CVE-2025-48924

Medium

Advisory

Published 11 Jul 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.023; 82nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 631; of 17,781 indexed, latest versions
Container images: 684; deployed by those charts
Fix available: 2 of 3; affected packages

Apache Commons Lang is vulnerable to Uncontrolled Recursion when processing long inputs

Carried by container images the latest versions of 631 of 17,781 indexed charts deploy, on 684 images.

Affected package	Affected versions	Fixed in	Images
commons-lang3maven	3.0, 3.1, 3.2, 3.2.1+17 more	3.18.0	599
commons-langmaven	2.1, 2.2, 2.4, 2.5+1 more	no fix listed	307
libcommons-lang3-javadeb	3.8-2	3.8-2ubuntu0.1~esm1	1

OSV records: GHSA-j288-q9x7-2f5v UBUNTU-CVE-2025-48924
Also known as: USN-8364-1

Charts affected

631 by stars

Chart

Latest

Affected images

Radar Score

dbrepodbrepo

1.13.3

1 of 25 See more

dbrepo dbrepo 1.13.3

1 of the 25 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
bitnamilegacy/opensearch :2.18.0-debian-12-r0	d8440eb6b290	commons-lang@2.6 commons-lang3@3.17.0	no fix listed 3.18.0

Open the chart page →

52,635

wiremockdeliveryhero

1.4.6

1 of 2 See more

wiremock deliveryhero 1.4.6

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
rodolpheche/wiremock :2.26.0	3be08a386092	commons-lang3@3.8.1	3.18.0

Open the chart page →

2,140

zammaddevplayer0

4.0.5

1 of 4 See more

zammad devplayer0 4.0.5

1 of the 4 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
zammad/zammad-docker-compose :zammad-elasticsearch-4.1.0-31	8274d75a51fc	commons-lang3@3.9	3.18.0

Open the chart page →

6,110

hbasedmwm-bigdata

0.1.6

2 of 5 See more

hbase dmwm-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
gradiant/hbase-base :2.0.1	a1ee6de94c04	commons-lang@2.6 commons-lang3@3.6	no fix listed 3.18.0
gradiant/hdfs :2.7.7	3b28784ba41f	commons-lang@2.6 commons-lang3@3.3.2	no fix listed 3.18.0

Open the chart page →

13,392

hive-metastoredmwm-bigdata

0.1.3

1 of 2 See more

hive-metastore dmwm-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
bde2020/hive :2.3.2-postgresql-metastore	620267768985	commons-lang@2.6 commons-lang3@3.3.2	no fix listed 3.18.0

Open the chart page →

6,882

opentsdbdmwm-bigdata

0.1.7

3 of 6 See more

opentsdb dmwm-bigdata 0.1.7

3 of the 6 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
gradiant/hbase-base :2.0.1	a1ee6de94c04	commons-lang@2.6 commons-lang3@3.6	no fix listed 3.18.0
gradiant/hdfs :2.7.7	3b28784ba41f	commons-lang@2.6 commons-lang3@3.3.2	no fix listed 3.18.0
gradiant/opentsdb :2.4.0	c33d53913869	commons-lang3@3.1	3.18.0

Open the chart page →

17,511

spinnakerdwardu-helm-charts

2.2.6

1 of 2 See more

spinnaker dwardu-helm-charts 2.2.6

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
gcr.io/spinnaker-marketplace/halyard :1.32.0	0ee5f968d2ab	commons-lang@2.6 commons-lang3@3.9	no fix listed 3.18.0

Open the chart page →

8,752

nifi-registrydysnix

1.1.5

1 of 2 See more

nifi-registry dysnix 1.1.5

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
apache/nifi-registry :0.8.0	974efa2f21da	commons-lang3@3.5	3.18.0

Open the chart page →

6,531

jenkinsedu

2.7.1

1 of 2 See more

jenkins edu 2.7.1

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	c1e4c349365f	commons-lang@2.6	no fix listed

