StackRadar

CVE-2025-48924

Medium

Advisory

Published 11 Jul 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.023
82nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
631
of 17,781 indexed, latest versions
Container images
684
deployed by those charts
Fix available
2 of 3
affected packages

Apache Commons Lang is vulnerable to Uncontrolled Recursion when processing long inputs

Carried by container images the latest versions of 631 of 17,781 indexed charts deploy, on 684 images.

Affected packageAffected versionsFixed inImages
commons-lang3maven3.0, 3.1, 3.2, 3.2.1+17 more3.18.0599
commons-langmaven2.1, 2.2, 2.4, 2.5+1 moreno fix listed307
libcommons-lang3-javadeb3.8-23.8-2ubuntu0.1~esm11
OSV records
GHSA-j288-q9x7-2f5vUBUNTU-CVE-2025-48924
Also known as
USN-8364-1

Charts affected

631 by stars
ChartLatestAffected imagesRadar Score
unifi-controllerqonstruktVerified publisher2.6.11 of 1See more

unifi-controller qonstrukt 2.6.1

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:8.0.240ae315a3a456
commons-lang3@3.12.0
3.18.0

Open the chart page →

10,469
flinkriskfocus0.2.01 of 1See more

flink riskfocus 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
library/flink:1.11.2-scala_2.121fe4fb22a2a5
commons-lang3@3.3.2
3.18.0

Open the chart page →

3,235
scm-managerscm-manager3.12.11 of 1See more

scm-manager scm-manager 3.12.1

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
scmmanager/scm-manager:3.12.1bfb766050f34
commons-lang@2.6
no fix listed

Open the chart page →

649
sonarqube-dcesonarqubeVerified publisher0.1.2+1212 of 5See more

sonarqube-dce sonarqube 0.1.2+121

2 of the 5 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
library/sonarqube:9.1.0-datacenter-search7e43ff493a47
commons-lang@2.6
commons-lang3@3.4
no fix listed
3.18.0
library/sonarqube:9.1.0-datacenter-appa9bc5a3a1fc3
commons-lang@2.6
commons-lang3@3.10
no fix listed
3.18.0

Open the chart page →

8,698
hivebigdata-chartsVerified publisher0.1.81 of 1See more

hive bigdata-charts 0.1.8

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
commons-lang@2.6
commons-lang3@3.9
no fix listed
3.18.0

Open the chart page →

7,166
opensearchcaptnbpVerified publisher3.1.11 of 2See more

opensearch captnbp 3.1.1

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.19.269588c664014
commons-lang@2.6
commons-lang3@3.17.0
no fix listed
3.18.0

Open the chart page →

998
cmak-operatorcmak-operatorVerified publisher2.2.22 of 3See more

cmak-operator cmak-operator 2.2.2

2 of the 3 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
library/zookeeper:3.6.180ad2170ad62
commons-lang@2.6
no fix listed
ghcr.io/eshepelyuk/dckr/cmak-3.0.0.6:1.2.090a34412c6b5
commons-lang3@3.6
3.18.0

Open the chart page →

4,605
codetogethercodetogether1.4.251 of 1See more

codetogether codetogether 1.4.25

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
codetogether/codetogether:latest4348c8a38752
commons-lang3@3.4
3.18.0

Open the chart page →

7,450
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
library/couchdb:3.4.22817ad50b5c5
commons-lang3@3.16.0
3.18.0

Open the chart page →

17,404
hdfsdmwm-bigdataVerified publisher1.0.11 of 2See more

hdfs dmwm-bigdata 1.0.1

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
gradiant/hdfs:3.2.2e3bf364fe713
commons-lang@2.6
commons-lang3@3.7
no fix listed
3.18.0

Open the chart page →

7,948
hivedmwm-bigdataVerified publisher0.1.63 of 5See more

hive dmwm-bigdata 0.1.6

3 of the 5 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
commons-lang@2.6
commons-lang3@3.3.2
no fix listed
3.18.0
gradiant/hdfs:2.7.73b28784ba41f
commons-lang@2.6
commons-lang3@3.3.2
no fix listed
3.18.0
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
commons-lang@2.6
commons-lang3@3.1
no fix listed
3.18.0

Open the chart page →

20,837
flowableflowable-oss7.1.01 of 2See more

flowable flowable-oss 7.1.0

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
flowable/flowable-rest:7.1.0b7ae287502cd
commons-lang3@3.17.0
3.18.0

Open the chart page →

2,784
flyte-binaryflyte2.0.481 of 4See more

flyte-binary flyte 2.0.48

1 of the 4 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
commons-lang@2.6
commons-lang3@3.17.0
no fix listed
3.18.0

