StackRadar

CVE-2025-48924

Medium

Advisory

Published 11 Jul 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.023
82nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
631
of 17,781 indexed, latest versions
Container images
684
deployed by those charts
Fix available
2 of 3
affected packages

Apache Commons Lang is vulnerable to Uncontrolled Recursion when processing long inputs

Carried by container images the latest versions of 631 of 17,781 indexed charts deploy, on 684 images.

Affected packageAffected versionsFixed inImages
commons-lang3maven3.0, 3.1, 3.2, 3.2.1+17 more3.18.0599
commons-langmaven2.1, 2.2, 2.4, 2.5+1 moreno fix listed307
libcommons-lang3-javadeb3.8-23.8-2ubuntu0.1~esm11
OSV records
GHSA-j288-q9x7-2f5vUBUNTU-CVE-2025-48924
Also known as
USN-8364-1

Charts affected

631 by stars
ChartLatestAffected imagesRadar Score
unifi-controllerqonstruktVerified publisher2.6.11 of 1See more

unifi-controller qonstrukt 2.6.1

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:8.0.240ae315a3a456
commons-lang3@3.12.0
3.18.0

Open the chart page →

10,469
flinkriskfocus0.2.01 of 1See more

flink riskfocus 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
library/flink:1.11.2-scala_2.121fe4fb22a2a5
commons-lang3@3.3.2
3.18.0

Open the chart page →

3,235
scm-managerscm-manager3.12.11 of 1See more

scm-manager scm-manager 3.12.1

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
scmmanager/scm-manager:3.12.1bfb766050f34
commons-lang@2.6
no fix listed

Open the chart page →

649
sonarqube-dcesonarqubeVerified publisher0.1.2+1212 of 5See more

sonarqube-dce sonarqube 0.1.2+121

2 of the 5 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
library/sonarqube:9.1.0-datacenter-search7e43ff493a47
commons-lang@2.6
commons-lang3@3.4
no fix listed
3.18.0
library/sonarqube:9.1.0-datacenter-appa9bc5a3a1fc3
commons-lang@2.6
commons-lang3@3.10
no fix listed
3.18.0

Open the chart page →

8,698
hivebigdata-chartsVerified publisher0.1.81 of 1See more

hive bigdata-charts 0.1.8

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
commons-lang@2.6
commons-lang3@3.9
no fix listed
3.18.0

Open the chart page →

7,166
opensearchcaptnbpVerified publisher3.1.11 of 2See more

opensearch captnbp 3.1.1

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.19.269588c664014
commons-lang@2.6
commons-lang3@3.17.0
no fix listed
3.18.0

Open the chart page →

998
cmak-operatorcmak-operatorVerified publisher2.2.22 of 3See more

cmak-operator cmak-operator 2.2.2

2 of the 3 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
library/zookeeper:3.6.180ad2170ad62
commons-lang@2.6
no fix listed
ghcr.io/eshepelyuk/dckr/cmak-3.0.0.6:1.2.090a34412c6b5
commons-lang3@3.6
3.18.0

Open the chart page →

4,605
codetogethercodetogether1.4.251 of 1See more

codetogether codetogether 1.4.25

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
codetogether/codetogether:latest4348c8a38752
commons-lang3@3.4
3.18.0

Open the chart page →

7,450
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
library/couchdb:3.4.22817ad50b5c5
commons-lang3@3.16.0
3.18.0

Open the chart page →

17,404
hdfsdmwm-bigdataVerified publisher1.0.11 of 2See more

hdfs dmwm-bigdata 1.0.1

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
gradiant/hdfs:3.2.2e3bf364fe713
commons-lang@2.6
commons-lang3@3.7
no fix listed
3.18.0

Open the chart page →

7,948
hivedmwm-bigdataVerified publisher0.1.63 of 5See more

hive dmwm-bigdata 0.1.6

3 of the 5 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
commons-lang@2.6
commons-lang3@3.3.2
no fix listed
3.18.0
gradiant/hdfs:2.7.73b28784ba41f
commons-lang@2.6
commons-lang3@3.3.2
no fix listed
3.18.0
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
commons-lang@2.6
commons-lang3@3.1
no fix listed
3.18.0

Open the chart page →

20,837
flowableflowable-oss7.1.01 of 2See more

flowable flowable-oss 7.1.0

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
flowable/flowable-rest:7.1.0b7ae287502cd
commons-lang3@3.17.0
3.18.0

