CVE-2022-1271

High

Advisory

Published 7 Apr 2022In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.8; base score, highest
EPSS: 0.050; 92nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,238; of 17,781 indexed, latest versions
Container images: 1,167; deployed by those charts
Fix available: 6 of 6; affected packages

Red Hat Security Advisory: gzip security update

Carried by container images the latest versions of 1,238 of 17,781 indexed charts deploy, on 1,167 images.

Affected package	Affected versions	Fixed in	Images
gzipdeb	1.6-3ubuntu1, 1.6-4ubuntu1, 1.6-5+b1, 1.6-5ubuntu1+4 more	1.6-3ubuntu1+esm1, 1.6-4ubuntu1+esm1, 1.6-5+deb9u1, 1.6-5ubuntu1.2+3 more	848
xz-utilsdeb	5.1.1alpha+20120614-2ubuntu2, 5.2.2-1.2+b1, 5.2.2-1.3, 5.2.4-1+2 more	5.1.1alpha+20120614-2ubuntu2.14.04.1+esm1, 5.1.1alpha+20120614-2ubuntu2.16.04.1+esm1, 5.2.2-1.2+deb9u1, 5.2.2-1.3ubuntu0.1+3 more	846
xzapk	5.2.5-r0	5.2.5-r1	214
xzrpm	5.2.2-1.el7, 5.2.3-4.3.1, 5.2.3-lp151.4.3.1, 5.2.4-3.el8+2 more	0:5.2.2-2.el7_9, 0:5.2.4-4.el8_6, 5.2.3-150000.4.7.1, 5.2.6-1.1	104
gziprpm	1.5-10.el7, 1.9-9.el8, 1.9-10.el8_2, 1.9-12.el8+1 more	0:1.5-11.el7_9, 0:1.9-13.el8_5	58
gzipapk	1.10-r0, 1.10-r1	1.12-r0	2

OSV records: ALPINE-CVE-2022-1271 RHSA-2022:1537 RHSA-2022:2191 RHSA-2022:4991 RHSA-2022:5052 UBUNTU-CVE-2022-1271 DLA-2976-1 DLA-2977-1 DSA-5122-1 DSA-5123-1 openSUSE-SU-2024:12271-1 SUSE-SU-2022:1158-1
Also known as: RHSA-2022:1592, RHSA-2022:1665, RHSA-2022:1676, RHSA-2022:4992, RHSA-2022:4993, RHSA-2022:4994, USN-5378-1, USN-5378-2, USN-5378-3, USN-5378-4

Charts affected

1,238 by stars

Chart

Latest

Affected images

Radar Score

artifact-hubartifact-hub

1.23.0

1 of 7 See more

artifact-hub artifact-hub 1.23.0

1 of the 7 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.19	804725facf91	gzip@1.9-3 xz-utils@5.2.4-1	1.9-3+deb10u1 5.2.4-1+deb10u1

Open the chart page →

10,755

keycloakcodecentric

18.10.0

1 of 3 See more

keycloak codecentric 18.10.0

1 of the 3 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :17.0.1-legacy	68f9f38c8f30	gzip@1.9-12.el8 xz@5.2.4-3.el8	0:1.9-13.el8_5 0:5.2.4-4.el8_6

Open the chart page →

7,713

openldap-stack-hahelm-openldap

4.3.3

1 of 5 See more

openldap-stack-ha helm-openldap 4.3.3

1 of the 5 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
osixia/phpldapadmin :0.9.0	d112b82be133	gzip@1.9-3 xz-utils@5.2.4-1	1.9-3+deb10u1 5.2.4-1+deb10u1

Open the chart page →

5,919

milvusmilvus

4.0.31

1 of 5 See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
apachepulsar/pulsar :2.8.2	d538416d5afe	gzip@1.10-0ubuntu4 xz-utils@5.2.4-1ubuntu1	1.10-0ubuntu4.1 5.2.4-1ubuntu1.1

Open the chart page →

32,259

mattermost-team-editionmattermost

6.6.106

1 of 4 See more

mattermost-team-edition mattermost 6.6.106

1 of the 4 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
library/mysql :8.0.18	e1b0fd480a11	gzip@1.6-5+b1 xz-utils@5.2.2-1.2+b1	1.6-5+deb9u1 5.2.2-1.2+deb9u1

