.17.0
3.18.0

Open the chart page →

3,547
apache-ranger-admindata-platform-stableVerified publisher0.2.01 of 2See more

apache-ranger-admin data-platform-stable 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
commons-lang@2.6
commons-lang3@3.3.2
no fix listed
3.18.0

Open the chart page →

8,245
deployhubdeployhubVerified publisher10.0.4151 of 11See more

deployhub deployhub 10.0.415

1 of the 11 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
quay.io/deployhub/ms-ui:svccat-v11.0.815-g717581f5dedbc31e6f
commons-lang@2.4
commons-lang3@3.4
no fix listed
3.18.0

Open the chart page →

11,160
spark-standalonedmwm-bigdataVerified publisher0.1.01 of 2See more

spark-standalone dmwm-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
gradiant/spark:2.4.4-python-alpine97657d56e927
commons-lang@2.6
commons-lang3@3.5
no fix listed
3.18.0

Open the chart page →

6,147
api-postsdniel0.9.11 of 1See more

api-posts dniel 0.9.1

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
dniel/api-posts:master45a667852f2a
commons-lang@2.6
commons-lang3@3.7
no fix listed
3.18.0

Open the chart page →

8,986
kafka-uidoubanVerified publisher1.5.21 of 1See more

kafka-ui douban 1.5.2

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
ghcr.io/kafbat/kafka-ui:v1.2.0185da4ad3e88
commons-lang3@3.12.0
3.18.0

Open the chart page →

1,269
drogue-cloud-coredrogue-iotVerified publisher0.7.111 of 22See more

drogue-cloud-core drogue-iot 0.7.11

1 of the 22 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
commons-lang@2.6
commons-lang3@3.11
no fix listed
3.18.0

Open the chart page →

55,666
drogue-cloud-twindrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-twin drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
commons-lang@2.6
commons-lang3@3.11
no fix listed
3.18.0

Open the chart page →

6,915
temporaldtrdnk-helm-chartsVerified publisher0.35.01 of 13See more

temporal dtrdnk-helm-charts 0.35.0

1 of the 13 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
commons-lang3@3.1
3.18.0

Open the chart page →

20,205
amundsenduyet1.1.01 of 7See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
library/neo4j:3.3.0d4eaa8484246
commons-lang@2.6
commons-lang3@3.5
no fix listed
3.18.0

Open the chart page →

11,174
spark-shuffleduyet0.2.01 of 1See more

spark-shuffle duyet 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
snappydatainc/spark-shuffle:v2.2.0-kubernetes-0.5.1fd4b2070466f
commons-lang@2.6
commons-lang3@3.5
no fix listed
3.18.0

Open the chart page →

5,639
rundeckdwardu-helm-charts0.3.41 of 2See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
rundeck/rundeck:3.2.74d64fe56f767
commons-lang@2.6
no fix listed

Open the chart page →

19,802
dshackledysnixVerified publisher0.1.11 of 2See more

dshackle dysnix 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
emeraldpay/dshackle:0.12ac2a4bc66ab6
commons-lang3@3.9
3.18.0

Open the chart page →

2,237
mintakaeclipse-aeriosVerified publisher1.0.01 of 2See more

mintaka eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
fiware/mintaka:0.7.092a3c5cf43c0
commons-lang3@3.9
3.18.0

Open the chart page →

11,482
unifiegebackVerified publisher2.1.61 of 1See more

unifi egeback 2.1.6

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
commons-lang3@3.14.0
3.18.0

Open the chart page →

7,268
yaadeencircle360-ossVerified publisher0.2.11 of 1See more

yaade encircle360-oss 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
esperotech/yaade:latest24d2d692d948
commons-lang3@3.13.0
3.18.0

Open the chart page →

1,000
eoloPlanteolo-plannerVerified publisher0.1.01 of 7See more

eoloPlant eolo-planner 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
commons-lang3@3.12.0
3.18.0

Open the chart page →

27,537
eoloplannereoloplannerVerified publisher0.1.01 of 7See more

eoloplanner eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
commons-lang3@3.12.0
3.18.0

Open the chart page →

32,205
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.01 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
commons-lang3@3.12.0
3.18.0

Open the chart page →

27,537
eoloplannereoloplanner-molynx-gat0.1.01 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
molynx/planner:v1441c9f52f092
commons-lang3@3.12.0
3.18.0

Open the chart page →

28,482
eolo-plannereolo-planner-repo0.1.01 of 7See more

eolo-planner eolo-planner-repo 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
arturisimo/planner:v1.0fff9de644941
commons-lang3@3.12.0
3.18.0

