CVE-2022-22143

High

Advisory

Published 20 Apr 2022In the index since 6 Sept 2026

Prototype Pollution in convict

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 5 images.

Affected package	Affected versions	Fixed in	Images
convictnpm	5.0.0, 6.2.2	6.2.3	5

2 by stars

Chart

Latest

Affected images

Radar Score

sendgeek-cookbook

1 of the 1 container images this version deploys carry CVE-2022-22143.

Container image	Digest	Package	Fixed in
registry.gitlab.com/timvisee/send :v3.4.20	47986cf6ef69	convict@6.2.2	6.2.3

1,148

4 of the 8 container images this version deploys carry CVE-2022-22143.

Container image	Digest	Package	Fixed in
ghcr.io/ctron/streamsheets-gateway :2.4.0	0635f17c9d2c	convict@5.0.0	6.2.3
ghcr.io/ctron/streamsheets-service-graphs :2.4.0	e34964e336c1	convict@5.0.0	6.2.3
ghcr.io/ctron/streamsheets-service-machines :2.4.0	0c5a3398d1e4	convict@5.0.0	6.2.3
ghcr.io/ctron/streamsheets-service-streams :2.4.0	8ba040e79ca0	convict@5.0.0	6.2.3

89,959

5 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/ctron/streamsheets-gateway :2.4.0	0635f17c9d2c	convict@5.0.0	6.2.3	1
ghcr.io/ctron/streamsheets-service-graphs :2.4.0	e34964e336c1	convict@5.0.0	6.2.3	1
ghcr.io/ctron/streamsheets-service-machines :2.4.0	0c5a3398d1e4	convict@5.0.0	6.2.3	1
ghcr.io/ctron/streamsheets-service-streams :2.4.0	8ba040e79ca0	convict@5.0.0	6.2.3	1
registry.gitlab.com/timvisee/send :v3.4.20	47986cf6ef69	convict@6.2.2	6.2.3	1