StackRadar

CVE-2025-48924

Medium

Advisory

Published 11 Jul 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.023
82nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
631
of 17,781 indexed, latest versions
Container images
684
deployed by those charts
Fix available
2 of 3
affected packages

Apache Commons Lang is vulnerable to Uncontrolled Recursion when processing long inputs

Carried by container images the latest versions of 631 of 17,781 indexed charts deploy, on 684 images.

Affected packageAffected versionsFixed inImages
commons-lang3maven3.0, 3.1, 3.2, 3.2.1+17 more3.18.0599
commons-langmaven2.1, 2.2, 2.4, 2.5+1 moreno fix listed307
libcommons-lang3-javadeb3.8-23.8-2ubuntu0.1~esm11
OSV records
GHSA-j288-q9x7-2f5vUBUNTU-CVE-2025-48924
Also known as
USN-8364-1

Charts affected

631 by stars
ChartLatestAffected imagesRadar Score
unifi-controllerqonstruktVerified publisher2.6.11 of 1See more

unifi-controller qonstrukt 2.6.1

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:8.0.240ae315a3a456
commons-lang3@3.12.0
3.18.0

Open the chart page →

10,469
flinkriskfocus0.2.01 of 1See more

flink riskfocus 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
library/flink:1.11.2-scala_2.121fe4fb22a2a5
commons-lang3@3.3.2
3.18.0

Open the chart page →

3,235
scm-managerscm-manager3.12.11 of 1See more

scm-manager scm-manager 3.12.1

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
scmmanager/scm-manager:3.12.1bfb766050f34
commons-lang@2.6
no fix listed

Open the chart page →

649
sonarqube-dcesonarqubeVerified publisher0.1.2+1212 of 5See more

sonarqube-dce sonarqube 0.1.2+121

2 of the 5 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
library/sonarqube:9.1.0-datacenter-search7e43ff493a47
commons-lang@2.6
commons-lang3@3.4
no fix listed
3.18.0
library/sonarqube:9.1.0-datacenter-appa9bc5a3a1fc3
commons-lang@2.6
commons-lang3@3.10
no fix listed
3.18.0

Open the chart page →

8,698
hivebigdata-chartsVerified publisher0.1.81 of 1See more

hive bigdata-charts 0.1.8

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
commons-lang@2.6
commons-lang3@3.9
no fix listed
3.18.0

Open the chart page →

7,166
opensearchcaptnbpVerified publisher3.1.11 of 2See more

opensearch captnbp 3.1.1

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.19.269588c664014
commons-lang@2.6
commons-lang3@3.17.0
no fix listed
3.18.0

Open the chart page →

998
cmak-operatorcmak-operatorVerified publisher2.2.22 of 3See more

cmak-operator cmak-operator 2.2.2

2 of the 3 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
library/zookeeper:3.6.180ad2170ad62
commons-lang@2.6
no fix listed
ghcr.io/eshepelyuk/dckr/cmak-3.0.0.6:1.2.090a34412c6b5
commons-lang3@3.6
3.18.0

Open the chart page →

4,605
codetogethercodetogether1.4.251 of 1See more

codetogether codetogether 1.4.25

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
codetogether/codetogether:latest4348c8a38752
commons-lang3@3.4
3.18.0

Open the chart page →

7,450
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
library/couchdb:3.4.22817ad50b5c5
commons-lang3@3.16.0
3.18.0

Open the chart page →

17,404
hdfsdmwm-bigdataVerified publisher1.0.11 of 2See more

hdfs dmwm-bigdata 1.0.1

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
gradiant/hdfs:3.2.2e3bf364fe713
commons-lang@2.6
commons-lang3@3.7
no fix listed
3.18.0