Open the chart page →

27,096
eoloplanteoloplant1.0.01 of 7See more

eoloplant eoloplant 1.0.0

1 of the 7 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
commons-lang3@3.12.0
3.18.0

Open the chart page →

27,537
eoloplantseoloplants-urjcVerified publisher0.1.01 of 7See more

eoloplants eoloplants-urjc 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
lourdesmorente/new-planner:1.0.0608745878cdb
commons-lang3@3.12.0
3.18.0

Open the chart page →

27,721
servereoloserverVerified publisher0.1.01 of 7See more

server eoloserver 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
commons-lang3@3.12.0
3.18.0

Open the chart page →

32,205
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
flyway/flyway:9.1545b5d7cdc75a
commons-lang3@3.12.0
3.18.0

Open the chart page →

9,334
shenyuerdeng2.4.212 of 2See more

shenyu erdeng 2.4.21

2 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.4.2e8b7c4ddd069
commons-lang3@3.3.2
3.18.0
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
commons-lang@2.6
commons-lang3@3.3.2
no fix listed
3.18.0

Open the chart page →

12,513
dshackleethereum-helm-chartsVerified publisher0.1.91 of 2See more

dshackle ethereum-helm-charts 0.1.9

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
emeraldpay/dshackle:0.14.0126f0ae0b388
commons-lang3@3.9
3.18.0

Open the chart page →

2,021
tekuethereum-helm-chartsVerified publisher1.2.11 of 2See more

teku ethereum-helm-charts 1.2.1

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
consensys/teku:latest3a4f5761ae1c
commons-lang@2.4
no fix listed

Open the chart page →

973
jenkinsfatihtepe-jenkins1.0.01 of 1See more

jenkins fatihtepe-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
commons-lang@2.6
no fix listed

Open the chart page →

2,476
fddb-exporterfddb-exporterVerified publisher2.4.31 of 1See more

fddb-exporter fddb-exporter 2.4.3

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
ghcr.io/itobey/fddb-exporter:2.4.1a824933e0f87
commons-lang3@3.12.0
3.18.0

Open the chart page →

467
fibfibonacci-cluster-appsVerified publisher1.0.03 of 5See more

fib fibonacci-cluster-apps 1.0.0

3 of the 5 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
golenski/fibonacci-msg-relay:1.0.0c863dcb0c513
commons-lang3@3.17.0
3.18.0
golenski/fibonacci-task-manager:2.0.03a2b36df247b
commons-lang3@3.17.0
3.18.0
golenski/fibonacci-worker:2.0.0954caf4aaf6a
commons-lang3@3.17.0
3.18.0

Open the chart page →

16,927
infrafibonacci-cluster-infraVerified publisher1.0.01 of 4See more

infra fibonacci-cluster-infra 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
apache/activemq-artemis:2.37.0bae523439ee3
commons-lang3@3.16.0
3.18.0

Open the chart page →

12,454
fineractfineract-openshift0.1.11 of 4See more

fineract fineract-openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
apache/fineract:1.12.1a83cf1980609
commons-lang3@3.17.0
3.18.0

Open the chart page →

7,792
apollofiware0.1.41 of 1See more

apollo fiware 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
quay.io/fiware/apollo:0.0.1055330b1b60c1
commons-lang3@3.9
3.18.0

Open the chart page →

6,936
canis-majorfiware0.2.31 of 1See more

canis-major fiware 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
quay.io/fiware/canis-major:1.5.15bb40472e4ff5
commons-lang3@3.9
3.18.0

Open the chart page →

8,528
consent-facadefiware0.1.11 of 1See more

consent-facade fiware 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
quay.io/seamware/consent-facade:0.0.14be844c750c7e
commons-lang3@3.12.0
3.18.0

Open the chart page →

2,475
contract-managementfiware3.5.361 of 1See more

contract-management fiware 3.5.36

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
quay.io/fiware/contract-management:3.3.122bcfcf874451
commons-lang3@3.12.0
3.18.0

Open the chart page →

2,411
credentials-config-servicefiware2.6.41 of 1See more

credentials-config-service fiware 2.6.4

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
quay.io/fiware/credentials-config-service:3.4.3f2fbced76da8
commons-lang3@3.12.0
3.18.0

Open the chart page →

2,293
dss-validation-servicefiware0.0.191 of 1See more

dss-validation-service fiware 0.0.19

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
quay.io/wi_stefan/dss-validation-service:0.0.18e928db29ee1
commons-lang3@3.9
3.18.0

Open the chart page →

4,536
endpoint-auth-servicefiware0.1.41 of 4See more

endpoint-auth-service fiware 0.1.4

1 of the 4 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
quay.io/fiware/endpoint-configuration-service:0.4.30dc38a87b844
commons-lang3@3.9
3.18.0

