StackRadar

CVE-2022-22965

CriticalKEV

Advisory

Published 31 Mar 2022In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.996
100th percentile
CISA KEV
Listed
since 4 Apr 2022
Charts affected
208
of 17,781 indexed, latest versions
Container images
156
deployed by those charts
Fix available
5 of 5
affected packages

Remote Code Execution in Spring Framework

Carried by container images the latest versions of 208 of 17,781 indexed charts deploy, on 156 images.

Affected packageAffected versionsFixed inImages
spring-beansmaven2.5.6.SEC03, 3.0.7, 3.0.7.RELEASE, 3.2.18.RELEASE+50 more5.2.20.RELEASE, 5.3.18156
spring-webmvcmaven2.5.6.SEC03, 3.2.18.RELEASE, 4.3.1.RELEASE, 4.3.2.RELEASE+41 more5.2.20.RELEASE, 5.3.18106
spring-boot-starter-webmaven1.4.0.RELEASE, 1.5.2.RELEASE, 1.5.3.RELEASE, 1.5.4.RELEASE+28 more2.5.12, 2.6.668
spring-webfluxmaven5.2.2.RELEASE, 5.2.7.RELEASE, 5.2.8.RELEASE, 5.3.1+5 more5.2.20.RELEASE, 5.3.1836
spring-boot-starter-webfluxmaven2.2.2.RELEASE, 2.3.1.RELEASE, 2.3.2.RELEASE, 2.3.3.RELEASE+2 more2.5.12, 2.6.69
OSV records
GHSA-36p3-wjmg-h94x

Charts affected

208 by stars
ChartLatestAffected imagesRadar Score
gocdgocdOfficialVerified publisher2.18.11 of 2See more

gocd gocd 2.18.1

1 of the 2 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
gocd/gocd-server:v26.1.0720d1012b93f
spring-beans@4.3.30.RELEASE
spring-webmvc@4.3.30.RELEASE
5.2.20.RELEASE
5.2.20.RELEASE

Open the chart page →

1,362
zipkincarlosjgp0.2.01 of 2See more

zipkin carlosjgp 0.2.0

1 of the 2 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
openzipkin/zipkin:2.21.060c3970df479
spring-beans@5.2.5.RELEASE
5.2.20.RELEASE

Open the chart page →

3,229
microcksmicrocksOfficialVerified publisher0.8.0-helm-3.kube-1.171 of 5See more

microcks microcks 0.8.0-helm-3.kube-1.17

1 of the 5 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
microcks/microcks:0.8.0e3a3e0c67b09
spring-beans@4.3.20.RELEASE
spring-boot-starter-web@1.5.17.RELEASE
spring-webmvc@4.3.20.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

10,732
spring-petclinic-cloudplatform9-communityVerified publisher0.2.05 of 6See more

spring-petclinic-cloud platform9-community 0.2.0

5 of the 6 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
platform9community/admin-server:latestde3fa9b70df1
spring-beans@5.2.7.RELEASE
spring-boot-starter-webflux@2.3.1.RELEASE
spring-webflux@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
platform9community/api-gateway:latest40a4970de568
spring-beans@5.2.7.RELEASE
spring-boot-starter-webflux@2.3.1.RELEASE
spring-webflux@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
platform9community/customers-service:latest2089811e5cc6
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
platform9community/vets-service:latestd1165c94dfb3
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
platform9community/visits-service:latest8d11b50368c6
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

41,872
sonarqube-dcesonarqubeVerified publisher0.1.2+1212 of 5See more

sonarqube-dce sonarqube 0.1.2+121

2 of the 5 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
library/sonarqube:9.1.0-datacenter-search7e43ff493a47
spring-beans@5.3.7
5.3.18
library/sonarqube:9.1.0-datacenter-appa9bc5a3a1fc3
spring-beans@5.3.7
5.3.18

Open the chart page →

8,698
rocketmqgin1.1.01 of 2See more

rocketmq gin 1.1.0

1 of the 2 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
apacherocketmq/rocketmq-dashboard:1.0.024799aff6cf8
spring-beans@5.2.1.RELEASE
spring-boot-starter-web@2.2.2.RELEASE
spring-webmvc@5.2.2.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

9,154
nzbhydra2halkeye2.30.11 of 2See more

nzbhydra2 halkeye 2.30.1

1 of the 2 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
binhex/arch-nzbhydra2:3.1.0-1-01fb8952921ab6
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

6,711
skywalkingkubesphere-testVerified publisher3.1.01 of 4See more

skywalking kubesphere-test 3.1.0

1 of the 4 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
apache/skywalking-ui:8.1.067d50e4deff4
spring-beans@4.3.15.RELEASE
spring-boot-starter-web@1.5.11.RELEASE
spring-webmvc@4.3.15.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

18,042
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-elk:latestba1d85ec3739
spring-beans@5.2.5.RELEASE
5.2.20.RELEASE

