StackRadar

CVE-2025-67030

High

Advisory

Published 25 Mar 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.3
base score, highest
EPSS
0.007
50th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
196
of 17,781 indexed, latest versions
Container images
208
deployed by those charts
Fix available
28 of 28
affected packages

Red Hat Security Advisory: maven:3.8 security update

Carried by container images the latest versions of 196 of 17,781 indexed charts deploy, on 208 images.

Affected packageAffected versionsFixed inImages
javapackages-toolsrpm5.3.0-1.module+el8+2447+6f56d9a6, 5.3.0-2.module+el8.3.0+125+5da1ae290:5.3.0-2.module+el8.10.0+2003+8aeac9cb, 0:5.3.0-2.module+el8.10.0+23274+27840b4568
plexus-utilsrpm3.3.0-3.module+el8.3.0+6804+157bd82e, 3.3.0-3.module+el8.6.0+13337+afcb49ec, 3.3.0-10.module+el8.8.0+18044+0a924b8f, 3.3.0-10.module+el9.2.0+18047+4ad4bba4+2 more0:3.3.0-10.module+el8.8.0+24386+48baf958.1, 0:3.3.0-11.module+el8.10.0+24366+080b405b.1, 0:3.5.1-17.module+el9.8.0+24375+95248a69.145
apache-commons-clirpm1.4-7.module+el8.3.0+6804+157bd82e, 1.4-7.module+el8.6.0+13337+afcb49ec, 1.5.0-4.module+el8.8.0+18044+0a924b8f, 1.5.0-4.module+el9.2.0+18047+4ad4bba4+1 more0:1.5.0-5.module+el8.10.0+21301+657f54a3, 0:1.9.0-4.module+el9.8.0+24092+eb9f67d023
apache-commons-codecrpm1.13-3.module+el8.3.0+6804+157bd82e, 1.13-3.module+el8.6.0+13337+afcb49ec, 1.15-7.module+el8.8.0+18044+0a924b8f, 1.15-7.module+el9.2.0+18047+4ad4bba4+1 more0:1.15-8.module+el8.10.0+21301+657f54a3, 0:1.17.1-8.module+el9.8.0+24092+eb9f67d023
apache-commons-iorpm1:2.6-6.module+el8.3.0+6804+157bd82e, 1:2.6-6.module+el8.6.0+13337+afcb49ec, 1:2.11.0-2.module+el8.8.0+18044+0a924b8f, 1:2.11.0-2.module+el9.2.0+18047+4ad4bba4+1 more1:2.11.0-3.module+el8.10.0+21301+657f54a3, 1:2.16.1-9.module+el9.8.0+24092+eb9f67d023
atinjectrpm1-31.20100611svn86.module+el8.3.0+6804+157bd82e, 1-31.20100611svn86.module+el8.6.0+13337+afcb49ec, 1.0.5-4.module+el8.8.0+18044+0a924b8f, 1.0.5-4.module+el9.2.0+18047+4ad4bba4+1 more0:1.0.5-5.module+el8.10.0+21301+657f54a3, 0:1.0.5-14.module+el9.8.0+24092+eb9f67d023
google-guicerpm4.2.2-4.module+el8.3.0+6804+157bd82e, 4.2.2-4.module+el8.6.0+13337+afcb49ec, 4.2.3-9.module+el8.8.0+18044+0a924b8f, 4.2.3-9.module+el9.2.0+18047+4ad4bba4+1 more0:4.2.3-10.module+el8.10.0+21301+657f54a3, 0:5.1.0-23.module+el9.8.0+24092+eb9f67d023
guavarpm28.1-3.module+el8.3.0+6804+157bd82e, 28.1-3.module+el8.6.0+13337+afcb49ec, 31.0.1-4.module+el8.8.0+18044+0a924b8f, 31.0.1-4.module+el9.2.0+18047+4ad4bba4+1 more0:31.0.1-5.module+el8.10.0+21301+657f54a3, 0:33.3.0-5.module+el9.8.0+24092+eb9f67d023
httpcomponents-clientrpm4.5.10-3.module+el8.3.0+6804+157bd82e, 4.5.10-4.module+el8.6.0+13337+afcb49ec, 4.5.13-5.module+el8.8.0+18044+0a924b8f, 4.5.13-5.module+el9.2.0+18047+4ad4bba4+1 more0:4.5.13-6.module+el8.10.0+21301+657f54a3, 0:4.5.14-21.module+el9.8.0+24092+eb9f67d023
httpcomponents-corerpm4.4.12-3.module+el8.3.0+6804+157bd82e, 4.4.12-3.module+el8.6.0+13337+afcb49ec, 4.4.13-7.module+el8.8.0+18044+0a924b8f, 4.4.13-7.module+el9.2.0+18047+4ad4bba4+1 more0:4.4.13-8.module+el8.10.0+21301+657f54a3, 0:4.4.16-21.module+el9.8.0+24092+eb9f67d023
jansirpm1.18-4.module+el8.3.0+6804+157bd82e, 1.18-4.module+el8.6.0+13337+afcb49ec, 2.4.0-6.module+el8.8.0+18044+0a924b8f, 2.4.0-6.module+el9.2.0+18047+4ad4bba4+1 more0:2.4.0-7.module+el8.10.0+21301+657f54a3, 0:2.4.1-12.module+el9.8.0+24092+eb9f67d023
jsr-305rpm0-0.25.20130910svn.module+el8.3.0+6804+157bd82e, 0-0.25.20130910svn.module+el8.6.0+13337+afcb49ec, 3.0.2-6.module+el8.8.0+18044+0a924b8f, 3.0.2-6.module+el9.2.0+18047+4ad4bba4+1 more0:3.0.2-7.module+el8.10.0+21301+657f54a3, 0:3.0.2-36.module+el9.8.0+24092+eb9f67d023