Open the chart page →

11,835
mintakafiware0.4.71 of 1See more

mintaka fiware 0.4.7

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
fiware/mintaka:latestefc6793388cc
commons-lang3@3.9
3.18.0

Open the chart page →

7,019
scorpio-brokerfiware0.3.310 of 10See more

scorpio-broker fiware 0.3.3

10 of the 10 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:RegistrySubscriptionManager_2.1.001e11d800459
commons-lang@2.6
no fix listed
scorpiobroker/scorpio:eureka-server_2.1.03f05a113a4be
commons-lang@2.6
no fix listed
scorpiobroker/scorpio:AtContextServer_2.1.05073ceef2fa0
commons-lang@2.6
no fix listed
scorpiobroker/scorpio:gateway_2.1.062dae3dd0eeb
commons-lang@2.6
no fix listed
scorpiobroker/scorpio:RegistryManager_2.1.0a2cfcf0947fd
commons-lang@2.6
no fix listed
scorpiobroker/scorpio:QueryManager_2.1.0b742a53b2803
commons-lang@2.6
no fix listed
scorpiobroker/scorpio:HistoryManager_2.1.0b7fe27a06ff5
commons-lang@2.6
no fix listed
scorpiobroker/scorpio:config-server_1.1.0c46c1517e523
commons-lang@2.6
no fix listed
scorpiobroker/scorpio:SubscriptionManager_2.1.0e08036670d66
commons-lang@2.6
no fix listed
scorpiobroker/scorpio:EntityManager_2.1.0f02e8a429a08
commons-lang@2.6
no fix listed

Open the chart page →

55,600
scorpiobrokerfiware0.1.210 of 10See more

scorpiobroker fiware 0.1.2

10 of the 10 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:RegistrySubscriptionManager_2.1.001e11d800459
commons-lang@2.6
no fix listed
scorpiobroker/scorpio:eureka-server_2.1.03f05a113a4be
commons-lang@2.6
no fix listed
scorpiobroker/scorpio:AtContextServer_2.1.05073ceef2fa0
commons-lang@2.6
no fix listed
scorpiobroker/scorpio:gateway_2.1.062dae3dd0eeb
commons-lang@2.6
no fix listed
scorpiobroker/scorpio:RegistryManager_2.1.0a2cfcf0947fd
commons-lang@2.6
no fix listed
scorpiobroker/scorpio:QueryManager_2.1.0b742a53b2803
commons-lang@2.6
no fix listed
scorpiobroker/scorpio:HistoryManager_2.1.0b7fe27a06ff5
commons-lang@2.6
no fix listed
scorpiobroker/scorpio:config-server_1.1.0c46c1517e523
commons-lang@2.6
no fix listed
scorpiobroker/scorpio:SubscriptionManager_2.1.0e08036670d66
commons-lang@2.6
no fix listed
scorpiobroker/scorpio:EntityManager_2.1.0f02e8a429a08
commons-lang@2.6
no fix listed

