StackRadar

CVE-2019-14322

High

Advisory

Published 24 May 2022In the index since 8 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.558
99th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
33
of 17,781 indexed, latest versions
Container images
32
deployed by those charts
Fix available
1 of 1
affected package

Pallets Werkzeug vulnerable to Path Traversal

Carried by container images the latest versions of 33 of 17,781 indexed charts deploy, on 32 images.

Affected packageAffected versionsFixed inImages
werkzeugpypi0.9.1, 0.11.15, 0.12.2, 0.13+4 more0.15.532
OSV records
GHSA-j544-7q9p-6xp8
Also known as
PYSEC-2026-1065

Charts affected

33 by stars
ChartLatestAffected imagesRadar Score
tensorflow-notebookcloudnativeapp0.1.21 of 1See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2019-14322.

Container imageDigestPackageFixed in
tensorflow/tensorflow:1.6.0-devel1e3172090703
werkzeug@0.14.1
0.15.5

Open the chart page →

36,094
radosgwananace-chartsVerified publisher0.3.41 of 1See more

radosgw ananace-charts 0.3.4

1 of the 1 container images this version deploys carry CVE-2019-14322.

Container imageDigestPackageFixed in
ceph/daemon:latest-nautilus90f30824a96e
werkzeug@0.9.1
0.15.5

Open the chart page →

1,650
aks-helloworldazure-sample0.1.11 of 1See more

aks-helloworld azure-sample 0.1.1

1 of the 1 container images this version deploys carry CVE-2019-14322.

Container imageDigestPackageFixed in
neilpeterson/aks-helloworld:v1fb47732ef36b
werkzeug@0.14.1
0.15.5

Open the chart page →

4,269
azure-voteazure-sample0.1.11 of 2See more

azure-vote azure-sample 0.1.1

1 of the 2 container images this version deploys carry CVE-2019-14322.

Container imageDigestPackageFixed in
neilpeterson/azure-vote-front:v384062718347c
werkzeug@0.14.1
0.15.5

Open the chart page →

5,224
azure-vote-osbaazure-sample0.1.01 of 1See more

azure-vote-osba azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-14322.

Container imageDigestPackageFixed in
neilpeterson/azure-vote-front:v384062718347c
werkzeug@0.14.1
0.15.5

Open the chart page →

4,269
twitter-sentimentazure-sample0.1.01 of 3See more

twitter-sentiment azure-sample 0.1.0

1 of the 3 container images this version deploys carry CVE-2019-14322.

Container imageDigestPackageFixed in
neilpeterson/chart-tweet:latest64fd8dab075f
werkzeug@0.14.1
0.15.5

Open the chart page →

11,833
istio-bookinfobookinfo1.2.21 of 6See more

istio-bookinfo bookinfo 1.2.2

1 of the 6 container images this version deploys carry CVE-2019-14322.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.15.00a5eb4795952
werkzeug@0.14.1
0.15.5

Open the chart page →

18,980
distributed-tensorflowcloudnativeapp0.1.11 of 1See more

distributed-tensorflow cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2019-14322.

Container imageDigestPackageFixed in
cheyang/distributed-tf:1.6.046cc34755493
werkzeug@0.14.1
0.15.5

Open the chart page →

36,094
locustcloudnativeapp1.0.01 of 1See more

locust cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-14322.

Container imageDigestPackageFixed in
greenbirdit/locust:0.9.0e99d53bdc944
werkzeug@0.14.1
0.15.5

Open the chart page →

1,352
supersetcloudnativeapp1.1.61 of 1See more

superset cloudnativeapp 1.1.6

1 of the 1 container images this version deploys carry CVE-2019-14322.

Container imageDigestPackageFixed in
amancevice/superset:0.28.1c8c04bfe3d66
werkzeug@0.14.1
0.15.5

Open the chart page →

5,060
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2019-14322.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
werkzeug@0.15.4
0.15.5

Open the chart page →

27,728
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2019-14322.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
werkzeug@0.15.4
0.15.5

Open the chart page →

24,335
prometheus-aws-costs-exporterdeliveryheroVerified publisher0.1.51 of 1See more

prometheus-aws-costs-exporter deliveryhero 0.1.5

1 of the 1 container images this version deploys carry CVE-2019-14322.

Container imageDigestPackageFixed in
nachomillangarcia/prometheus_aws_cost_exporter:lateste4ce056f2d6d
werkzeug@0.14.1
0.15.5

Open the chart page →

3,553
amundsenduyet1.1.02 of 7See more

amundsen duyet 1.1.0

2 of the 7 container images this version deploys carry CVE-2019-14322.

Container imageDigestPackageFixed in
amundsendev/amundsen-metadata:2.5.44d98eb21f5f9
werkzeug@0.15.3
0.15.5
amundsendev/amundsen-search:2.4.099dda9502c3e
werkzeug@0.15.3
0.15.5

Open the chart page →

11,174
resurrectbothalkeye0.1.51 of 1See more

resurrectbot halkeye 0.1.5

1 of the 1 container images this version deploys carry CVE-2019-14322.