Open the chart page →

4,641
unifigeek-cookbookVerified publisher5.1.31 of 1See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.4.162b3edc809a3ff
commons-lang3@3.12.0
3.18.0

Open the chart page →

11,839
rocketmqgin1.1.02 of 2See more

rocketmq gin 1.1.0

2 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
apache/rocketmq:4.9.35ac2a4e0f627
commons-lang3@3.4
3.18.0
apacherocketmq/rocketmq-dashboard:1.0.024799aff6cf8
commons-lang3@3.4
3.18.0

Open the chart page →

9,154
apimgraviteeioVerified publisher4.12.192 of 4See more

apim graviteeio 4.12.19

2 of the 4 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.19-debian05fd67a93056
commons-lang3@3.17.0
3.18.0
graviteeio/apim-management-api:4.12.19-debian27374522cd04
commons-lang3@3.17.0
3.18.0

Open the chart page →

4,806
nacosgujunxiang0.1.51 of 1See more

nacos gujunxiang 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
commons-lang@2.6
commons-lang3@3.17.0
no fix listed
3.18.0

Open the chart page →

1,767
nzbhydra2halkeye2.30.11 of 2See more

nzbhydra2 halkeye 2.30.1

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
binhex/arch-nzbhydra2:3.1.0-1-01fb8952921ab6
commons-lang@2.6
commons-lang3@3.7
no fix listed
3.18.0

Open the chart page →

6,711
hazelcasthazelcastVerified publisher5.10.22 of 2See more

hazelcast hazelcast 5.10.2

2 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
hazelcast/hazelcast:5.5.05dd5d31c7a06
commons-lang3@3.14.0
3.18.0
hazelcast/management-center:5.5.2991ddb27c251
commons-lang3@3.14.0
3.18.0

Open the chart page →

2,634
hive-metastoreheva-helm-chartsVerified publisher0.2.01 of 2See more

hive-metastore heva-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
sslhep/hive-metastore:3.1.39e80af083079
commons-lang@2.6
commons-lang3@3.4
no fix listed
3.18.0

Open the chart page →

7,335
cratedbhmdmph2.0.31 of 2See more

cratedb hmdmph 2.0.3

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
library/crate:4.7.0c7984a05e15b
commons-lang@2.6
no fix listed

Open the chart page →

1,335
me-untethr-nostr-relaykronkltdVerified publisher0.1.41 of 1See more

me-untethr-nostr-relay kronkltd 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
duck1123/me.untethr.nostr-relay:0.2.1119fc5d4cbfb
commons-lang3@3.8.1
3.18.0

Open the chart page →

2,072
skywalkingkubesphere-testVerified publisher3.1.02 of 4See more

skywalking kubesphere-test 3.1.0

2 of the 4 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.1.0-es7641237e0299b
commons-lang@2.4
commons-lang3@3.7
no fix listed
3.18.0
apache/skywalking-ui:8.1.067d50e4deff4
commons-lang@2.6
commons-lang3@3.1
no fix listed
3.18.0

Open the chart page →

18,042
kafdroplsst-sqre0.1.31 of 1See more

kafdrop lsst-sqre 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
commons-lang3@3.12.0
3.18.0

Open the chart page →

7,901
oesopsmxVerified publisher4.0.324 of 25See more

oes opsmx 4.0.32

4 of the 25 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-gate:isd-spin-2025.10.01-5c720954-2025112608102b3554029737
commons-lang@2.6
commons-lang3@3.12.0
no fix listed
3.18.0
quay.io/opsmxpublic/ubi8-oes-audit-client:isd-spin-2025.10.01-cb1bfce-20251126103732a5b1887eab
commons-lang@2.6
commons-lang3@3.13.0
no fix listed
3.18.0
quay.io/opsmxpublic/ubi8-oes-autopilot:isd-spin-2025.10.01-af26a30d4-20251126105458bd0bcf72f9
commons-lang3@3.13.0
3.18.0
quay.io/opsmxpublic/ubi8-oes-platform:isd-spin-2025.10.01-a7c191ec-2025112611228ed603ab7417
commons-lang3@3.13.0
3.18.0

Open the chart page →

107,811
repoflowrepoflow-helm-public0.9.11 of 8See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
library/elasticsearch:8.15.0310b9fc03b06
commons-lang3@3.9
3.18.0

