StackRadar

CVE-2022-2097

Medium

Advisory

Published 5 Jul 2022In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.047
91st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
862
of 17,787 indexed, latest versions
Container images
849
deployed by those charts
Fix available
3 of 3
affected packages

libopenssl-1_1-devel-1.1.1q-1.1 on GA media

Carried by container images the latest versions of 862 of 17,787 indexed charts deploy, on 849 images.

Affected packageAffected versionsFixed inImages
opensslapk1.1.1i-r0, 1.1.1j-r0, 1.1.1k-r0, 1.1.1l-r0+6 more1.1.1q-r0457
openssldeb1.1.0g-2ubuntu4.1, 1.1.0g-2ubuntu4.3, 1.1.1-1ubuntu2.1~18.04.4, 1.1.1-1ubuntu2.1~18.04.5+36 more1.1.1-1ubuntu2.1~18.04.20, 1.1.1-1ubuntu2.fips.2.1~18.04.20, 1.1.1f-1ubuntu2.16, 1.1.1f-1ubuntu2.fips.16+1 more382
openssl-1_1rpm1.1.0i-14.6.1, 1.1.0i-lp151.8.3.1, 1.1.1d-11.6.11.1.0i-150100.14.36.1, 1.1.1d-150200.11.51.1, 1.1.1q-1.110
OSV records
ALPINE-CVE-2022-2097UBUNTU-CVE-2022-2097openSUSE-SU-2024:12179-1SUSE-SU-2022:2311-1SUSE-SU-2022:2328-1
Also known as
USN-5502-1

Charts affected

862 by stars
ChartLatestAffected imagesRadar Score
kibanawiremindVerified publisher8.5.231 of 2See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2022-2097.

Container imageDigestPackageFixed in
library/kibana:8.18.004c0fc150f3a
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.fips.16

Open the chart page →

6,323
kafka-connect-uiwitcom-gmbh0.5.01 of 2See more

kafka-connect-ui witcom-gmbh 0.5.0

1 of the 2 container images this version deploys carry CVE-2022-2097.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.3.08c21390be87d
openssl@1.1.1n-r0
1.1.1q-r0

Open the chart page →

2,506
mrtg-backendwitcom-gmbh0.7.01 of 2See more

mrtg-backend witcom-gmbh 0.7.0

1 of the 2 container images this version deploys carry CVE-2022-2097.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.2.1febeebebe762
openssl@1.1.1l-r7
1.1.1q-r0

Open the chart page →

2,616
powerdnsadminwitcom-gmbh0.3.41 of 1See more

powerdnsadmin witcom-gmbh 0.3.4

1 of the 1 container images this version deploys carry CVE-2022-2097.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
openssl@1.1.1l-r0
1.1.1q-r0

Open the chart page →

2,643
workadventureworkadventure1.1.02 of 9See more

workadventure workadventure 1.1.0

2 of the 9 container images this version deploys carry CVE-2022-2097.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-chat:v1.17.7da12f37e6795
openssl@1.1.1n-r0
1.1.1q-r0
thecodingmachine/workadventure-ejabberd:v1.17.701df99622ad3
openssl@1.1.1n-r0
1.1.1q-r0

Open the chart page →

16,083
default-backendwyrihaximusnetVerified publisher1.1.01 of 1See more

default-backend wyrihaximusnet 1.1.0

1 of the 1 container images this version deploys carry CVE-2022-2097.

Container imageDigestPackageFixed in
ghcr.io/wyrihaximusnet/default-backend:randomb24e63efd841
openssl@1.1.1l-r0
1.1.1q-r0

Open the chart page →

2,535
skoonerxdVerified publisher1.1.01 of 1See more

skooner xd 1.1.0

1 of the 1 container images this version deploys carry CVE-2022-2097.

Container imageDigestPackageFixed in
ymuski/skooner:latest67819ca511b5
openssl@1.1.1n-r0
1.1.1q-r0

Open the chart page →

1,752
rawfile-csiymatrixVerified publisher0.2.11 of 4See more

rawfile-csi ymatrix 0.2.1

1 of the 4 container images this version deploys carry CVE-2022-2097.

Container imageDigestPackageFixed in
matrixdb/rawfile-csi:v0.2.195b2e38e913d
openssl@1.1.1n-r0
1.1.1q-r0

Open the chart page →

7,972
zahori-schedulerzahoriVerified publisher1.0.11 of 1See more

zahori-scheduler zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2022-2097.

Container imageDigestPackageFixed in
zahoriaut/zahori-scheduler:1.0.047d0979b1184
openssl@1.1.1-1ubuntu2.1~18.04.23
1.1.1-1ubuntu2.fips.2.1~18.04.20

Open the chart page →

2,464
posthogzeet0.23.21 of 9See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2022-2097.

Container imageDigestPackageFixed in
edoburu/pgbouncer:1.12.0abc0a4123a81
openssl@1.1.1l-r0
1.1.1q-r0

Open the chart page →

3,697
alertmanager-matrix-forwarderzloi-space1.0.11 of 2See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2022-2097.