mavenrpm1:3.6.2-6.module+el8.4.0+9250+1786af37, 1:3.6.2-7.module+el8.6.0+13337+afcb49ec, 1:3.8.5-4.module+el8.8.0+18044+0a924b8f, 1:3.8.5-4.module+el9.2.0+18047+4ad4bba4+1 more1:3.8.5-6.module+el8.10.0+21301+657f54a3, 1:3.9.9-13.module+el9.8.0+24092+eb9f67d023
maven-resolverrpm1:1.7.3-5.module+el8.8.0+18044+0a924b8f, 1:1.7.3-5.module+el9.2.0+18047+4ad4bba4, 1:1.9.22-6.module+el9.6.0+22733+e520f63c, 1.4.1-3.module+el8.3.0+6804+157bd82e+1 more1:1.7.3-6.module+el8.10.0+21301+657f54a3, 1:1.9.22-6.module+el9.8.0+24092+eb9f67d023
maven-shared-utilsrpm3.2.1-0.4.module+el8.3.0+6804+157bd82e, 3.2.1-0.4.module+el8.6.0+13337+afcb49ec, 3.2.1-0.5.module+el8.6.0+15049+43453910, 3.3.4-5.module+el8.8.0+18044+0a924b8f+2 more0:3.3.4-6.module+el8.10.0+21301+657f54a3, 0:3.4.2-19.module+el9.8.0+24092+eb9f67d023
maven-wagonrpm3.3.4-2.module+el8.3.0+6804+157bd82e, 3.3.4-2.module+el8.6.0+13337+afcb49ec, 3.5.1-2.module+el8.8.0+18044+0a924b8f, 3.5.1-2.module+el9.2.0+18047+4ad4bba4+1 more0:3.5.1-3.module+el8.10.0+21301+657f54a3, 0:3.5.3-17.module+el9.8.0+24092+eb9f67d023
plexus-cipherrpm1.7-17.module+el8.3.0+6804+157bd82e, 1.7-17.module+el8.6.0+13337+afcb49ec, 2.0-2.module+el8.8.0+18044+0a924b8f, 2.0-2.module+el9.2.0+18047+4ad4bba4+1 more0:2.0-3.module+el8.10.0+21301+657f54a3, 0:2.0-25.module+el9.8.0+24092+eb9f67d023
plexus-classworldsrpm2.6.0-4.module+el8.3.0+6804+157bd82e, 2.6.0-4.module+el8.6.0+13337+afcb49ec, 2.6.0-12.module+el8.8.0+18044+0a924b8f, 2.6.0-12.module+el9.2.0+18047+4ad4bba4+1 more0:2.6.0-13.module+el8.10.0+21301+657f54a3, 0:2.8.0-9.module+el9.8.0+24092+eb9f67d023
plexus-containersrpm2.1.0-2.module+el8.3.0+6804+157bd82e, 2.1.0-2.module+el8.6.0+13337+afcb49ec, 2.1.1-2.module+el8.8.0+18044+0a924b8f, 2.1.1-2.module+el9.2.0+18047+4ad4bba4+1 more0:2.1.1-3.module+el8.10.0+21301+657f54a3, 0:2.2.0-10.module+el9.8.0+24092+eb9f67d023
plexus-interpolationrpm1.26-3.module+el8.3.0+6804+157bd82e, 1.26-3.module+el8.6.0+13337+afcb49ec, 1.26-12.module+el8.8.0+18044+0a924b8f, 1.26-12.module+el9.2.0+18047+4ad4bba4+1 more0:1.26-13.module+el8.10.0+21301+657f54a3, 0:1.27-10.module+el9.8.0+24092+eb9f67d023
plexus-sec-dispatcherrpm1.4-29.module+el8.3.0+6804+157bd82e, 1.4-29.module+el8.6.0+13337+afcb49ec, 2.0-4.module+el8.8.0+18044+0a924b8f, 2.0-4.module+el9.2.0+18047+4ad4bba4+1 more0:2.0-5.module+el8.10.0+21301+657f54a3, 0:2.0-28.module+el9.8.0+24092+eb9f67d023
sisurpm0.3.4-2.module+el8.3.0+6804+157bd82e, 0.3.4-2.module+el8.6.0+13337+afcb49ec, 1:0.3.5-2.module+el8.8.0+18044+0a924b8f, 1:0.3.5-2.module+el9.2.0+18047+4ad4bba4+1 more1:0.3.5-3.module+el8.10.0+21301+657f54a3, 1:0.9.0~M3-7.module+el9.8.0+24092+eb9f67d023
slf4jrpm1.7.28-3.module+el8.3.0+6804+157bd82e, 1.7.28-3.module+el8.6.0+13337+afcb49ec, 1.7.32-4.module+el8.8.0+18044+0a924b8f, 1.7.32-4.module+el9.2.0+18047+4ad4bba4+1 more0:1.7.32-5.module+el8.10.0+21301+657f54a3, 0:1.7.36-9.module+el9.8.0+24092+eb9f67d023
apache-commons-lang3rpm3.9-4.module+el8.3.0+6804+157bd82e, 3.9-4.module+el8.6.0+13337+afcb49ec, 3.12.0-7.module+el8.8.0+18044+0a924b8f0:3.12.0-8.module+el8.10.0+21301+657f54a316
cdi-apirpm2.0.1-3.module+el8.3.0+6804+157bd82e, 2.0.1-3.module+el8.6.0+13337+afcb49ec, 2.0.2-6.module+el8.8.0+18044+0a924b8f0:2.0.2-7.module+el8.10.0+21301+657f54a316
jakarta-annotationsrpm1.3.5-14.module+el8.8.0+18044+0a924b8f, 1.3.5-14.module+el9.2.0+18047+4ad4bba4, 1.3.5-38.module+el9.6.0+22733+e520f63c0:1.3.5-15.module+el8.10.0+21301+657f54a3, 0:1.3.5-38.module+el9.8.0+24092+eb9f67d011
aopalliancerpm0:1.0-51.module+el9.6.0+22733+e520f63c0:1.0-51.module+el9.8.0+24092+eb9f67d04
plexus-utilsmaven1.5.6, 1.5.8, 1.5.15, 2.0.4+19 more3.6.1, 4.0.3188
OSV records
GHSA-6fmv-xxpf-w3cwRHSA-2026:35996RHSA-2026:38500RHSA-2026:40841RHSA-2026:41948RLSA-2026:41948
Also known as
RHSA-2026:38796