Open the chart page →

7,948
hivedmwm-bigdataVerified publisher0.1.63 of 5See more

hive dmwm-bigdata 0.1.6

3 of the 5 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
commons-lang@2.6
commons-lang3@3.3.2
no fix listed
3.18.0
gradiant/hdfs:2.7.73b28784ba41f
commons-lang@2.6
commons-lang3@3.3.2
no fix listed
3.18.0
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
commons-lang@2.6
commons-lang3@3.1
no fix listed
3.18.0

Open the chart page →

20,837
flowableflowable-oss7.1.01 of 2See more

flowable flowable-oss 7.1.0

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
flowable/flowable-rest:7.1.0b7ae287502cd
commons-lang3@3.17.0
3.18.0

Open the chart page →

2,784
flyte-binaryflyte2.0.481 of 4See more

flyte-binary flyte 2.0.48

1 of the 4 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
commons-lang@2.6
commons-lang3@3.17.0
no fix listed
3.18.0

Open the chart page →

4,641
unifigeek-cookbookVerified publisher5.1.31 of 1See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.4.162b3edc809a3ff
commons-lang3@3.12.0
3.18.0

Open the chart page →

11,839
rocketmqgin1.1.02 of 2See more

rocketmq gin 1.1.0

2 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
apache/rocketmq:4.9.35ac2a4e0f627
commons-lang3@3.4
3.18.0
apacherocketmq/rocketmq-dashboard:1.0.024799aff6cf8
commons-lang3@3.4
3.18.0

Open the chart page →

9,154
apimgraviteeioVerified publisher4.12.192 of 4See more

apim graviteeio 4.12.19

2 of the 4 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.19-debian05fd67a93056
commons-lang3@3.17.0
3.18.0
graviteeio/apim-management-api:4.12.19-debian27374522cd04
commons-lang3@3.17.0
3.18.0

Open the chart page →

4,806
nacosgujunxiang0.1.51 of 1See more

nacos gujunxiang 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
commons-lang@2.6
commons-lang3@3.17.0
no fix listed
3.18.0

Open the chart page →

1,767
nzbhydra2halkeye2.30.11 of 2See more

nzbhydra2 halkeye 2.30.1

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
binhex/arch-nzbhydra2:3.1.0-1-01fb8952921ab6
commons-lang@2.6
commons-lang3@3.7
no fix listed
3.18.0

Open the chart page →

6,711
hazelcasthazelcastVerified publisher5.10.22 of 2See more

hazelcast hazelcast 5.10.2

2 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
hazelcast/hazelcast:5.5.05dd5d31c7a06
commons-lang3@3.14.0
3.18.0
hazelcast/management-center:5.5.2991ddb27c251
commons-lang3@3.14.0
3.18.0

Open the chart page →

2,634
hive-metastoreheva-helm-chartsVerified publisher0.2.01 of 2See more

hive-metastore heva-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
sslhep/hive-metastore:3.1.39e80af083079
commons-lang@2.6
commons-lang3@3.4
no fix listed
3.18.0

Open the chart page →

7,335
cratedbhmdmph2.0.31 of 2See more

cratedb hmdmph 2.0.3

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
library/crate:4.7.0c7984a05e15b
commons-lang@2.6
no fix listed

Open the chart page →

1,335
me-untethr-nostr-relaykronkltdVerified publisher0.1.41 of 1See more

me-untethr-nostr-relay kronkltd 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
duck1123/me.untethr.nostr-relay:0.2.1119fc5d4cbfb
commons-lang3@3.8.1
3.18.0

Open the chart page →

2,072
skywalkingkubesphere-testVerified publisher3.1.02 of 4See more

skywalking kubesphere-test 3.1.0

2 of the 4 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.1.0-es7641237e0299b
commons-lang@2.4
commons-lang3@3.7
no fix listed
3.18.0
apache/skywalking-ui:8.1.067d50e4deff4
commons-lang@2.6
commons-lang3@3.1
no fix listed
3.18.0

Open the chart page →

18,042
kafdroplsst-sqre0.1.31 of 1See more

kafdrop lsst-sqre 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
commons-lang3@3.12.0
3.18.0