Open the chart page →

2,784
flyte-binaryflyte2.0.481 of 4See more

flyte-binary flyte 2.0.48

1 of the 4 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
commons-lang@2.6
commons-lang3@3.17.0
no fix listed
3.18.0

Open the chart page →

4,641
unifigeek-cookbookVerified publisher5.1.31 of 1See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.4.162b3edc809a3ff
commons-lang3@3.12.0
3.18.0

Open the chart page →

11,839
rocketmqgin1.1.02 of 2See more

rocketmq gin 1.1.0

2 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
apache/rocketmq:4.9.35ac2a4e0f627
commons-lang3@3.4
3.18.0
apacherocketmq/rocketmq-dashboard:1.0.024799aff6cf8
commons-lang3@3.4
3.18.0

Open the chart page →

9,154
apimgraviteeioVerified publisher4.12.192 of 4See more

apim graviteeio 4.12.19

2 of the 4 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.19-debian05fd67a93056
commons-lang3@3.17.0
3.18.0
graviteeio/apim-management-api:4.12.19-debian27374522cd04
commons-lang3@3.17.0
3.18.0

Open the chart page →

4,806
nacosgujunxiang0.1.51 of 1See more

nacos gujunxiang 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
commons-lang@2.6
commons-lang3@3.17.0
no fix listed
3.18.0

Open the chart page →

1,767
nzbhydra2halkeye2.30.11 of 2See more

nzbhydra2 halkeye 2.30.1

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
binhex/arch-nzbhydra2:3.1.0-1-01fb8952921ab6
commons-lang@2.6
commons-lang3@3.7
no fix listed
3.18.0

Open the chart page →

6,711
hazelcasthazelcastVerified publisher5.10.22 of 2See more

hazelcast hazelcast 5.10.2

2 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
hazelcast/hazelcast:5.5.05dd5d31c7a06
commons-lang3@3.14.0
3.18.0
hazelcast/management-center:5.5.2991ddb27c251
commons-lang3@3.14.0
3.18.0

Open the chart page →

2,634
hive-metastoreheva-helm-chartsVerified publisher0.2.01 of 2See more

hive-metastore heva-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
sslhep/hive-metastore:3.1.39e80af083079
commons-lang@2.6
commons-lang3@3.4
no fix listed
3.18.0

Open the chart page →

7,335
cratedbhmdmph2.0.31 of 2See more

cratedb hmdmph 2.0.3

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
library/crate:4.7.0c7984a05e15b
commons-lang@2.6
no fix listed

Open the chart page →

1,335
me-untethr-nostr-relaykronkltdVerified publisher0.1.41 of 1See more

me-untethr-nostr-relay kronkltd 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
duck1123/me.untethr.nostr-relay:0.2.1119fc5d4cbfb
commons-lang3@3.8.1
3.18.0

Open the chart page →

2,072
skywalkingkubesphere-testVerified publisher3.1.02 of 4See more

skywalking kubesphere-test 3.1.0

2 of the 4 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.1.0-es7641237e0299b
commons-lang@2.4
commons-lang3@3.7
no fix listed
3.18.0
apache/skywalking-ui:8.1.067d50e4deff4
commons-lang@2.6
commons-lang3@3.1
no fix listed
3.18.0

Open the chart page →

18,042
kafdroplsst-sqre0.1.31 of 1See more

kafdrop lsst-sqre 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
commons-lang3@3.12.0
3.18.0

Open the chart page →

7,901
oesopsmxVerified publisher4.0.324 of 25See more

oes opsmx 4.0.32

4 of the 25 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-gate:isd-spin-2025.10.01-5c720954-2025112608102b3554029737
commons-lang@2.6
commons-lang3@3.12.0
no fix listed
3.18.0
quay.io/opsmxpublic/ubi8-oes-audit-client:isd-spin-2025.10.01-cb1bfce-20251126103732a5b1887eab
commons-lang@2.6
commons-lang3@3.13.0
no fix listed
3.18.0
quay.io/opsmxpublic/ubi8-oes-autopilot:isd-spin-2025.10.01-af26a30d4-20251126105458bd0bcf72f9
commons-lang3@3.13.0
3.18.0
quay.io/opsmxpublic/ubi8-oes-platform:isd-spin-2025.10.01-a7c191ec-2025112611228ed603ab7417
commons-lang3@3.13.0
3.18.0

Open the chart page →

107,811
repoflowrepoflow-helm-public0.9.11 of 8See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
library/elasticsearch:8.15.0310b9fc03b06
commons-lang3@3.9
3.18.0