Open the chart page →

55,600

Container images carrying it

678 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/microboxlabs/miot-srv:latest4ec11d229028
commons-lang@2.6
no fix listed
1
ghcr.io/microboxlabs/miot-srv:latest5796553b41ae
commons-lang@2.6
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-kafka071a788162e8
commons-lang3@3.8.1
3.18.0
1
ghcr.io/privacyengineering/hawk-service:latestbfedf47bb5e0
commons-lang3@3.13.0
3.18.0
1
ghcr.io/projectnessie/nessie:0.92.19efe3c74d55f
commons-lang3@3.14.0
3.18.0
1
ghcr.io/punchplatform/punchline-java:8.1.1d46ce7b96482
commons-lang3@3.12.0
3.18.0
1
ghcr.io/quenchworks/images/jenkinse92dba4e78c5
commons-lang@2.6
no fix listed
1
ghcr.io/skyoo2003/digdag:0.0.1821fd6a6f2cd
commons-lang3@3.2.1
3.18.0
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
commons-lang@2.6
commons-lang3@3.12.0
no fix listed
3.18.0
1
ghcr.io/streamvisor/streamvisor:4.1.40bc598b2ac9a
commons-lang3@3.17.0
3.18.0
1
ghcr.io/szpadel/languagetool-server:6.568fdab22b2a9
commons-lang3@3.12.0
3.18.0
1
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
commons-lang3@3.4
3.18.0
1
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
commons-lang@2.6
commons-lang3@3.4
no fix listed
3.18.0
1
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
commons-lang@2.6
commons-lang3@3.14.0
no fix listed
3.18.0
1
ghcr.io/wbstack/queryservice:0.3.6_0.6b83b5b81d4b6
commons-lang@2.6
commons-lang3@3.4
no fix listed
3.18.0
1
ghcr.io/wbstack/queryservice-updater:0.3.84_3.97525a57ac3f1
commons-lang@2.6
commons-lang3@3.4
no fix listed
3.18.0
1
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime4d3a8042c761
commons-lang3@3.13.0
3.18.0
1
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:latest5d55a742a2bc
commons-lang3@3.13.0
3.18.0
1
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:latest8be3ed26f746
commons-lang3@3.13.0
3.18.0
1
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:1.54.4_localb2b97137aef5
commons-lang3@3.13.0
3.18.0
1
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:1.72.6_local43316f900242
commons-lang3@3.12.0
3.18.0
1
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:improve-testing-performance8e9d15ed71c7
commons-lang3@3.12.0
3.18.0
1
public.ecr.aws/aktosecurity/akto-api-security-runtime:latestfacdfba6d4e4
commons-lang3@3.12.0
3.18.0
1
public.ecr.aws/aktosecurity/akto-api-testing:latest97d830d5538a
commons-lang3@3.12.0
3.18.0
1
public.ecr.aws/aws-containers/retail-store-sample-cart:1.3.05d767569c976
commons-lang3@3.17.0
3.18.0
1
public.ecr.aws/aws-containers/retail-store-sample-orders:1.3.0e85f034bcf48
commons-lang3@3.17.0
3.18.0
1
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
commons-lang@2.6
commons-lang3@3.12.0
no fix listed
3.18.0
1
public.ecr.aws/v0r6c2e2/trino:latestc265156b00d1
commons-lang3@3.17.0
3.18.0
1
quay.io/apicurio/apicurio-registry-mem:2.5.8.Final3b036692d546
commons-lang3@3.12.0
3.18.0
1
quay.io/deployhub/ms-ui:svccat-v11.0.815-g717581f5dedbc31e6f
commons-lang@2.4
commons-lang3@3.4
no fix listed
3.18.0
1
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
commons-lang3@3.9
3.18.0
1
quay.io/fiware/apollo:0.0.1055330b1b60c1
commons-lang3@3.9
3.18.0
1
quay.io/fiware/canis-major:1.5.15bb40472e4ff5
commons-lang3@3.9
3.18.0
1
quay.io/fiware/contract-management:3.3.122bcfcf874451
commons-lang3@3.12.0
3.18.0
1
quay.io/fiware/credentials-config-service:3.4.3f2fbced76da8
commons-lang3@3.12.0
3.18.0
1
quay.io/fiware/endpoint-configuration-service:0.4.30dc38a87b844
commons-lang3@3.9
3.18.0
1
quay.io/fiware/tmforum-account:1.18.06b25aac03414
commons-lang3@3.12.0
3.18.0
1
quay.io/fiware/tmforum-agreement:1.18.081e7025dc16d
commons-lang3@3.12.0
3.18.0
1
quay.io/fiware/tmforum-customer-bill-management:1.18.0dee901f1f75d
commons-lang3@3.12.0
3.18.0
1
quay.io/fiware/tmforum-customer-management:1.18.0d3519cebecd0
commons-lang3@3.12.0
3.18.0
1
quay.io/fiware/tmforum-party-catalog:1.18.07d6969a7393a
commons-lang3@3.12.0
3.18.0
1
quay.io/fiware/tmforum-party-role:1.18.052db89f17863
commons-lang3@3.12.0
3.18.0
1
quay.io/fiware/tmforum-product-catalog:1.18.0e409338726da
commons-lang3@3.12.0
3.18.0
1
quay.io/fiware/tmforum-product-inventory:1.18.03a5d6dd30f1d
commons-lang3@3.12.0
3.18.0
1
quay.io/fiware/tmforum-product-ordering-management:1.18.042c81c291f6f
commons-lang3@3.12.0
3.18.0
1
quay.io/fiware/tmforum-quote:1.18.0d9ca3a334352
commons-lang3@3.12.0
3.18.0
1
quay.io/fiware/tmforum-resource-catalog:1.18.0b0d853627c59
commons-lang3@3.12.0
3.18.0
1
quay.io/fiware/tmforum-resource-function-activation:1.18.062a5acb63fd1
commons-lang3@3.12.0
3.18.0
1
quay.io/fiware/tmforum-resource-inventory:1.18.0553b4a47730b
commons-lang3@3.12.0
3.18.0
1
quay.io/fiware/tmforum-resource-order-management:1.18.0dd1778ad6203
commons-lang3@3.12.0
3.18.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.