StackRadar

CVE-2021-22060

Medium

Advisory

Published 12 Jan 2022In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
4.3
base score, highest
EPSS
0.008
56th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
158
of 17,781 indexed, latest versions
Container images
105
deployed by those charts
Fix available
1 of 1
affected package

Log entry injection in Spring Framework

Carried by container images the latest versions of 158 of 17,781 indexed charts deploy, on 105 images.

Affected packageAffected versionsFixed inImages
spring-coremaven5.2.0.RELEASE, 5.2.1.RELEASE, 5.2.2.RELEASE, 5.2.3.RELEASE+18 more5.2.19, 5.3.14105
OSV records
GHSA-6gf2-pvqw-37ph

Charts affected

158 by stars
ChartLatestAffected imagesRadar Score
eoloplannereoloplanner-molynx-gat0.1.01 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
molynx/planner:v1441c9f52f092
spring-core@5.3.13
5.3.14

Open the chart page →

28,482
eolo-plannereolo-planner-repo0.1.01 of 7See more

eolo-planner eolo-planner-repo 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
arturisimo/planner:v1.0fff9de644941
spring-core@5.3.13
5.3.14

Open the chart page →

27,096
eoloplanteoloplant1.0.01 of 7See more

eoloplant eoloplant 1.0.0

1 of the 7 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
spring-core@5.3.13
5.3.14

Open the chart page →

27,537
eoloplantseoloplants-urjcVerified publisher0.1.01 of 7See more

eoloplants eoloplants-urjc 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
lourdesmorente/new-planner:1.0.0608745878cdb
spring-core@5.3.13
5.3.14

Open the chart page →

27,721
servereoloserverVerified publisher0.1.01 of 7See more

server eoloserver 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
spring-core@5.3.13
5.3.14

Open the chart page →

32,205
shenyuerdeng2.4.212 of 2See more

shenyu erdeng 2.4.21

2 of the 2 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.4.2e8b7c4ddd069
spring-core@5.2.2.RELEASE
5.2.19
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
spring-core@5.2.2.RELEASE
5.2.19

Open the chart page →

12,513
findery-marketfindery-market0.1.01 of 7See more

findery-market findery-market 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
chandanteekinavar/findery-market-order-service:1.00cf52bf5ee9a
spring-core@5.3.10
5.3.14

Open the chart page →

7,691
scorpio-brokerfiware0.3.39 of 10See more

scorpio-broker fiware 0.3.3

9 of the 10 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:RegistrySubscriptionManager_2.1.001e11d800459
spring-core@5.3.13
5.3.14
scorpiobroker/scorpio:eureka-server_2.1.03f05a113a4be
spring-core@5.3.13
5.3.14
scorpiobroker/scorpio:AtContextServer_2.1.05073ceef2fa0
spring-core@5.3.13
5.3.14
scorpiobroker/scorpio:gateway_2.1.062dae3dd0eeb
spring-core@5.3.13
5.3.14
scorpiobroker/scorpio:RegistryManager_2.1.0a2cfcf0947fd
spring-core@5.3.13
5.3.14
scorpiobroker/scorpio:QueryManager_2.1.0b742a53b2803
spring-core@5.3.13
5.3.14
scorpiobroker/scorpio:HistoryManager_2.1.0b7fe27a06ff5
spring-core@5.3.13
5.3.14
scorpiobroker/scorpio:SubscriptionManager_2.1.0e08036670d66
spring-core@5.3.13
5.3.14
scorpiobroker/scorpio:EntityManager_2.1.0f02e8a429a08
spring-core@5.3.13
5.3.14

Open the chart page →

55,600
scorpiobrokerfiware0.1.29 of 10See more

scorpiobroker fiware 0.1.2

9 of the 10 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:RegistrySubscriptionManager_2.1.001e11d800459
spring-core@5.3.13
5.3.14
scorpiobroker/scorpio:eureka-server_2.1.03f05a113a4be
spring-core@5.3.13
5.3.14
scorpiobroker/scorpio:AtContextServer_2.1.05073ceef2fa0
spring-core@5.3.13
5.3.14
scorpiobroker/scorpio:gateway_2.1.062dae3dd0eeb
spring-core@5.3.13
5.3.14
scorpiobroker/scorpio:RegistryManager_2.1.0a2cfcf0947fd
spring-core@5.3.13
5.3.14
scorpiobroker/scorpio:QueryManager_2.1.0b742a53b2803
spring-core@5.3.13
5.3.14
scorpiobroker/scorpio:HistoryManager_2.1.0b7fe27a06ff5
spring-core@5.3.13
5.3.14
scorpiobroker/scorpio:SubscriptionManager_2.1.0e08036670d66
spring-core@5.3.13
5.3.14
scorpiobroker/scorpio:EntityManager_2.1.0f02e8a429a08
spring-core@5.3.13
5.3.14