Open the chart page →

4,423

enavenav-service-architecture

0.0.7

9 of 10 See more

enav enav-service-architecture 0.0.7

9 of the 10 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
apache/kafka :3.9.0	fbc7d7c428e3	commons-lang3@3.12.0	3.18.0
ghcr.io/gla-rad/enav-api-gateway :latest	8f4345c77dda	commons-lang@2.6	no fix listed
ghcr.io/gla-rad/enav-aton-admin-service :latest	cf85570b1324	commons-lang@2.6	no fix listed
ghcr.io/gla-rad/enav-aton-service :latest	3be878690629	commons-lang@2.6	no fix listed
ghcr.io/gla-rad/enav-aton-service-client :latest	f1629ac5f9ec	commons-lang@2.6	no fix listed
ghcr.io/gla-rad/enav-ckeeper :latest	415323ef112b	commons-lang@2.6	no fix listed
ghcr.io/gla-rad/enav-eureka :latest	05002092c621	commons-lang@2.6	no fix listed
ghcr.io/gla-rad/enav-msg-broker :latest	6fe372e4e481	commons-lang@2.6	no fix listed
ghcr.io/gla-rad/enav-vdes-controller :latest	c4c52955814f	commons-lang@2.6	no fix listed

Open the chart page →

15,860

neo4j-communityequinor-charts

1.2.5

1 of 1 See more

neo4j-community equinor-charts 1.2.5

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
library/neo4j :4.2.4	348e3f56faa2	commons-lang3@3.9	3.18.0

Open the chart page →

2,751

pitchforkexpediagroup

0.1.4

1 of 1 See more

pitchfork expediagroup 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
expediagroup/pitchfork :1.31	4f2cf61e7de9	commons-lang@2.6 commons-lang3@3.12.0	no fix listed 3.18.0

Open the chart page →

3,309

atlas-cmmsf3k-tech

0.151.5

1 of 4 See more

atlas-cmms f3k-tech 0.151.5

1 of the 4 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
intelloop/atlas-cmms-backend :v1.5.1	4c61bc3dd3f8	commons-lang3@3.13.0	3.18.0

Open the chart page →

5,291

featurehubfeaturehub

4.1.6

3 of 7 See more

featurehub featurehub 4.1.6

3 of the 7 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
featurehub/dacha2 :1.9.1	c8d5551b5e40	commons-lang3@3.12.0	3.18.0
featurehub/edge :1.9.1	98ad426737f6	commons-lang3@3.12.0	3.18.0
featurehub/mr :1.9.1	477d8bf771a9	commons-lang3@3.12.0	3.18.0

Open the chart page →

8,240

omada-controllergeek-cookbook

4.4.2

1 of 1 See more

omada-controller geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
mbentley/omada-controller :4.3	f4e682274bed	commons-lang@2.6	no fix listed

Open the chart page →

11,553

gentrace-self-hostedgentrace-self-hosted

0.1.3

2 of 9 See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

2 of the 9 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
confluentinc/cp-kafka :7.4.4	c0224a1adf7a	commons-lang3@3.8.1	3.18.0
provectuslabs/kafka-ui :latest	8f2ff02d64b0	commons-lang3@3.12.0	3.18.0

Open the chart page →

15,562

temporalglasskube

0.45.2-gk.1

1 of 14 See more

temporal glasskube 0.45.2-gk.1

1 of the 14 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
library/cassandra :3.11.3	ce85468c5bad	commons-lang3@3.1	3.18.0

Open the chart page →

16,346

hbasegradiant-bigdata

0.1.6

2 of 5 See more

hbase gradiant-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
gradiant/hbase-base :2.0.1	a1ee6de94c04	commons-lang@2.6 commons-lang3@3.6	no fix listed 3.18.0
gradiant/hdfs :2.7.7	3b28784ba41f	commons-lang@2.6 commons-lang3@3.3.2	no fix listed 3.18.0

Open the chart page →

13,392

stormgresearch

1.2.0

1 of 3 See more

storm gresearch 1.2.0

1 of the 3 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
library/storm :2.4.0	bd5d420506d6	commons-lang@2.6 commons-lang3@3.8.1	no fix listed 3.18.0