Open the chart page →

13,521
rocketmq-clusterrocketmq12.6.02 of 2See more

rocketmq-cluster rocketmq 12.6.0

2 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
apache/rocketmq:5.4.0319cd8a81ed1
commons-lang@2.6
commons-lang3@3.12.0
no fix listed
3.18.0
apacherocketmq/rocketmq-dashboard:2.1.0ce78506bd6fe
commons-lang3@3.12.0
3.18.0

Open the chart page →

6,328
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
commons-lang3@3.8
libcommons-lang3-java@3.8-2
3.18.0
3.8-2ubuntu0.1~esm1

Open the chart page →

24,488
hive-metastoreslamdev0.0.51 of 2See more

hive-metastore slamdev 0.0.5

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
commons-lang@2.6
commons-lang3@3.4
no fix listed
3.18.0

Open the chart page →

8,198
snowplow-iglu-serversnowplow-devopsOfficialVerified publisher0.19.01 of 1See more

snowplow-iglu-server snowplow-devops 0.19.0

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
snowplow/iglu-server:0.12.0-distroless5a38033f07c1
commons-lang3@3.12.0
3.18.0

Open the chart page →

230
kafka-chartsoldevelo-kafka-chart32.4.41 of 1See more

kafka-chart soldevelo-kafka-chart 32.4.4

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
soldevelo/kafka:4.0.0-debian-12-r0cfdc08c2f577
commons-lang3@3.12.0
3.18.0

Open the chart page →

2,355
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.262 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

2 of the 6 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:3.5.0-debian-11-r08657bb93a581
commons-lang3@3.8.1
3.18.0
thingsboard/tb-node:3.6.0f40a542832c4
commons-lang3@3.4
3.18.0

Open the chart page →

14,566
vrijbrpvrijbrpVerified publisher0.1.53 of 5See more

vrijbrp vrijbrp 0.1.5

3 of the 5 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
vrijbrp/balie:developbc85c89530b9
commons-lang3@3.12.0
3.18.0
vrijbrp/balie-ws:developc6603cb829ea
commons-lang3@3.12.0
3.18.0
vrijbrp/haal-centraal-brp-bevragen:develop5c770c2ae48c
commons-lang3@3.12.0
3.18.0

Open the chart page →

8,811
activemq-artemisactivemq-artemis-helm0.3.61 of 1See more

activemq-artemis activemq-artemis-helm 0.3.6

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
vromero/activemq-artemis:2.16.0408d6a46b153
commons-lang3@3.0
3.18.0

Open the chart page →

4,419
migrationadeptia-connect-migrationVerified publisher4.8.11 of 1See more

migration adeptia-connect-migration 4.8.1

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
adeptiainc/adeptia-connect-migration:4.8.1f1087da3da0b
commons-lang@2.6
no fix listed

Open the chart page →

451
paperless-ngxadnoctemVerified publisher0.4.22 of 5See more

paperless-ngx adnoctem 0.4.2

2 of the 5 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
apache/tika:2.9.0.092d055a84e9e
commons-lang3@3.13.0
3.18.0
gotenberg/gotenberg:8.36.087c16b9f3642
commons-lang3@3.12.0
3.18.0

Open the chart page →

19,691
clearml-servingallegroaiVerified publisher1.6.21 of 9See more

clearml-serving allegroai 1.6.2

1 of the 9 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:3.4.0-debian-11-r6ac64829e45b3
commons-lang3@3.8.1
3.18.0

Open the chart page →

17,877
apache-rangerapache-ranger0.1.01 of 2See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
apache/ranger:2.7.076c176e8a0e4
commons-lang@2.6
commons-lang3@3.14.0
no fix listed
3.18.0

Open the chart page →

7,740
soarv113assist-iot-cybersecurity-monitoring-soar0.1.33 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

3 of the 5 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
commons-lang3@3.1
3.18.0
assistiot/cybersecurity-monitoring_ir-ctx:latestae8b3d72eb5d
commons-lang@2.6
no fix listed
assistiot/cybersecurity-monitoring_ir-thv:latestc8b6c7eaa0cd
commons-lang@2.6
commons-lang3@3.8.1
no fix listed
3.18.0

Open the chart page →

17,896
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-elk:latestba1d85ec3739
commons-lang@2.6
commons-lang3@3.9
no fix listed
3.18.0

Open the chart page →

10,730
nacosbytectl0.1.61 of 1See more

nacos bytectl 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
commons-lang@2.6
commons-lang3@3.17.0
no fix listed
3.18.0