Container imageDigestPackageFixed in
zl0i/alertmanager-matrix-forwarder:v1.0.0e94047931739
openssl@1.1.1l-r7
1.1.1q-r0

Open the chart page →

3,118
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2022-2097.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
openssl@1.1.1-1ubuntu2.1~18.04.14
1.1.1-1ubuntu2.1~18.04.20
yandex/clickhouse-server:21.3.204eccfffb01d7
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.16

Open the chart page →

9,250

Container images carrying it

849 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/iver-wharf/wharf-provider-azuredevops:v3.0.12fe7e4dcffdf
openssl@1.1.1n-r0
1.1.1q-r0
2
quay.io/iver-wharf/wharf-provider-github:v3.0.177a22cb45c2a
openssl@1.1.1n-r0
1.1.1q-r0
2
quay.io/iver-wharf/wharf-provider-gitlab:v2.0.1d7079e0890da
openssl@1.1.1n-r0
1.1.1q-r0
2
quay.io/iver-wharf/wharf-web:v1.6.2dc5d1ed91c26
openssl@1.1.1n-r0
1.1.1q-r0
2
quay.io/kiwigrid/k8s-sidecar:1.19.26a8671702d6f
openssl@1.1.1o-r0
1.1.1q-r0
2
quay.io/oauth2-proxy/oauth2-proxy:v7.3.08c21390be87d
openssl@1.1.1n-r0
1.1.1q-r0
2
5200710/hadoop:3.2.3-java8092d3088a5fb
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.fips.16
1
a10networks/acos-prometheus-exporter:latest8dc58d434d71
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.20
1
acockburn/appdaemon:4.0.83a93281d7e94
openssl@1.1.1k-r0
1.1.1q-r0
1
adguard/adguardhome:v0.107.7b9974aed13d0
openssl@1.1.1n-r0
1.1.1q-r0
1
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.16
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
openssl@1.1.1f-1ubuntu2.2
1.1.1f-1ubuntu2.16
1
ajanvier/polr:2.3.091ac61b88c85
openssl@1.1.1j-r0
1.1.1q-r0
1
alexeyr7/sf-test-app:latestdf0b41fdbd53
openssl@1.1.1o-r0
1.1.1q-r0
1
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
openssl@1.1.1-1ubuntu2.1~18.04.19
1.1.1-1ubuntu2.1~18.04.20
1
alpine/k8s:1.22.600ac10bcb759
openssl@1.1.1n-r0
1.1.1q-r0
1
alpine/k8s:1.18.16a41efe02a041
openssl@1.1.1k-r0
1.1.1q-r0
1
anguda/ant-media:2.5c435285fc241
openssl@1.1.1f-1ubuntu2.17
1.1.1f-1ubuntu2.fips.16
1
anonaddy/anonaddy:0.12.3957a95565166
openssl@1.1.1o-r0
1.1.1q-r0
1
anoopnair/lifecycle-jira-integration:latestd80c73a6089d
openssl@1.1.1n-r0
1.1.1q-r0
1
ansiblesemaphore/semaphore:v2.8.5303d1f8684027
openssl@1.1.1l-r0
1.1.1q-r0
1
anujarosha/hello-go:v1.0.1ed60e46870b6
openssl@1.1.1o-r0
1.1.1q-r0
1
apache/apisix:2.10.0-alpineb4eabafa83cc
openssl@1.1.1l-r0
1.1.1q-r0
1
apache/apisix-dashboard:2.9.0c010ea7d1694
openssl@1.1.1l-r7
1.1.1q-r0
1
apache/apisix-ingress-controller:1.3.0412f92cde0b3
openssl@1.1.1k-r0
1.1.1q-r0
1
apache/iotdb:0.13.3-nodeafa47bf1692a
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.fips.16
1
apachepulsar/pulsar:2.10.03b262ab7a7d9
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.16
1
apachepulsar/pulsar:2.9.0d056c89b7131
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.16
1
apachepulsar/pulsar:2.8.2d538416d5afe
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.16
1
apache/shardingsphere-operator:0.3.0ffe68d6b99c0
openssl@1.1.1n-r0
1.1.1q-r0
1
apache/skywalking-oap-server:8.9.1b4ec8c18d079
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.16
1
apache/skywalking-ui:8.9.180530f0308a5
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.16
1
aquasec/harbor-scanner-trivy:0.20.07ea4aa3d2eb6
openssl@1.1.1k-r0
1.1.1q-r0
1
aquasec/starboard-operator:0.15.4be34f709e1ce
openssl@1.1.1n-r0
1.1.1q-r0
1
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.fips.16
1
assistiot/fl_orchestrator:dbmongo4-latestd157fbe150e3
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.fips.16
1
assistiot/open_api_frontend:1.0.1f11d82defc70
openssl@1.1.1n-r0
1.1.1q-r0
1
assistiot/sdn_controller:2.4.0ea254b6d8a31
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.fips.16
1
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
openssl@1.1.1f-1ubuntu2.17
1.1.1f-1ubuntu2.fips.16
1
b4bz/homer:v22.07.248a81e130470
openssl@1.1.1o-r0
1.1.1q-r0
1
balihb/block-pvc-scanner:0.2.45b95e1cf1158
openssl@1.1.1l-r8
1.1.1q-r0
1
balihb/pod-pvc-mapping:0.2.4ee48e79f5d76
openssl@1.1.1l-r8
1.1.1q-r0
1
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.16
1
bbvalabs/sensitive-data:1.0.13ea299ae63c0
openssl@1.1.1k-r0
1.1.1q-r0
1
bicarus/elrond-rosetta:v1.3.50.0b1dab0721e1c
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.fips.16
1
binwiederhier/ntfy:v1.27.219eeaec60fda
openssl@1.1.1o-r0
1.1.1q-r0
1
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.16
1
blockstack/envsubst:latestd64d7430289a
openssl@1.1.1k-r0
1.1.1q-r0
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.16
1
carbonetes/carbonetes-analyzer:1.0.31b9b93c9a37f
openssl@1.1.1l-r0
1.1.1q-r0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.