Open the chart page →

6,165

gridgaingridgain

1.0.6

1 of 1 See more

gridgain gridgain 1.0.6

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
gridgain/community :8.9.11	d32d182a0e6a	commons-lang@2.6 commons-lang3@3.14.0	no fix listed 3.18.0

Open the chart page →

4,679

hawkhawk

1.1.5

1 of 4 See more

hawk hawk 1.1.5

1 of the 4 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
ghcr.io/privacyengineering/hawk-service :latest	bfedf47bb5e0	commons-lang3@3.13.0	3.18.0

Open the chart page →

13,610

seata-serverheidaodageshiwo

1.0.0

1 of 1 See more

seata-server heidaodageshiwo 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
seataio/seata-server :1.5.1	ee1ed55f4144	commons-lang@2.6 commons-lang3@3.11	no fix listed 3.18.0

Open the chart page →

5,624

guacamolehelmforge

1.5.2

1 of 5 See more

guacamole helmforge 1.5.2

1 of the 5 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
guacamole/guacamole :1.6.0	f344085e618b	commons-lang3@3.17.0	3.18.0

Open the chart page →

8,716

iceberg-resticeberg-rest-fixture

0.0.1

1 of 2 See more

iceberg-rest iceberg-rest-fixture 0.0.1

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
ahmetfurkandemir/iceberg-rest-fixture-postgresql :1.10.0	142231a0b8b7	commons-lang3@3.14.0	3.18.0

Open the chart page →

3,470

traccarjeffresc

0.2.0

1 of 2 See more

traccar jeffresc 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
traccar/traccar :6.7-alpine	621c8d6d46fd	commons-lang3@3.17.0	3.18.0

Open the chart page →

1,341

jessejesse-chart

0.0.46

1 of 6 See more

jesse jesse-chart 0.0.46

1 of the 6 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
salehmir/jesse :1.10.10	1afa95f979e9	commons-lang3@3.13.0	3.18.0

Open the chart page →

3,421

jetic-operatorjetic-operator

2.0.2

1 of 1 See more

jetic-operator jetic-operator 2.0.2

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
apache/camel-k :1.10.4	3bb13d14f64a	commons-lang3@3.8.1	3.18.0

Open the chart page →

9,318

ipfix-generatorjfwenisch

0.3.16-feature-helm-package.0

1 of 1 See more

ipfix-generator jfwenisch 0.3.16-feature-helm-package.0

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
ghcr.io/jfwenisch/ipfix-generator :latest	a1b05567dbf6	commons-lang3@3.17.0	3.18.0

Open the chart page →

697

jenkinsjkim

5.5.14

1 of 2 See more

jenkins jkim 5.5.14

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.462.2-jdk17	95313257a8cd	commons-lang@2.6 commons-lang3@3.14.0	no fix listed 3.18.0

Open the chart page →

7,387

jmeterjmeter

1.2.5

1 of 1 See more

jmeter jmeter 1.2.5

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
liukunup/jmeter :5.5	9c079617a81b	commons-lang3@3.12.0	3.18.0

Open the chart page →

2,067

kafka-kraft-on-k8skafka-kraft-on-k8s

1.1.0

3 of 3 See more

kafka-kraft-on-k8s kafka-kraft-on-k8s 1.1.0

3 of the 3 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
kafkakraft/kafka-connect :3.7.0	062d697db7e5	commons-lang3@3.12.0	3.18.0
kafkakraft/kafka-controller :3.7.0	f261ad288fce	commons-lang3@3.8.1	3.18.0
kafkakraft/kafkakraft :3.7.0	2e4b593b878b	commons-lang3@3.8.1	3.18.0

Open the chart page →

14,130

kokukoku

1.0.0

2 of 7 See more

koku koku 1.0.0

2 of the 7 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
public.ecr.aws/v0r6c2e2/hive-metastore :latest	794b3bff9510	commons-lang@2.6 commons-lang3@3.12.0	no fix listed 3.18.0
public.ecr.aws/v0r6c2e2/trino :latest	c265156b00d1	commons-lang3@3.17.0	3.18.0