Charts affected

196 by stars
ChartLatestAffected imagesRadar Score
keycloakcodecentricVerified publisher18.10.01 of 3See more

keycloak codecentric 18.10.0

1 of the 3 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
javapackages-tools@5.3.0-1.module+el8+2447+6f56d9a6
0:5.3.0-2.module+el8.10.0+23274+27840b45

Open the chart page →

7,713
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
plexus-utils@2.0.6
3.6.1

Open the chart page →

32,259
dependency-trackevryfs-ossVerified publisher1.5.51 of 3See more

dependency-track evryfs-oss 1.5.5

1 of the 3 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
dependencytrack/apiserver:4.6.3485ac0952c02
plexus-utils@3.3.1
3.6.1

Open the chart page →

2,503
camel-kcamel-kVerified publisher2.11.01 of 1See more

camel-k camel-k 2.11.0

1 of the 1 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
apache/camel-k:2.11.0d173e7efe258
plexus-utils@3.6.0
3.6.1

Open the chart page →

1,226
apicurio-registryapicurio-registry-helmVerified publisher3.8.01 of 2See more

apicurio-registry apicurio-registry-helm 3.8.0

1 of the 2 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
quay.io/apicurio/apicurio-registry-mem:2.5.8.Final3b036692d546
apache-commons-cli@1.5.0-4.module+el8.8.0+18044+0a924b8f
apache-commons-codec@1.15-7.module+el8.8.0+18044+0a924b8f
apache-commons-io@1:2.11.0-2.module+el8.8.0+18044+0a924b8f
apache-commons-lang3@3.12.0-7.module+el8.8.0+18044+0a924b8f
atinject@1.0.5-4.module+el8.8.0+18044+0a924b8f
cdi-api@2.0.2-6.module+el8.8.0+18044+0a924b8f
google-guice@4.2.3-9.module+el8.8.0+18044+0a924b8f
guava@31.0.1-4.module+el8.8.0+18044+0a924b8f
httpcomponents-client@4.5.13-5.module+el8.8.0+18044+0a924b8f
httpcomponents-core@4.4.13-7.module+el8.8.0+18044+0a924b8f
jakarta-annotations@1.3.5-14.module+el8.8.0+18044+0a924b8f
jansi@2.4.0-6.module+el8.8.0+18044+0a924b8f
javapackages-tools@5.3.0-1.module+el8+2447+6f56d9a6
jsr-305@3.0.2-6.module+el8.8.0+18044+0a924b8f
maven@1:3.8.5-4.module+el8.8.0+18044+0a924b8f
maven-resolver@1:1.7.3-5.module+el8.8.0+18044+0a924b8f
maven-shared-utils@3.3.4-5.module+el8.8.0+18044+0a924b8f
maven-wagon@3.5.1-2.module+el8.8.0+18044+0a924b8f
plexus-cipher@2.0-2.module+el8.8.0+18044+0a924b8f
plexus-classworlds@2.6.0-12.module+el8.8.0+18044+0a924b8f
plexus-containers@2.1.1-2.module+el8.8.0+18044+0a924b8f
plexus-interpolation@1.26-12.module+el8.8.0+18044+0a924b8f
plexus-sec-dispatcher@2.0-4.module+el8.8.0+18044+0a924b8f
plexus-utils@3.3.0-10.module+el8.8.0+18044+0a924b8f
sisu@1:0.3.5-2.module+el8.8.0+18044+0a924b8f
slf4j@1.7.32-4.module+el8.8.0+18044+0a924b8f
plexus-utils@3.3.0
0:1.5.0-5.module+el8.10.0+21301+657f54a3
0:1.15-8.module+el8.10.0+21301+657f54a3
1:2.11.0-3.module+el8.10.0+21301+657f54a3
0:3.12.0-8.module+el8.10.0+21301+657f54a3
0:1.0.5-5.module+el8.10.0+21301+657f54a3
0:2.0.2-7.module+el8.10.0+21301+657f54a3
0:4.2.3-10.module+el8.10.0+21301+657f54a3
0:31.0.1-5.module+el8.10.0+21301+657f54a3
0:4.5.13-6.module+el8.10.0+21301+657f54a3
0:4.4.13-8.module+el8.10.0+21301+657f54a3
0:1.3.5-15.module+el8.10.0+21301+657f54a3
0:2.4.0-7.module+el8.10.0+21301+657f54a3
0:5.3.0-2.module+el8.10.0+23274+27840b45
0:3.0.2-7.module+el8.10.0+21301+657f54a3
1:3.8.5-6.module+el8.10.0+21301+657f54a3
