CVE-2022-21698
HighAdvisory
Published 16 Feb 2022In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.060
- 93rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 591
- of 17,787 indexed, latest versions
- Container images
- 631
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Uncontrolled Resource Consumption in promhttp
Carried by container images the latest versions of 591 of 17,787 indexed charts deploy, on 631 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v0.0.0-20171005112915-5cec1d0429b0, v0.9.0, v0.9.0-pre1.0.20180209125602-c332b6f63c06, v0.9.0-pre1.0.20180623155954-77e8f2ddcfed+24 more | 1.11.1 | 631 |
- OSV records
- GHSA-cg3q-j54f-5p7p
- Also known as
- GO-2022-0322
Charts affected
591 by stars
Container images carrying it
631 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| invisibl/ | 1029f4fe20eb | github.com/ | 1.11.1 | 1 |
| iomesh/ | 1a151f602451 | github.com/ | 1.11.1 | 1 |
| iomesh/ | 5d3f9bf9240b | github.com/ | 1.11.1 | 1 |
| iomesh/ | 002c4b92fd34 | github.com/ | 1.11.1 | 1 |
| iomesh/ | 292ad270082e | github.com/ | 1.11.1 | 1 |
| iomesh/ | de4aa40684ad | github.com/ | 1.11.1 | 1 |
| iomesh/ | f6c76380db34 | github.com/ | 1.11.1 | 1 |
| iotaledger/ | b02a8f77474f | github.com/ | 1.11.1 | 1 |
| istio/ | 2232f365aed6 | github.com/ | 1.11.1 | 1 |
| istio/ | 655eefa11c84 | github.com/ | 1.11.1 | 1 |
| istio/ | 6cfce8a071b9 | github.com/ | 1.11.1 | 1 |
| istio/ | 294ca55bd1cc | github.com/ | 1.11.1 | 1 |
| istio/ | e7e110a421c2 | github.com/ | 1.11.1 | 1 |
| istio/ | 87a9db561d2e | github.com/ | 1.11.1 | 1 |
| istio/ | 88c6c693e67a | github.com/ | 1.11.1 | 1 |
| j0113/ | 696cb8ca9f4e | github.com/ | 1.11.1 | 1 |
| jaegertracing/ | 42822be7888b | github.com/ | 1.11.1 | 1 |
| jaegertracing/ | ca6b73330616 | github.com/ | 1.11.1 | 1 |
| jaegertracing/ | db45c07f2e1b | github.com/ | 1.11.1 | 1 |
| jkremser/ | e35cf56ef183 | github.com/ | 1.11.1 | 1 |
| jmferrer/ | 030f68ec6998 | github.com/ | 1.11.1 | 1 |
| joeelliott/ | b4acd14642d0 | github.com/ | 1.11.1 | 1 |
| k8scloudprovider/ | 6ddf80b34265 | github.com/ | 1.11.1 | 1 |
| keptncontrib/ | 29969dd547de | github.com/ | 1.11.1 | 1 |
| kfserving/ | 63d79d04c2e3 | github.com/ | 1.11.1 | 1 |
| kiosksh/ | 501725ba2025 | github.com/ | 1.11.1 | 1 |
| kong/ | 60e4102ab2da | github.com/ | 1.11.1 | 1 |
| kserve/ | f0692a9ea09f | github.com/ | 1.11.1 | 1 |
| kubebb/ | a3dba2a95cef | github.com/ | 1.11.1 | 1 |
| kubebb/ | f83cd256229b | github.com/ | 1.11.1 | 1 |
| kubebb/ | 20509de4b399 | github.com/ | 1.11.1 | 1 |
| kubebb/ | 60d3cba0c267 | github.com/ | 1.11.1 | 1 |
| kubebb/ | 8ffbfa2d67e9 | github.com/ | 1.11.1 | 1 |
| kubebb/ | 0ba03fcee3a7 | github.com/ | 1.11.1 | 1 |
| kubebb/ | 58d5efec568b | github.com/ | 1.11.1 | 1 |
| kubebb/ | 65bb40b353db | github.com/ | 1.11.1 | 1 |
| kubedb/ | 5829bcedcb0d | github.com/ | 1.11.1 | 1 |
| kubedb/ | 7d27865514ee | github.com/ | 1.11.1 | 1 |
| kubedb/ | 1a06ff0bda52 | github.com/ | 1.11.1 | 1 |
| kubeedge/ | a437cf5ec0ae | github.com/ | 1.11.1 | 1 |
| kubeflowkatib/ | 12a28c8a0b41 | github.com/ | 1.11.1 | 1 |
| kubeflownotebookswg/ | f226fb44db57 | github.com/ | 1.11.1 | 1 |
| kubeflownotebookswg/ | 85e2e685abd6 | github.com/ | 1.11.1 | 1 |
| kubeflownotebookswg/ | 82ffdd2da285 | github.com/ | 1.11.1 | 1 |
| kubemod/ | 1f8154f7e80c | github.com/ | 1.11.1 | 1 |
| kubemod/ | cadca39288ad | github.com/ | 1.11.1 | 1 |
| kubeoperator/ | be8f0d624640 | github.com/ | 1.11.1 | 1 |
| kubeshop/ | 0ad97f07a78b | github.com/ | 1.11.1 | 1 |
| kubesphere/ | b87db3c57cb3 | github.com/ | 1.11.1 | 1 |
| kubesphere/ | 702df77228c6 | github.com/ | 1.11.1 | 1 |