Open the chart page →

7,901
oesopsmxVerified publisher4.0.324 of 25See more

oes opsmx 4.0.32

4 of the 25 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-gate:isd-spin-2025.10.01-5c720954-2025112608102b3554029737
commons-lang@2.6
commons-lang3@3.12.0
no fix listed
3.18.0
quay.io/opsmxpublic/ubi8-oes-audit-client:isd-spin-2025.10.01-cb1bfce-20251126103732a5b1887eab
commons-lang@2.6
commons-lang3@3.13.0
no fix listed
3.18.0
quay.io/opsmxpublic/ubi8-oes-autopilot:isd-spin-2025.10.01-af26a30d4-20251126105458bd0bcf72f9
commons-lang3@3.13.0
3.18.0
quay.io/opsmxpublic/ubi8-oes-platform:isd-spin-2025.10.01-a7c191ec-2025112611228ed603ab7417
commons-lang3@3.13.0
3.18.0

Open the chart page →

107,811
repoflowrepoflow-helm-public0.9.11 of 8See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
library/elasticsearch:8.15.0310b9fc03b06
commons-lang3@3.9
3.18.0

Open the chart page →

13,521
rocketmq-clusterrocketmq12.6.02 of 2See more

rocketmq-cluster rocketmq 12.6.0

2 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
apache/rocketmq:5.4.0319cd8a81ed1
commons-lang@2.6
commons-lang3@3.12.0
no fix listed
3.18.0
apacherocketmq/rocketmq-dashboard:2.1.0ce78506bd6fe
commons-lang3@3.12.0
3.18.0

Open the chart page →

6,328
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
commons-lang3@3.8
libcommons-lang3-java@3.8-2
3.18.0
3.8-2ubuntu0.1~esm1

Open the chart page →

24,488
hive-metastoreslamdev0.0.51 of 2See more

hive-metastore slamdev 0.0.5

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
commons-lang@2.6
commons-lang3@3.4
no fix listed
3.18.0

Open the chart page →

8,198
snowplow-iglu-serversnowplow-devopsOfficialVerified publisher0.19.01 of 1See more

snowplow-iglu-server snowplow-devops 0.19.0

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
snowplow/iglu-server:0.12.0-distroless5a38033f07c1
commons-lang3@3.12.0
3.18.0

Open the chart page →

230
kafka-chartsoldevelo-kafka-chart32.4.41 of 1See more

kafka-chart soldevelo-kafka-chart 32.4.4

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
soldevelo/kafka:4.0.0-debian-12-r0cfdc08c2f577
commons-lang3@3.12.0
3.18.0

Open the chart page →

2,355
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.262 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

2 of the 6 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:3.5.0-debian-11-r08657bb93a581
commons-lang3@3.8.1
3.18.0
thingsboard/tb-node:3.6.0f40a542832c4
commons-lang3@3.4
3.18.0

Open the chart page →

14,566
vrijbrpvrijbrpVerified publisher0.1.53 of 5See more

vrijbrp vrijbrp 0.1.5

3 of the 5 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
vrijbrp/balie:developbc85c89530b9
commons-lang3@3.12.0
3.18.0
vrijbrp/balie-ws:developc6603cb829ea
commons-lang3@3.12.0
3.18.0
vrijbrp/haal-centraal-brp-bevragen:develop5c770c2ae48c
commons-lang3@3.12.0
3.18.0

Open the chart page →

8,811
activemq-artemisactivemq-artemis-helm0.3.61 of 1See more

activemq-artemis activemq-artemis-helm 0.3.6

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
vromero/activemq-artemis:2.16.0408d6a46b153
commons-lang3@3.0
3.18.0

Open the chart page →

4,419
migrationadeptia-connect-migrationVerified publisher4.8.11 of 1See more

migration adeptia-connect-migration 4.8.1

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
adeptiainc/adeptia-connect-migration:4.8.1f1087da3da0b
commons-lang@2.6
no fix listed