Open the chart page →

13,521
rocketmq-clusterrocketmq12.6.02 of 2See more

rocketmq-cluster rocketmq 12.6.0

2 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
apache/rocketmq:5.4.0319cd8a81ed1
commons-lang@2.6
commons-lang3@3.12.0
no fix listed
3.18.0
apacherocketmq/rocketmq-dashboard:2.1.0ce78506bd6fe
commons-lang3@3.12.0
3.18.0

Open the chart page →

6,328
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
commons-lang3@3.8
libcommons-lang3-java@3.8-2
3.18.0
3.8-2ubuntu0.1~esm1

Open the chart page →

24,488
hive-metastoreslamdev0.0.51 of 2See more

hive-metastore slamdev 0.0.5

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
commons-lang@2.6
commons-lang3@3.4
no fix listed
3.18.0

Open the chart page →

8,198
snowplow-iglu-serversnowplow-devopsOfficialVerified publisher0.19.01 of 1See more

snowplow-iglu-server snowplow-devops 0.19.0

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
snowplow/iglu-server:0.12.0-distroless5a38033f07c1
commons-lang3@3.12.0
3.18.0

Open the chart page →

230
kafka-chartsoldevelo-kafka-chart32.4.41 of 1See more

kafka-chart soldevelo-kafka-chart 32.4.4

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
soldevelo/kafka:4.0.0-debian-12-r0cfdc08c2f577
commons-lang3@3.12.0
3.18.0

Open the chart page →

2,355
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.262 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

2 of the 6 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:3.5.0-debian-11-r08657bb93a581
commons-lang3@3.8.1
3.18.0
thingsboard/tb-node:3.6.0f40a542832c4
commons-lang3@3.4
3.18.0

Open the chart page →

14,566
vrijbrpvrijbrpVerified publisher0.1.53 of 5See more

vrijbrp vrijbrp 0.1.5

3 of the 5 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
vrijbrp/balie:developbc85c89530b9
commons-lang3@3.12.0
3.18.0
vrijbrp/balie-ws:developc6603cb829ea
commons-lang3@3.12.0
3.18.0
vrijbrp/haal-centraal-brp-bevragen:develop5c770c2ae48c
commons-lang3@3.12.0
3.18.0

Open the chart page →

8,811
activemq-artemisactivemq-artemis-helm0.3.61 of 1See more

activemq-artemis activemq-artemis-helm 0.3.6

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
vromero/activemq-artemis:2.16.0408d6a46b153
commons-lang3@3.0
3.18.0

Open the chart page →

4,419
migrationadeptia-connect-migrationVerified publisher4.8.11 of 1See more

migration adeptia-connect-migration 4.8.1

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
adeptiainc/adeptia-connect-migration:4.8.1f1087da3da0b
commons-lang@2.6
no fix listed

Open the chart page →

451
paperless-ngxadnoctemVerified publisher0.4.22 of 5See more

paperless-ngx adnoctem 0.4.2

2 of the 5 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
apache/tika:2.9.0.092d055a84e9e
commons-lang3@3.13.0
3.18.0
gotenberg/gotenberg:8.36.087c16b9f3642
commons-lang3@3.12.0
3.18.0

Open the chart page →

19,691
clearml-servingallegroaiVerified publisher1.6.21 of 9See more

clearml-serving allegroai 1.6.2

1 of the 9 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:3.4.0-debian-11-r6ac64829e45b3
commons-lang3@3.8.1
3.18.0

Open the chart page →

17,877
apache-rangerapache-ranger0.1.01 of 2See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
apache/ranger:2.7.076c176e8a0e4
commons-lang@2.6
commons-lang3@3.14.0
no fix listed
3.18.0

Open the chart page →

7,740
soarv113assist-iot-cybersecurity-monitoring-soar0.1.33 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

3 of the 5 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
commons-lang3@3.1
3.18.0
assistiot/cybersecurity-monitoring_ir-ctx:latestae8b3d72eb5d
commons-lang@2.6
no fix listed
assistiot/cybersecurity-monitoring_ir-thv:latestc8b6c7eaa0cd
commons-lang@2.6
commons-lang3@3.8.1
no fix listed
3.18.0

Open the chart page →

17,896
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-elk:latestba1d85ec3739
commons-lang@2.6
commons-lang3@3.9
no fix listed
3.18.0

Open the chart page →

10,730
nacosbytectl0.1.61 of 1See more

nacos bytectl 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
commons-lang@2.6
commons-lang3@3.17.0
no fix listed
3.18.0