Open the chart page →

1,475

ambassadordatawire

6.9.5

1 of 2 See more

ambassador datawire 6.9.5

1 of the 2 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
library/redis :5.0.1	19f4621c085c	gzip@1.6-5+b1 xz-utils@5.2.2-1.2+b1	1.6-5+deb9u1 5.2.2-1.2+deb9u1

Open the chart page →

4,086

istiocloudposse

1.1.0

2 of 8 See more

istio cloudposse 1.1.0

2 of the 8 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
gcr.io/istio-release/pilot :release-1.0-latest-daily	5ea7b7f3632a	gzip@1.6-4ubuntu1 xz-utils@5.1.1alpha+20120614-2ubuntu2	1.6-4ubuntu1+esm1 5.1.1alpha+20120614-2ubuntu2.16.04.1+esm1
gcr.io/istio-release/proxyv2 :release-1.0-latest-daily	8f9ff98fdbef	gzip@1.6-4ubuntu1 xz-utils@5.1.1alpha+20120614-2ubuntu2	1.6-4ubuntu1+esm1 5.1.1alpha+20120614-2ubuntu2.16.04.1+esm1

Open the chart page →

23,964

san-iscsi-csienix

4.0.2

1 of 7 See more

san-iscsi-csi enix 4.0.2

1 of the 7 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
enix/san-iscsi-csi :v4.0.2	f963da81ecf7	gzip@1.6-5ubuntu1.1 xz-utils@5.2.2-1.3	1.6-5ubuntu1.2 5.2.2-1.3ubuntu0.1

Open the chart page →

4,154

postgresqlcetic

0.2.5

1 of 2 See more

postgresql cetic 0.2.5

1 of the 2 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
library/postgres :11.5	b3770d9c4ef1	gzip@1.6-5+b1 xz-utils@5.2.2-1.2+b1	1.6-5+deb9u1 5.2.2-1.2+deb9u1

Open the chart page →

1,015

emissary-ingressdatawire

7.1.8-ea

1 of 1 See more

emissary-ingress datawire 7.1.8-ea

1 of the 1 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
datawire/emissary :2.0.2-ea	9716efbdd24b	xz@5.2.5-r0	5.2.5-r1

Open the chart page →

4,918

home-assistantgeek-cookbook

13.5.0

1 of 1 See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2022.5.4	ec6d67fbedfa	xz@5.2.5-r0	5.2.5-r1

Open the chart page →

7,705

openldaphelm-openldap

2.0.4

2 of 3 See more

openldap helm-openldap 2.0.4

2 of the 3 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
osixia/openldap :1.4.0	ccd95cc6e61e	gzip@1.9-3 xz-utils@5.2.4-1	1.9-3+deb10u1 5.2.4-1+deb10u1
osixia/phpldapadmin :0.9.0	d112b82be133	gzip@1.9-3 xz-utils@5.2.4-1	1.9-3+deb10u1 5.2.4-1+deb10u1

Open the chart page →

6,219

openvpn-asstenic

0.1.9

1 of 1 See more

openvpn-as stenic 0.1.9

1 of the 1 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	gzip@1.6-5ubuntu1 xz-utils@5.2.2-1.3	1.6-5ubuntu1.2 5.2.2-1.3ubuntu0.1

Open the chart page →

15,592

jellyfinutkuozdemir

2.0.0

1 of 1 See more

jellyfin utkuozdemir 2.0.0

1 of the 1 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
linuxserver/jellyfin :10.7.7	2427dde159a2	gzip@1.10-0ubuntu4 xz-utils@5.2.4-1ubuntu1	1.10-0ubuntu4.1 5.2.4-1ubuntu1.1

Open the chart page →

7,880

scribebackube-helm-charts

0.2.0

1 of 2 See more

scribe backube-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
quay.io/backube/scribe :0.2.0	cdefc81c6b2e	gzip@1.9-12.el8 xz@5.2.4-3.el8	0:1.9-13.el8_5 0:5.2.4-4.el8_6

Open the chart page →

6,854

edge-stackdatawire

7.1.8-ea

2 of 2 See more

edge-stack datawire 7.1.8-ea

2 of the 2 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
datawire/aes :2.0.3-ea	07f8fe4f4f8e	xz@5.2.5-r0	5.2.5-r1
library/redis :5.0.1	19f4621c085c	gzip@1.6-5+b1 xz-utils@5.2.2-1.2+b1	1.6-5+deb9u1 5.2.2-1.2+deb9u1

