StackRadar

CVE-2025-48924

Medium

Advisory

Published 11 Jul 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.023
82nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
634
of 17,787 indexed, latest versions
Container images
686
deployed by those charts
Fix available
2 of 3
affected packages

Apache Commons Lang is vulnerable to Uncontrolled Recursion when processing long inputs

Carried by container images the latest versions of 634 of 17,787 indexed charts deploy, on 686 images.

Affected packageAffected versionsFixed inImages
commons-lang3maven3.0, 3.1, 3.2, 3.2.1+17 more3.18.0600
commons-langmaven2.1, 2.2, 2.4, 2.5+1 moreno fix listed310
libcommons-lang3-javadeb3.8-23.8-2ubuntu0.1~esm11
OSV records
GHSA-j288-q9x7-2f5vUBUNTU-CVE-2025-48924
Also known as
USN-8364-1

Charts affected

634 by stars
ChartLatestAffected imagesRadar Score
kafka-helm-chartnotesprojectchart0.1.01 of 1See more

kafka-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
commons-lang3@3.8.1
3.18.0

Open the chart page →

4,547
logic-ms-helm-chartnotesprojectchart0.1.01 of 2See more

logic-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
vlebediantsev/logic-ms:latestdf8bf38c535b
commons-lang3@3.12.0
3.18.0

Open the chart page →

6,864
registration-ms-helm-chartnotesprojectchart0.1.01 of 2See more

registration-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-final:latest427af418b75e
commons-lang3@3.12.0
3.18.0

Open the chart page →

5,928
user-data-ms-helm-chartnotesprojectchart0.1.01 of 2See more

user-data-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
vlebediantsev/user-data-ms-final-final:latest9319437f3c8f
commons-lang3@3.12.0
3.18.0

Open the chart page →

5,885
zookeeper-helm-chartnotesprojectchart0.1.01 of 1See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
commons-lang@2.6
no fix listed

Open the chart page →

41,455
dependency-tracknovum-rgi-charts0.1.81 of 2See more

dependency-track novum-rgi-charts 0.1.8

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
owasp/dependency-track:3.8.0efc65e702ee1
commons-lang3@3.9
3.18.0

Open the chart page →

3,633
nexus2novum-rgi-charts0.1.11 of 1See more

nexus2 novum-rgi-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
sonatype/nexus:oss6bc88b51d4d7
commons-lang@2.6
commons-lang3@3.11
no fix listed
3.18.0

Open the chart page →

3,219
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
commons-lang@2.6
commons-lang3@3.14.0
no fix listed
3.18.0

Open the chart page →

5,825
ojp-serverojp0.1.51 of 1See more

ojp-server ojp 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
rrobetti/ojp:0.1.0-beta1141bd88232b
commons-lang3@3.5
3.18.0

Open the chart page →

2,626
hive-metastoreolehrgfVerified publisher0.1.01 of 1See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
commons-lang@2.6
commons-lang3@3.12.0
no fix listed
3.18.0

Open the chart page →

8,539
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
commons-lang@2.6
commons-lang3@3.11
no fix listed
3.18.0

Open the chart page →

9,059
apicurioone-acre-fundVerified publisher2.3.03 of 5See more

apicurio one-acre-fund 2.3.0

3 of the 5 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
commons-lang@2.6
commons-lang3@3.13.0
no fix listed
3.18.0
apicurio/apicurio-studio-ui:0.2.62.Final349c845270c2
commons-lang3@3.12.0
3.18.0
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
commons-lang3@3.12.0
3.18.0

Open the chart page →

18,666
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
commons-lang@2.6
commons-lang3@3.8.1
no fix listed
3.18.0

Open the chart page →

6,083
onyx-stackonyx0.3.11 of 12See more

onyx-stack onyx 0.3.1

1 of the 12 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
vespaengine/vespa:8.526.1569b160f58211
commons-lang3@3.16.0
3.18.0

Open the chart page →

6,252
raspberrymaticopenccuVerified publisher3.83.61 of 1See more

raspberrymatic openccu 3.83.6

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
commons-lang@2.6
no fix listed

Open the chart page →

2,421
mockserveropen-charts1.1.01 of 1See more

mockserver open-charts 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
mockserver/mockserver:5.15.00f9ef78c9489
commons-lang3@3.12.0
3.18.0

Open the chart page →

1,257
cdn-remoteopencord0.2.41 of 3See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
commons-lang3@3.5
3.18.0

Open the chart page →

63,277
comacopencord1.0.01 of 9See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
omecproject/onos-progran:1.0.05715e5648aa0
commons-lang@2.6
commons-lang3@3.4
no fix listed
3.18.0

Open the chart page →

88,616
mcord-cdn-remoteopencord0.1.61 of 2See more

mcord-cdn-remote opencord 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
woojoong/wowza:latestec230db19652
commons-lang@2.6
commons-lang3@3.4
no fix listed
3.18.0

