StackRadar

CVE-2022-0144

High

Advisory

Published 21 Jan 2022In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.1
base score, highest
EPSS
0.004
36th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
26
of 17,781 indexed, latest versions
Container images
23
deployed by those charts
Fix available
1 of 1
affected package

Improper Privilege Management in shelljs

Carried by container images the latest versions of 26 of 17,781 indexed charts deploy, on 23 images.

Affected packageAffected versionsFixed inImages
shelljsnpm0.3.0, 0.7.8, 0.8.2, 0.8.3+1 more0.8.523
OSV records
GHSA-4rq4-32rv-6wp6

Charts affected

26 by stars
ChartLatestAffected imagesRadar Score
backstagedeliveryheroVerified publisher0.1.151 of 2See more

backstage deliveryhero 0.1.15

1 of the 2 container images this version deploys carry CVE-2022-0144.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
shelljs@0.8.4
0.8.5

Open the chart page →

8,213
hubotdecayofmind1.0.21 of 3See more

hubot decayofmind 1.0.2

1 of the 3 container images this version deploys carry CVE-2022-0144.

Container imageDigestPackageFixed in
decayofmind/hubot:3.3.21e18e92fe694
shelljs@0.3.0
0.8.5

Open the chart page →

2,513
zwavejs2mqttgeek-cookbookVerified publisher5.4.21 of 1See more

zwavejs2mqtt geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2022-0144.

Container imageDigestPackageFixed in
zwavejs/zwavejs2mqtt:5.0.215a6040fb468
shelljs@0.8.4
0.8.5

Open the chart page →

3,476
flamerlex0.3.01 of 1See more

flame rlex 0.3.0

1 of the 1 container images this version deploys carry CVE-2022-0144.

Container imageDigestPackageFixed in
pawelmalak/flame:2.1.193e7b0abb603
shelljs@0.8.4
0.8.5

Open the chart page →

2,449
testhubteshubVerified publisher0.1.41 of 3See more

testhub teshub 0.1.4

1 of the 3 container images this version deploys carry CVE-2022-0144.

Container imageDigestPackageFixed in
testhubio/testhub-frontend:on-preme86c2db53be8
shelljs@0.8.3
0.8.5

Open the chart page →

7,517
registry-uibryanalves0.2.01 of 1See more

registry-ui bryanalves 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-0144.

Container imageDigestPackageFixed in
konradkleine/docker-registry-frontend:v2181aad54ee64
shelljs@0.3.0
0.8.5

Open the chart page →

4,069
ethereumcloudnativeapp1.0.01 of 3See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-0144.

Container imageDigestPackageFixed in
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
shelljs@0.7.8
0.8.5

Open the chart page →

27,417
hubotcloudnativeapp0.0.11 of 1See more

hubot cloudnativeapp 0.0.1

1 of the 1 container images this version deploys carry CVE-2022-0144.

Container imageDigestPackageFixed in
minddocdev/hubot:0.1.96c60b11a4fa7
shelljs@0.3.0
0.8.5

Open the chart page →

2,580
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2022-0144.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
shelljs@0.8.3
0.8.5

Open the chart page →

25,456
db-operatordb-operatorVerified publisher0.1.01 of 1See more

db-operator db-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-0144.

Container imageDigestPackageFixed in
plumdog/db-operator:latest0c2fa2db0357
shelljs@0.8.4
0.8.5

Open the chart page →

3,042
smeejasfanzynoodle0.0.11 of 1See more

smeejas fanzynoodle 0.0.1

1 of the 1 container images this version deploys carry CVE-2022-0144.

Container imageDigestPackageFixed in
fanzynoodle/smeejas:0.0.15f9916c1a287
shelljs@0.8.4
0.8.5

Open the chart page →

4,127
iotagent-ulfiware0.1.21 of 1See more

iotagent-ul fiware 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-0144.

Container imageDigestPackageFixed in
fiware/iotagent-ul:1.14.0fe11f55a926d
shelljs@0.8.4
0.8.5

Open the chart page →

3,337
flamegabe565Verified publisher0.6.01 of 1See more

flame gabe565 0.6.0

1 of the 1 container images this version deploys carry CVE-2022-0144.

Container imageDigestPackageFixed in
pawelmalak/flame:multiarch2.3.19f88b17692a0
shelljs@0.8.4
0.8.5

Open the chart page →

2,172
wekan-oldgabisonfire0.1.21 of 1See more

wekan-old gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-0144.

Container imageDigestPackageFixed in
wekanteam/wekan:v4.2268a51f0327df
shelljs@0.7.8
0.8.5

Open the chart page →

5,941
backstagehelm-charts-nr0.1.151 of 2See more

backstage helm-charts-nr 0.1.15

1 of the 2 container images this version deploys carry CVE-2022-0144.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
shelljs@0.8.4
0.8.5

Open the chart page →

8,213
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2022-0144.

Container imageDigestPackageFixed in
ibmcom/microclimate-portal:latested5505e5c7ec
shelljs@0.7.8
0.8.5

Open the chart page →

57,669
backstageirembo-backstage-helmVerified publisher1.0.51 of 3See more

backstage irembo-backstage-helm 1.0.5

1 of the 3 container images this version deploys carry CVE-2022-0144.

