GHSA-58qw-p7qm-5rvh
LowAdvisory
Published 10 Jul 2023In the index since 6 Sept 2026
- Severity
- Low
- worst across findings
- CVSS
- 3.9
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 106
- of 17,781 indexed, latest versions
- Container images
- 97
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations
Carried by container images the latest versions of 106 of 17,781 indexed charts deploy, on 97 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| jetty-xmlmaven | 7.6.0.v20120127, 8.1.12.v20130726, 8.1.14.v20131031, 8.1.17.v20150415+42 more | 9.4.52.v20230823, 10.0.16, 11.0.16 | 97 |
- OSV records
- GHSA-58qw-p7qm-5rvh
Charts affected
106 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| solrstatcan | 1.5.10 | 1 of 3See more | 8,806 |
| trinostatcan | 1.23.4 | 1 of 2See more | 13,767 |
| rundecksvtech-public-helm-charts | 1.0.0 | 1 of 2See more | 18,756 |
| hadoop-deploymenttejaswita-hadoop-helmchart | 1.0.0 | 1 of 1See more | 4,240 |
| queryservicewbstack | 0.2.1 | 1 of 1See more | 4,649 |
| drillwearefrank | 1.3.6 | 1 of 3See more | 9,397 |
Container images carrying it
97 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| bde2020/ | 620267768985 | jetty-xml | 9.4.52.v20230823 | 4 |
| gradiant/ | a1ee6de94c04 | jetty-xml | 9.4.52.v20230823 | 4 |
| gchq/ | 5ec58edbb2db | jetty-xml | 9.4.52.v20230823 | 3 |
| library/ | 8c5f7881cebb | jetty-xml | 9.4.52.v20230823 | 3 |
| selenium/ | 02f251d48d5f | jetty-xml | 9.4.52.v20230823 | 3 |
| apache/ | 0116fb802786 | jetty-xml | 9.4.52.v20230823 | 2 |
| apachepulsar/ | b341ef76a852 | jetty-xml | 9.4.52.v20230823 | 2 |
| dependencytrack/ | 485ac0952c02 | jetty-xml | 10.0.16 | 2 |
| gradiant/ | aae4f8a21f8b | jetty-xml | 9.4.52.v20230823 | 2 |
| library/ | 56a9453c4064 | jetty-xml | 9.4.52.v20230823 | 2 |
| mbentley/ | f4e682274bed | jetty-xml | 9.4.52.v20230823 | 2 |
| rodolpheche/ | 3be08a386092 | jetty-xml | 9.4.52.v20230823 | 2 |
| 5200710/ | 092d3088a5fb | jetty-xml | 9.4.52.v20230823 | 1 |
| 5200710/ | e34ab066d2ed | jetty-xml | 9.4.52.v20230823 | 1 |
| amazon/ | 1ed00881c937 | jetty-xml | 9.4.52.v20230823 | 1 |
| amazon/ | 8414d80019b0 | jetty-xml | 9.4.52.v20230823 | 1 |
| apache/ | 1f96558fd292 | jetty-xml | 9.4.52.v20230823 | 1 |
| apache/ | 0cef139b6bf1 | jetty-xml | 9.4.52.v20230823 | 1 |
| apache/ | 80136ae753ee | jetty-xml | 9.4.52.v20230823 | 1 |
| apache/ | af361b20bec0 | jetty-xml | 9.4.52.v20230823 | 1 |
| apacheignite/ | d7deab68b8fa | jetty-xml | 9.4.52.v20230823 | 1 |
| apache/ | 8647309f95d1 | jetty-xml | 9.4.52.v20230823 | 1 |
| apache/ | afa47bf1692a | jetty-xml | 9.4.52.v20230823 | 1 |
| apache/ | 090b7f87ec7f | jetty-xml | 9.4.52.v20230823 | 1 |
| apache/ | 974efa2f21da | jetty-xml | 9.4.52.v20230823 | 1 |
| apachepulsar/ | 4db6ff0b4045 | jetty-xml | 9.4.52.v20230823 | 1 |
| apimap/ | ae2b3ab00177 | jetty-xml | 9.4.52.v20230823 | 1 |
| assistiot/ | c8b6c7eaa0cd | jetty-xml | 9.4.52.v20230823 | 1 |
| assistiot/ | ea254b6d8a31 | jetty-xml | 9.4.52.v20230823 | 1 |
| commerceexperts/ | 9e33ad89baf6 | jetty-xml | 9.4.52.v20230823 | 1 |
| confluentinc/ | f2975d507a2a | jetty-xml | 9.4.52.v20230823 | 1 |
| confluentinc/ | 4bc70a83ca6f | jetty-xml | 9.4.52.v20230823 | 1 |
| confluentinc/ | b0b7aa26254a | jetty-xml | 9.4.52.v20230823 | 1 |
| confluentinc/ | ee403d5b9090 | jetty-xml | 9.4.52.v20230823 | 1 |
| confluentinc/ | b651d4b6185a | jetty-xml | 9.4.52.v20230823 | 1 |
| craigwillis/ | ae317d7e4724 | jetty-xml | 9.4.52.v20230823 | 1 |
| datappeal/ | e38c085a3567 | jetty-xml | 9.4.52.v20230823 | 1 |
| dbanda/ | 0ca125e68e53 | jetty-xml | 9.4.52.v20230823 | 1 |
| dbanda/ | d0e6367876ae | jetty-xml | 9.4.52.v20230823 | 1 |
| dniel/ | 45a667852f2a | jetty-xml | 9.4.52.v20230823 | 1 |
| dremio/ | 80ed2e3b7c43 | jetty-xml | 9.4.52.v20230823 | 1 |
| easypi/ | d2950a36a576 | jetty-xml | 9.4.52.v20230823 | 1 |
| farberg/ | 4b4a22487394 | jetty-xml | 9.4.52.v20230823 | 1 |
| fonoster/ | 2ca65af17cbc | jetty-xml | 9.4.52.v20230823 | 1 |
| gchq/ | c460bb587d6d | jetty-xml | 9.4.52.v20230823 | 1 |
| gocd/ | 2da45cb09d57 | jetty-xml | 9.4.52.v20230823 | 1 |
| gradiant/ | e3bf364fe713 | jetty-xml | 9.4.52.v20230823 | 1 |
| gradiant/ | 45eceb1bc55c | jetty-xml | 9.4.52.v20230823 | 1 |
| hazelcast/ | f9d34300d330 | jetty-xml | 10.0.16 | 1 |
| hivemq/ | 4d194450d48e | jetty-xml | 9.4.52.v20230823 | 1 |