StackRadarChart IndexLive demo

CVE-2022-0868

Medium

Advisory

Published 7 Mar 2022In the index since 8 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.1; base score, highest
EPSS: 0.007; 52nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 14; of 17,781 indexed, latest versions
Container images: 11; deployed by those charts
Fix available: 1 of 1; affected package

Open Redirect in urijs

Carried by container images the latest versions of 14 of 17,781 indexed charts deploy, on 11 images.

Affected package	Affected versions	Fixed in	Images
urijsnpm	1.19.1, 1.19.5, 1.19.6, 1.19.7	1.19.10	11

OSV records: GHSA-8h2f-7jc4-7m3m

Charts affected

14 by stars

Chart

Latest

Affected images

Radar Score

1 of 7 See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2022-0868.

Container image	Digest	Package	Fixed in
amundsendev/amundsen-frontend :2.1.1	69e7915e61c1	urijs@1.19.1	1.19.10

Open the chart page →

11,174

tampkubebb

1 of 2 See more

tamp kubebb 5.6.0

1 of the 2 container images this version deploys carry CVE-2022-0868.

Container image	Digest	Package	Fixed in
kubebb/tamp-portal :v5.6.0	fadac6d52470	urijs@1.19.6	1.19.10

Open the chart page →

4,664

tapm-componentkubebb

1 of 3 See more

tapm-component kubebb 5.7.1

1 of the 3 container images this version deploys carry CVE-2022-0868.

Container image	Digest	Package	Fixed in
refar/apm-portal :v5.7.1	dcca8e4477a6	urijs@1.19.6	1.19.10

Open the chart page →

10,264

tdsfkubebb

1 of 3 See more

tdsf kubebb 5.7.0

1 of the 3 container images this version deploys carry CVE-2022-0868.

Container image	Digest	Package	Fixed in
kubebb/tdsf-portal :v5.7.0	258458311bc9	urijs@1.19.7	1.19.10

Open the chart page →

6,490

account-lookup-servicemojaloop

1 of 4 See more

account-lookup-service mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2022-0868.

Container image	Digest	Package	Fixed in
mojaloop/account-lookup-service :v11.8.0	b06d3287ea82	urijs@1.19.7	1.19.10

Open the chart page →

11,695

account-lookup-service-adminmojaloop

1 of 4 See more

account-lookup-service-admin mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2022-0868.

Container image	Digest	Package	Fixed in
mojaloop/account-lookup-service :v11.8.0	b06d3287ea82	urijs@1.19.7	1.19.10

Open the chart page →

11,695

admin-api-svcmojaloop

1 of 4 See more

admin-api-svc mojaloop 12.0.0

1 of the 4 container images this version deploys carry CVE-2022-0868.

Container image	Digest	Package	Fixed in
mojaloop/central-ledger :v13.14.0	1abc8a7aa71c	urijs@1.19.7	1.19.10

Open the chart page →

12,108

fspiop-transfer-api-svcmojaloop

1 of 3 See more

fspiop-transfer-api-svc mojaloop 12.0.1

1 of the 3 container images this version deploys carry CVE-2022-0868.

Container image	Digest	Package	Fixed in
mojaloop/ml-api-adapter :v11.1.6	fb71d233c742	urijs@1.19.6	1.19.10

Open the chart page →

11,479

mojaloopmojaloop

3 of 6 See more

mojaloop mojaloop 14.0.0

3 of the 6 container images this version deploys carry CVE-2022-0868.

Container image	Digest	Package	Fixed in
mojaloop/account-lookup-service :v11.8.0	b06d3287ea82	urijs@1.19.7	1.19.10
mojaloop/central-ledger :v13.14.0	1abc8a7aa71c	urijs@1.19.7	1.19.10
mojaloop/ml-api-adapter :v11.1.6	fb71d233c742	urijs@1.19.6	1.19.10

Open the chart page →

19,226

flomesh-consoleopenshift

1 of 2 See more

flomesh-console openshift 0.70.0-30-ubi8

1 of the 2 container images this version deploys carry CVE-2022-0868.

Container image	Digest	Package	Fixed in
quay.io/flomesh/flomesh-console-ubi8 :0.70.0-30	ce6938ff6709	urijs@1.19.7	1.19.10

Open the chart page →

9,968

nordmart-reviewstakater

1 of 3 See more

nordmart-review stakater 0.0.6

1 of the 3 container images this version deploys carry CVE-2022-0868.

Container image	Digest	Package	Fixed in
stakater/stakater-nordmart-review-ui :1.0.14	3f4926eedc74	urijs@1.19.6	1.19.10

Open the chart page →

11,554

nordmart-review-instancestakater

1 of 3 See more

nordmart-review-instance stakater 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-0868.

Container image	Digest	Package	Fixed in
stakater/stakater-nordmart-review-ui :1.0.14	3f4926eedc74	urijs@1.19.6	1.19.10

Open the chart page →

11,554

cadencewenerme

1 of 5 See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2022-0868.

Container image	Digest	Package	Fixed in
ubercadence/web :v3.29.5	8564a5b44a6d	urijs@1.19.5	1.19.10

Open the chart page →

10,127

temporalwenerme

1 of 13 See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2022-0868.

Container image	Digest	Package	Fixed in
temporalio/web :1.14.0	33cfa863d8ce	urijs@1.19.7	1.19.10

Open the chart page →

22,665

Container images carrying it

11 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
mojaloop/account-lookup-service :v11.8.0	b06d3287ea82	urijs@1.19.7	1.19.10	3
mojaloop/central-ledger :v13.14.0	1abc8a7aa71c	urijs@1.19.7	1.19.10	2
mojaloop/ml-api-adapter :v11.1.6	fb71d233c742	urijs@1.19.6	1.19.10	2
stakater/stakater-nordmart-review-ui :1.0.14	3f4926eedc74	urijs@1.19.6	1.19.10	2
amundsendev/amundsen-frontend :2.1.1	69e7915e61c1	urijs@1.19.1	1.19.10	1
kubebb/tamp-portal :v5.6.0	fadac6d52470	urijs@1.19.6	1.19.10	1
kubebb/tdsf-portal :v5.7.0	258458311bc9	urijs@1.19.7	1.19.10	1
refar/apm-portal :v5.7.1	dcca8e4477a6	urijs@1.19.6	1.19.10	1
temporalio/web :1.14.0	33cfa863d8ce	urijs@1.19.7	1.19.10	1
ubercadence/web :v3.29.5	8564a5b44a6d	urijs@1.19.5	1.19.10	1
quay.io/flomesh/flomesh-console-ubi8 :0.70.0-30	ce6938ff6709	urijs@1.19.7	1.19.10	1