Open the chart page →

5,173

cerebrowiremind

2.4.0

1 of 1 See more

cerebro wiremind 2.4.0

1 of the 1 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
lmenezes/cerebro :0.9.4	7d9e2b77e459	gzip@1.9-3 xz-utils@5.2.4-1	1.9-3+deb10u1 5.2.4-1+deb10u1

Open the chart page →

946

supersetcloudposse

1.2.0

1 of 1 See more

superset cloudposse 1.2.0

1 of the 1 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
amancevice/superset :0.35.2	12a0a9e66550	gzip@1.9-3 xz-utils@5.2.4-1	1.9-3+deb10u1 5.2.4-1+deb10u1

Open the chart page →

5,851

loki-simple-scalablegrafana

1.8.11

1 of 3 See more

loki-simple-scalable grafana 1.8.11

1 of the 3 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
nginxinc/nginx-unprivileged :1.19-alpine	084242d8028c	xz@5.2.5-r0	5.2.5-r1

Open the chart page →

6,470

purelbpurelb

0.0.0-106-ipv6-lbip-052cedab

1 of 2 See more

purelb purelb 0.0.0-106-ipv6-lbip-052cedab

1 of the 2 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
registry.gitlab.com/purelb/purelb/allocator :v0.0.0-106-ipv6-lbip-052cedab	9d1fcb78f529	xz@5.2.4-3.el8	0:5.2.4-4.el8_6

Open the chart page →

4,413

transmission-openvpnutkuozdemir

2.5.0

1 of 1 See more

transmission-openvpn utkuozdemir 2.5.0

1 of the 1 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
haugene/transmission-openvpn :4.0	059216cfae4b	gzip@1.10-0ubuntu4 xz-utils@5.2.4-1ubuntu1	1.10-0ubuntu4.1 5.2.4-1ubuntu1.1

Open the chart page →

11,405

code-serverdeploy-code-server

1.0.3

1 of 2 See more

code-server deploy-code-server 1.0.3

1 of the 2 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
codercom/code-server :3.10.2	47605610ad8d	gzip@1.9-3 xz-utils@5.2.4-1	1.9-3+deb10u1 5.2.4-1+deb10u1

Open the chart page →

4,577

temporallemontech

0.37.0

1 of 13 See more

temporal lemontech 0.37.0

1 of the 13 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
library/cassandra :3.11.3	ce85468c5bad	gzip@1.6-5+b1 xz-utils@5.2.2-1.2+b1	1.6-5+deb9u1 5.2.2-1.2+deb9u1

Open the chart page →

14,893

netris-controllernetrisai

2.8.2

4 of 14 See more

netris-controller netrisai 2.8.2

4 of the 14 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
graphiteapp/graphite-statsd :1.1.7-6	04a0037cc2ae	xz@5.2.5-r0	5.2.5-r1
namshi/smtp :latest	aa63b8de68ce	gzip@1.9-3 xz-utils@5.2.4-1	1.9-3+deb10u1 5.2.4-1+deb10u1
netrisai/mongodb :4.4.4-debian-10-r0	95abfb776bb4	gzip@1.9-3 xz-utils@5.2.4-1	1.9-3+deb10u1 5.2.4-1+deb10u1
netrisai/redis :6.0.12-debian-10-r3	a4c0140d1696	gzip@1.9-3 xz-utils@5.2.4-1	1.9-3+deb10u1 5.2.4-1+deb10u1

Open the chart page →

30,326

spring-petclinic-cloudplatform9-community

0.2.0

5 of 6 See more

spring-petclinic-cloud platform9-community 0.2.0

5 of the 6 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
platform9community/admin-server :latest	de3fa9b70df1	gzip@1.6-5ubuntu1 xz-utils@5.2.2-1.3	1.6-5ubuntu1.2 5.2.2-1.3ubuntu0.1
platform9community/api-gateway :latest	40a4970de568	gzip@1.6-5ubuntu1 xz-utils@5.2.2-1.3	1.6-5ubuntu1.2 5.2.2-1.3ubuntu0.1
platform9community/customers-service :latest	2089811e5cc6	gzip@1.6-5ubuntu1 xz-utils@5.2.2-1.3	1.6-5ubuntu1.2 5.2.2-1.3ubuntu0.1
platform9community/vets-service :latest	d1165c94dfb3	gzip@1.6-5ubuntu1 xz-utils@5.2.2-1.3	1.6-5ubuntu1.2 5.2.2-1.3ubuntu0.1
platform9community/visits-service :latest	8d11b50368c6	gzip@1.6-5ubuntu1 xz-utils@5.2.2-1.3	1.6-5ubuntu1.2 5.2.2-1.3ubuntu0.1