Open the chart page →

451
paperless-ngxadnoctemVerified publisher0.4.22 of 5See more

paperless-ngx adnoctem 0.4.2

2 of the 5 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
apache/tika:2.9.0.092d055a84e9e
commons-lang3@3.13.0
3.18.0
gotenberg/gotenberg:8.36.087c16b9f3642
commons-lang3@3.12.0
3.18.0

Open the chart page →

19,691
clearml-servingallegroaiVerified publisher1.6.21 of 9See more

clearml-serving allegroai 1.6.2

1 of the 9 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:3.4.0-debian-11-r6ac64829e45b3
commons-lang3@3.8.1
3.18.0

Open the chart page →

17,877
apache-rangerapache-ranger0.1.01 of 2See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
apache/ranger:2.7.076c176e8a0e4
commons-lang@2.6
commons-lang3@3.14.0
no fix listed
3.18.0

Open the chart page →

7,740
soarv113assist-iot-cybersecurity-monitoring-soar0.1.33 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

3 of the 5 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
commons-lang3@3.1
3.18.0
assistiot/cybersecurity-monitoring_ir-ctx:latestae8b3d72eb5d
commons-lang@2.6
no fix listed
assistiot/cybersecurity-monitoring_ir-thv:latestc8b6c7eaa0cd
commons-lang@2.6
commons-lang3@3.8.1
no fix listed
3.18.0

Open the chart page →

17,896
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-elk:latestba1d85ec3739
commons-lang@2.6
commons-lang3@3.9
no fix listed
3.18.0

Open the chart page →

10,730
nacosbytectl0.1.61 of 1See more

nacos bytectl 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
commons-lang@2.6
commons-lang3@3.17.0
no fix listed
3.18.0

Open the chart page →

1,767
geoserver-cloudcamptocamp20.0.56 of 11See more

geoserver-cloud camptocamp2 0.0.5

6 of the 11 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
commons-lang@2.6
no fix listed
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
commons-lang@2.5
commons-lang3@3.10
no fix listed
3.18.0
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
commons-lang@2.5
commons-lang3@3.10
no fix listed
3.18.0
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
commons-lang@2.5
commons-lang3@3.10
no fix listed
3.18.0
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
commons-lang@2.5
commons-lang3@3.10
no fix listed
3.18.0
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
commons-lang@2.5
commons-lang3@3.10
no fix listed
3.18.0

Open the chart page →

84,444
geoserverCloudcamptocamp20.0.66 of 11See more

geoserverCloud camptocamp2 0.0.6

6 of the 11 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
commons-lang@2.6
no fix listed
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
commons-lang@2.5
commons-lang3@3.10
no fix listed
3.18.0
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
commons-lang@2.5
commons-lang3@3.10
no fix listed
3.18.0
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
commons-lang@2.5
commons-lang3@3.10
no fix listed
3.18.0
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
commons-lang@2.5
commons-lang3@3.10
no fix listed
3.18.0
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
commons-lang@2.5
commons-lang3@3.10
no fix listed
3.18.0

Open the chart page →

84,444
cbioportalcbioportalOfficialVerified publisher1.1.01 of 1See more

cbioportal cbioportal 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
cbioportal/cbioportal:6.4.1-web-shenandoah08debbd2dbf9
commons-lang3@3.17.0
3.18.0

Open the chart page →

3,674
cert-vaultcert-vaultOfficialVerified publisher2.12.01 of 7See more

cert-vault cert-vault 2.12.0

1 of the 7 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
ghcr.io/gregperlinli/certvault:2.12.0a7d0cc9e260a
commons-lang3@3.17.0
3.18.0

