GHSA-58qw-p7qm-5rvh
LowAdvisory
Published 10 Jul 2023In the index since 6 Sept 2026
- Severity
- Low
- worst across findings
- CVSS
- 3.9
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 106
- of 17,781 indexed, latest versions
- Container images
- 97
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations
Carried by container images the latest versions of 106 of 17,781 indexed charts deploy, on 97 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| jetty-xmlmaven | 7.6.0.v20120127, 8.1.12.v20130726, 8.1.14.v20131031, 8.1.17.v20150415+42 more | 9.4.52.v20230823, 10.0.16, 11.0.16 | 97 |
- OSV records
- GHSA-58qw-p7qm-5rvh
Charts affected
106 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| solrstatcan | 1.5.10 | 1 of 3See more | 8,806 |
| trinostatcan | 1.23.4 | 1 of 2See more | 13,767 |
| rundecksvtech-public-helm-charts | 1.0.0 | 1 of 2See more | 18,756 |
| hadoop-deploymenttejaswita-hadoop-helmchart | 1.0.0 | 1 of 1See more | 4,240 |
| queryservicewbstack | 0.2.1 | 1 of 1See more | 4,649 |
| drillwearefrank | 1.3.6 | 1 of 3See more | 9,397 |
Container images carrying it
97 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| iamdorsah/ | db83a0254d81 | jetty-xml | 9.4.52.v20230823 | 1 |
| jenkinsci/ | a1f33f004659 | jetty-xml | 9.4.52.v20230823 | 1 |
| jhidalgo3/ | e08733191ea0 | jetty-xml | 9.4.52.v20230823 | 1 |
| jingking/ | 43e74ab234e1 | jetty-xml | 9.4.52.v20230823 | 1 |
| keyfactor/ | 798fbbe00283 | jetty-xml | 9.4.52.v20230823 | 1 |
| library/ | 348e3f56faa2 | jetty-xml | 9.4.52.v20230823 | 1 |
| library/ | a1ba477fa412 | jetty-xml | 9.4.52.v20230823 | 1 |
| library/ | d4eaa8484246 | jetty-xml | 9.4.52.v20230823 | 1 |
| library/ | d124efd81fbb | jetty-xml | 9.4.52.v20230823 | 1 |
| library/ | bd5d420506d6 | jetty-xml | 9.4.52.v20230823 | 1 |
| lsmaster/ | 061eb5fbfa00 | jetty-xml | 9.4.52.v20230823 | 1 |
| metabase/ | 9ebdc664a6b2 | jetty-xml | 11.0.16 | 1 |
| microcks/ | e3a3e0c67b09 | jetty-xml | 9.4.52.v20230823 | 1 |
| mintproject/ | ffbb13f20465 | jetty-xml | 9.4.52.v20230823 | 1 |
| muluder/ | 43b597a93da7 | jetty-xml | 9.4.52.v20230823 | 1 |
| ncsa/ | af6649d59150 | jetty-xml | 9.4.52.v20230823 | 1 |
| omecproject/ | 5715e5648aa0 | jetty-xml | 9.4.52.v20230823 | 1 |
| onosproject/ | 44914a8d4b3f | jetty-xml | 9.4.52.v20230823 | 1 |
| openhab/ | d0aa4af452c1 | jetty-xml | 9.4.52.v20230823 | 1 |
| owasp/ | efc65e702ee1 | jetty-xml | 9.4.52.v20230823 | 1 |
| richardchesterwood/ | f7f8d5951155 | jetty-xml | 9.4.52.v20230823 | 1 |
| rodolpheche/ | 2328a9fce2bf | jetty-xml | 9.4.52.v20230823 | 1 |
| rundeck/ | 4d64fe56f767 | jetty-xml | 9.4.52.v20230823 | 1 |
| rundeck/ | b13e8059ad72 | jetty-xml | 9.4.52.v20230823 | 1 |
| sismics/ | f4b0ef019cf1 | jetty-xml | 9.4.52.v20230823 | 1 |
| slamdev/ | b4b029c9b15f | jetty-xml | 9.4.52.v20230823 | 1 |
| sonatype/ | 586060431b64 | jetty-xml | 9.4.52.v20230823 | 1 |
| sslhep/ | 9e80af083079 | jetty-xml | 9.4.52.v20230823 | 1 |
| svtechnmaa/ | 6e368ace0977 | jetty-xml | 9.4.52.v20230823 | 1 |
| thelastpickle/ | 9c53996c457d | jetty-xml | 9.4.52.v20230823 | 1 |
| trinodb/ | 38c6f24ab1a4 | jetty-xml | 9.4.52.v20230823 | 1 |
| trinodb/ | ee80ab5eeab2 | jetty-xml | 9.4.52.v20230823 | 1 |
| voltha/ | e038acb950d3 | jetty-xml | 9.4.52.v20230823 | 1 |
| vromero/ | 408d6a46b153 | jetty-xml | 9.4.52.v20230823 | 1 |
| wistefan/ | e0887302b2d8 | jetty-xml | 9.4.52.v20230823 | 1 |
| xetusoss/ | 88f25242b9ee | jetty-xml | 9.4.52.v20230823 | 1 |
| ghcr.io/ | 4a2824296412 | jetty-xml | 9.4.52.v20230823 | 1 |
| ghcr.io/ | c144bdd688d7 | jetty-xml | 9.4.52.v20230823 | 1 |
| ghcr.io/ | ac62269785ac | jetty-xml | 9.4.52.v20230823 | 1 |
| ghcr.io/ | 8caf5289fe73 | jetty-xml | 9.4.52.v20230823 | 1 |
| ghcr.io/ | 865ff4da5686 | jetty-xml | 9.4.52.v20230823 | 1 |
| ghcr.io/ | e949b0f733f0 | jetty-xml | 9.4.52.v20230823 | 1 |
| ghcr.io/ | d46ce7b96482 | jetty-xml | 9.4.52.v20230823 | 1 |
| ghcr.io/ | b83b5b81d4b6 | jetty-xml | 9.4.52.v20230823 | 1 |
| public.ecr.aws/ | 794b3bff9510 | jetty-xml | 9.4.52.v20230823 | 1 |
| quay.io/ | 93889c3d8a34 | jetty-xml | 9.4.52.v20230823 | 1 |
| quay.io/ | 98c26e1b8f70 | jetty-xml | 9.4.52.v20230823 | 1 |