CVE-2025-48924

Medium

Advisory

Published 11 Jul 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.023; 82nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 631; of 17,781 indexed, latest versions
Container images: 684; deployed by those charts
Fix available: 2 of 3; affected packages

Apache Commons Lang is vulnerable to Uncontrolled Recursion when processing long inputs

Carried by container images the latest versions of 631 of 17,781 indexed charts deploy, on 684 images.

Affected package	Affected versions	Fixed in	Images
commons-lang3maven	3.0, 3.1, 3.2, 3.2.1+17 more	3.18.0	599
commons-langmaven	2.1, 2.2, 2.4, 2.5+1 more	no fix listed	307
libcommons-lang3-javadeb	3.8-2	3.8-2ubuntu0.1~esm1	1

OSV records: GHSA-j288-q9x7-2f5v UBUNTU-CVE-2025-48924
Also known as: USN-8364-1

Charts affected

631 by stars

Chart

Latest

Affected images

Radar Score

dbrepodbrepo

1.13.3

1 of 25 See more

dbrepo dbrepo 1.13.3

1 of the 25 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
bitnamilegacy/opensearch :2.18.0-debian-12-r0	d8440eb6b290	commons-lang@2.6 commons-lang3@3.17.0	no fix listed 3.18.0

Open the chart page →

52,635

wiremockdeliveryhero

1.4.6

1 of 2 See more

wiremock deliveryhero 1.4.6

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
rodolpheche/wiremock :2.26.0	3be08a386092	commons-lang3@3.8.1	3.18.0

Open the chart page →

2,140

zammaddevplayer0

4.0.5

1 of 4 See more

zammad devplayer0 4.0.5

1 of the 4 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
zammad/zammad-docker-compose :zammad-elasticsearch-4.1.0-31	8274d75a51fc	commons-lang3@3.9	3.18.0

Open the chart page →

6,110

hbasedmwm-bigdata

0.1.6

2 of 5 See more

hbase dmwm-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
gradiant/hbase-base :2.0.1	a1ee6de94c04	commons-lang@2.6 commons-lang3@3.6	no fix listed 3.18.0
gradiant/hdfs :2.7.7	3b28784ba41f	commons-lang@2.6 commons-lang3@3.3.2	no fix listed 3.18.0

Open the chart page →

13,392

hive-metastoredmwm-bigdata

0.1.3

1 of 2 See more

hive-metastore dmwm-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
bde2020/hive :2.3.2-postgresql-metastore	620267768985	commons-lang@2.6 commons-lang3@3.3.2	no fix listed 3.18.0

Open the chart page →

6,882

opentsdbdmwm-bigdata

0.1.7

3 of 6 See more

opentsdb dmwm-bigdata 0.1.7

3 of the 6 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
gradiant/hbase-base :2.0.1	a1ee6de94c04	commons-lang@2.6 commons-lang3@3.6	no fix listed 3.18.0
gradiant/hdfs :2.7.7	3b28784ba41f	commons-lang@2.6 commons-lang3@3.3.2	no fix listed 3.18.0
gradiant/opentsdb :2.4.0	c33d53913869	commons-lang3@3.1	3.18.0

Open the chart page →

17,511

spinnakerdwardu-helm-charts

2.2.6

1 of 2 See more

spinnaker dwardu-helm-charts 2.2.6

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
gcr.io/spinnaker-marketplace/halyard :1.32.0	0ee5f968d2ab	commons-lang@2.6 commons-lang3@3.9	no fix listed 3.18.0

Open the chart page →

8,752

nifi-registrydysnix

1.1.5

1 of 2 See more

nifi-registry dysnix 1.1.5

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
apache/nifi-registry :0.8.0	974efa2f21da	commons-lang3@3.5	3.18.0

Open the chart page →

6,531

jenkinsedu

2.7.1

1 of 2 See more

jenkins edu 2.7.1

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	c1e4c349365f	commons-lang@2.6	no fix listed

