CVE-2022-21291

Medium

Advisory

Published 19 Jan 2022In the index since 8 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.029; 86th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 10; of 17,781 indexed, latest versions
Container images: 9; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 10 of 17,781 indexed charts deploy, on 9 images.

Affected package	Affected versions	Fixed in	Images
openjdk-ltsdeb	11.0.3+7-1ubuntu2~18.04.1, 11.0.8+10-0ubuntu1~18.04.1, 11.0.11+9-0ubuntu2~20.04, 11.0.13+8-0ubuntu1~20.04	11.0.14+9-0ubuntu2~18.04, 11.0.14+9-0ubuntu2~20.04	9

OSV records: UBUNTU-CVE-2022-21291
Also known as: USN-5313-1, USN-5313-2

Charts affected

10 by stars

Chart

Latest

Affected images

Radar Score

milvusmilvus

4.0.31

1 of 5 See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2022-21291.

Container image	Digest	Package	Fixed in
apachepulsar/pulsar :2.8.2	d538416d5afe	openjdk-lts@11.0.13+8-0ubuntu1~20.04	11.0.14+9-0ubuntu2~20.04

Open the chart page →

32,259

browserless-chromesagikazarmark

0.0.5

1 of 1 See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2022-21291.

Container image	Digest	Package	Fixed in
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	openjdk-lts@11.0.11+9-0ubuntu2~20.04	11.0.14+9-0ubuntu2~20.04

Open the chart page →

24,488

wavefront-adapter-for-istiowavefront

0.1.4

1 of 2 See more

wavefront-adapter-for-istio wavefront 0.1.4

1 of the 2 container images this version deploys carry CVE-2022-21291.

Container image	Digest	Package	Fixed in
wavefronthq/proxy :9.2	d1064d28f6eb	openjdk-lts@11.0.8+10-0ubuntu1~18.04.1	11.0.14+9-0ubuntu2~18.04

Open the chart page →

15,970

nzbhydra2geek-cookbook

10.4.2

1 of 1 See more

nzbhydra2 geek-cookbook 10.4.2

1 of the 1 container images this version deploys carry CVE-2022-21291.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/nzbhydra2 :v3.14.2	ef3670f7e0a8	openjdk-lts@11.0.11+9-0ubuntu2~20.04	11.0.14+9-0ubuntu2~20.04

Open the chart page →

17,702

teedygeek-cookbook

6.2.0

1 of 1 See more

teedy geek-cookbook 6.2.0

1 of the 1 container images this version deploys carry CVE-2022-21291.

Container image	Digest	Package	Fixed in
sismics/docs :v1.10	f4b0ef019cf1	openjdk-lts@11.0.8+10-0ubuntu1~18.04.1	11.0.14+9-0ubuntu2~18.04

Open the chart page →

26,944

chirpstackmosquitto-helm-chart

0.5.0

1 of 8 See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2022-21291.

Container image	Digest	Package	Fixed in
apachepulsar/pulsar :2.9.0	d056c89b7131	openjdk-lts@11.0.11+9-0ubuntu2~20.04	11.0.14+9-0ubuntu2~20.04

Open the chart page →

25,933

pulsarmosquitto-helm-chart

0.2.0

1 of 1 See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-21291.

Container image	Digest	Package	Fixed in
apachepulsar/pulsar :2.10.0	3b262ab7a7d9	openjdk-lts@11.0.13+8-0ubuntu1~20.04	11.0.14+9-0ubuntu2~20.04

Open the chart page →

15,675

cdn-remoteopencord

0.2.4

1 of 3 See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2022-21291.

Container image	Digest	Package	Fixed in
omecproject/cdn-antmedia :1.0.0	b4ae7d0d6b74	openjdk-lts@11.0.3+7-1ubuntu2~18.04.1	11.0.14+9-0ubuntu2~18.04

Open the chart page →

63,223

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-21291.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	openjdk-lts@11.0.11+9-0ubuntu2~20.04	11.0.14+9-0ubuntu2~20.04

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2022-21291.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	openjdk-lts@11.0.11+9-0ubuntu2~20.04	11.0.14+9-0ubuntu2~20.04

Open the chart page →

28,605

Container images carrying it

9 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
hookiesolutions/webhookie :latest	0629694246ba	openjdk-lts@11.0.11+9-0ubuntu2~20.04	11.0.14+9-0ubuntu2~20.04	2
apachepulsar/pulsar :2.10.0	3b262ab7a7d9	openjdk-lts@11.0.13+8-0ubuntu1~20.04	11.0.14+9-0ubuntu2~20.04	1
apachepulsar/pulsar :2.9.0	d056c89b7131	openjdk-lts@11.0.11+9-0ubuntu2~20.04	11.0.14+9-0ubuntu2~20.04	1
apachepulsar/pulsar :2.8.2	d538416d5afe	openjdk-lts@11.0.13+8-0ubuntu1~20.04	11.0.14+9-0ubuntu2~20.04	1
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	openjdk-lts@11.0.11+9-0ubuntu2~20.04	11.0.14+9-0ubuntu2~20.04	1
omecproject/cdn-antmedia :1.0.0	b4ae7d0d6b74	openjdk-lts@11.0.3+7-1ubuntu2~18.04.1	11.0.14+9-0ubuntu2~18.04	1
sismics/docs :v1.10	f4b0ef019cf1	openjdk-lts@11.0.8+10-0ubuntu1~18.04.1	11.0.14+9-0ubuntu2~18.04	1
wavefronthq/proxy :9.2	d1064d28f6eb	openjdk-lts@11.0.8+10-0ubuntu1~18.04.1	11.0.14+9-0ubuntu2~18.04	1
ghcr.io/k8s-at-home/nzbhydra2 :v3.14.2	ef3670f7e0a8	openjdk-lts@11.0.11+9-0ubuntu2~20.04	11.0.14+9-0ubuntu2~20.04	1