Open the chart page →

55,600
scorpio-broker-aaiofiware0.4.151 of 1See more

scorpio-broker-aaio fiware 0.4.15

1 of the 1 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:scorpio-aaio_2.1.0db55012043df
spring-core@5.3.13
5.3.14

Open the chart page →

5,286
pagesgary-pages1.0.01 of 3See more

pages gary-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-core@5.2.7.RELEASE
5.2.19

Open the chart page →

20,190
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
spring-core@5.3.8
5.3.14

Open the chart page →

18,230
booksonic-airgeek-cookbookVerified publisher6.4.21 of 1See more

booksonic-air geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
spring-core@5.2.6.RELEASE
5.2.19

Open the chart page →

19,215
komgageek-cookbookVerified publisher2.4.21 of 1See more

komga geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
gotson/komga:0.99.49b15ea6bfc30
spring-core@5.3.7
5.3.14

Open the chart page →

12,581
nzbhydra2geek-cookbookVerified publisher10.4.21 of 1See more

nzbhydra2 geek-cookbook 10.4.2

1 of the 1 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
spring-core@5.2.7.RELEASE
5.2.19

Open the chart page →

17,702
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.81 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
spring-core@5.2.12.RELEASE
5.2.19

Open the chart page →

34,754
pageshelm-chart-repos-camden1.0.01 of 3See more

pages helm-chart-repos-camden 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-core@5.2.7.RELEASE
5.2.19

Open the chart page →

20,190
pageshelm-repo1.0.01 of 3See more

pages helm-repo 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-core@5.2.7.RELEASE
5.2.19

Open the chart page →

20,190
todo-apihelm-repo-sharif0.1.01 of 2See more

todo-api helm-repo-sharif 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
pavanelthepu/todo-api:1.0.2f47658e3b24c
spring-core@5.3.8
5.3.14

Open the chart page →

2,544
eoloplanthttpd-eoloplant0.1.01 of 7See more

eoloplant httpd-eoloplant 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
spring-core@5.3.13
5.3.14

Open the chart page →

32,205
skywalking-v1huangchengwu-helm-chart0.1.01 of 4See more

skywalking-v1 huangchengwu-helm-chart 0.1.0

1 of the 4 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
apache/skywalking-ui:8.9.180530f0308a5
spring-core@5.3.8
5.3.14

Open the chart page →

20,650
eoloserverihuertas2021-vmartinp2021-helm0.1.01 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
huertaslopez/i.huertas.2021-v.martinp.2021-planner:2.0.0e2c18bd65472
spring-core@5.3.13
5.3.14

Open the chart page →

27,721
spring-boot-chartjhidalgo3-githubVerified publisher4.0.01 of 1See more

spring-boot-chart jhidalgo3-github 4.0.0

1 of the 1 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
jhidalgo3/spring-echo-example:lateste08733191ea0
spring-core@5.3.3
5.3.14

Open the chart page →

1,703
kron-aapm-agentkron-aapm-agent1.1.01 of 1See more

kron-aapm-agent kron-aapm-agent 1.1.0

1 of the 1 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
krontechnology/aapm-agent:1.1.07feef7d2ab42
spring-core@5.3.1
5.3.14

Open the chart page →

8,884
tapm-componentkubebb5.7.12 of 3See more

tapm-component kubebb 5.7.1

2 of the 3 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
refar/apm-api:v5.7.1241373fa2972
spring-core@5.2.8.RELEASE
5.2.19
refar/apm-operator-server:v5.7.1e5490f050f9f
spring-core@5.2.8.RELEASE
5.2.19

Open the chart page →

10,264
pageslatif-pages1.0.01 of 3See more

pages latif-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-core@5.2.7.RELEASE
5.2.19

Open the chart page →

20,190
pageslavanya-pages1.0.01 of 3See more

pages lavanya-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-core@5.2.7.RELEASE
5.2.19

Open the chart page →

20,190
pagesliviu884422-pages1.0.01 of 3See more

pages liviu884422-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-core@5.2.7.RELEASE
5.2.19

Open the chart page →

20,190
elastictranscoderluiscajl0.46.04 of 4See more

elastictranscoder luiscajl 0.46.0

4 of the 4 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
elastictranscoder/media:627e21dc963ab3858c6b
spring-core@5.3.8
5.3.14
elastictranscoder/media-storage:f6d861a026208b8c2359
spring-core@5.3.8
5.3.14
elastictranscoder/transcoder:627e21dcb4a0327029e6
spring-core@5.3.8
5.3.14
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
spring-core@5.3.8
5.3.14

Open the chart page →

58,160
lavandaluiscajl0.0.1344 of 5See more

lavanda luiscajl 0.0.134

4 of the 5 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
lavandadelpatio/automated-download-films:0.0.2094e225a5a6f8
spring-core@5.2.9.RELEASE
5.2.19
lavandadelpatio/automated-download-shows:0.0.492de3c3426d2
spring-core@5.2.9.RELEASE
5.2.19
lavandadelpatio/filebot:0.0.671f2ccec8c0d
spring-core@5.3.5
5.3.14
lavandadelpatio/tmdb:0.0.2f36af885e915
spring-core@5.3.5
5.3.14