Open the chart page →

42,662
omec-control-planeopencord0.1.312 of 8See more

omec-control-plane opencord 0.1.31

2 of the 8 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
library/cassandra:2.1.20cb079c0d7a57
commons-lang3@3.1
3.18.0
omecproject/c3po-hssdb:master-latest28a90cc26716
commons-lang3@3.1
3.18.0

Open the chart page →

40,795
onosopencord3.0.21 of 1See more

onos opencord 3.0.2

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
onosproject/onos:2.2.144914a8d4b3f
commons-lang@2.6
commons-lang3@3.9
no fix listed
3.18.0

Open the chart page →

12,939
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
commons-lang@2.6
commons-lang3@3.4
no fix listed
3.18.0

Open the chart page →

38,889
voltha-infraopencord2.14.02 of 10See more

voltha-infra opencord 2.14.0

2 of the 10 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
atomix/atomix:3.1.127738ff4f5c63
commons-lang3@3.7
3.18.0
voltha/voltha-onos:5.1.8e038acb950d3
commons-lang@2.6
commons-lang3@3.8.1
no fix listed
3.18.0

Open the chart page →

41,088
sentinelopennms-helm-chartsVerified publisher0.4.01 of 2See more

sentinel opennms-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
opennms/sentinel:36.0.288869082a14f
commons-lang@2.6
commons-lang3@3.16.0
no fix listed
3.18.0

Open the chart page →

2,043
bpjstk-serviceopenshift1.0.03 of 6See more

bpjstk-service openshift 1.0.0

3 of the 6 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
andrianrf/backoffice-be:latest6036614803d4
commons-lang3@3.12.0
3.18.0
andrianrf/iso-client:latestba560086ce15
commons-lang3@3.12.0
3.18.0
andrianrf/iso-server:latest7da47f525c7d
commons-lang3@3.12.0
3.18.0

Open the chart page →

34,721
fineractopenshift0.1.11 of 4See more

fineract openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
apache/fineract:1.12.1a83cf1980609
commons-lang3@3.17.0
3.18.0

Open the chart page →

7,848
smsf-configurationopenshift1.0.41 of 1See more

smsf-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
gurolakman/smsf-configuration:1.0.49abb3882bcbd
commons-lang@2.6
commons-lang3@3.12.0
no fix listed
3.18.0

Open the chart page →

13,608
smsf-dispatcheropenshift1.0.41 of 1See more

smsf-dispatcher openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
commons-lang@2.6
commons-lang3@3.12.0
no fix listed
3.18.0

Open the chart page →

11,740
smsf-momtopenshift1.0.41 of 1See more

smsf-momt openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
gurolakman/smsf-momt:1.0.4ce23b20a8a17
commons-lang@2.6
commons-lang3@3.12.0
no fix listed
3.18.0

Open the chart page →

13,570
smsf-registrationopenshift1.0.41 of 1See more

smsf-registration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
gurolakman/smsf-registration:1.0.4b22e746edd5d
commons-lang@2.6
commons-lang3@3.12.0
no fix listed
3.18.0

Open the chart page →

13,553
ussigw-configurationopenshift1.0.41 of 1See more

ussigw-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
commons-lang@2.6
commons-lang3@3.12.0
no fix listed
3.18.0

Open the chart page →

13,457
ussigw-coreopenshift1.0.41 of 1See more

ussigw-core openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
gurolakman/ussigw-core:1.0.48739565c3ea2
commons-lang@2.6
commons-lang3@3.12.0
no fix listed
3.18.0

Open the chart page →

13,101
openwhiskopenwhisk1.0.02 of 10See more

openwhisk openwhisk 1.0.0

2 of the 10 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
library/zookeeper:3.43882d9493d38
commons-lang@2.6
no fix listed
openwhisk/invoker:1.0.0f5831ec85525
commons-lang3@3.8.1
3.18.0

Open the chart page →

36,230
operatonoperatonVerified publisher1.0.51 of 1See more

operaton operaton 1.0.5

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
operaton/operaton:1.0.0-beta-4b35867ffe4d8
commons-lang3@3.17.0
3.18.0

Open the chart page →

2,003
issuegenopsmxVerified publisher1.0.21 of 1See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
opsmx11/issuegen:v2.1.05c50ca123d88
commons-lang3@3.8.1
3.18.0

Open the chart page →

26,367
trinoopstty0.2.141 of 1See more

trino opstty 0.2.14

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
trinodb/trino:4815b5e0a97f599
commons-lang@2.6
no fix listed

Open the chart page →

1,158
dfdeweyosdfir-infrastructureVerified publisher1.0.01 of 3See more

dfdewey osdfir-infrastructure 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.12.0645d3d9390ad
commons-lang@2.6
commons-lang3@3.12.0
no fix listed
3.18.0