Open the chart page →

41,872

selenium3selenium3

1.2.4

1 of 1 See more

selenium3 selenium3 1.2.4

1 of the 1 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
selenium/hub :3.141.59	02f251d48d5f	gzip@1.10-0ubuntu4 xz-utils@5.2.4-1ubuntu1	1.10-0ubuntu4.1 5.2.4-1ubuntu1.1

Open the chart page →

11,782

plexutkuozdemir

2.1.1

1 of 1 See more

plex utkuozdemir 2.1.1

1 of the 1 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
linuxserver/plex :1.25.2	4a13ced2326c	gzip@1.10-0ubuntu4 xz-utils@5.2.4-1ubuntu1	1.10-0ubuntu4.1 5.2.4-1ubuntu1.1

Open the chart page →

6,348

barmanadfinis

0.10.0

1 of 1 See more

barman adfinis 0.10.0

1 of the 1 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
ubcctlt/barman :v2.19	cbbbbc8ae16b	gzip@1.10-4 xz-utils@5.2.5-2	1.10-4+deb11u1 5.2.5-2.1~deb11u1

Open the chart page →

1,552

zabbix-serveraekondratiev

1.0.6

3 of 4 See more

zabbix-server aekondratiev 1.0.6

3 of the 4 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
zabbix/zabbix-agent :ubuntu-5.4.6	2127168cab03	gzip@1.10-0ubuntu4 xz-utils@5.2.4-1ubuntu1	1.10-0ubuntu4.1 5.2.4-1ubuntu1.1
zabbix/zabbix-server-pgsql :ubuntu-5.4.6	6c946b1f45cd	gzip@1.10-0ubuntu4 xz-utils@5.2.4-1ubuntu1	1.10-0ubuntu4.1 5.2.4-1ubuntu1.1
zabbix/zabbix-web-nginx-pgsql :ubuntu-5.4.6	01de79c31391	gzip@1.10-0ubuntu4 xz-utils@5.2.4-1ubuntu1	1.10-0ubuntu4.1 5.2.4-1ubuntu1.1

Open the chart page →

30,668

passboltcnieg

1.1.17

1 of 2 See more

passbolt cnieg 1.1.17

1 of the 2 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
passbolt/passbolt :3.4.0-ce-non-root	655547e17263	gzip@1.10-4 xz-utils@5.2.5-2	1.10-4+deb11u1 5.2.5-2.1~deb11u1

Open the chart page →

3,543

lighthouse-cicowboysysop

9.0.0

1 of 1 See more

lighthouse-ci cowboysysop 9.0.0

1 of the 1 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
patrickhulce/lhci-server :0.8.1	74b4b6a3954d	gzip@1.9-3 xz-utils@5.2.4-1	1.9-3+deb10u1 5.2.4-1+deb10u1

Open the chart page →

2,213

element-imhalkeye

0.2.16

1 of 1 See more

element-im halkeye 0.2.16

1 of the 1 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
vectorim/riot-web :v1.7.16	234bed2ac92a	xz@5.2.5-r0	5.2.5-r1

Open the chart page →

1,450

etcdmkhpalm

0.1.3

1 of 1 See more

etcd mkhpalm 0.1.3

1 of the 1 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
quay.io/coreos/etcd :v3.4.16	ea7bb56278ab	gzip@1.6-5+b1 xz-utils@5.2.2-1.2+b1	1.6-5+deb9u1 5.2.2-1.2+deb9u1

Open the chart page →

178

servarrservarr

1.0.2

1 of 10 See more

servarr servarr 1.0.2

1 of the 10 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
nyurik/alpine-python3-requests :latest	e0553236e3eb	xz@5.2.5-r0	5.2.5-r1

Open the chart page →

14,238

personal-ovpnsuda

0.2.2

1 of 1 See more

personal-ovpn suda 0.2.2

1 of the 1 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
kylemanna/openvpn :2.4	4de5e6690818	xz@5.2.5-r0	5.2.5-r1