1:1.7.3-6.module+el8.10.0+21301+657f54a3
0:3.3.4-6.module+el8.10.0+21301+657f54a3
0:3.5.1-3.module+el8.10.0+21301+657f54a3
0:2.0-3.module+el8.10.0+21301+657f54a3
0:2.6.0-13.module+el8.10.0+21301+657f54a3
0:2.1.1-3.module+el8.10.0+21301+657f54a3
0:1.26-13.module+el8.10.0+21301+657f54a3
0:2.0-5.module+el8.10.0+21301+657f54a3
0:3.3.0-11.module+el8.10.0+24366+080b405b.1
1:0.3.5-3.module+el8.10.0+21301+657f54a3
0:1.7.32-5.module+el8.10.0+21301+657f54a3
3.6.1

Open the chart page →

6,675
kafkakubelauncherVerified publisher0.1.261 of 1See more

kafka kubelauncher 0.1.26

1 of the 1 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/kafkadigest-pinned43e1085cd0a8
plexus-utils@3.5.1
3.6.1

Open the chart page →

1,360
kafkakafka18.0.11 of 1See more

kafka kafka 18.0.1

1 of the 1 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
plexus-utils@3.3.1
3.6.1

Open the chart page →

3,395
druidwiremindVerified publisher1.22.11 of 3See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
apache/druid:29.0.10cef139b6bf1
plexus-utils@3.0.24
3.6.1

Open the chart page →

7,930
bambooatlassian-data-centerVerified publisher2.0.151 of 2See more

bamboo atlassian-data-center 2.0.15

1 of the 2 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
atlassian/bamboo:12.1.114af4bb6c8d46
plexus-utils@3.6.0
3.6.1

Open the chart page →

2,031
keycloak-operatorkeycloak-operatorVerified publisher0.0.41 of 1See more

keycloak-operator keycloak-operator 0.0.4

1 of the 1 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
javapackages-tools@5.3.0-1.module+el8+2447+6f56d9a6
0:5.3.0-2.module+el8.10.0+23274+27840b45

Open the chart page →

4,652
kubernetes-loggingkubernetes-logging4.8.01 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
plexus-utils@3.0.22
3.6.1

Open the chart page →

10,530
hivedmwm-bigdataVerified publisher0.1.62 of 5See more

hive dmwm-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
plexus-utils@3.0.15
3.6.1
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
plexus-utils@3.0.15
3.6.1

Open the chart page →

20,837
me-untethr-nostr-relaykronkltdVerified publisher0.1.41 of 1See more

me-untethr-nostr-relay kronkltd 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
duck1123/me.untethr.nostr-relay:0.2.1119fc5d4cbfb
plexus-utils@3.4.1
3.6.1

Open the chart page →

2,072
oesopsmxVerified publisher4.0.324 of 25See more

oes opsmx 4.0.32

4 of the 25 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-gate:isd-spin-2025.10.01-5c720954-2025112608102b3554029737
javapackages-tools@5.3.0-1.module+el8+2447+6f56d9a6
0:5.3.0-2.module+el8.10.0+23274+27840b45
quay.io/opsmxpublic/ubi8-oes-audit-client:isd-spin-2025.10.01-cb1bfce-20251126103732a5b1887eab
javapackages-tools@5.3.0-1.module+el8+2447+6f56d9a6
0:5.3.0-2.module+el8.10.0+23274+27840b45
quay.io/opsmxpublic/ubi8-oes-autopilot:isd-spin-2025.10.01-af26a30d4-20251126105458bd0bcf72f9
javapackages-tools@5.3.0-1.module+el8+2447+6f56d9a6
plexus-utils@3.4.2
0:5.3.0-2.module+el8.10.0+23274+27840b45
3.6.1
quay.io/opsmxpublic/ubi8-oes-platform:isd-spin-2025.10.01-a7c191ec-2025112611228ed603ab7417
javapackages-tools@5.3.0-1.module+el8+2447+6f56d9a6
0:5.3.0-2.module+el8.10.0+23274+27840b45