Open the chart page →

1,767
geoserver-cloudcamptocamp20.0.56 of 11See more

geoserver-cloud camptocamp2 0.0.5

6 of the 11 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
commons-lang@2.6
no fix listed
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
commons-lang@2.5
commons-lang3@3.10
no fix listed
3.18.0
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
commons-lang@2.5
commons-lang3@3.10
no fix listed
3.18.0
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
commons-lang@2.5
commons-lang3@3.10
no fix listed
3.18.0
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
commons-lang@2.5
commons-lang3@3.10
no fix listed
3.18.0
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
commons-lang@2.5
commons-lang3@3.10
no fix listed
3.18.0

Open the chart page →

84,444
geoserverCloudcamptocamp20.0.66 of 11See more

geoserverCloud camptocamp2 0.0.6

6 of the 11 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
commons-lang@2.6
no fix listed
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
commons-lang@2.5
commons-lang3@3.10
no fix listed
3.18.0
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
commons-lang@2.5
commons-lang3@3.10
no fix listed
3.18.0
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
commons-lang@2.5
commons-lang3@3.10
no fix listed
3.18.0
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
commons-lang@2.5
commons-lang3@3.10
no fix listed
3.18.0
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
commons-lang@2.5
commons-lang3@3.10
no fix listed
3.18.0

Open the chart page →

84,444
cbioportalcbioportalOfficialVerified publisher1.1.01 of 1See more

cbioportal cbioportal 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
cbioportal/cbioportal:6.4.1-web-shenandoah08debbd2dbf9
commons-lang3@3.17.0
3.18.0

Open the chart page →

3,674
cert-vaultcert-vaultOfficialVerified publisher2.12.01 of 7See more

cert-vault cert-vault 2.12.0

1 of the 7 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
ghcr.io/gregperlinli/certvault:2.12.0a7d0cc9e260a
commons-lang3@3.17.0
3.18.0

Open the chart page →

15,863
distributed-jmetercloudnativeapp1.0.11 of 1See more

distributed-jmeter cloudnativeapp 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
pedrocesarti/jmeter-docker:3.314851f144f57
commons-lang@2.5
commons-lang3@3.6
no fix listed
3.18.0

Open the chart page →

4,532
hadoopcloudnativeapp1.1.01 of 1See more

hadoop cloudnativeapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
commons-lang@2.6
commons-lang3@3.4
no fix listed
3.18.0

Open the chart page →

5,772
ignitecloudnativeapp1.0.01 of 1See more

ignite cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
apacheignite/ignite:2.7.0d7deab68b8fa
commons-lang@2.6
no fix listed

Open the chart page →

7,891
nifid4nVerified publisher2.0.01 of 5See more

nifi d4n 2.0.0

1 of the 5 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
apache/nifi-registry:1.26.07cdfd8deec92
commons-lang3@3.14.0
3.18.0

Open the chart page →

5,398
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
commons-lang3@3.9
3.18.0