Open the chart page →

870

fadicetic

0.3.1

7 of 25 See more

fadi cetic 0.3.1

7 of the 25 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
amancevice/superset :0.35.2	12a0a9e66550	gzip@1.9-3 xz-utils@5.2.4-1	1.9-3+deb10u1 5.2.4-1+deb10u1
ceticasbl/pg-ldap-sync :latest	6c0aa7567145	gzip@1.9-3 xz-utils@5.2.4-1	1.9-3+deb10u1 5.2.4-1+deb10u1
jupyterhub/k8s-hub :0.11.1	b6b4a1a34bf0	gzip@1.10-0ubuntu4 xz-utils@5.2.4-1ubuntu1	1.10-0ubuntu4.1 5.2.4-1ubuntu1.1
jupyterhub/k8s-singleuser-sample :0.11.1	e3e6f3051df8	gzip@1.10-0ubuntu4 xz-utils@5.2.4-1ubuntu1	1.10-0ubuntu4.1 5.2.4-1ubuntu1.1
library/postgres :11.5	b3770d9c4ef1	gzip@1.6-5+b1 xz-utils@5.2.2-1.2+b1	1.6-5+deb9u1 5.2.2-1.2+deb9u1
osixia/openldap :1.2.4	d212a12aa728	gzip@1.6-5+b1 xz-utils@5.2.2-1.2+b1	1.6-5+deb9u1 5.2.2-1.2+deb9u1
osixia/phpldapadmin :0.7.1	1ab629698ae0	gzip@1.6-5+b1 xz-utils@5.2.2-1.2+b1	1.6-5+deb9u1 5.2.2-1.2+deb9u1

Open the chart page →

52,919

backstagedeliveryhero

0.1.15

2 of 2 See more

backstage deliveryhero 0.1.15

2 of the 2 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
martinaif/backstage-k8s-demo-backend :test1	43bc40a3da0e	gzip@1.9-3 xz-utils@5.2.4-1	1.9-3+deb10u1 5.2.4-1+deb10u1
martinaif/backstage-k8s-demo-frontend :test1	f07fbe15e5b5	gzip@1.9-3 xz-utils@5.2.4-1	1.9-3+deb10u1 5.2.4-1+deb10u1

Open the chart page →

8,213

wikijsgeek-cookbook

6.4.2

1 of 1 See more

wikijs geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/wikijs :version-2.5.201	58d377933678	xz@5.2.5-r0	5.2.5-r1

Open the chart page →

5,946

guacamolehalkeye

0.2.1

2 of 3 See more

guacamole halkeye 0.2.1

2 of the 3 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
guacamole/guacamole :1.1.0	333a7f40c145	gzip@1.6-5+b1 xz-utils@5.2.2-1.2+b1	1.6-5+deb9u1 5.2.2-1.2+deb9u1
guacamole/guacd :1.1.0	2288530a4d1c	gzip@1.9-3 xz-utils@5.2.4-1	1.9-3+deb10u1 5.2.4-1+deb10u1

Open the chart page →

4,839

percona-xtradb-clusterkfirfer

1.5.10

1 of 3 See more

percona-xtradb-cluster kfirfer 1.5.10

1 of the 3 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
kfirfer/percona-xtradb-healthcheck :0.0.1	ef7b909a8e6b	xz@5.2.5-r0	5.2.5-r1

Open the chart page →

4,957

kubeflowkubeflow

1.6.2

3 of 45 See more

kubeflow kubeflow 1.6.2

3 of the 45 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
istio/proxyv2 :1.9.6	87a9db561d2e	gzip@1.6-5ubuntu1 xz-utils@5.2.2-1.3	1.6-5ubuntu1.2 5.2.2-1.3ubuntu0.1
gcr.io/ml-pipeline/metadata-envoy :2.0.0-alpha.5	e8bc6cf08613	gzip@1.6-4ubuntu1 xz-utils@5.1.1alpha+20120614-2ubuntu2	1.6-4ubuntu1+esm1 5.1.1alpha+20120614-2ubuntu2.16.04.1+esm1
gcr.io/tfx-oss-public/ml_metadata_store_server :1.5.0	db8691752b4c	gzip@1.6-5ubuntu1.1 xz-utils@5.2.2-1.3	1.6-5ubuntu1.2 5.2.2-1.3ubuntu0.1

Open the chart page →

96,941

geonodeone-acre-fund

0.1.16

1 of 7 See more

geonode one-acre-fund 0.1.16

1 of the 7 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
library/nginx :1.19	df13abe416e3	gzip@1.9-3 xz-utils@5.2.4-1	1.9-3+deb10u1 5.2.4-1+deb10u1

Open the chart page →

1,746

open5gsopen5gs

2.3.4

1 of 5 See more

open5gs open5gs 2.3.4

1 of the 5 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :4.4.1	4fe2bd7b4036	gzip@1.9-3 xz-utils@5.2.4-1	1.9-3+deb10u1 5.2.4-1+deb10u1