Open the chart page →

4,423

enavenav-service-architecture

0.0.7

9 of 10 See more

enav enav-service-architecture 0.0.7

9 of the 10 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
apache/kafka :3.9.0	fbc7d7c428e3	commons-lang3@3.12.0	3.18.0
ghcr.io/gla-rad/enav-api-gateway :latest	8f4345c77dda	commons-lang@2.6	no fix listed
ghcr.io/gla-rad/enav-aton-admin-service :latest	cf85570b1324	commons-lang@2.6	no fix listed
ghcr.io/gla-rad/enav-aton-service :latest	3be878690629	commons-lang@2.6	no fix listed
ghcr.io/gla-rad/enav-aton-service-client :latest	f1629ac5f9ec	commons-lang@2.6	no fix listed
ghcr.io/gla-rad/enav-ckeeper :latest	415323ef112b	commons-lang@2.6	no fix listed
ghcr.io/gla-rad/enav-eureka :latest	05002092c621	commons-lang@2.6	no fix listed
ghcr.io/gla-rad/enav-msg-broker :latest	6fe372e4e481	commons-lang@2.6	no fix listed
ghcr.io/gla-rad/enav-vdes-controller :latest	c4c52955814f	commons-lang@2.6	no fix listed

Open the chart page →

15,860

neo4j-communityequinor-charts

1.2.5

1 of 1 See more

neo4j-community equinor-charts 1.2.5

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
library/neo4j :4.2.4	348e3f56faa2	commons-lang3@3.9	3.18.0

Open the chart page →

2,751

pitchforkexpediagroup

0.1.4

1 of 1 See more

pitchfork expediagroup 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
expediagroup/pitchfork :1.31	4f2cf61e7de9	commons-lang@2.6 commons-lang3@3.12.0	no fix listed 3.18.0

Open the chart page →

3,309

atlas-cmmsf3k-tech

0.151.5

1 of 4 See more

atlas-cmms f3k-tech 0.151.5

1 of the 4 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
intelloop/atlas-cmms-backend :v1.5.1	4c61bc3dd3f8	commons-lang3@3.13.0	3.18.0

Open the chart page →

5,291

featurehubfeaturehub

4.1.6

3 of 7 See more

featurehub featurehub 4.1.6

3 of the 7 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
featurehub/dacha2 :1.9.1	c8d5551b5e40	commons-lang3@3.12.0	3.18.0
featurehub/edge :1.9.1	98ad426737f6	commons-lang3@3.12.0	3.18.0
featurehub/mr :1.9.1	477d8bf771a9	commons-lang3@3.12.0	3.18.0

Open the chart page →

8,240

omada-controllergeek-cookbook

4.4.2

1 of 1 See more

omada-controller geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
mbentley/omada-controller :4.3	f4e682274bed	commons-lang@2.6	no fix listed

Open the chart page →

11,553

gentrace-self-hostedgentrace-self-hosted

0.1.3

2 of 9 See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

2 of the 9 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
confluentinc/cp-kafka :7.4.4	c0224a1adf7a	commons-lang3@3.8.1	3.18.0
provectuslabs/kafka-ui :latest	8f2ff02d64b0	commons-lang3@3.12.0	3.18.0

Open the chart page →

15,562

temporalglasskube

0.45.2-gk.1

1 of 14 See more

temporal glasskube 0.45.2-gk.1

1 of the 14 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
library/cassandra :3.11.3	ce85468c5bad	commons-lang3@3.1	3.18.0

Open the chart page →

16,346

hbasegradiant-bigdata

0.1.6

2 of 5 See more

hbase gradiant-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
gradiant/hbase-base :2.0.1	a1ee6de94c04	commons-lang@2.6 commons-lang3@3.6	no fix listed 3.18.0
gradiant/hdfs :2.7.7	3b28784ba41f	commons-lang@2.6 commons-lang3@3.3.2	no fix listed 3.18.0

Open the chart page →

13,392

stormgresearch

1.2.0

1 of 3 See more

storm gresearch 1.2.0

1 of the 3 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
library/storm :2.4.0	bd5d420506d6	commons-lang@2.6 commons-lang3@3.8.1	no fix listed 3.18.0