Open the chart page →

12,019

hertzbeatkubesphere-test

1.4.1

1 of 4 See more

hertzbeat kubesphere-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
apache/iotdb :0.13.3-node	afa47bf1692a	commons-lang@2.6 commons-lang3@3.8.1	no fix listed 3.18.0

Open the chart page →

7,710

magentomagento

3.2.3

1 of 12 See more

magento magento 3.2.3

1 of the 12 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
magento/magento-cloud-docker-opensearch :2.5-1.4.0	59fb6f0f1461	commons-lang@2.6 commons-lang3@3.9	no fix listed 3.18.0

Open the chart page →

13,479

metabasemetabase-helm

2.7.1

1 of 1 See more

metabase metabase-helm 2.7.1

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
metabase/metabase :v0.46.0	9ebdc664a6b2	commons-lang@2.6 commons-lang3@3.12.0	no fix listed 3.18.0

Open the chart page →

2,221

hadoopmiuler

1.2.2

1 of 1 See more

hadoop miuler 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
danisla/hadoop :2.9.0	255ba2dd739b	commons-lang@2.6 commons-lang3@3.4	no fix listed 3.18.0

Open the chart page →

5,772

clowder2ncsa

1.9.7

2 of 12 See more

clowder2 ncsa 1.9.7

2 of the 12 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
bitnamilegacy/elasticsearch :8.12.2	15d4647fd491	commons-lang3@3.12.0	3.18.0
bitnamilegacy/keycloak :20.0.5	cb04e49e6eb1	commons-lang@2.6 commons-lang3@3.11	no fix listed 3.18.0

Open the chart page →

37,373

glowrootnovum-rgi-charts

1.0.10

1 of 2 See more

glowroot novum-rgi-charts 1.0.10

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
novumrgi/glowroot-central :0.14.0-beta.3	8c54790675b1	commons-lang@2.6	no fix listed

Open the chart page →

2,308

openccuopenccu

3.89.8

1 of 1 See more

openccu openccu 3.89.8

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
ghcr.io/openccu/openccu :3.89.8.20260719	b2de2ff6e8e0	commons-lang@2.6	no fix listed

Open the chart page →

1,916

data-prepperopensearch-project-helm-charts

0.3.1

1 of 1 See more

data-prepper opensearch-project-helm-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
opensearchproject/data-prepper :2.8.0	57c25fa01d3c	commons-lang3@3.14.0	3.18.0

Open the chart page →

1,692

spring-boot-api-apppiomin

0.3.11

1 of 1 See more

spring-boot-api-app piomin 0.3.11

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
piomin/sample-spring-kotlin-microservice :1.1	871f784dd6bc	commons-lang3@3.12.0	3.18.0

Open the chart page →

7,576

portraitportrait

0.2.13

1 of 8 See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
treskon/portrait :DEV-latest	88e813f22347	commons-lang3@3.12.0	3.18.0

Open the chart page →

31,844

Jenkinsprasoonjenkins

0.1.0

1 of 1 See more

Jenkins prasoonjenkins 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	c1e4c349365f	commons-lang@2.6	no fix listed

Open the chart page →

2,476

nifi-registryprofyu

1.14.0-r001

1 of 1 See more

nifi-registry profyu 1.14.0-r001

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
apache/nifi-registry :1.14.0	090b7f87ec7f	commons-lang3@3.5	3.18.0

Open the chart page →

4,621

kafka-managerradar-base

2.3.1

1 of 1 See more

kafka-manager radar-base 2.3.1

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
radarbase/kafka-manager :1.3.3.18	1d2af7dd5a4e	commons-lang3@3.4	3.18.0

Open the chart page →

4,000

shinyproxyremche

0.6.6

1 of 2 See more

shinyproxy remche 0.6.6

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
remche/shinyproxy :2.6.1	8bcda8a04d3b	commons-lang@2.6 commons-lang3@3.12.0	no fix listed 3.18.0