Open the chart page →

9,261

clustersecretpatrungel

0.2.0

1 of 1 See more

clustersecret patrungel 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
flag5/clustersecret :0.0.9	4ad5748bfcc6	gzip@1.10-4 xz-utils@5.2.5-2	1.10-4+deb11u1 5.2.5-2.1~deb11u1

Open the chart page →

1,841

taigarc-helm-charts

0.1.0

3 of 7 See more

taiga rc-helm-charts 0.1.0

3 of the 7 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
taigaio/taiga-back :6.4.2	9f97323cc150	gzip@1.10-4 xz-utils@5.2.5-2	1.10-4+deb11u1 5.2.5-2.1~deb11u1
taigaio/taiga-front :6.4.2	4d367b1e1250	xz@5.2.5-r0	5.2.5-r1
taigaio/taiga-protected :6.4.0	36318831b3e7	gzip@1.9-3 xz-utils@5.2.4-1	1.9-3+deb10u1 5.2.4-1+deb10u1

Open the chart page →

7,255

flinkriskfocus

0.2.0

1 of 1 See more

flink riskfocus 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
library/flink :1.11.2-scala_2.12	1fe4fb22a2a5	gzip@1.9-3 xz-utils@5.2.4-1	1.9-3+deb10u1 5.2.4-1+deb10u1

Open the chart page →

3,235

rke2-multusrke2-charts

3.7.1-build2021041601

2 of 2 See more

rke2-multus rke2-charts 3.7.1-build2021041601

2 of the 2 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
rancher/hardened-cni-plugins :v0.9.1-build20210414	be3c1d469bf7	xz@5.2.2-1.el7	0:5.2.2-2.el7_9
rancher/hardened-multus-cni :v3.7.1-build20210416	8eb8092f0728	xz@5.2.2-1.el7	0:5.2.2-2.el7_9

Open the chart page →

4,519

uffizzi-appuffizzi-app

1.3.0

1 of 14 See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
uffizzi/app :latest	66e9e3937c60	gzip@1.10-4 xz-utils@5.2.5-2	1.10-4+deb11u1 5.2.5-2.1~deb11u1

Open the chart page →

19,337

dexwiremind

2.15.7

1 of 2 See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
gcr.io/google_containers/kubernetes-dashboard-init-amd64 :v1.0.0	fbe12aa24de6	gzip@1.6-4ubuntu1 xz-utils@5.1.1alpha+20120614-2ubuntu2	1.6-4ubuntu1+esm1 5.1.1alpha+20120614-2ubuntu2.16.04.1+esm1

Open the chart page →

13,562

matrixzekker6

3.30.0

1 of 4 See more

matrix zekker6 3.30.0

1 of the 4 container images this version deploys carry CVE-2022-1271.

Container image	Digest	Package	Fixed in
vectorim/riot-web :v1.7.33	84bb5af00b5d	xz@5.2.5-r0	5.2.5-r1

Open the chart page →

5,557

Container images carrying it

1,167 by charts deploying them

A fixed version is listed for 6 of the 6 affected packages.