Open the chart page →

6,165

gridgaingridgain

1.0.6

1 of 1 See more

gridgain gridgain 1.0.6

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
gridgain/community :8.9.11	d32d182a0e6a	commons-lang@2.6 commons-lang3@3.14.0	no fix listed 3.18.0

Open the chart page →

4,679

hawkhawk

1.1.5

1 of 4 See more

hawk hawk 1.1.5

1 of the 4 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
ghcr.io/privacyengineering/hawk-service :latest	bfedf47bb5e0	commons-lang3@3.13.0	3.18.0

Open the chart page →

13,610

seata-serverheidaodageshiwo

1.0.0

1 of 1 See more

seata-server heidaodageshiwo 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
seataio/seata-server :1.5.1	ee1ed55f4144	commons-lang@2.6 commons-lang3@3.11	no fix listed 3.18.0

Open the chart page →

5,624

guacamolehelmforge

1.5.2

1 of 5 See more

guacamole helmforge 1.5.2

1 of the 5 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
guacamole/guacamole :1.6.0	f344085e618b	commons-lang3@3.17.0	3.18.0

Open the chart page →

8,716

iceberg-resticeberg-rest-fixture

0.0.1

1 of 2 See more

iceberg-rest iceberg-rest-fixture 0.0.1

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
ahmetfurkandemir/iceberg-rest-fixture-postgresql :1.10.0	142231a0b8b7	commons-lang3@3.14.0	3.18.0

Open the chart page →

3,470

traccarjeffresc

0.2.0

1 of 2 See more

traccar jeffresc 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
traccar/traccar :6.7-alpine	621c8d6d46fd	commons-lang3@3.17.0	3.18.0

Open the chart page →

1,341

jessejesse-chart

0.0.46

1 of 6 See more

jesse jesse-chart 0.0.46

1 of the 6 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
salehmir/jesse :1.10.10	1afa95f979e9	commons-lang3@3.13.0	3.18.0

Open the chart page →

3,421

jetic-operatorjetic-operator

2.0.2

1 of 1 See more

jetic-operator jetic-operator 2.0.2

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
apache/camel-k :1.10.4	3bb13d14f64a	commons-lang3@3.8.1	3.18.0

Open the chart page →

9,318

ipfix-generatorjfwenisch

0.3.16-feature-helm-package.0

1 of 1 See more

ipfix-generator jfwenisch 0.3.16-feature-helm-package.0

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
ghcr.io/jfwenisch/ipfix-generator :latest	a1b05567dbf6	commons-lang3@3.17.0	3.18.0

Open the chart page →

697

jenkinsjkim

5.5.14

1 of 2 See more

jenkins jkim 5.5.14

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.462.2-jdk17	95313257a8cd	commons-lang@2.6 commons-lang3@3.14.0	no fix listed 3.18.0

Open the chart page →

7,387

jmeterjmeter

1.2.5

1 of 1 See more

jmeter jmeter 1.2.5

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
liukunup/jmeter :5.5	9c079617a81b	commons-lang3@3.12.0	3.18.0

Open the chart page →

2,067

kafka-kraft-on-k8skafka-kraft-on-k8s

1.1.0

3 of 3 See more

kafka-kraft-on-k8s kafka-kraft-on-k8s 1.1.0

3 of the 3 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
kafkakraft/kafka-connect :3.7.0	062d697db7e5	commons-lang3@3.12.0	3.18.0
kafkakraft/kafka-controller :3.7.0	f261ad288fce	commons-lang3@3.8.1	3.18.0
kafkakraft/kafkakraft :3.7.0	2e4b593b878b	commons-lang3@3.8.1	3.18.0

Open the chart page →

14,130

kokukoku

1.0.0

2 of 7 See more

koku koku 1.0.0

2 of the 7 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
public.ecr.aws/v0r6c2e2/hive-metastore :latest	794b3bff9510	commons-lang@2.6 commons-lang3@3.12.0	no fix listed 3.18.0
public.ecr.aws/v0r6c2e2/trino :latest	c265156b00d1	commons-lang3@3.17.0	3.18.0