Container imageDigestPackageFixed in
halkeye/slack-resurrect:v0.1.477b05e95fdb5
werkzeug@0.15.4
0.15.5

Open the chart page →

3,809
prometheus-aws-costs-exporterhelm-charts-nr0.1.51 of 1See more

prometheus-aws-costs-exporter helm-charts-nr 0.1.5

1 of the 1 container images this version deploys carry CVE-2019-14322.

Container imageDigestPackageFixed in
nachomillangarcia/prometheus_aws_cost_exporter:lateste4ce056f2d6d
werkzeug@0.14.1
0.15.5

Open the chart page →

3,553
istio-bookinfoistio-bookinfo1.2.21 of 6See more

istio-bookinfo istio-bookinfo 1.2.2

1 of the 6 container images this version deploys carry CVE-2019-14322.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.15.00a5eb4795952
werkzeug@0.14.1
0.15.5

Open the chart page →

18,980
kovi-appkovi-charts0.8.11 of 1See more

kovi-app kovi-charts 0.8.1

1 of the 1 container images this version deploys carry CVE-2019-14322.

Container imageDigestPackageFixed in
kennethreitz/httpbin:latest599fe5e50731
werkzeug@0.14.1
0.15.5

Open the chart page →

14,813
sample-bookinfokubesphere-testVerified publisher1.0.01 of 4See more

sample-bookinfo kubesphere-test 1.0.0

1 of the 4 container images this version deploys carry CVE-2019-14322.

Container imageDigestPackageFixed in
kubesphere/examples-bookinfo-productpage-v1:1.13.0378f49ec9c44
werkzeug@0.13
0.15.5

Open the chart page →

9,378
webapp-colormarcusrepo0.1.11 of 1See more

webapp-color marcusrepo 0.1.1

1 of the 1 container images this version deploys carry CVE-2019-14322.

Container imageDigestPackageFixed in
kodekloud/webapp-color:latest99c3821ea49b
werkzeug@0.14.1
0.15.5

Open the chart page →

911
mtlsmtls0.3.41 of 1See more

mtls mtls 0.3.4

1 of the 1 container images this version deploys carry CVE-2019-14322.

Container imageDigestPackageFixed in
drgrove/mtls-server:v0.14.2361721759a2b
werkzeug@0.15.2
0.15.5

Open the chart page →

1,458
comacopencord1.0.02 of 9See more

comac opencord 1.0.0

2 of the 9 container images this version deploys carry CVE-2019-14322.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
werkzeug@0.14.1
0.15.5
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
werkzeug@0.14.1
0.15.5

Open the chart page →

88,546
comac-platformopencord0.0.171 of 11See more

comac-platform opencord 0.0.17

1 of the 11 container images this version deploys carry CVE-2019-14322.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
werkzeug@0.14.1
0.15.5

Open the chart page →

26,211
ponsimv2opencord1.2.31 of 2See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry CVE-2019-14322.

Container imageDigestPackageFixed in
voltha/voltha-tester:1.7.0655c3048a602
werkzeug@0.15.4
0.15.5

Open the chart page →

12,609
sebaopencord1.0.04 of 17See more

seba opencord 1.0.0

4 of the 17 container images this version deploys carry CVE-2019-14322.

Container imageDigestPackageFixed in
voltha/voltha-cli:1.6.0c4e41e92f046
werkzeug@0.14.1
0.15.5
voltha/voltha-netconf:1.6.037f80524c207
werkzeug@0.14.1
0.15.5
voltha/voltha-ofagent:1.6.09ee8c1f4428c
werkzeug@0.14.1
0.15.5
voltha/voltha-voltha:1.6.0ff596b62de59
werkzeug@0.14.1
0.15.5

Open the chart page →

93,855
bookinforgnu1.0.01 of 7See more

bookinfo rgnu 1.0.0

1 of the 7 container images this version deploys carry CVE-2019-14322.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.14.022a0410f35a8
werkzeug@0.14.1
0.15.5

Open the chart page →

20,462
httpbinrgnu1.0.01 of 1See more

httpbin rgnu 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-14322.

Container imageDigestPackageFixed in
citizenstig/httpbin:latestb81c818ccb86
werkzeug@0.11.15
0.15.5

Open the chart page →

11,422
istio-bookinforgnu1.0.21 of 7See more

istio-bookinfo rgnu 1.0.2

1 of the 7 container images this version deploys carry CVE-2019-14322.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.14.022a0410f35a8
werkzeug@0.14.1
0.15.5

Open the chart page →

20,462
seldon-core-loadtestingseldon0.2.01 of 1See more

seldon-core-loadtesting seldon 0.2.0

1 of the 1 container images this version deploys carry CVE-2019-14322.