Open the chart page →

107,811
hive-metastoreslamdev0.0.51 of 2See more

hive-metastore slamdev 0.0.5

1 of the 2 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
plexus-utils@3.0.15
3.6.1

Open the chart page →

8,198
kafka-chartsoldevelo-kafka-chart32.4.41 of 1See more

kafka-chart soldevelo-kafka-chart 32.4.4

1 of the 1 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
soldevelo/kafka:4.0.0-debian-12-r0cfdc08c2f577
plexus-utils@3.5.1
3.6.1

Open the chart page →

2,355
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.261 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

1 of the 6 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:3.5.0-debian-11-r08657bb93a581
plexus-utils@3.3.0
3.6.1

Open the chart page →

14,566
aerospike-graphaerospike-helmOfficialVerified publisher3.7.01 of 1See more

aerospike-graph aerospike-helm 3.7.0

1 of the 1 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
aerospike/aerospike-graph-service:3.3.1781ba5213efd
plexus-utils@3.3.1
3.6.1

Open the chart page →

322
clearml-servingallegroaiVerified publisher1.6.21 of 9See more

clearml-serving allegroai 1.6.2

1 of the 9 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:3.4.0-debian-11-r6ac64829e45b3
plexus-utils@3.3.0
3.6.1

Open the chart page →

17,877
geoserver-cloudcamptocamp20.0.52 of 11See more

geoserver-cloud camptocamp2 0.0.5

2 of the 11 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
plexus-utils@1.5.6
3.6.1
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
plexus-utils@1.5.6
3.6.1

Open the chart page →

84,444
geoserverCloudcamptocamp20.0.62 of 11See more

geoserverCloud camptocamp2 0.0.6

2 of the 11 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
plexus-utils@1.5.6
3.6.1
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
plexus-utils@1.5.6
3.6.1

Open the chart page →

84,444
cp-schema-registrycp-schema-registryVerified publisher1.0.01 of 1See more

cp-schema-registry cp-schema-registry 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/cp-schema-registry:8.1.1-msk-iam-auth2.3.530d1a445acc7
plexus-utils@3.5.1
3.6.1

Open the chart page →

1,864
hive-metastoredmwm-bigdataVerified publisher0.1.31 of 2See more

hive-metastore dmwm-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
plexus-utils@3.0.15
3.6.1

Open the chart page →

6,882
spinnakerdwardu-helm-charts2.2.61 of 2See more

spinnaker dwardu-helm-charts 2.2.6

1 of the 2 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
plexus-utils@3.0.22
3.6.1

Open the chart page →

8,752
enavenav-service-architectureVerified publisher0.0.71 of 10See more

enav enav-service-architecture 0.0.7

1 of the 10 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
apache/kafka:3.9.0fbc7d7c428e3
plexus-utils@3.5.1
3.6.1

Open the chart page →

15,860
gentrace-self-hostedgentrace-self-hostedVerified publisher0.1.31 of 9See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

1 of the 9 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.4.4c0224a1adf7a
plexus-utils@3.3.0
3.6.1

Open the chart page →

15,562
stormgresearch1.2.01 of 3See more

storm gresearch 1.2.0

1 of the 3 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
library/storm:2.4.0bd5d420506d6
plexus-utils@3.1.0
3.6.1

Open the chart page →

6,165
gridgaingridgainOfficialVerified publisher1.0.61 of 1See more

gridgain gridgain 1.0.6

1 of the 1 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
gridgain/community:8.9.11d32d182a0e6a
plexus-utils@3.2.1
3.6.1

Open the chart page →

4,679
jetic-operatorjetic-operatorVerified publisher2.0.21 of 1See more

jetic-operator jetic-operator 2.0.2

1 of the 1 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
apache/camel-k:1.10.43bb13d14f64a
plexus-utils@3.3.1
3.6.1

Open the chart page →

9,318
kafka-kraft-on-k8skafka-kraft-on-k8sVerified publisher1.1.03 of 3See more

kafka-kraft-on-k8s kafka-kraft-on-k8s 1.1.0

3 of the 3 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
kafkakraft/kafka-connect:3.7.0062d697db7e5
plexus-utils@3.3.1
3.6.1
kafkakraft/kafka-controller:3.7.0f261ad288fce
plexus-utils@3.3.1
3.6.1
kafkakraft/kafkakraft:3.7.02e4b593b878b
plexus-utils@3.3.1
3.6.1

Open the chart page →

14,130
mcpmcp-chartsVerified publisher0.0.231 of 7See more

mcp mcp-charts 0.0.23

1 of the 7 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
glarad/mc-service-registry:latest7b02b9e7f1ef
plexus-utils@3.2.1
3.6.1