Open the chart page →

12,019

hertzbeatkubesphere-test

1.4.1

1 of 4 See more

hertzbeat kubesphere-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
apache/iotdb :0.13.3-node	afa47bf1692a	commons-lang@2.6 commons-lang3@3.8.1	no fix listed 3.18.0

Open the chart page →

7,710

magentomagento

3.2.3

1 of 12 See more

magento magento 3.2.3

1 of the 12 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
magento/magento-cloud-docker-opensearch :2.5-1.4.0	59fb6f0f1461	commons-lang@2.6 commons-lang3@3.9	no fix listed 3.18.0

Open the chart page →

13,479

metabasemetabase-helm

2.7.1

1 of 1 See more

metabase metabase-helm 2.7.1

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
metabase/metabase :v0.46.0	9ebdc664a6b2	commons-lang@2.6 commons-lang3@3.12.0	no fix listed 3.18.0

Open the chart page →

2,221

hadoopmiuler

1.2.2

1 of 1 See more

hadoop miuler 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
danisla/hadoop :2.9.0	255ba2dd739b	commons-lang@2.6 commons-lang3@3.4	no fix listed 3.18.0

Open the chart page →

5,772

clowder2ncsa

1.9.7

2 of 12 See more

clowder2 ncsa 1.9.7

2 of the 12 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
bitnamilegacy/elasticsearch :8.12.2	15d4647fd491	commons-lang3@3.12.0	3.18.0
bitnamilegacy/keycloak :20.0.5	cb04e49e6eb1	commons-lang@2.6 commons-lang3@3.11	no fix listed 3.18.0

Open the chart page →

37,373

glowrootnovum-rgi-charts

1.0.10

1 of 2 See more

glowroot novum-rgi-charts 1.0.10

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
novumrgi/glowroot-central :0.14.0-beta.3	8c54790675b1	commons-lang@2.6	no fix listed

Open the chart page →

2,308

openccuopenccu

3.89.8

1 of 1 See more

openccu openccu 3.89.8

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
ghcr.io/openccu/openccu :3.89.8.20260719	b2de2ff6e8e0	commons-lang@2.6	no fix listed

Open the chart page →

1,916

data-prepperopensearch-project-helm-charts

0.3.1

1 of 1 See more

data-prepper opensearch-project-helm-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
opensearchproject/data-prepper :2.8.0	57c25fa01d3c	commons-lang3@3.14.0	3.18.0

Open the chart page →

1,692

spring-boot-api-apppiomin

0.3.11

1 of 1 See more

spring-boot-api-app piomin 0.3.11

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
piomin/sample-spring-kotlin-microservice :1.1	871f784dd6bc	commons-lang3@3.12.0	3.18.0

Open the chart page →

7,576

portraitportrait

0.2.13

1 of 8 See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
treskon/portrait :DEV-latest	88e813f22347	commons-lang3@3.12.0	3.18.0

Open the chart page →

31,844

Jenkinsprasoonjenkins

0.1.0

1 of 1 See more

Jenkins prasoonjenkins 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	c1e4c349365f	commons-lang@2.6	no fix listed

Open the chart page →

2,476

nifi-registryprofyu

1.14.0-r001

1 of 1 See more

nifi-registry profyu 1.14.0-r001

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
apache/nifi-registry :1.14.0	090b7f87ec7f	commons-lang3@3.5	3.18.0

Open the chart page →

4,621

kafka-managerradar-base

2.3.1

1 of 1 See more

kafka-manager radar-base 2.3.1

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
radarbase/kafka-manager :1.3.3.18	1d2af7dd5a4e	commons-lang3@3.4	3.18.0

Open the chart page →

4,000

shinyproxyremche

0.6.6

1 of 2 See more

shinyproxy remche 0.6.6

1 of the 2 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
remche/shinyproxy :2.6.1	8bcda8a04d3b	commons-lang@2.6 commons-lang3@3.12.0	no fix listed 3.18.0

