CVE-2021-22573
HighAdvisory
Published 9 Apr 2024In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.3
- base score, highest
- EPSS
- 0.003
- 22nd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 23
- of 17,781 indexed, latest versions
- Container images
- 26
- deployed by those charts
- Fix available
- 1 of 1
- affected package
google-oauth-java-client improperly verifies cryptographic signature
Carried by container images the latest versions of 23 of 17,781 indexed charts deploy, on 26 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| google-oauth-clientmaven | 1.17.0-rc, 1.19.0, 1.20.0, 1.22.0+8 more | 1.33.3 | 26 |
- OSV records
- GHSA-hw42-3568-wj87
Charts affected
23 by stars
Container images carrying it
26 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| library/ | 8c5f7881cebb | google-oauth-client | 1.33.3 | 3 |
| airbyte/ | caf4f551c546 | google-oauth-client | 1.33.3 | 1 |
| apacheignite/ | d7deab68b8fa | google-oauth-client | 1.33.3 | 1 |
| apachepinot/ | 0018bb04ced7 | google-oauth-client | 1.33.3 | 1 |
| confluentinc/ | f2975d507a2a | google-oauth-client | 1.33.3 | 1 |
| confluentinc/ | 8f1544df1f48 | google-oauth-client | 1.33.3 | 1 |
| confluentinc/ | 4bc70a83ca6f | google-oauth-client | 1.33.3 | 1 |
| confluentinc/ | b0b7aa26254a | google-oauth-client | 1.33.3 | 1 |
| confluentinc/ | ee403d5b9090 | google-oauth-client | 1.33.3 | 1 |
| confluentinc/ | b651d4b6185a | google-oauth-client | 1.33.3 | 1 |
| hazelcast/ | a825ecbe9fda | google-oauth-client | 1.33.3 | 1 |
| intelloop/ | 4c61bc3dd3f8 | google-oauth-client | 1.33.3 | 1 |
| jacobalberty/ | 4a3616625dda | google-oauth-client | 1.33.3 | 1 |
| jacobalberty/ | b3edc809a3ff | google-oauth-client | 1.33.3 | 1 |
| jacobalberty/ | c409924e2463 | google-oauth-client | 1.33.3 | 1 |
| linuxserver/ | 0ae315a3a456 | google-oauth-client | 1.33.3 | 1 |
| linuxserver/ | ab105cc50322 | google-oauth-client | 1.33.3 | 1 |
| massimolauri/ | e08abf0ce767 | google-oauth-client | 1.33.3 | 1 |
| omecproject/ | b4ae7d0d6b74 | google-oauth-client | 1.33.3 | 1 |
| openkm/ | 3bc465a7461b | google-oauth-client | 1.33.3 | 1 |
| trinodb/ | ee80ab5eeab2 | google-oauth-client | 1.33.3 | 1 |
| wistefan/ | e0887302b2d8 | google-oauth-client | 1.33.3 | 1 |
| zenko/ | 386a1f48ec0e | google-oauth-client | 1.33.3 | 1 |
| gcr.io/ | 0ee5f968d2ab | google-oauth-client | 1.33.3 | 1 |
| public.ecr.aws/ | 8cdcb7e83f9f | google-oauth-client | 1.33.3 | 1 |
| quay.io/ | 8ed603ab7417 | google-oauth-client | 1.33.3 | 1 |