Open the chart page →

1,190
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.01 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

1 of the 40 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
opensearchproject/opensearch:3.1.0474ea3fdf25d
commons-lang@2.6
commons-lang3@3.13.0
no fix listed
3.18.0

Open the chart page →

72,154
timesketchosdfir-infrastructureVerified publisher1.0.81 of 6See more

timesketch osdfir-infrastructure 1.0.8

1 of the 6 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.14.0466a49f379bb
commons-lang@2.6
commons-lang3@3.14.0
no fix listed
3.18.0

Open the chart page →

1,754
p4p40.1.01 of 7See more

p4 p4 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
commons-lang3@3.12.0
3.18.0

Open the chart page →

27,667
keycloakpascaliskeVerified publisher0.2.01 of 1See more

keycloak pascaliske 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.0.74388e2379b7e
commons-lang3@3.14.0
3.18.0

Open the chart page →

2,097
apache-knox-helmpfisterer-knox0.1.111 of 1See more

apache-knox-helm pfisterer-knox 0.1.11

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
farberg/apache-knox-docker:1.6.14b4a22487394
commons-lang@2.6
commons-lang3@3.11
no fix listed
3.18.0

Open the chart page →

6,236
spring-boot-openshiftpiominVerified publisher0.3.111 of 1See more

spring-boot-openshift piomin 0.3.11

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
commons-lang3@3.12.0
3.18.0

Open the chart page →

7,616
jmxproxypndaproject0.1.01 of 1See more

jmxproxy pndaproject 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
gradiant/jmxproxy:3.4.045eceb1bc55c
commons-lang3@3.6
3.18.0

Open the chart page →

4,177
Practica_4_helmpr04helm0.1.01 of 7See more

Practica_4_helm pr04helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
pcarrascoponce/planner:v1.0981fc482442c
commons-lang3@3.12.0
3.18.0

Open the chart page →

27,649
flink-kubernetes-operatorpresto-loadbalancer1.10.01 of 1See more

flink-kubernetes-operator presto-loadbalancer 1.10.0

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
ghcr.io/apache/flink-kubernetes-operator:c703255e9c2ce635b89
commons-lang3@3.16.0
3.18.0

Open the chart page →

3,316
hive-metastorepresto-loadbalancer0.2.31 of 1See more

hive-metastore presto-loadbalancer 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
datappeal/hive-metastore:lateste38c085a3567
commons-lang@2.6
commons-lang3@3.2
no fix listed
3.18.0

Open the chart page →

9,605
trinopresto-loadbalancer0.2.101 of 2See more

trino presto-loadbalancer 0.2.10

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
trinodb/trino:4796af989b0846d
commons-lang@2.6
no fix listed

Open the chart page →

2,264
punchline-javapunchplatform8.1.11 of 1See more

punchline-java punchplatform 8.1.1

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
ghcr.io/punchplatform/punchline-java:8.1.1d46ce7b96482
commons-lang3@3.12.0
3.18.0

Open the chart page →

1,995
jenkinsquench-jenkinsVerified publisher0.0.81 of 1See more

jenkins quench-jenkins 0.0.8

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/jenkinsdigest-pinnede92dba4e78c5
commons-lang@2.6
no fix listed