Open the chart page →

1,767
geoserver-cloudcamptocamp20.0.56 of 11See more

geoserver-cloud camptocamp2 0.0.5

6 of the 11 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
commons-lang@2.6
no fix listed
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
commons-lang@2.5
commons-lang3@3.10
no fix listed
3.18.0
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
commons-lang@2.5
commons-lang3@3.10
no fix listed
3.18.0
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
commons-lang@2.5
commons-lang3@3.10
no fix listed
3.18.0
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
commons-lang@2.5
commons-lang3@3.10
no fix listed
3.18.0
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
commons-lang@2.5
commons-lang3@3.10
no fix listed
3.18.0

Open the chart page →

84,444
geoserverCloudcamptocamp20.0.66 of 11See more

geoserverCloud camptocamp2 0.0.6

6 of the 11 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
commons-lang@2.6
no fix listed
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
commons-lang@2.5
commons-lang3@3.10
no fix listed
3.18.0
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
commons-lang@2.5
commons-lang3@3.10
no fix listed
3.18.0
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
commons-lang@2.5
commons-lang3@3.10
no fix listed
3.18.0
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
commons-lang@2.5
commons-lang3@3.10
no fix listed
3.18.0
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
commons-lang@2.5
commons-lang3@3.10
no fix listed
3.18.0

Open the chart page →

84,444
cbioportalcbioportalOfficialVerified publisher1.1.01 of 1See more

cbioportal cbioportal 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
cbioportal/cbioportal:6.4.1-web-shenandoah08debbd2dbf9
commons-lang3@3.17.0
3.18.0

Open the chart page →

3,674
cert-vaultcert-vaultOfficialVerified publisher2.12.01 of 7See more

cert-vault cert-vault 2.12.0

1 of the 7 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
ghcr.io/gregperlinli/certvault:2.12.0a7d0cc9e260a
commons-lang3@3.17.0
3.18.0

Open the chart page →

15,863
distributed-jmetercloudnativeapp1.0.11 of 1See more

distributed-jmeter cloudnativeapp 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
pedrocesarti/jmeter-docker:3.314851f144f57
commons-lang@2.5
commons-lang3@3.6
no fix listed
3.18.0

Open the chart page →

4,532
hadoopcloudnativeapp1.1.01 of 1See more

hadoop cloudnativeapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
commons-lang@2.6
commons-lang3@3.4
no fix listed
3.18.0

Open the chart page →

5,772
ignitecloudnativeapp1.0.01 of 1See more

ignite cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
apacheignite/ignite:2.7.0d7deab68b8fa
commons-lang@2.6
no fix listed

Open the chart page →

7,891
nifid4nVerified publisher2.0.01 of 5See more

nifi d4n 2.0.0

1 of the 5 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
apache/nifi-registry:1.26.07cdfd8deec92
commons-lang3@3.14.0
3.18.0

Open the chart page →

5,398
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
commons-lang3@3.9
3.18.0