Container image	Digest	Package	Fixed in	Used by
chaostoolkit/front :latest	7f4a7eb9f7df	xz@5.2.5-r0	5.2.5-r1	1
chaostoolkit/middle :latest	b95ba4961cfc	xz@5.2.5-r0	5.2.5-r1	1
chetangautamm/repo :Opensips_Build	b4b94155ff5a	gzip@1.6-3ubuntu1 xz-utils@5.1.1alpha+20120614-2ubuntu2	1.6-3ubuntu1+esm1 5.1.1alpha+20120614-2ubuntu2.14.04.1+esm1	1
chetangautamm/repo :sipp.v3	e7f7049e1544	gzip@1.10-0ubuntu4 xz-utils@5.2.4-1ubuntu1	1.10-0ubuntu4.1 5.2.4-1ubuntu1.1	1
cheyang/distributed-tf :1.6.0	46cc34755493	gzip@1.6-4ubuntu1 xz-utils@5.1.1alpha+20120614-2ubuntu2	1.6-4ubuntu1+esm1 5.1.1alpha+20120614-2ubuntu2.16.04.1+esm1	1
chubaofs/cfs-client :3.2.0	15ff74209ce7	gzip@1.10-4 xz-utils@5.2.5-2	1.10-4+deb11u1 5.2.5-2.1~deb11u1	1
chubaofs/cfs-server :3.2.0	205030e045f2	gzip@1.10-4 xz-utils@5.2.5-2	1.10-4+deb11u1 5.2.5-2.1~deb11u1	1
citizenstig/httpbin :latest	b81c818ccb86	gzip@1.6-4ubuntu1 xz-utils@5.1.1alpha+20120614-2ubuntu2	1.6-4ubuntu1+esm1 5.1.1alpha+20120614-2ubuntu2.16.04.1+esm1	1
ckulka/baikal :0.8.0	aedb1f4f3fa0	gzip@1.9-3 xz-utils@5.2.4-1	1.9-3+deb10u1 5.2.4-1+deb10u1	1
cloudve/janis-terminal :latest	af56e77ca587	gzip@1.6-5ubuntu1 xz-utils@5.2.2-1.3	1.6-5ubuntu1.2 5.2.2-1.3ubuntu0.1	1
cloudve/ttyd :latest	d79c1c5881c0	gzip@1.6-5ubuntu1 xz-utils@5.2.2-1.3	1.6-5ubuntu1.2 5.2.2-1.3ubuntu0.1	1
cockroachdb/cockroach-operator :v2.1.0	983312754620	gzip@1.9-12.el8 xz@5.2.4-3.el8	0:1.9-13.el8_5 0:5.2.4-4.el8_6	1
codaprotocol/buildkite-exporter :0.2.1	37c68e67a401	gzip@1.6-5+b1 xz-utils@5.2.2-1.2+b1	1.6-5+deb9u1 5.2.2-1.2+deb9u1	1
codaprotocol/coda-user-agent :0.1.5	4ba4dd3a041f	gzip@1.6-5+b1 xz-utils@5.2.2-1.2+b1	1.6-5+deb9u1 5.2.2-1.2+deb9u1	1
codercom/code-server :3.10.2	47605610ad8d	gzip@1.9-3 xz-utils@5.2.4-1	1.9-3+deb10u1 5.2.4-1+deb10u1	1
codeskyblue/gohttpserver :latest	caa862590e34	gzip@1.6-5+b1 xz-utils@5.2.2-1.2+b1	1.6-5+deb9u1 5.2.2-1.2+deb9u1	1
conduction/agendaservice-nginx :latest	e1c176458aaf	gzip@1.6-5+b1 xz-utils@5.2.2-1.2+b1	1.6-5+deb9u1 5.2.2-1.2+deb9u1	1
conduction/agendaservice-php :latest	9cfeeb6c7c20	xz@5.2.5-r0	5.2.5-r1	1
conduction/balance-registration-nginx :dev	9e24264ea8f3	gzip@1.6-5+b1 xz-utils@5.2.2-1.2+b1	1.6-5+deb9u1 5.2.2-1.2+deb9u1	1
conduction/balance-registration-php :dev	c36094a41369	xz@5.2.5-r0	5.2.5-r1	1
conduction/balance-registration-varnish :dev	07c44005da9d	gzip@1.6-5+b1 xz-utils@5.2.2-1.2+b1	1.6-5+deb9u1 5.2.2-1.2+deb9u1	1
conduction/betaalservice-nginx :latest	d3577ddd5c67	gzip@1.6-5+b1 xz-utils@5.2.2-1.2+b1	1.6-5+deb9u1 5.2.2-1.2+deb9u1	1
conduction/betaalservice-php :latest	ece1ab544c57	xz@5.2.5-r0	5.2.5-r1	1
conduction/cgrc-nginx :dev	d8e23f10e882	gzip@1.6-5+b1 xz-utils@5.2.2-1.2+b1	1.6-5+deb9u1 5.2.2-1.2+deb9u1	1