Open the chart page →

3,958

reservation-appreservation-app

1.0.9

1 of 4 See more

reservation-app reservation-app 1.0.9

1 of the 4 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
zbalogh/reservation-api-server :1.0.9	7c247e399a1f	commons-lang3@3.12.0	3.18.0

Open the chart page →

6,639

resurfaceresurfaceio

3.9.0

1 of 3 See more

resurface resurfaceio 3.9.0

1 of the 3 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
resurfaceio/resurface :3.7.84	d5cda2f64109	commons-lang3@3.17.0	3.18.0

Open the chart page →

7,432

dev-feedrm3l

3.1.2

1 of 3 See more

dev-feed rm3l 3.1.2

1 of the 3 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
rm3l/dev-feed-api :latest	9a7f732245a3	commons-lang3@3.12.0	3.18.0

Open the chart page →

9,837

service-names-port-numbersrm3l

0.26.1

1 of 1 See more

service-names-port-numbers rm3l 0.26.1

1 of the 1 container images this version deploys carry CVE-2025-48924.

Container image	Digest	Package	Fixed in
rm3l/service-names-port-numbers :0.12.1	62d1cc4223e5	commons-lang3@3.12.0	3.18.0

Open the chart page →

10,120

Container images carrying it

684 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
jenkins/jenkins :2.568.3-jdk21 :2.568.3-lts-jdk21 :lts	c1e4c349365f	commons-lang@2.6	no fix listed	13
gradiant/hdfs :2.7.7	3b28784ba41f	commons-lang@2.6 commons-lang3@3.3.2	no fix listed 3.18.0	7
library/cassandra :3.11.3	ce85468c5bad	commons-lang3@3.1	3.18.0	7
wurstmeister/kafka :latest	2d4bbf9cc83d	commons-lang3@3.8.1	3.18.0	7
solsson/kafka :latest	41e5d8f6f290	commons-lang3@3.8.1	3.18.0	5
bde2020/hive :2.3.2-postgresql-metastore	620267768985	commons-lang@2.6 commons-lang3@3.3.2	no fix listed 3.18.0	4
gradiant/hbase-base :2.0.1	a1ee6de94c04	commons-lang@2.6 commons-lang3@3.6	no fix listed 3.18.0	4
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	commons-lang3@3.11	3.18.0	4
mastercloudapps/planner :v1.23	40a950b311b2	commons-lang3@3.12.0	3.18.0	4
apache/shenyu-admin :2.4.2	e8b7c4ddd069	commons-lang3@3.3.2	3.18.0	3
apache/shenyu-bootstrap :2.4.2	0bd3b25c4be4	commons-lang@2.6 commons-lang3@3.3.2	no fix listed 3.18.0	3
codeurjc/planner :v1.0	800cf520c245	commons-lang3@3.12.0	3.18.0	3
gchq/hdfs :3.3.3	5ec58edbb2db	commons-lang3@3.12.0	3.18.0	3
guacamole/guacamole :1.6.0	f344085e618b	commons-lang3@3.17.0	3.18.0	3
jacobalberty/unifi :v10.0.162	896c0ab82d33	commons-lang3@3.14.0	3.18.0	3
library/solr :8.11.1	8c5f7881cebb	commons-lang@2.6 commons-lang3@3.10	no fix listed 3.18.0	3
mockserver/mockserver :5.15.0 :mockserver-5.15.0	0f9ef78c9489	commons-lang3@3.12.0	3.18.0	3
provectuslabs/kafka-ui :latest	8f2ff02d64b0	commons-lang3@3.12.0	3.18.0	3
airbyte/workload-launcher :2.2.0	119be7bfb719	commons-lang3@3.14.0	3.18.0	2