Open the chart page →

3,958

reservation-appreservation-app

1.0.9

1 of 4 See more

reservation-app reservation-app 1.0.9

1 of the 4 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
zbalogh/reservation-api-server :1.0.9	7c247e399a1f	commons-lang3@3.12.0	3.18.0

Open the chart page →

6,639

resurfaceresurfaceio

3.9.0

1 of 3 See more

resurface resurfaceio 3.9.0

1 of the 3 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
resurfaceio/resurface :3.7.84	d5cda2f64109	commons-lang3@3.17.0	3.18.0

Open the chart page →

7,432

dev-feedrm3l

3.1.2

1 of 3 See more

dev-feed rm3l 3.1.2

1 of the 3 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
rm3l/dev-feed-api :latest	9a7f732245a3	commons-lang3@3.12.0	3.18.0

Open the chart page →

9,837

service-names-port-numbersrm3l

0.26.1

1 of 1 See more

service-names-port-numbers rm3l 0.26.1

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
rm3l/service-names-port-numbers :0.12.1	62d1cc4223e5	commons-lang3@3.12.0	3.18.0

Open the chart page →

10,120

Container images carrying it

684 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
apache/skywalking-ui :8.1.0	67d50e4deff4	commons-lang@2.6 commons-lang3@3.1	no fix listed 3.18.0	1
apache/tika :2.9.0.0	92d055a84e9e	commons-lang3@3.13.0	3.18.0	1
apicurio/apicurio-registry-jpa :1.3.2.Final	44eeddd3562c	commons-lang3@3.9	3.18.0	1
apicurio/apicurio-registry-kafkasql :2.1.0.Final	a97d67487532	commons-lang3@3.12.0	3.18.0	1
apicurio/apicurio-studio-api :0.2.62.Final	302d202ed149	commons-lang@2.6 commons-lang3@3.13.0	no fix listed 3.18.0	1
apicurio/apicurio-studio-ui :0.2.62.Final	349c845270c2	commons-lang3@3.12.0	3.18.0	1
apicurio/apicurio-studio-ws :0.2.62.Final	27a91978a388	commons-lang3@3.12.0	3.18.0	1
apimap/api :v1.8.11	ae2b3ab00177	commons-lang3@3.12.0	3.18.0	1
arturisimo/planner :v1.0	fff9de644941	commons-lang3@3.12.0	3.18.0	1
assistiot/cybersecurity-monitoring_id-elk :latest	ba1d85ec3739	commons-lang@2.6 commons-lang3@3.9	no fix listed 3.18.0	1
assistiot/cybersecurity-monitoring_ir-cas :latest	6a107f224c34	commons-lang3@3.1	3.18.0	1
assistiot/cybersecurity-monitoring_ir-ctx :latest	ae8b3d72eb5d	commons-lang@2.6	no fix listed	1
assistiot/cybersecurity-monitoring_ir-thv :latest	c8b6c7eaa0cd	commons-lang@2.6 commons-lang3@3.8.1	no fix listed 3.18.0	1
assistiot/identity-manager_kc :latest	0df4b4fa899a	commons-lang@2.6 commons-lang3@3.11	no fix listed 3.18.0	1
assistiot/sdn_controller :2.4.0	ea254b6d8a31	commons-lang@2.6 commons-lang3@3.8.1	no fix listed 3.18.0	1
assistiot/tacticle_dashboard :api-latest	e4414cb72dc4	commons-lang@2.4 commons-lang3@3.12.0	no fix listed 3.18.0	1
atlassian/bitbucket :10.2.7	05933f2b1cfd	commons-lang3@3.17.0	3.18.0	1
atlassian/confluence-server :7.10.0	3b9222ab32ef	commons-lang@2.6 commons-lang3@3.8	no fix listed 3.18.0	1