Open the chart page →

38,346

Container images carrying it

684 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
folioci/edge-connexion:latestb4863d135524
commons-lang3@3.17.0
3.18.0
1
folioci/edge-dematic:latest48c9b1d180d4
commons-lang3@3.12.0
3.18.0
1
folioci/edge-inn-reach:latestc64e4d9dd3fc
commons-lang3@3.12.0
3.18.0
1
folioci/edge-ncip:lateste760dbb81d1a
commons-lang3@3.17.0
3.18.0
1
folioci/edge-patron:latest682b852e056d
commons-lang3@3.17.0
3.18.0
1
folioci/edge-rtac:latest15ef73b1abd0
commons-lang3@3.12.0
3.18.0
1
folioci/mod-agreements:latest29c3f233a498
commons-lang@2.6
commons-lang3@3.12.0
no fix listed
3.18.0
1
folioci/mod-audit:latest88f40730ed45
commons-lang@2.6
no fix listed
1
folioci/mod-authtoken:latest995a25a33133
commons-lang3@3.16.0
3.18.0
1
folioci/mod-calendar:latest22f65982efd7
commons-lang3@3.12.0
3.18.0
1
folioci/mod-circulation:latest3eecd2ac2d8a
commons-lang@2.6
no fix listed
1
folioci/mod-circulation-storage:latest6bdddcafbc0f
commons-lang@2.6
no fix listed
1
folioci/mod-codex-ekb:latest235a3fa4adc9
commons-lang@2.6
commons-lang3@3.4
no fix listed
3.18.0
1
folioci/mod-codex-inventory:latest6d53ed758fd1
commons-lang3@3.3.2
3.18.0
1
folioci/mod-codex-mux:latestd4138abfd30d
commons-lang3@3.7
3.18.0
1
folioci/mod-copycat:latest1513fad2b799
commons-lang3@3.12.0
3.18.0
1
folioci/mod-courses:latest68ca414f5596
commons-lang3@3.17.0
3.18.0
1
folioci/mod-data-export:latest0cc86bf09755
commons-lang3@3.12.0
3.18.0
1
folioci/mod-data-export-spring:latestf1d7caf4544b
commons-lang3@3.12.0
3.18.0
1
folioci/mod-data-export-worker:latest1ad1811c9b37
commons-lang3@3.12.0
3.18.0
1
folioci/mod-data-import-converter-storage:latest3028f333778f
commons-lang3@3.9
3.18.0
1
folioci/mod-ebsconet:latest3ae8cb99daa3
commons-lang3@3.12.0
3.18.0
1
folioci/mod-feesfines:latestfe3a7049f2fb
commons-lang3@3.17.0
3.18.0
1
folioci/mod-finance:latest14450bc15430
commons-lang@2.6
no fix listed
1
folioci/mod-inn-reach:latestcc8584e43382
commons-lang3@3.12.0
3.18.0
1
folioci/mod-invoice:latest45b7b13e81e1
commons-lang@2.6
no fix listed
1
folioci/mod-invoice-storage:latest0bc720abcb78
commons-lang@2.6
no fix listed
1
folioci/mod-licenses:latestcfd6109bf477
commons-lang@2.6
commons-lang3@3.12.0
no fix listed
3.18.0
1
folioci/mod-login:latest88de493f86db
commons-lang3@3.17.0
3.18.0
1
folioci/mod-login-saml:latest5f3358ccaa0f
commons-lang3@3.17.0
3.18.0
1
folioci/mod-marccat:latest1b57d690d568
commons-lang@2.6
commons-lang3@3.7
no fix listed
3.18.0
1
folioci/mod-ncip:latest8ed83674352b
commons-lang@2.5
commons-lang3@3.12.0
no fix listed
3.18.0
1
folioci/mod-notes:latest998ac4782e0d
commons-lang3@3.12.0
3.18.0
1
folioci/mod-oa:latestae3b069d4ba5
commons-lang@2.6
commons-lang3@3.12.0
no fix listed
3.18.0
1
folioci/mod-oai-pmh:latest5cd5ef063f2a
commons-lang@2.6
no fix listed
1
folioci/mod-orders:latestfc4528220fb8
commons-lang@2.6
no fix listed
1
folioci/mod-orders-storage:latestceeaacc3bf16
commons-lang@2.6
no fix listed
1
folioci/mod-password-validator:latestb31d75f2bf7b
commons-lang3@3.12.0
3.18.0
1
folioci/mod-patron-blocks:latestde7318069a67
commons-lang@2.6
no fix listed
1
folioci/mod-pubsub:latest0a4fa4ad5d72
commons-lang@2.6
commons-lang3@3.17.0
no fix listed
3.18.0
1
folioci/mod-remote-storage:latest4f12177123dc
commons-lang@2.6
commons-lang3@3.12.0
no fix listed
3.18.0
1
folioci/mod-serials-management:latest571fa1ffe8c9
commons-lang@2.6
commons-lang3@3.12.0
no fix listed
3.18.0
1
folioci/mod-service-interaction:latestf53c327a48e8
commons-lang@2.6
commons-lang3@3.12.0
no fix listed
3.18.0
1
folioci/mod-tags:latest6e8beeb70272
commons-lang3@3.12.0
3.18.0
1
fonoster/routr:1.0.0-rc52ca65af17cbc
commons-lang@2.6
commons-lang3@3.10
no fix listed
3.18.0
1
frankescobar/allure-docker-service:2.21.08a4d7e9308de
commons-lang3@3.12.0
3.18.0
1
frankescobar/allure-docker-service:2.19.0cafa03b94dac
commons-lang3@3.12.0
3.18.0
1
freeipa/freeipa-server:fedora-37-4.10.1c87d77342bf5
commons-lang3@3.12.0
3.18.0
1
fthomas/scala-steward:latest367afe974b7a
commons-lang3@3.14.0
3.18.0
1
gchq/accumulo:2.0.1c460bb587d6d
commons-lang@2.6
commons-lang3@3.9
no fix listed
3.18.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.