CVE-2022-1941
HighAdvisory
Published 22 Sept 2022In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.012
- 67th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 71
- of 17,781 indexed, latest versions
- Container images
- 65
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
protobuf-cpp and protobuf-python have potential Denial of Service issue
Carried by container images the latest versions of 71 of 17,781 indexed charts deploy, on 65 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| protobufpypi | 3.5.1, 3.5.2, 3.6.1, 3.7.0+19 more | 3.18.3, 3.19.5, 3.20.2, 4.21.6 | 59 |
| protobufdeb | 2.6.1-1.3, 3.0.0-9.1ubuntu1, 3.6.1.3-2ubuntu5 | 2.6.1-1.3ubuntu0.1~esm2, 3.0.0-9.1ubuntu1.1, 3.6.1.3-2ubuntu5.2 | 6 |
- OSV records
- GHSA-8gq9-2x98-w8hfUBUNTU-CVE-2022-1941
- Also known as
- PYSEC-2026-899, USN-5769-1, USN-5945-1
Charts affected
71 by stars
Container images carrying it
65 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| cloudve/ | 4a3d7fae90bb | protobuf | 3.19.5 | 3 |
| omecproject/ | d59ccb138ffb | protobuf | 2.6.1-1.3ubuntu0.1~esm2 | 3 |
| amancevice/ | 12a0a9e66550 | protobuf | 3.18.3 | 2 |
| datawire/ | 8588eafe6862 | protobuf | 3.18.3 | 2 |
| larribas/ | 05ccb0b46bfb | protobuf | 3.18.3 | 2 |
| lncm/ | 36eaa06f99f4 | protobuf | 3.18.3 | 2 |
| omecproject/ | 7c17a7b1d1ef | protobuf | 3.18.3 | 2 |
| omecproject/ | cfdb566dd949 | protobuf | 3.18.3 | 2 |
| weblate/ | 69c160d37a3c | protobuf | 3.18.3 | 2 |
| quay.io/ | 0b62db8afc9b | protobuf | 3.18.3 | 2 |
| alerta/ | 4786b9eaa606 | protobuf | 3.19.5 | 1 |
| amancevice/ | c8c04bfe3d66 | protobuf | 3.18.3 | 1 |
| apachepulsar/ | 3b262ab7a7d9 | protobuf | 3.19.5 | 1 |
| apachepulsar/ | 4db6ff0b4045 | protobuf | 3.18.3 | 1 |
| apachepulsar/ | d056c89b7131 | protobuf | 3.19.5 | 1 |
| apachepulsar/ | d538416d5afe | protobuf | 3.19.5 | 1 |
| assistiot/ | 0aacefac9677 | protobuf | 3.18.3 | 1 |
| assistiot/ | 792715dd3084 | protobuf | 3.19.5 | 1 |
| cheyang/ | 46cc34755493 | protobuf | 3.18.3 | 1 |
| datadog/ | 8f20e56b5311 | protobuf | 3.18.3 | 1 |
| datadog/ | aad9994de6a7 | protobuf | 3.18.3 | 1 |
| datawire/ | 07f8fe4f4f8e | protobuf | 3.18.3 | 1 |
| datawire/ | 2beb65062c8b | protobuf | 3.18.3 | 1 |
| datawire/ | 9716efbdd24b | protobuf | 3.18.3 | 1 |
| dysnix/ | 19951e3e7a32 | protobuf | 3.18.3 | 1 |
| esphome/ | 3f51ec10e823 | protobuf | 3.18.3 | 1 |
| fiware/ | 29456835bb2c | protobuf | 3.18.3 | 1 |
| flagsmith/ | fd58556339a4 | protobuf | 3.18.3 | 1 |
| gethue/ | 5702b2c37ff9 | protobuf | 3.18.3 | 1 |
| gluufederation/ | 1a1128b28b95 | protobuf | 3.18.3 | 1 |
| goofball222/ | 43c0743701d4 | protobuf | 3.19.5 | 1 |
| improwised/ | 97280b55cbd4 | protobuf | 3.18.3 | 1 |
| intel/ | 591a9db4a427 | protobuf | 3.6.1.3-2ubuntu5.2 | 1 |
| iosifache/ | 85df3f04b5da | protobuf | 3.18.3 | 1 |
| kelvinsp/ | cd33e6db2a59 | protobuf | 4.21.6 | 1 |
| linuxserver/ | 938810eca3d3 | protobuf | 3.18.3 | 1 |
| lncm/ | bca14d04397d | protobuf | 3.18.3 | 1 |
| mozilla/ | 016162bf39d8 | protobuf | 3.18.3 | 1 |
| netboxcommunity/ | 3d652dca5351 | protobuf | 4.21.6 | 1 |
| omecproject/ | d109a8e57e71 | protobuf | 3.18.3 | 1 |
| redash/ | 9392753c0376 | protobuf | 3.18.3 | 1 |
| robmarkcole/ | 410275726459 | protobuf | 3.18.3 | 1 |
| robotshop/ | 774b52c6180d | protobuf | 3.18.3 | 1 |
| rook/ | 2f970c425617 | protobuf | 3.18.3 | 1 |
| rook/ | 944a1dd70496 | protobuf | 3.18.3 | 1 |
| seldonio/ | 1d0da98a2d76 | protobuf | 3.18.3 | 1 |
| seldonio/ | 4e985d2006a8 | protobuf | 3.18.3 | 1 |
| softonic/ | a64d6c0e0ae5 | protobuf | 3.18.3 | 1 |
| t3nde/ | d2939e9a719b | protobuf | 3.18.3 | 1 |
| tachyongroup/ | 7e79b9000856 | protobuf | 3.20.2 | 1 |