Open the chart page →

15,863
distributed-jmetercloudnativeapp1.0.11 of 1See more

distributed-jmeter cloudnativeapp 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
pedrocesarti/jmeter-docker:3.314851f144f57
commons-lang@2.5
commons-lang3@3.6
no fix listed
3.18.0

Open the chart page →

4,532
hadoopcloudnativeapp1.1.01 of 1See more

hadoop cloudnativeapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
commons-lang@2.6
commons-lang3@3.4
no fix listed
3.18.0

Open the chart page →

5,772
ignitecloudnativeapp1.0.01 of 1See more

ignite cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
apacheignite/ignite:2.7.0d7deab68b8fa
commons-lang@2.6
no fix listed

Open the chart page →

7,891
nifid4nVerified publisher2.0.01 of 5See more

nifi d4n 2.0.0

1 of the 5 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
apache/nifi-registry:1.26.07cdfd8deec92
commons-lang3@3.14.0
3.18.0

Open the chart page →

5,398
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2025-48924.

Container imageDigestPackageFixed in
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
commons-lang3@3.9
3.18.0

Open the chart page →

38,346

Container images carrying it

684 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
library/sonarqube:6.7.6-community0ae5169e3d0f
commons-lang@2.6
no fix listed
1
library/sonarqube:9.1.0-datacenter-search7e43ff493a47
commons-lang@2.6
commons-lang3@3.4
no fix listed
3.18.0
1
library/sonarqube:8.9.2-community88cd63154d4b
commons-lang@2.6
commons-lang3@3.12.0
no fix listed
3.18.0
1
library/sonarqube:8.2-communitya246bc64207e
commons-lang@2.6
commons-lang3@3.4
no fix listed
3.18.0
1
library/sonarqube:9.1.0-datacenter-appa9bc5a3a1fc3
commons-lang@2.6
commons-lang3@3.10
no fix listed
3.18.0
1
library/sonarqube:8.9-communityeb2f0be32efd
commons-lang@2.6
commons-lang3@3.10
no fix listed
3.18.0
1
library/sonarqube:10.0.0-communityef9723cf4fe4
commons-lang@2.6
commons-lang3@3.12.0
no fix listed
3.18.0
1
library/storm:2.4.0bd5d420506d6
commons-lang@2.6
commons-lang3@3.8.1
no fix listed
3.18.0
1
library/zookeeper:3.43882d9493d38
commons-lang@2.6
no fix listed
1
library/zookeeper:3.6.24c8a6d3b2338
commons-lang@2.6
no fix listed
1
lightbend/spark-history-server:2.4.00bedf37f428a
commons-lang@2.6
commons-lang3@3.5
no fix listed
3.18.0
1
linuxserver/airsonic-advanced:11.1.4d286a7f55a59
commons-lang@2.6
commons-lang3@3.16.0
no fix listed
3.18.0
1
linuxserver/unifi-controller:8.0.240ae315a3a456
commons-lang3@3.12.0
3.18.0
1
linuxserver/unifi-controller:7.3.83ab105cc50322
commons-lang3@3.12.0
3.18.0
1
liukunup/jmeter:5.59c079617a81b
commons-lang3@3.12.0
3.18.0
1
lmenezes/cerebro:0.8.13e860068e403
commons-lang3@3.6
3.18.0
1
localstack/localstack:3.19d278167f2b7
commons-lang3@3.12.0
3.18.0
1
lourdesmorente/new-planner:1.0.0608745878cdb
commons-lang3@3.12.0
3.18.0
1
lsmaster/kafka-connect-wrapper:6.1.0-0.1061eb5fbfa00
commons-lang3@3.8.1
3.18.0
1