conduction/cgrc-varnish :dev	e154d5781c8a	gzip@1.6-5+b1 xz-utils@5.2.2-1.2+b1	1.6-5+deb9u1 5.2.2-1.2+deb9u1	1
conduction/checkin-component-nginx :dev	583d2cd8476c	gzip@1.6-5+b1 xz-utils@5.2.2-1.2+b1	1.6-5+deb9u1 5.2.2-1.2+deb9u1	1
conduction/checkin-component-php :dev	3423845692c1	xz@5.2.5-r0	5.2.5-r1	1
conduction/checkin-component-varnish :dev	ef3a3fb0ad47	gzip@1.6-5+b1 xz-utils@5.2.2-1.2+b1	1.6-5+deb9u1 5.2.2-1.2+deb9u1	1
conduction/conduction-ui-nginx :dev	d9b38e234de9	gzip@1.6-5+b1 xz-utils@5.2.2-1.2+b1	1.6-5+deb9u1 5.2.2-1.2+deb9u1	1
conduction/conduction-ui-php :dev	2744565516e8	xz@5.2.5-r0	5.2.5-r1	1
conduction/conduction-ui-varnish :dev	5f5add2c12e0	gzip@1.6-5+b1 xz-utils@5.2.2-1.2+b1	1.6-5+deb9u1 5.2.2-1.2+deb9u1	1
conduction/contactmoment-component-nginx :dev	353dc46303ac	gzip@1.6-5+b1 xz-utils@5.2.2-1.2+b1	1.6-5+deb9u1 5.2.2-1.2+deb9u1	1
conduction/contactmoment-component-php :dev	e1d4ad1e22a8	xz@5.2.5-r0	5.2.5-r1	1
conduction/contactmoment-component-varnish :dev	e3546b97faea	gzip@1.6-5+b1 xz-utils@5.2.2-1.2+b1	1.6-5+deb9u1 5.2.2-1.2+deb9u1	1
conduction/docparser-nginx :dev	08524d8327b8	gzip@1.6-5+b1 xz-utils@5.2.2-1.2+b1	1.6-5+deb9u1 5.2.2-1.2+deb9u1	1
conduction/docparser-php :dev	b6f95c8ead7d	xz@5.2.5-r0	5.2.5-r1	1
conduction/docparser-varnish :dev	45f20c4cd2fa	gzip@1.6-5+b1 xz-utils@5.2.2-1.2+b1	1.6-5+deb9u1 5.2.2-1.2+deb9u1	1
conduction/kvk-nginx :dev	cf163d2b95b5	gzip@1.6-5+b1 xz-utils@5.2.2-1.2+b1	1.6-5+deb9u1 5.2.2-1.2+deb9u1	1
conduction/kvk-php :dev	8f177f9f8a7b	xz@5.2.5-r0	5.2.5-r1	1
conduction/kvk-varnish :dev	8722700f1768	gzip@1.6-5+b1 xz-utils@5.2.2-1.2+b1	1.6-5+deb9u1 5.2.2-1.2+deb9u1	1
conduction/pan-nginx :dev	af3e9f551ad1	gzip@1.6-5+b1 xz-utils@5.2.2-1.2+b1	1.6-5+deb9u1 5.2.2-1.2+deb9u1	1
conduction/pan-php :dev	24f03c57568f	xz@5.2.5-r0	5.2.5-r1	1
conduction/pan-varnish :dev	c3e5737ae68f	gzip@1.6-5+b1 xz-utils@5.2.2-1.2+b1	1.6-5+deb9u1 5.2.2-1.2+deb9u1	1
confluentinc/cp-enterprise-control-center :6.1.0	f2975d507a2a	gzip@1.9-9.el8 xz@5.2.4-3.el8	0:1.9-13.el8_5 0:5.2.4-4.el8_6	1
confluentinc/cp-enterprise-kafka :6.1.0	8f1544df1f48	gzip@1.9-9.el8 xz@5.2.4-3.el8	0:1.9-13.el8_5 0:5.2.4-4.el8_6	1
confluentinc/cp-kafkacat :4.1.2	5f990b0f43c9	gzip@1.6-5+b1 xz-utils@5.2.2-1.2+b1	1.6-5+deb9u1 5.2.2-1.2+deb9u1	1
confluentinc/cp-kafka-connect :6.1.0	4bc70a83ca6f	gzip@1.9-9.el8 xz@5.2.4-3.el8	0:1.9-13.el8_5 0:5.2.4-4.el8_6	1
confluentinc/cp-kafka-rest :6.1.0	b0b7aa26254a	gzip@1.9-9.el8 xz@5.2.4-3.el8	0:1.9-13.el8_5 0:5.2.4-4.el8_6	1
confluentinc/cp-ksqldb-server :6.1.0	ee403d5b9090	gzip@1.9-9.el8 xz@5.2.4-3.el8	0:1.9-13.el8_5 0:5.2.4-4.el8_6	1
confluentinc/cp-schema-registry :6.1.0	b651d4b6185a	gzip@1.9-9.el8 xz@5.2.4-3.el8	0:1.9-13.el8_5 0:5.2.4-4.el8_6	1