StackRadar

CVE-2022-1471

Critical

Advisory

Published 12 Dec 2022In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.996
100th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
457
of 17,781 indexed, latest versions
Container images
434
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: prometheus-jmx-exporter security update

Carried by container images the latest versions of 457 of 17,781 indexed charts deploy, on 434 images.

Affected packageAffected versionsFixed inImages
prometheus-jmx-exporterrpm0.12.0-6.el8, 0.12.0-7.el80:0.12.0-9.el8_710
snakeyamlmaven1.11, 1.12, 1.13, 1.15+17 more2.0434
OSV records
RHSA-2022:9058GHSA-mjmj-j48q-9wg2

Charts affected

457 by stars
ChartLatestAffected imagesRadar Score
apicurio-registry-sqlwitcom-gmbh0.1.01 of 1See more

apicurio-registry-sql witcom-gmbh 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-1471.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-jpa:1.3.2.Final44eeddd3562c
snakeyaml@1.27
2.0

Open the chart page →

3,424
opendistro-eswitcom-gmbh1.13.31 of 3See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry CVE-2022-1471.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
snakeyaml@1.26
2.0

Open the chart page →

5,806
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2022-1471.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
prometheus-jmx-exporter@0.12.0-6.el8
snakeyaml@1.26
0:0.12.0-9.el8_7
2.0

Open the chart page →

11,577
is-pattern-1wso2is-pattern15.11.01 of 2See more

is-pattern-1 wso2is-pattern1 5.11.0

1 of the 2 container images this version deploys carry CVE-2022-1471.

Container imageDigestPackageFixed in
massimolauri/wso2is:5.11.0-centose08abf0ce767
snakeyaml@1.23
2.0

Open the chart page →

6,213
zahori-processzahoriVerified publisher1.0.11 of 1See more

zahori-process zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2022-1471.

Container imageDigestPackageFixed in
zahoriaut/zahori-process:0.1.13351f8a220ed7
snakeyaml@1.33
2.0

Open the chart page →

3,480
zahori-serverzahoriVerified publisher1.0.11 of 2See more

zahori-server zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2022-1471.

Container imageDigestPackageFixed in
zahoriaut/zahori-server:0.1.17b2de13916f3e
snakeyaml@1.30
2.0

Open the chart page →

5,846
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2022-1471.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
snakeyaml@1.33
2.0

Open the chart page →

6,016

Container images carrying it

434 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
viniciusfcf/gitops-quarkus-app-jvm:latestbba8ee1b5cd5
prometheus-jmx-exporter@0.12.0-6.el8
snakeyaml@1.26
0:0.12.0-9.el8_7
2.0
1
vitalii1992/account-service:latest0e694d94551d
snakeyaml@1.33
2.0
1
vitalii1992/analytics-service:latest8e798836ecea
snakeyaml@1.33
2.0
1
vitalii1992/api-gateway-service:latestaabe6ac39356
snakeyaml@1.33
2.0
1
vitalii1992/order-service:latest07c4a8833ce4
snakeyaml@1.33
2.0
1
vitalii1992/quotes-provider-service:latest44d2d6e00ab3
snakeyaml@1.33
2.0
1
vlebediantsev/config-server-another:lateste7f20450d2ae
snakeyaml@1.30
2.0
1
vlebediantsev/file-system-ms-final:latest10393a89b4a8
snakeyaml@1.30
2.0
1
vlebediantsev/logic-ms:latestdf8bf38c535b
snakeyaml@1.30
2.0
1
vlebediantsev/registration-ms-final:latest427af418b75e
snakeyaml@1.30
2.0
1
vlebediantsev/user-data-ms-final-final:latest9319437f3c8f
snakeyaml@1.30
2.0
1
voltha/voltha-onos:5.1.8e038acb950d3
snakeyaml@1.18
2.0
1
vrijbrp/balie:developbc85c89530b9
snakeyaml@1.30
2.0
1
vrijbrp/balie-ws:developc6603cb829ea
snakeyaml@1.30
2.0
1
vrijbrp/haal-centraal-brp-bevragen:develop5c770c2ae48c
snakeyaml@1.30
2.0
1
vromero/activemq-artemis:2.16.0408d6a46b153
snakeyaml@1.16
2.0
1
wavefronthq/proxy:9.2d1064d28f6eb
snakeyaml@1.26
2.0
1
wistefan/mvf:lateste0887302b2d8
snakeyaml@1.33
2.0
1
xeotek/kadeck:4.2.94c6b04d9ce55
snakeyaml@1.27
2.0
1
xetusoss/archiva:v2.2.588f25242b9ee
snakeyaml@1.11
2.0
1
xuxueli/xxl-job-admin:2.4.0640093c35fd6
snakeyaml@1.30
2.0
1
zahoriaut/zahori-process:0.1.13351f8a220ed7
snakeyaml@1.33
2.0
1
zahoriaut/zahori-server:0.1.17b2de13916f3e
snakeyaml@1.30
2.0
1
zammad/zammad-docker-compose:zammad-elasticsearch-4.1.0-318274d75a51fc
snakeyaml@1.26
2.0
1
zbalogh/reservation-api-server:1.0.97c247e399a1f
snakeyaml@1.30
2.0
1
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
snakeyaml@1.25
2.0
1
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
snakeyaml@1.31
2.0
1
ghcr.io/curium-rocks/mitre-siphon:main503c00321502
snakeyaml@1.33
2.0
1
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
snakeyaml@1.26
2.0
1
ghcr.io/fleeksoft/hbase/hbase-base:2.4.13.2c144bdd688d7
snakeyaml@1.26
2.0
1
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
snakeyaml@1.26
2.0
1
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
snakeyaml@1.26
2.0
1
ghcr.io/jfwenisch/discord-experiencebot:latestb52ff07f9f0c
snakeyaml@1.30
2.0
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
snakeyaml@1.26
2.0
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
snakeyaml@1.25
2.0
1
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
snakeyaml@1.26
2.0
1
ghcr.io/middleware-labs/odigos-odiglet:middleware-test-0.0.103c8c835ecee
snakeyaml@1.33
2.0
1
ghcr.io/middleware-labs/vision-odiglet:middleware-test-0.0.3bce34c98668e
snakeyaml@1.33
2.0
1
ghcr.io/perceptolab/devops-demo-app:0.0.2cdc0658c40fb
snakeyaml@1.30
2.0
1
ghcr.io/punchplatform/punchline-java:8.1.1d46ce7b96482
snakeyaml@1.33
2.0
1
ghcr.io/radar-base/managementportal/management-portal:3.0.0c1b37e821f72
snakeyaml@1.31
2.0
1
ghcr.io/skyoo2003/digdag:0.0.1821fd6a6f2cd
snakeyaml@1.23
2.0
1
ghcr.io/stacksimplify/kube-usermgmt-webapp:1.0.0-mysqldb41b45003c6b6
snakeyaml@1.23
2.0
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
snakeyaml@1.30
2.0
1
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
snakeyaml@1.33
2.0
1
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
snakeyaml@1.33
2.0
1
quay.io/apicurio/apicurio-registry-kube-sync:1.0.170ef31840269
snakeyaml@1.29
2.0
1
quay.io/apicurio/apicurio-registry-mem:2.5.8.Final3b036692d546
snakeyaml@1.32
2.0
1
quay.io/evryfs/spring-boot-admin:2.7.1060950ef63764
snakeyaml@1.30
2.0
1
quay.io/fiware/apollo:0.0.1055330b1b60c1
prometheus-jmx-exporter@0.12.0-7.el8
snakeyaml@1.26
0:0.12.0-9.el8_7
2.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.