Open the chart page →

38,346

Container images carrying it

684 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
apache/skywalking-ui:8.1.067d50e4deff4
commons-lang@2.6
commons-lang3@3.1
no fix listed
3.18.0
1
apache/tika:2.9.0.092d055a84e9e
commons-lang3@3.13.0
3.18.0
1
apicurio/apicurio-registry-jpa:1.3.2.Final44eeddd3562c
commons-lang3@3.9
3.18.0
1
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
commons-lang3@3.12.0
3.18.0
1
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
commons-lang@2.6
commons-lang3@3.13.0
no fix listed
3.18.0
1
apicurio/apicurio-studio-ui:0.2.62.Final349c845270c2
commons-lang3@3.12.0
3.18.0
1
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
commons-lang3@3.12.0
3.18.0
1
apimap/api:v1.8.11ae2b3ab00177
commons-lang3@3.12.0
3.18.0
1
arturisimo/planner:v1.0fff9de644941
commons-lang3@3.12.0
3.18.0
1
assistiot/cybersecurity-monitoring_id-elk:latestba1d85ec3739
commons-lang@2.6
commons-lang3@3.9
no fix listed
3.18.0
1
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
commons-lang3@3.1
3.18.0
1
assistiot/cybersecurity-monitoring_ir-ctx:latestae8b3d72eb5d
commons-lang@2.6
no fix listed
1
assistiot/cybersecurity-monitoring_ir-thv:latestc8b6c7eaa0cd
commons-lang@2.6
commons-lang3@3.8.1
no fix listed
3.18.0
1
assistiot/identity-manager_kc:latest0df4b4fa899a
commons-lang@2.6
commons-lang3@3.11
no fix listed
3.18.0
1
assistiot/sdn_controller:2.4.0ea254b6d8a31
commons-lang@2.6
commons-lang3@3.8.1
no fix listed
3.18.0
1
assistiot/tacticle_dashboard:api-lateste4414cb72dc4
commons-lang@2.4
commons-lang3@3.12.0
no fix listed
3.18.0
1
atlassian/bitbucket:10.2.705933f2b1cfd
commons-lang3@3.17.0
3.18.0
1
atlassian/confluence-server:7.10.03b9222ab32ef
commons-lang@2.6
commons-lang3@3.8
no fix listed
3.18.0
1
atlassian/crowd:5.2.2ebf761c7d437
commons-lang@2.6
commons-lang3@3.8
no fix listed
3.18.0
1
atlassian/jira-software:8.14.037bc46cbec1a
commons-lang@2.4
commons-lang3@3.8
no fix listed
3.18.0
1
atlassian/jira-software:9.7.264a75aa4ec4e
commons-lang@2.5
commons-lang3@3.5
no fix listed
3.18.0
1
atlassian/jira-software:11.3.11e5548cd4eea8
commons-lang@2.4
no fix listed
1
atomix/atomix:3.1.127738ff4f5c63
commons-lang3@3.7
3.18.0
1
audig/clamapi:2.1.62c3fe34ee430
commons-lang3@3.10
3.18.0
1
binhex/arch-nzbhydra2:3.1.0-1-01fb8952921ab6
commons-lang@2.6
commons-lang3@3.7
no fix listed
3.18.0
1
bitnamilegacy/cassandra:4.1.7-debian-12-r32b7a217999a1
commons-lang3@3.11
3.18.0
1
bitnamilegacy/elasticsearch:8.12.215d4647fd491
commons-lang3@3.12.0
3.18.0
1
bitnamilegacy/elasticsearch:8.12.1-debian-11-r29cfd2df1294d
commons-lang3@3.12.0
3.18.0
1
bitnamilegacy/elasticsearch:9.0.1-debian-12-r0e6f6ddcce2f1
commons-lang3@3.9
3.18.0
1
bitnamilegacy/kafka:3.5.0-debian-11-r08657bb93a581
commons-lang3@3.8.1
3.18.0
1
bitnamilegacy/kafka:3.4.0-debian-11-r6ac64829e45b3
commons-lang3@3.8.1
3.18.0
1
bitnamilegacy/kafka:2.8.1-debian-11-r7b6e381ffd6ae
commons-lang3@3.8.1
3.18.0
1
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
commons-lang@2.6
commons-lang3@3.11
no fix listed
3.18.0
1
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
commons-lang3@3.14.0
3.18.0
1
bitnamilegacy/keycloak:26.3.3-debian-12-r0da3df0976a9f
commons-lang3@3.17.0
3.18.0
1
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
commons-lang@2.6
commons-lang3@3.17.0
no fix listed
3.18.0
1
bivas/presto:0.19605545994f806
commons-lang@2.4
commons-lang3@3.4
no fix listed
3.18.0
1
blackducksoftware/blackduck-alert:8.4.090cca32de2cc
commons-lang3@3.14.0
3.18.0
1
bluerange/bluerange:26.1.307c8f73b55df
commons-lang3@3.17.0
3.18.0
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
commons-lang3@3.8
libcommons-lang3-java@3.8-2
3.18.0
3.8-2ubuntu0.1~esm1
1
budibase/database:2.1.0d90f656261c9
commons-lang@2.6
no fix listed
1
camunda/zeebe:8.4.5ab5abc09e407
commons-lang3@3.14.0
3.18.0
1
castlemock/castlemock:latestb7f3f1527ba9
commons-lang@2.6
commons-lang3@3.14.0
no fix listed
3.18.0
1
cbioportal/cbioportal:6.4.1-web-shenandoah08debbd2dbf9
commons-lang3@3.17.0
3.18.0
1
choerodon/event-store-service:0.8.03c94c97f6f69
commons-lang@2.6
no fix listed
1
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
commons-lang3@3.15.0
3.18.0
1
cmosborn/metabase-arm64:0.50.286ec0a8878ad2
commons-lang@2.6
commons-lang3@3.14.0
no fix listed
3.18.0
1
codetogether/codetogether:latest4348c8a38752
commons-lang3@3.4
3.18.0
1
commerceexperts/searchhub-smartsuggest-service:1.3.0341eebe7239b
commons-lang3@3.9
3.18.0
1
commerceexperts/smartquery-service:2.2.09e33ad89baf6
commons-lang3@3.9
3.18.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.