Open the chart page →

18,248
eoloplantmca-eoloplaner0.1.02 of 7See more

eoloplant mca-eoloplaner 0.1.0

2 of the 7 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
hugohg34/planner:0.0.2171f61e8d7e2
spring-core@5.3.13
5.3.14
hugohg34/toposervice:0.0.2812a03b3f274
spring-core@5.3.13
5.3.14

Open the chart page →

29,588
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
opensearchproject/opensearch:1.1.0967d7f57f72f
spring-core@5.2.5.RELEASE
5.2.19

Open the chart page →

10,603
standard-application-stackmintel11.4.01 of 12See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
opensearchproject/opensearch:1.1.0967d7f57f72f
spring-core@5.2.5.RELEASE
5.2.19

Open the chart page →

10,603
pagesmuthu-pages1.0.01 of 3See more

pages muthu-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-core@5.2.7.RELEASE
5.2.19

Open the chart page →

20,190
Practica_4_helmmy-heml-appVerified publisher0.1.01 of 7See more

Practica_4_helm my-heml-app 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
adagber/planner:v1.0e5c1ed097752
spring-core@5.3.13
5.3.14

Open the chart page →

27,721
pagesnarain1.0.01 of 3See more

pages narain 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-core@5.2.7.RELEASE
5.2.19

Open the chart page →

20,190
pagesnarasimha-pages1.0.01 of 3See more

pages narasimha-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-core@5.2.7.RELEASE
5.2.19

Open the chart page →

20,190
pagesnavin-brixton1.0.01 of 3See more

pages navin-brixton 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-core@5.2.7.RELEASE
5.2.19

Open the chart page →

20,190
bpjstk-serviceopenshift1.0.04 of 6See more

bpjstk-service openshift 1.0.0

4 of the 6 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
andrianrf/bpjstk-service:latest46abe878d9d8
spring-core@5.2.9.RELEASE
5.2.19
andrianrf/bpjstk-simulator:latestb63fdb51d39d
spring-core@5.2.9.RELEASE
5.2.19
andrianrf/iso-client:latestba560086ce15
spring-core@5.2.9.RELEASE
5.2.19
andrianrf/iso-server:latest7da47f525c7d
spring-core@5.2.7.RELEASE
5.2.19

Open the chart page →

34,671
p4p40.1.01 of 7See more

p4 p4 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
spring-core@5.3.13
5.3.14

Open the chart page →

27,537
myappp4-helm0.1.01 of 6See more

myapp p4-helm 0.1.0

1 of the 6 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
fjvela/urjc-fjvela-worker:1.0.170cebf67bd66
spring-core@5.2.1.RELEASE
5.2.19

Open the chart page →

19,720
pagespages1.0.01 of 3See more

pages pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-core@5.2.7.RELEASE
5.2.19

Open the chart page →

20,190
pagespages-10.1.01 of 1See more

pages pages-1 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
dellcloud/pages:1.04d2eb25b9225
spring-core@5.3.4
5.3.14

Open the chart page →

10,392
pagespages101.0.01 of 3See more

pages pages10 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-core@5.2.7.RELEASE
5.2.19

Open the chart page →

20,190
pagespages1111.0.01 of 3See more

pages pages111 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-core@5.2.7.RELEASE
5.2.19

Open the chart page →

20,190
pagespages21.0.01 of 3See more

pages pages2 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-core@5.2.7.RELEASE
5.2.19

Open the chart page →

20,190
pagespages-alexchmielu1.0.01 of 3See more

pages pages-alexchmielu 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-core@5.2.7.RELEASE
5.2.19

Open the chart page →

20,190
pagespages-alps1.0.01 of 3See more

pages pages-alps 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-core@5.2.7.RELEASE
5.2.19

Open the chart page →

20,190
pagespages-alstom1.0.01 of 3See more

pages pages-alstom 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-core@5.2.7.RELEASE
5.2.19

Open the chart page →

20,190
pagespages-ambala1.0.01 of 3See more

pages pages-ambala 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-22060.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-core@5.2.7.RELEASE
5.2.19

Open the chart page →

20,190

Container images carrying it

105 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
vientoprojects/kubernetes-monitoring-telegram-bot:latesteb2a71531741
spring-core@5.3.9
5.3.14
1
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
spring-core@5.2.3.RELEASE
5.2.19
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
spring-core@5.2.7.RELEASE
5.2.19
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
spring-core@5.2.6.RELEASE
5.2.19
1
quay.io/srcmaxim/gradle-example-app:1.1.37c3fc28746ef
spring-core@5.3.7
5.3.14
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.