StackRadar

CVE-2022-1471

Critical

Advisory

Published 12 Dec 2022In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.996
100th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
456
of 17,787 indexed, latest versions
Container images
434
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: prometheus-jmx-exporter security update

Carried by container images the latest versions of 456 of 17,787 indexed charts deploy, on 434 images.

Affected packageAffected versionsFixed inImages
prometheus-jmx-exporterrpm0.12.0-6.el8, 0.12.0-7.el80:0.12.0-9.el8_710
snakeyamlmaven1.11, 1.12, 1.13, 1.15+17 more2.0434
OSV records
RHSA-2022:9058GHSA-mjmj-j48q-9wg2

Charts affected

456 by stars
ChartLatestAffected imagesRadar Score
opendistro-eswitcom-gmbh1.13.31 of 3See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry CVE-2022-1471.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
snakeyaml@1.26
2.0

Open the chart page →

5,806
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2022-1471.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
prometheus-jmx-exporter@0.12.0-6.el8
snakeyaml@1.26
0:0.12.0-9.el8_7
2.0

Open the chart page →

11,577
is-pattern-1wso2is-pattern15.11.01 of 2See more

is-pattern-1 wso2is-pattern1 5.11.0

1 of the 2 container images this version deploys carry CVE-2022-1471.

Container imageDigestPackageFixed in
massimolauri/wso2is:5.11.0-centose08abf0ce767
snakeyaml@1.23
2.0

Open the chart page →

6,213
zahori-processzahoriVerified publisher1.0.11 of 1See more

zahori-process zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2022-1471.

Container imageDigestPackageFixed in
zahoriaut/zahori-process:0.1.13351f8a220ed7
snakeyaml@1.33
2.0

Open the chart page →

3,480
zahori-serverzahoriVerified publisher1.0.11 of 2See more

zahori-server zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2022-1471.

Container imageDigestPackageFixed in
zahoriaut/zahori-server:0.1.17b2de13916f3e
snakeyaml@1.30
2.0

Open the chart page →

5,846
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2022-1471.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
snakeyaml@1.33
2.0

Open the chart page →

6,016

Container images carrying it

434 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
platform9community/api-gateway:latest40a4970de568
snakeyaml@1.26
2.0
1
platform9community/customers-service:latest2089811e5cc6
snakeyaml@1.26
2.0
1
platform9community/vets-service:latestd1165c94dfb3
snakeyaml@1.26
2.0
1
platform9community/visits-service:latest8d11b50368c6
snakeyaml@1.26
2.0
1
pmoscode/axelor-open-suite:v7.2.57a58f4d762f5c
snakeyaml@1.33
2.0
1
prom/cloudwatch-exporter:cloudwatch_exporter-0.5.0923705b2ae77
snakeyaml@1.17
2.0
1
prom/cloudwatch-exporter:cloudwatch_exporter-0.8.0fc4b9b9f5e15
snakeyaml@1.17
2.0
1
redestroyder/authorization-service:0.0.1740364a619fd
snakeyaml@1.29
2.0
1
redestroyder/business-service:0.0.1db03499a0726
snakeyaml@1.29
2.0
1
refar/apm-api:v5.7.1241373fa2972
snakeyaml@1.26
2.0
1
refar/apm-operator-server:v5.7.1e5490f050f9f
snakeyaml@1.26
2.0
1
remche/shinyproxy:2.6.18bcda8a04d3b
snakeyaml@1.28
2.0
1
reportportal/service-api:5.7.29df41f8fb320
snakeyaml@1.25
2.0
1
reportportal/service-authorization:5.7.09e73114dbd15
snakeyaml@1.25
2.0
1
reportportal/service-jobs:5.7.2dc166c58485a
snakeyaml@1.27
2.0
1
richardchesterwood/k8s-fleetman-api-gateway:release2518f946b9f05
snakeyaml@1.17
2.0
1
richardchesterwood/k8s-fleetman-position-simulator:release20b540a28f5a6
snakeyaml@1.17
2.0
1
richardchesterwood/k8s-fleetman-position-tracker:release336c43961214c
snakeyaml@1.17
2.0
1
rm3l/dev-feed-api:latest9a7f732245a3
snakeyaml@1.30
2.0
1
rm3l/service-names-port-numbers:0.12.162d1cc4223e5
snakeyaml@1.29
2.0
1
robotshop/rs-shipping:latest89753ab48919
snakeyaml@1.26
2.0
1
royalwang/sentinel-dashboard:1.8.4df99e2499f91
snakeyaml@1.28
2.0
1
rundeck/rundeck:3.2.74d64fe56f767
snakeyaml@1.24
2.0
1
rundeck/rundeck:3.0.16b13e8059ad72
snakeyaml@1.17
2.0
1
salaboy/fmtok8s-monolith:v0.1.0f225568e6d03
snakeyaml@1.26
2.0
1
scorpiobroker/scorpio:scorpio-aaio_2.1.0db55012043df
snakeyaml@1.29
2.0
1
sdandey/dandey-apps:kanban-board-kanban-appbef0f599737b
snakeyaml@1.23
2.0
1
seataio/seata-server:1.5.1ee1ed55f4144
snakeyaml@1.27
2.0
1
seldonio/apife:0.2.7ba81b17f00eb
snakeyaml@1.17
2.0
1
seldonio/apife:0.3.1eea0d3f578ca
snakeyaml@1.17
2.0
1
seldonio/cluster-manager:0.2.729e362bb1ba2
snakeyaml@1.17
2.0
1
slagattollas/planner-practica:latestcecd95e31486
snakeyaml@1.27
2.0
1
slagattollas/toposervice-practica:latestdc63973dae0d
snakeyaml@1.27
2.0
1
slamdev/hetzner-irobo:0.0.13ca20c184c55
snakeyaml@1.28
2.0
1
snappydatainc/spark-shuffle:v2.2.0-kubernetes-0.5.1fd4b2070466f
snakeyaml@1.15
2.0
1
someblackmagic/smtp-fake-server:latest0d63ba37a560
snakeyaml@1.27
2.0
1
sonatype/nexus3:3.58.1586060431b64
snakeyaml@1.33
2.0
1
sslhep/hive-metastore:3.1.39e80af083079
snakeyaml@1.16
2.0
1
stanislovesid/oracle-host-app:14fe1ed26e194
snakeyaml@1.28
2.0
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
snakeyaml@1.33
2.0
1
thelastpickle/cassandra-reaper:1.3.09c53996c457d
snakeyaml@1.11
2.0
1
thingsboard/tb-coap-transport:3.4.1bd45a09d85d9
snakeyaml@1.27
2.0
1
thingsboard/tb-http-transport:3.4.1a06f53c5e2da
snakeyaml@1.27
2.0
1
thingsboard/tb-mqtt-transport:3.4.1030f316ce301
snakeyaml@1.27
2.0
1
thingsboard/tb-node:3.4.1645f43b688f7
snakeyaml@1.27
2.0
1
thmmniii/fbs-core:v1.27.15438517d9fc2
snakeyaml@1.30
2.0
1
thmmniii/fbs-runner:v1.27.186105349c1a3
snakeyaml@1.33
2.0
1
torrespro/mca-worker:2.0.06d3bd305a1ba
snakeyaml@1.25
2.0
1
trinodb/trino:405ee80ab5eeab2
snakeyaml@1.11
2.0
1
vientoprojects/kubernetes-monitoring-telegram-bot:latesteb2a71531741
snakeyaml@1.28
2.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.