Container imageDigestPackageFixed in
roadiehq/community-backstage-image:latestef355bf5b639
shelljs@0.8.4
0.8.5

Open the chart page →

7,232
yapijoelee2012Verified publisher0.2.01 of 1See more

yapi joelee2012 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-0144.

Container imageDigestPackageFixed in
jayfong/yapi:1.10.2163e5d621910
shelljs@0.7.8
0.8.5

Open the chart page →

6,454
kubevismario-fVerified publisher2.0.11 of 1See more

kubevis mario-f 2.0.1

1 of the 1 container images this version deploys carry CVE-2022-0144.

Container imageDigestPackageFixed in
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
shelljs@0.8.4
0.8.5

Open the chart page →

5,287
kommandermesosphere-stable0.39.21 of 29See more

kommander mesosphere-stable 0.39.2

1 of the 29 container images this version deploys carry CVE-2022-0144.

Container imageDigestPackageFixed in
mesosphere/kommander:6.100.13917e82333a9
shelljs@0.8.2
0.8.5

Open the chart page →

68,284
opsportalmesosphere-stable0.9.51 of 3See more

opsportal mesosphere-stable 0.9.5

1 of the 3 container images this version deploys carry CVE-2022-0144.

Container imageDigestPackageFixed in
mesosphere/kommander:6.100.13917e82333a9
shelljs@0.8.2
0.8.5

Open the chart page →

7,027
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2022-0144.

Container imageDigestPackageFixed in
opensearchproject/opensearch-dashboards:1.0.039695180364b
shelljs@0.8.4
0.8.5

Open the chart page →

10,603
standard-application-stackmintel11.4.01 of 12See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry CVE-2022-0144.

Container imageDigestPackageFixed in
opensearchproject/opensearch-dashboards:1.0.039695180364b
shelljs@0.8.4
0.8.5

Open the chart page →

10,603
smilencsaVerified publisher1.1.01 of 23See more

smile ncsa 1.1.0

1 of the 23 container images this version deploys carry CVE-2022-0144.

Container imageDigestPackageFixed in
socialmediamacroscope/smile_graphql:0.3.1c5095e94bc65
shelljs@0.7.8
0.8.5

Open the chart page →

109,294
flomesh-consoleopenshift0.70.0-30-ubi81 of 2See more

flomesh-console openshift 0.70.0-30-ubi8

1 of the 2 container images this version deploys carry CVE-2022-0144.

Container imageDigestPackageFixed in
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
shelljs@0.8.4
0.8.5

Open the chart page →

9,968
kubernetes-external-secretstrozz6.3.01 of 1See more

kubernetes-external-secrets trozz 6.3.0

1 of the 1 container images this version deploys carry CVE-2022-0144.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/kubernetes-external-secrets:6.3.0eab9bd0b6986
shelljs@0.8.4
0.8.5

Open the chart page →

2,838

Container images carrying it

23 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
shelljs@0.8.4
0.8.5
2
mesosphere/kommander:6.100.13917e82333a9
shelljs@0.8.2
0.8.5
2
opensearchproject/opensearch-dashboards:1.0.039695180364b
shelljs@0.8.4
0.8.5
2
decayofmind/hubot:3.3.21e18e92fe694
shelljs@0.3.0
0.8.5
1
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
shelljs@0.7.8
0.8.5
1
fanzynoodle/smeejas:0.0.15f9916c1a287
shelljs@0.8.4
0.8.5
1
fiware/iotagent-ul:1.14.0fe11f55a926d
shelljs@0.8.4
0.8.5
1
ibmcom/microclimate-portal:latested5505e5c7ec
shelljs@0.7.8
0.8.5
1
jayfong/yapi:1.10.2163e5d621910
shelljs@0.7.8
0.8.5
1
konradkleine/docker-registry-frontend:v2181aad54ee64
shelljs@0.3.0
0.8.5
1
minddocdev/hubot:0.1.96c60b11a4fa7
shelljs@0.3.0
0.8.5
1
pawelmalak/flame:2.1.193e7b0abb603
shelljs@0.8.4
0.8.5
1
pawelmalak/flame:multiarch2.3.19f88b17692a0
shelljs@0.8.4
0.8.5
1
plumdog/db-operator:latest0c2fa2db0357
shelljs@0.8.4
0.8.5
1
roadiehq/community-backstage-image:latestef355bf5b639
shelljs@0.8.4
0.8.5
1
socialmediamacroscope/smile_graphql:0.3.1c5095e94bc65
shelljs@0.7.8
0.8.5
1
testhubio/testhub-frontend:on-preme86c2db53be8
shelljs@0.8.3
0.8.5
1
wekanteam/wekan:v4.2268a51f0327df
shelljs@0.7.8
0.8.5
1
zwavejs/zwavejs2mqtt:5.0.215a6040fb468
shelljs@0.8.4
0.8.5
1
ghcr.io/external-secrets/kubernetes-external-secrets:6.3.0eab9bd0b6986
shelljs@0.8.4
0.8.5
1
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
shelljs@0.8.4
0.8.5
1
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
shelljs@0.8.4
0.8.5
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
shelljs@0.8.3
0.8.5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.