ma1uta/ma1sd:2.5.0ee2a56d8b8ca
commons-lang@2.6
commons-lang3@3.12.0
no fix listed
3.18.0
1
magento/magento-cloud-docker-opensearch:2.5-1.4.059fb6f0f1461
commons-lang@2.6
commons-lang3@3.9
no fix listed
3.18.0
1
maksimkavalenka/microservices-learning.resource-processor:latest64a25afb8748
commons-lang@2.6
commons-lang3@3.12.0
no fix listed
3.18.0
1
maksimkavalenka/microservices-learning.resource-service:latest13ad9bb170a0
commons-lang@2.6
commons-lang3@3.12.0
no fix listed
3.18.0
1
maksimkavalenka/microservices-learning.song-service:latest2bcdac368b07
commons-lang@2.6
commons-lang3@3.12.0
no fix listed
3.18.0
1
massimolauri/wso2is:5.11.0-centose08abf0ce767
commons-lang@2.6
commons-lang3@3.2.1
no fix listed
3.18.0
1
metabase/metabase:v0.53.4.17807bc5cad17
commons-lang@2.6
commons-lang3@3.17.0
no fix listed
3.18.0
1
metabase/metabase:v0.46.09ebdc664a6b2
commons-lang@2.6
commons-lang3@3.12.0
no fix listed
3.18.0
1
microcks/microcks:0.8.0e3a3e0c67b09
commons-lang@2.4
commons-lang3@3.4
no fix listed
3.18.0
1
mintproject/model-catalog-endpoint:29256555a6fbaefae4729d5cd259564708a4ab04ffbb13f20465
commons-lang3@3.4
3.18.0
1
molynx/planner:v1441c9f52f092
commons-lang3@3.12.0
3.18.0
1
muluder/prograncontrollermcord:0.1.843b597a93da7
commons-lang@2.6
commons-lang3@3.4
no fix listed
3.18.0
1
nacos/nacos-server:v3.0.20e951a1d07bb
commons-lang@2.6
commons-lang3@3.17.0
no fix listed
3.18.0
1
nacos/nacos-server:v3.0.130a39cb0c54d
commons-lang@2.6
commons-lang3@3.17.0
no fix listed
3.18.0
1
nacos/nacos-server:1.4.1fe6e5688cdf3
commons-lang@2.6
commons-lang3@3.4
no fix listed
3.18.0
1
ncsa/datawolf:4.7.0af6649d59150
commons-lang3@3.12.0
3.18.0
1
ncsapolyglot/converters-avconv:latestc44b22eb58bb
commons-lang3@3.4
3.18.0
1
ncsapolyglot/converters-ebook-convert:latest438d82cdbdb5
commons-lang3@3.4
3.18.0
1
ncsapolyglot/converters-ffmpeg:latest48c852c1204b
commons-lang3@3.4
3.18.0
1
ncsapolyglot/converters-flac:latest072cf5bc6f99
commons-lang3@3.4
3.18.0
1
ncsapolyglot/converters-gdal:latestf746049515c1
commons-lang3@3.4
3.18.0
1
ncsapolyglot/converters-ghostscript:latestf350da56dd55
commons-lang3@3.4
3.18.0
1
ncsapolyglot/converters-htmldoc:latest317dd9e56922
commons-lang3@3.4
3.18.0
1
ncsapolyglot/converters-imagemagick:latestd244ea8c32ac
commons-lang3@3.4
3.18.0
1
ncsapolyglot/converters-openjpeg:latest2ba4af461d51
commons-lang3@3.4
3.18.0
1
ncsapolyglot/converters-txt2html:latest30ee96508c0b
commons-lang3@3.4
3.18.0
1
ncsapolyglot/converters-unoconv:latest1d9cebe3022b
commons-lang3@3.4
3.18.0
1
ncsapolyglot/converters-zip:latestf889fe30e2c7
commons-lang3@3.4
3.18.0
1
ncsapolyglot/polyglot:2.4.097a8c01c076e
commons-lang3@3.4
3.18.0
1
novumrgi/glowroot-central:0.14.0-beta.38c54790675b1
commons-lang@2.6
no fix listed
1
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
commons-lang@2.6
commons-lang3@3.14.0
no fix listed
3.18.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.