atlassian/crowd :5.2.2	ebf761c7d437	commons-lang@2.6 commons-lang3@3.8	no fix listed 3.18.0	1
atlassian/jira-software :8.14.0	37bc46cbec1a	commons-lang@2.4 commons-lang3@3.8	no fix listed 3.18.0	1
atlassian/jira-software :9.7.2	64a75aa4ec4e	commons-lang@2.5 commons-lang3@3.5	no fix listed 3.18.0	1
atlassian/jira-software :11.3.11	e5548cd4eea8	commons-lang@2.4	no fix listed	1
atomix/atomix :3.1.12	7738ff4f5c63	commons-lang3@3.7	3.18.0	1
audig/clamapi :2.1.6	2c3fe34ee430	commons-lang3@3.10	3.18.0	1
binhex/arch-nzbhydra2 :3.1.0-1-01	fb8952921ab6	commons-lang@2.6 commons-lang3@3.7	no fix listed 3.18.0	1
bitnamilegacy/cassandra :4.1.7-debian-12-r3	2b7a217999a1	commons-lang3@3.11	3.18.0	1
bitnamilegacy/elasticsearch :8.12.2	15d4647fd491	commons-lang3@3.12.0	3.18.0	1
bitnamilegacy/elasticsearch :8.12.1-debian-11-r2	9cfd2df1294d	commons-lang3@3.12.0	3.18.0	1
bitnamilegacy/elasticsearch :9.0.1-debian-12-r0	e6f6ddcce2f1	commons-lang3@3.9	3.18.0	1
bitnamilegacy/kafka :3.5.0-debian-11-r0	8657bb93a581	commons-lang3@3.8.1	3.18.0	1
bitnamilegacy/kafka :3.4.0-debian-11-r6	ac64829e45b3	commons-lang3@3.8.1	3.18.0	1
bitnamilegacy/kafka :2.8.1-debian-11-r7	b6e381ffd6ae	commons-lang3@3.8.1	3.18.0	1
bitnamilegacy/keycloak :20.0.5	cb04e49e6eb1	commons-lang@2.6 commons-lang3@3.11	no fix listed 3.18.0	1
bitnamilegacy/keycloak :24.0.4	cc599cbd15ff	commons-lang3@3.14.0	3.18.0	1
bitnamilegacy/keycloak :26.3.3-debian-12-r0	da3df0976a9f	commons-lang3@3.17.0	3.18.0	1
bitnamilegacy/opensearch :2.18.0-debian-12-r0	d8440eb6b290	commons-lang@2.6 commons-lang3@3.17.0	no fix listed 3.18.0	1
bivas/presto :0.196	05545994f806	commons-lang@2.4 commons-lang3@3.4	no fix listed 3.18.0	1
blackducksoftware/blackduck-alert :8.4.0	90cca32de2cc	commons-lang3@3.14.0	3.18.0	1
bluerange/bluerange :26.1.3	07c8f73b55df	commons-lang3@3.17.0	3.18.0	1
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	commons-lang3@3.8 libcommons-lang3-java@3.8-2	3.18.0 3.8-2ubuntu0.1~esm1	1
budibase/database :2.1.0	d90f656261c9	commons-lang@2.6	no fix listed	1
camunda/zeebe :8.4.5	ab5abc09e407	commons-lang3@3.14.0	3.18.0	1
castlemock/castlemock :latest	b7f3f1527ba9	commons-lang@2.6 commons-lang3@3.14.0	no fix listed 3.18.0	1
cbioportal/cbioportal :6.4.1-web-shenandoah	08debbd2dbf9	commons-lang3@3.17.0	3.18.0	1
choerodon/event-store-service :0.8.0	3c94c97f6f69	commons-lang@2.6	no fix listed	1
ckan/ckan-solr :2.11-solr9	ef8e5d3e6be1	commons-lang3@3.15.0	3.18.0	1
cmosborn/metabase-arm64 :0.50.28	6ec0a8878ad2	commons-lang@2.6 commons-lang3@3.14.0	no fix listed 3.18.0	1
codetogether/codetogether :latest	4348c8a38752	commons-lang3@3.4	3.18.0	1
commerceexperts/searchhub-smartsuggest-service :1.3.0	341eebe7239b	commons-lang3@3.9	3.18.0	1
commerceexperts/smartquery-service :2.2.0	9e33ad89baf6	commons-lang3@3.9	3.18.0	1