Container imageDigestPackageFixed in
seldonio/locust-core:0.81d0da98a2d76
werkzeug@0.15.4
0.15.5

Open the chart page →

23,007
pgadminstakaterVerified publisher0.1.141 of 1See more

pgadmin stakater 0.1.14

1 of the 1 container images this version deploys carry CVE-2019-14322.

Container imageDigestPackageFixed in
dpage/pgadmin4:4.5a5a656e1d5fd
werkzeug@0.15.2
0.15.5

Open the chart page →

2,060
icinga2-reportsvtech-public-helm-charts1.0.01 of 1See more

icinga2-report svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-14322.

Container imageDigestPackageFixed in
trungkien210493/icinga2-report:v1.7.12cc8c3763c4c
werkzeug@0.12.2
0.15.5

Open the chart page →

1,779
ceph-csi-cephfswikimedia0.1.81 of 5See more

ceph-csi-cephfs wikimedia 0.1.8

1 of the 5 container images this version deploys carry CVE-2019-14322.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
werkzeug@0.12.2
0.15.5

Open the chart page →

10,285
ceph-csi-rbdwikimedia0.1.131 of 6See more

ceph-csi-rbd wikimedia 0.1.13

1 of the 6 container images this version deploys carry CVE-2019-14322.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
werkzeug@0.12.2
0.15.5

Open the chart page →

11,784

Container images carrying it

32 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
istio/examples-bookinfo-productpage-v1:1.15.00a5eb4795952
werkzeug@0.14.1
0.15.5
2
istio/examples-bookinfo-productpage-v1:1.14.022a0410f35a8
werkzeug@0.14.1
0.15.5
2
nachomillangarcia/prometheus_aws_cost_exporter:lateste4ce056f2d6d
werkzeug@0.14.1
0.15.5
2
neilpeterson/azure-vote-front:v384062718347c
werkzeug@0.14.1
0.15.5
2
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
werkzeug@0.14.1
0.15.5
2
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
werkzeug@0.12.2
0.15.5
2
amancevice/superset:0.28.1c8c04bfe3d66
werkzeug@0.14.1
0.15.5
1
amundsendev/amundsen-metadata:2.5.44d98eb21f5f9
werkzeug@0.15.3
0.15.5
1
amundsendev/amundsen-search:2.4.099dda9502c3e
werkzeug@0.15.3
0.15.5
1
ceph/daemon:latest-nautilus90f30824a96e
werkzeug@0.9.1
0.15.5
1
cheyang/distributed-tf:1.6.046cc34755493
werkzeug@0.14.1
0.15.5
1
citizenstig/httpbin:latestb81c818ccb86
werkzeug@0.11.15
0.15.5
1
dpage/pgadmin4:4.5a5a656e1d5fd
werkzeug@0.15.2
0.15.5
1
drgrove/mtls-server:v0.14.2361721759a2b
werkzeug@0.15.2
0.15.5
1
greenbirdit/locust:0.9.0e99d53bdc944
werkzeug@0.14.1
0.15.5
1
halkeye/slack-resurrect:v0.1.477b05e95fdb5
werkzeug@0.15.4
0.15.5
1
kennethreitz/httpbin:latest599fe5e50731
werkzeug@0.14.1
0.15.5
1
kodekloud/webapp-color:latest99c3821ea49b
werkzeug@0.14.1
0.15.5
1
kubesphere/examples-bookinfo-productpage-v1:1.13.0378f49ec9c44
werkzeug@0.13
0.15.5
1
neilpeterson/aks-helloworld:v1fb47732ef36b
werkzeug@0.14.1
0.15.5
1
neilpeterson/chart-tweet:latest64fd8dab075f
werkzeug@0.14.1
0.15.5
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
werkzeug@0.14.1
0.15.5
1
opendatacube/restcube:latest91870111837c
werkzeug@0.15.4
0.15.5
1
opendatacube/wms:latest1b90cdf68831
werkzeug@0.15.4
0.15.5
1
seldonio/locust-core:0.81d0da98a2d76
werkzeug@0.15.4
0.15.5
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
werkzeug@0.14.1
0.15.5
1
trungkien210493/icinga2-report:v1.7.12cc8c3763c4c
werkzeug@0.12.2
0.15.5
1
voltha/voltha-cli:1.6.0c4e41e92f046
werkzeug@0.14.1
0.15.5
1
voltha/voltha-netconf:1.6.037f80524c207
werkzeug@0.14.1
0.15.5
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
werkzeug@0.14.1
0.15.5
1
voltha/voltha-tester:1.7.0655c3048a602
werkzeug@0.15.4
0.15.5
1
voltha/voltha-voltha:1.6.0ff596b62de59
werkzeug@0.14.1
0.15.5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.