CVE-2022-22576
HighAdvisory
Published 27 Apr 2022In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.1
- base score, highest
- EPSS
- 0.022
- 81st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 469
- of 17,781 indexed, latest versions
- Container images
- 380
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 469 of 17,781 indexed charts deploy, on 380 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| curldeb | 7.35.0-1ubuntu2.1, 7.35.0-1ubuntu2.3, 7.35.0-1ubuntu2.16, 7.35.0-1ubuntu2.19+30 more | 7.58.0-2ubuntu3.17, 7.68.0-1ubuntu2.10 | 197 |
| curlapk | 7.69.1-r0, 7.69.1-r1, 7.69.1-r3, 7.74.0-r0+7 more | 7.79.1-r1, 7.80.0-r1 | 183 |
- OSV records
- ALPINE-CVE-2022-22576UBUNTU-CVE-2022-22576
- Also known as
- USN-5397-1
Charts affected
469 by stars
Container images carrying it
380 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| epamedp/ | 96028c86f0dd | curl | 7.79.1-r1 | 1 |
| epamedp/ | b71fb39e0c9e | curl | 7.79.1-r1 | 1 |
| ethereumex/ | a7603aa8df4c | curl | no fix listed | 1 |
| factly/ | 140fbaa6d555 | curl | 7.79.1-r1 | 1 |
| factly/ | 0cf361b41798 | curl | 7.79.1-r1 | 1 |
| factly/ | 24be158ec7d3 | curl | 7.79.1-r1 | 1 |
| felddy/ | 6c5d90b90349 | curl | 7.79.1-r1 | 1 |
| filebrowser/ | 4fcd47af573c | curl | 7.79.1-r1 | 1 |
| frankescobar/ | 8a4d7e9308de | curl | 7.58.0-2ubuntu3.17 | 1 |
| frankescobar/ | cafa03b94dac | curl | 7.58.0-2ubuntu3.17 | 1 |
| free5gmano/ | 36f806935519 | curl | no fix listed | 1 |
| galaxy/ | 0267bad550e6 | curl | no fix listed | 1 |
| galaxy/ | 8e577a626dfd | curl | no fix listed | 1 |
| geoscienceaustralia/ | f4039b45572a | curl | 7.58.0-2ubuntu3.17 | 1 |
| geoservercloud/ | ca58b74529cd | curl | 7.68.0-1ubuntu2.10 | 1 |
| geoservercloud/ | 5dc0c93a1710 | curl | 7.68.0-1ubuntu2.10 | 1 |
| geoservercloud/ | 47ae1bdb4bcc | curl | 7.68.0-1ubuntu2.10 | 1 |
| geoservercloud/ | 28c3e5a8c5a3 | curl | 7.68.0-1ubuntu2.10 | 1 |
| geoservercloud/ | 8c70ee06d5ab | curl | 7.68.0-1ubuntu2.10 | 1 |
| geoservercloud/ | 42775ba6a4da | curl | 7.68.0-1ubuntu2.10 | 1 |
| gethue/ | 5702b2c37ff9 | curl | 7.58.0-2ubuntu3.17 | 1 |
| gitea/ | d5ab14cd29af | curl | 7.79.1-r1 | 1 |
| gitlab/ | fd7e5dfb9f30 | curl | 7.79.1-r1 | 1 |
| gluufederation/ | 1a1128b28b95 | curl | 7.79.1-r1 | 1 |
| gmelillo/ | eeb2f9371b71 | curl | 7.79.1-r1 | 1 |
| gmelillo/ | 1b30f79cf7ea | curl | 7.79.1-r1 | 1 |
| golenski/ | 48cfd60b8413 | curl | 7.79.1-r1 | 1 |
| gotson/ | 9b15ea6bfc30 | curl | 7.58.0-2ubuntu3.17 | 1 |
| graphiteapp/ | 04a0037cc2ae | curl | 7.79.1-r1 | 1 |
| hashicorp/ | 5697b85bc69a | curl | 7.79.1-r1 | 1 |
| haugene/ | 059216cfae4b | curl | 7.68.0-1ubuntu2.10 | 1 |
| haveagitgat/ | 1256348872ce | curl | 7.68.0-1ubuntu2.10 | 1 |
| haveagitgat/ | 1e3f9328327d | curl | 7.68.0-1ubuntu2.10 | 1 |
| housewrecker/ | f417dd0a7547 | curl | 7.68.0-1ubuntu2.10 | 1 |
| huginn/ | c794eddc7b47 | curl | 7.58.0-2ubuntu3.17 | 1 |
| hugohg34/ | 812a03b3f274 | curl | 7.68.0-1ubuntu2.10 | 1 |
| hyperledger/ | c65891b6c237 | curl | no fix listed | 1 |
| ibarreche/ | e16a469c5791 | curl | 7.80.0-r1 | 1 |
| ibmcom/ | 7e4dc1e27cdf | curl | no fix listed | 1 |
| ibmcom/ | b5d8c6714dbc | curl | no fix listed | 1 |
| ibmcom/ | e17bdccc5030 | curl | no fix listed | 1 |
| ibmcom/ | 395e60cc6e3d | curl | 7.58.0-2ubuntu3.17 | 1 |
| instrumentisto/ | 6c25f154177c | curl | 7.79.1-r1 | 1 |
| iosifache/ | 85df3f04b5da | curl | 7.68.0-1ubuntu2.10 | 1 |
| istio/ | 2232f365aed6 | curl | 7.58.0-2ubuntu3.17 | 1 |
| istio/ | 268ab879ea51 | curl | no fix listed | 1 |
| istio/ | 655eefa11c84 | curl | 7.58.0-2ubuntu3.17 | 1 |
| istio/ | 6cfce8a071b9 | curl | 7.68.0-1ubuntu2.10 | 1 |
| istio/ | 294ca55bd1cc | curl | 7.58.0-2ubuntu3.17 | 1 |
| istio/ | c09319753454 | curl | no fix listed | 1 |