amazon/opendistro-for-elasticsearch :1.13.3	2acfa1dcc5f8	commons-lang@2.6 commons-lang3@3.9	no fix listed 3.18.0	2
apache/druid :37.0.0	0116fb802786	commons-lang@2.6 commons-lang3@3.12.0	no fix listed 3.18.0	2
apache/fineract :1.12.1	a83cf1980609	commons-lang3@3.17.0	3.18.0	2
apache/nifi-registry :1.26.0	7cdfd8deec92	commons-lang3@3.14.0	3.18.0	2
apachepulsar/pulsar-manager :v0.1.0	b341ef76a852	commons-lang@2.6 commons-lang3@3.7	no fix listed 3.18.0	2
apache/rocketmq :5.4.0	319cd8a81ed1	commons-lang@2.6 commons-lang3@3.12.0	no fix listed 3.18.0	2
apacherocketmq/rocketmq-dashboard :2.1.0	ce78506bd6fe	commons-lang3@3.12.0	3.18.0	2
apache/tika :2.9.2.1-full	ae0b86d3c4d0	commons-lang3@3.14.0	3.18.0	2
bitnamilegacy/elasticsearch :9.1.2-debian-12-r0	00176a47afa0	commons-lang3@3.17.0	3.18.0	2
confluentinc/cp-kafka :6.2.11-1-ubi8	ac776fad95a5	commons-lang3@3.8.1	3.18.0	2
confluentinc/cp-zookeeper :latest	7610a50b13e7	commons-lang3@3.12.0	3.18.0	2
confluentinc/cp-zookeeper :6.2.11-1-ubi8	cae577096489	commons-lang3@3.8.1	3.18.0	2
danisla/hadoop :2.9.0	255ba2dd739b	commons-lang@2.6 commons-lang3@3.4	no fix listed 3.18.0	2
dependencytrack/apiserver :4.6.3	485ac0952c02	commons-lang3@3.12.0	3.18.0	2
geoservercloud/geoserver-cloud-gateway :1.0-RC3	756559ee788a	commons-lang@2.6	no fix listed	2
geoservercloud/geoserver-cloud-rest :1.0-RC3	99540eef78ad	commons-lang@2.5 commons-lang3@3.10	no fix listed 3.18.0	2
geoservercloud/geoserver-cloud-wcs :1.0-RC3	5c254c53a357	commons-lang@2.5 commons-lang3@3.10	no fix listed 3.18.0	2
geoservercloud/geoserver-cloud-webui :1.0-RC3	c687b1cbc891	commons-lang@2.5 commons-lang3@3.10	no fix listed 3.18.0	2
geoservercloud/geoserver-cloud-wfs :1.0-RC3	5288f320cf36	commons-lang@2.5 commons-lang3@3.10	no fix listed 3.18.0	2
geoservercloud/geoserver-cloud-wms :1.0-RC3	a30a60ac6cd0	commons-lang@2.5 commons-lang3@3.10	no fix listed 3.18.0	2
gotenberg/gotenberg :8.36.0	87c16b9f3642	commons-lang3@3.12.0	3.18.0	2
gotenberg/gotenberg :8 :8.37.0	f29984bd1e22	commons-lang3@3.12.0	3.18.0	2
gradiant/hive :2.3.2-postgresql-metastore	aae4f8a21f8b	commons-lang@2.6 commons-lang3@3.1	no fix listed 3.18.0	2
gradiant/opentsdb :2.4.0	c33d53913869	commons-lang3@3.1	3.18.0	2
gradiant/spark :2.4.4-python-alpine	97657d56e927	commons-lang@2.6 commons-lang3@3.5	no fix listed 3.18.0	2
graviteeio/apim-gateway :4.12.19-debian	05fd67a93056	commons-lang3@3.17.0	3.18.0	2
graviteeio/apim-management-api :4.12.19-debian	27374522cd04	commons-lang3@3.17.0	3.18.0	2
hazelcast/hazelcast :5.5.0	5dd5d31c7a06	commons-lang3@3.14.0	3.18.0	2
hazelcast/management-center :5.5.2	991ddb27c251	commons-lang3@3.14.0	3.18.0	2
hookiesolutions/webhookie :latest	0629694246ba	commons-lang3@3.12.0	3.18.0	2
hyperledger/besu :22.4-openjdk-latest	a674d35eec9a	commons-lang3@3.12.0	3.18.0	2