Open the chart page →

6,929
dev-feedrm3lVerified publisher3.1.21 of 3See more

dev-feed rm3l 3.1.2

1 of the 3 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
rm3l/dev-feed-api:latest9a7f732245a3
apache-commons-cli@1.5.0-4.module+el9.2.0+18047+4ad4bba4
apache-commons-codec@1.15-7.module+el9.2.0+18047+4ad4bba4
apache-commons-io@1:2.11.0-2.module+el9.2.0+18047+4ad4bba4
atinject@1.0.5-4.module+el9.2.0+18047+4ad4bba4
google-guice@4.2.3-9.module+el9.2.0+18047+4ad4bba4
guava@31.0.1-4.module+el9.2.0+18047+4ad4bba4
httpcomponents-client@4.5.13-5.module+el9.2.0+18047+4ad4bba4
httpcomponents-core@4.4.13-7.module+el9.2.0+18047+4ad4bba4
jakarta-annotations@1.3.5-14.module+el9.2.0+18047+4ad4bba4
jansi@2.4.0-6.module+el9.2.0+18047+4ad4bba4
jsr-305@3.0.2-6.module+el9.2.0+18047+4ad4bba4
maven@1:3.8.5-4.module+el9.2.0+18047+4ad4bba4
maven-resolver@1:1.7.3-5.module+el9.2.0+18047+4ad4bba4
maven-shared-utils@3.3.4-5.module+el9.2.0+18047+4ad4bba4
maven-wagon@3.5.1-2.module+el9.2.0+18047+4ad4bba4
plexus-cipher@2.0-2.module+el9.2.0+18047+4ad4bba4
plexus-classworlds@2.6.0-12.module+el9.2.0+18047+4ad4bba4
plexus-containers@2.1.1-2.module+el9.2.0+18047+4ad4bba4
plexus-interpolation@1.26-12.module+el9.2.0+18047+4ad4bba4
plexus-sec-dispatcher@2.0-4.module+el9.2.0+18047+4ad4bba4
plexus-utils@3.3.0-10.module+el9.2.0+18047+4ad4bba4
sisu@1:0.3.5-2.module+el9.2.0+18047+4ad4bba4
slf4j@1.7.32-4.module+el9.2.0+18047+4ad4bba4
plexus-utils@3.3.0
0:1.9.0-4.module+el9.8.0+24092+eb9f67d0
0:1.17.1-8.module+el9.8.0+24092+eb9f67d0
1:2.16.1-9.module+el9.8.0+24092+eb9f67d0
0:1.0.5-14.module+el9.8.0+24092+eb9f67d0
0:5.1.0-23.module+el9.8.0+24092+eb9f67d0
0:33.3.0-5.module+el9.8.0+24092+eb9f67d0
0:4.5.14-21.module+el9.8.0+24092+eb9f67d0
0:4.4.16-21.module+el9.8.0+24092+eb9f67d0
0:1.3.5-38.module+el9.8.0+24092+eb9f67d0
0:2.4.1-12.module+el9.8.0+24092+eb9f67d0
0:3.0.2-36.module+el9.8.0+24092+eb9f67d0
1:3.9.9-13.module+el9.8.0+24092+eb9f67d0
1:1.9.22-6.module+el9.8.0+24092+eb9f67d0
0:3.4.2-19.module+el9.8.0+24092+eb9f67d0
0:3.5.3-17.module+el9.8.0+24092+eb9f67d0
0:2.0-25.module+el9.8.0+24092+eb9f67d0
0:2.8.0-9.module+el9.8.0+24092+eb9f67d0
0:2.2.0-10.module+el9.8.0+24092+eb9f67d0
0:1.27-10.module+el9.8.0+24092+eb9f67d0
0:2.0-28.module+el9.8.0+24092+eb9f67d0
0:3.5.1-17.module+el9.8.0+24375+95248a69.1
1:0.9.0~M3-7.module+el9.8.0+24092+eb9f67d0
0:1.7.36-9.module+el9.8.0+24092+eb9f67d0
3.6.1

Open the chart page →

9,837
mac-ouirm3lVerified publisher1.25.01 of 1See more

mac-oui rm3l 1.25.0

1 of the 1 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
rm3l/mac-oui:1.8.03a5e1f95c132
javapackages-tools@5.3.0-1.module+el8+2447+6f56d9a6
0:5.3.0-2.module+el8.10.0+23274+27840b45

Open the chart page →

1,975
routrroutr0.0.101 of 2See more

routr routr 0.0.10

1 of the 2 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
fonoster/routr:1.0.0-rc52ca65af17cbc
plexus-utils@3.0.17
3.6.1

Open the chart page →

4,983
sentry-k8ssentry-k8sVerified publisher1.4.11 of 11See more

sentry-k8s sentry-k8s 1.4.1

1 of the 11 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.6.683dbca3efd2a
plexus-utils@3.3.1
3.6.1

Open the chart page →

16,449
wavefront-adapter-for-istiowavefront0.1.41 of 2See more

wavefront-adapter-for-istio wavefront 0.1.4

1 of the 2 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
wavefronthq/proxy:9.2d1064d28f6eb
plexus-utils@3.0.17
3.6.1