Open the chart page →

79

Container images carrying it

686 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
huertaslopez/i.huertas.2021-v.martinp.2021-planner:2.0.0e2c18bd65472
commons-lang3@3.12.0
3.18.0
1
hugohg34/planner:0.0.2171f61e8d7e2
commons-lang3@3.12.0
3.18.0
1
iamdorsah/bastillion:v0.1db83a0254d81
commons-lang@2.6
commons-lang3@3.12.0
no fix listed
3.18.0
1
ibmcom/app-nav-api:1.0.1ce9d2a564273
commons-lang@2.4
commons-lang3@3.7
no fix listed
3.18.0
1
ibmcom/app-nav-was-controller:1.0.1a6748792da26
commons-lang@2.4
commons-lang3@3.7
no fix listed
3.18.0
1
ibmcom/bai-elasticsearch-dev:19.0.25441dba2fa00
commons-lang@2.4
commons-lang3@3.4
no fix listed
3.18.0
1
ibmcom/bai-flink-dev:19.0.2e31ff09e8aad
commons-lang@2.6
commons-lang3@3.3.2
no fix listed
3.18.0
1
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
commons-lang3@3.4
3.18.0
1
ibmcom/icp-sert-bats:3.2.0b558f2b444ae
commons-lang3@3.7
3.18.0
1
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
commons-lang@2.4
commons-lang3@3.5
no fix listed
3.18.0
1
ibmcom/microclimate-portal:latested5505e5c7ec
commons-lang3@3.6
3.18.0
1
ibmcom/microclimate-theia:lateste17bdccc5030
commons-lang@2.1
commons-lang3@3.4
no fix listed
3.18.0
1
intelloop/atlas-cmms-backend:v1.5.14c61bc3dd3f8
commons-lang3@3.13.0
3.18.0
1
jacobalberty/unifi:v7.1.664a3616625dda
commons-lang3@3.10
3.18.0
1
jacobalberty/unifi:v7.4.162b3edc809a3ff
commons-lang3@3.12.0
3.18.0
1
jacobalberty/unifi:5.10.19c409924e2463
commons-lang@2.6
no fix listed
1
javaaurelio/dadosfake_web_springboot:latest8541a3cd021a
commons-lang3@3.13.0
3.18.0
1
jenkinsci/jenkins:2.67a1f33f004659
commons-lang@2.6
no fix listed
1
jenkins/jenkins:2.462.2-jdk1795313257a8cd
commons-lang@2.6
commons-lang3@3.14.0
no fix listed
3.18.0
1
jenkins/jenkins:2.440.3-jdk17de4fea113221
commons-lang@2.6
commons-lang3@3.13.0
no fix listed
3.18.0
1
jhipster/jhipster-registry:latest7184525acd4d
commons-lang@2.6
commons-lang3@3.12.0
no fix listed
3.18.0
1
jingking/geonetwork-hnap:4.2.843e74ab234e1
commons-lang@2.6
commons-lang3@3.12.0
no fix listed
3.18.0
1
juicedata/juicefs-csi-driver:v0.23.0d915e899e322
commons-lang@2.6
no fix listed
1
just1not2/streama:1.10.48a2305192dec
commons-lang@2.6
commons-lang3@3.4
no fix listed
3.18.0
1
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
commons-lang3@3.8.1
3.18.0
1
kafkakraft/kafka-connect:3.7.0062d697db7e5
commons-lang3@3.12.0
3.18.0
1
kafkakraft/kafka-controller:3.7.0f261ad288fce
commons-lang3@3.8.1
3.18.0
1
kafkakraft/kafkakraft:3.7.02e4b593b878b
commons-lang3@3.8.1
3.18.0
1
keyfactor/signserver-ce:7.3.2798fbbe00283
commons-lang@2.6
commons-lang3@3.11
no fix listed
3.18.0
1
kimb88/hello-world-spring-boot:latest0639155241cb
commons-lang@2.6
no fix listed
1
kubebb/gateway-api:v5.6.04d062f20309c
commons-lang@2.4
commons-lang3@3.12.0
no fix listed
3.18.0
1
kubebb/mesh-api:v5.7.0a3879931dfa1
commons-lang@2.6
commons-lang3@3.7
no fix listed
3.18.0
1
kvalitetsit/stakit-backend:0.3.0f0af0ba589af
commons-lang3@3.14.0
3.18.0
1
kyso/imagebox:latest68091eace89c
commons-lang@2.4
no fix listed
1
ladeit/ladeit:latest962b665ffe82
commons-lang@2.4
commons-lang3@3.3.2
no fix listed
3.18.0
1
library/cassandra:3.11.598531a31f213
commons-lang3@3.1
3.18.0
1
library/cassandra:3.11.10b095ff3248c6
commons-lang3@3.1
3.18.0
1
library/cassandra:2.1.20cb079c0d7a57
commons-lang3@3.1
3.18.0
1
library/couchdb:3.4.22817ad50b5c5
commons-lang3@3.16.0
3.18.0
1
library/crate:4.7.0c7984a05e15b
commons-lang@2.6
no fix listed
1
library/elasticsearch:8.17.32cc40b15dff8
commons-lang3@3.9
3.18.0
1
library/elasticsearch:8.15.0310b9fc03b06
commons-lang3@3.9
3.18.0
1
library/elasticsearch:9.5.38d09295845fe
commons-lang3@3.9
3.18.0
1
library/elasticsearch:9.5.19656a9ca03f8
commons-lang3@3.9
3.18.0
1
library/flink:1.11.2-scala_2.121fe4fb22a2a5
commons-lang3@3.3.2
3.18.0
1
library/neo4j:4.2.4348e3f56faa2
commons-lang3@3.9
3.18.0
1
library/neo4j:4.4.43c9fea42bd5a
commons-lang3@3.12.0
3.18.0
1
library/neo4j:5.18.18f01f7bb053e
commons-lang3@3.14.0
3.18.0
1
library/neo4j:3.4.5-enterprisea1ba477fa412
commons-lang@2.6
commons-lang3@3.7
no fix listed
3.18.0
1
library/neo4j:3.3.0d4eaa8484246
commons-lang@2.6
commons-lang3@3.5
no fix listed
3.18.0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.