Open the chart page →

15,970
keycloakaccount-serviceVerified publisher18.4.51 of 2See more

keycloak account-service 18.4.5

1 of the 2 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
javapackages-tools@5.3.0-1.module+el8+2447+6f56d9a6
0:5.3.0-2.module+el8.10.0+23274+27840b45

Open the chart page →

7,713
graphserviceaerospike-helmVerified publisher3.3.01 of 1See more

graphservice aerospike-helm 3.3.0

1 of the 1 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
aerospike/aerospike-graph-service:3.3.0f35739b97a46
plexus-utils@3.3.1
3.6.1

Open the chart page →

453
airports-kafkaairports-kafka0.1.01 of 2See more

airports-kafka airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
plexus-utils@3.2.1
3.6.1

Open the chart page →

4,547
airsonic-advancedairsonic-advancedVerified publisher0.3.11 of 1See more

airsonic-advanced airsonic-advanced 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
linuxserver/airsonic-advanced:11.1.4d286a7f55a59
plexus-utils@3.5.1
3.6.1

Open the chart page →

1,748
aktoakto0.2.02 of 7See more

akto akto 0.2.0

2 of the 7 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
plexus-utils@3.2.1
3.6.1
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
plexus-utils@3.2.1
3.6.1

Open the chart page →

13,613
akto-hybrid-redactakto1.44.41 of 5See more

akto-hybrid-redact akto 1.44.4

1 of the 5 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.1.1-1-ubi9d20bd62f0182
plexus-utils@3.5.1
3.6.1

Open the chart page →

4,777
akto-mini-runtime-shaakto0.7.231 of 3See more

akto-mini-runtime-sha akto 0.7.23

1 of the 3 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/confluentinc-cp-kafkadigest-pinnedd20bd62f0182
plexus-utils@3.5.1
3.6.1

Open the chart page →

3,217
akto-mini-testing-kafkaakto1.42.12 of 5See more

akto-mini-testing-kafka akto 1.42.1

2 of the 5 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.8.0-3-ubi8adc392d28a1e
plexus-utils@3.5.1
3.6.1
confluentinc/cp-zookeeper:7.8.0-3-ubi85ca5f3269814
plexus-utils@3.5.1
3.6.1

Open the chart page →

6,397
akto-mrs-runtime-combinedakto0.0.21 of 2See more

akto-mrs-runtime-combined akto 0.0.2

1 of the 2 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.1.0-1-ubi99026dbbf280d
plexus-utils@3.5.1
3.6.1

Open the chart page →

1,826
akto-protectionakto0.1.02 of 4See more

akto-protection akto 0.1.0

2 of the 4 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
plexus-utils@3.2.1
3.6.1
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
plexus-utils@3.2.1
3.6.1

Open the chart page →

11,285
akto-source-code-analyserakto0.1.51 of 3See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
hotavneesh/eclipse-jdtls:latesta4579b163414
plexus-utils@3.5.1
3.6.1

Open the chart page →

4,880
amorphieamorphie0.1.21 of 18See more

amorphie amorphie 0.1.2

1 of the 18 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
hazelcast/management-center:5.3.2f9d34300d330
javapackages-tools@5.3.0-1.module+el8+2447+6f56d9a6
0:5.3.0-2.module+el8.10.0+23274+27840b45

Open the chart page →

28,131
monitoringantmediaVerified publisher1.0.01 of 6See more

monitoring antmedia 1.0.0

1 of the 6 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
confluentinc/cp-zookeeper:latest7610a50b13e7
plexus-utils@3.5.1
3.6.1

Open the chart page →

2,453
chart-app-vidapp-vid-chartVerified publisher0.0.71 of 2See more

chart-app-vid app-vid-chart 0.0.7

1 of the 2 container images this version deploys carry CVE-2025-67030.

Container imageDigestPackageFixed in
fimperato/sparkvid-api:1.0.5-RELEASE604012b77841
plexus-utils@3.2.1
3.6.1

Open the chart page →

8,866

Container images carrying it

208 by charts deploying them

A fixed version is listed for 28 of the 28 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/opsmxpublic/ubi8-gate:isd-spin-2025.10.01-5c720954-2025112608102b3554029737
javapackages-tools@5.3.0-1.module+el8+2447+6f56d9a6
0:5.3.0-2.module+el8.10.0+23274+27840b45
1
quay.io/opsmxpublic/ubi8-oes-audit-client:isd-spin-2025.10.01-cb1bfce-20251126103732a5b1887eab
javapackages-tools@5.3.0-1.module+el8+2447+6f56d9a6
0:5.3.0-2.module+el8.10.0+23274+27840b45
1
quay.io/opsmxpublic/ubi8-oes-autopilot:isd-spin-2025.10.01-af26a30d4-20251126105458bd0bcf72f9
javapackages-tools@5.3.0-1.module+el8+2447+6f56d9a6
plexus-utils@3.4.2
0:5.3.0-2.module+el8.10.0+23274+27840b45
3.6.1
1
quay.io/opsmxpublic/ubi8-oes-platform:isd-spin-2025.10.01-a7c191ec-2025112611228ed603ab7417
javapackages-tools@5.3.0-1.module+el8+2447+6f56d9a6
0:5.3.0-2.module+el8.10.0+23274+27840b45
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
javapackages-tools@5.3.0-1.module+el8+2447+6f56d9a6
plexus-utils@3.2.1
0:5.3.0-2.module+el8.10.0+23274+27840b45
3.6.1
1
quay.io/seamware/consent-facade:0.0.14be844c750c7e
javapackages-tools@5.3.0-1.module+el8+2447+6f56d9a6
plexus-utils@3.3.0-11.module+el8.10.0+21301+657f54a3
plexus-utils@3.3.0
0:5.3.0-2.module+el8.10.0+23274+27840b45
0:3.3.0-11.module+el8.10.0+24366+080b405b.1
3.6.1
1
quay.io/strimzi/operator:0.36.1e9e03b31007c
javapackages-tools@5.3.0-1.module+el8+2447+6f56d9a6
0:5.3.0-2.module+el8.10.0+23274+27840b45
1
quay.io/wi_stefan/dss-validation-service:0.0.18e928db29ee1
apache-commons-cli@1.4-7.module+el8.6.0+13337+afcb49ec
apache-commons-codec@1.13-3.module+el8.6.0+13337+afcb49ec
apache-commons-io@1:2.6-6.module+el8.6.0+13337+afcb49ec
apache-commons-lang3@3.9-4.module+el8.6.0+13337+afcb49ec
atinject@1-31.20100611svn86.module+el8.6.0+13337+afcb49ec
cdi-api@2.0.1-3.module+el8.6.0+13337+afcb49ec
google-guice@4.2.2-4.module+el8.6.0+13337+afcb49ec
guava@28.1-3.module+el8.6.0+13337+afcb49ec
httpcomponents-client@4.5.10-4.module+el8.6.0+13337+afcb49ec
httpcomponents-core@4.4.12-3.module+el8.6.0+13337+afcb49ec
jansi@1.18-4.module+el8.6.0+13337+afcb49ec
javapackages-tools@5.3.0-1.module+el8+2447+6f56d9a6
jsr-305@0-0.25.20130910svn.module+el8.6.0+13337+afcb49ec
maven@1:3.6.2-7.module+el8.6.0+13337+afcb49ec
maven-resolver@1.4.1-3.module+el8.6.0+13337+afcb49ec
maven-shared-utils@3.2.1-0.5.module+el8.6.0+15049+43453910
maven-wagon@3.3.4-2.module+el8.6.0+13337+afcb49ec
plexus-cipher@1.7-17.module+el8.6.0+13337+afcb49ec
plexus-classworlds@2.6.0-4.module+el8.6.0+13337+afcb49ec
plexus-containers@2.1.0-2.module+el8.6.0+13337+afcb49ec
plexus-interpolation@1.26-3.module+el8.6.0+13337+afcb49ec
plexus-sec-dispatcher@1.4-29.module+el8.6.0+13337+afcb49ec
plexus-utils@3.3.0-3.module+el8.6.0+13337+afcb49ec
sisu@0.3.4-2.module+el8.6.0+13337+afcb49ec
slf4j@1.7.28-3.module+el8.6.0+13337+afcb49ec
plexus-utils@3.3.0
0:1.5.0-5.module+el8.10.0+21301+657f54a3
0:1.15-8.module+el8.10.0+21301+657f54a3
1:2.11.0-3.module+el8.10.0+21301+657f54a3
0:3.12.0-8.module+el8.10.0+21301+657f54a3
0:1.0.5-5.module+el8.10.0+21301+657f54a3
0:2.0.2-7.module+el8.10.0+21301+657f54a3
0:4.2.3-10.module+el8.10.0+21301+657f54a3
0:31.0.1-5.module+el8.10.0+21301+657f54a3
0:4.5.13-6.module+el8.10.0+21301+657f54a3
0:4.4.13-8.module+el8.10.0+21301+657f54a3
0:2.4.0-7.module+el8.10.0+21301+657f54a3
0:5.3.0-2.module+el8.10.0+23274+27840b45
0:3.0.2-7.module+el8.10.0+21301+657f54a3
1:3.8.5-6.module+el8.10.0+21301+657f54a3
1:1.7.3-6.module+el8.10.0+21301+657f54a3
0:3.3.4-6.module+el8.10.0+21301+657f54a3
0:3.5.1-3.module+el8.10.0+21301+657f54a3
0:2.0-3.module+el8.10.0+21301+657f54a3
0:2.6.0-13.module+el8.10.0+21301+657f54a3
0:2.1.1-3.module+el8.10.0+21301+657f54a3
0:1.26-13.module+el8.10.0+21301+657f54a3
0:2.0-5.module+el8.10.0+21301+657f54a3
0:3.3.0-11.module+el8.10.0+24366+080b405b.1
1:0.3.5-3.module+el8.10.0+21301+657f54a3
0:1.7.32-5.module+el8.10.0+21301+657f54a3
3.6.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.