Open the chart page →

10,730
geoserver-cloudcamptocamp20.0.56 of 11See more

geoserver-cloud camptocamp2 0.0.5

6 of the 11 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
spring-beans@5.2.8.RELEASE
spring-boot-starter-webflux@2.3.3.RELEASE
spring-webflux@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
spring-beans@5.2.8.RELEASE
spring-boot-starter-web@2.3.3.RELEASE
spring-webflux@5.2.8.RELEASE
spring-webmvc@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
5.2.20.RELEASE
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
spring-beans@5.2.8.RELEASE
spring-boot-starter-web@2.3.3.RELEASE
spring-webflux@5.2.8.RELEASE
spring-webmvc@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
5.2.20.RELEASE
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
spring-beans@5.2.8.RELEASE
spring-boot-starter-web@2.3.3.RELEASE
spring-webflux@5.2.8.RELEASE
spring-webmvc@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
5.2.20.RELEASE
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
spring-beans@5.2.8.RELEASE
spring-boot-starter-web@2.3.3.RELEASE
spring-webflux@5.2.8.RELEASE
spring-webmvc@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
5.2.20.RELEASE
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
spring-beans@5.2.8.RELEASE
spring-boot-starter-web@2.3.3.RELEASE
spring-webflux@5.2.8.RELEASE
spring-webmvc@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
5.2.20.RELEASE

Open the chart page →

84,444
geoserverCloudcamptocamp20.0.66 of 11See more

geoserverCloud camptocamp2 0.0.6

6 of the 11 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
spring-beans@5.2.8.RELEASE
spring-boot-starter-webflux@2.3.3.RELEASE
spring-webflux@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
spring-beans@5.2.8.RELEASE
spring-boot-starter-web@2.3.3.RELEASE
spring-webflux@5.2.8.RELEASE
spring-webmvc@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
5.2.20.RELEASE
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
spring-beans@5.2.8.RELEASE
spring-boot-starter-web@2.3.3.RELEASE
spring-webflux@5.2.8.RELEASE
spring-webmvc@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
5.2.20.RELEASE
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
spring-beans@5.2.8.RELEASE
spring-boot-starter-web@2.3.3.RELEASE
spring-webflux@5.2.8.RELEASE
spring-webmvc@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
5.2.20.RELEASE
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
spring-beans@5.2.8.RELEASE
spring-boot-starter-web@2.3.3.RELEASE
spring-webflux@5.2.8.RELEASE
spring-webmvc@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
5.2.20.RELEASE
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
spring-beans@5.2.8.RELEASE
spring-boot-starter-web@2.3.3.RELEASE
spring-webflux@5.2.8.RELEASE
spring-webmvc@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
5.2.20.RELEASE

Open the chart page →

84,444
ignitecloudnativeapp1.0.01 of 1See more

ignite cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
apacheignite/ignite:2.7.0d7deab68b8fa
spring-beans@4.3.18.RELEASE
5.2.20.RELEASE

Open the chart page →

7,891
spinnakerdwardu-helm-charts2.2.61 of 2See more

spinnaker dwardu-helm-charts 2.2.6

1 of the 2 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
spring-beans@5.2.3.RELEASE
spring-boot-starter-web@2.2.4.RELEASE
spring-webmvc@5.2.3.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

8,752
nifi-registrydysnixVerified publisher1.1.51 of 2See more

nifi-registry dysnix 1.1.5

1 of the 2 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
apache/nifi-registry:0.8.0974efa2f21da
spring-beans@5.2.5.RELEASE
spring-boot-starter-web@2.2.6.RELEASE
spring-webmvc@5.2.5.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

6,531
pitchforkexpediagroup0.1.41 of 1See more

pitchfork expediagroup 0.1.4

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
expediagroup/pitchfork:1.314f2cf61e7de9
spring-beans@5.3.10
spring-webflux@5.3.10
5.3.18
5.3.18

Open the chart page →

3,309
omada-controllergeek-cookbookVerified publisher4.4.21 of 1See more

omada-controller geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
spring-beans@5.1.6.RELEASE
spring-webmvc@5.1.6.RELEASE
5.2.20.RELEASE
5.2.20.RELEASE

Open the chart page →

11,553
gradle-examplegradle-exampleVerified publisher1.1.31 of 1See more

gradle-example gradle-example 1.1.3

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
quay.io/srcmaxim/gradle-example-app:1.1.37c3fc28746ef
spring-beans@5.3.7
spring-boot-starter-web@2.5.0
spring-webmvc@5.3.7
5.3.18
2.5.12
5.3.18

Open the chart page →

3,393
seata-serverheidaodageshiwoVerified publisher1.0.01 of 1See more

seata-server heidaodageshiwo 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
seataio/seata-server:1.5.1ee1ed55f4144
spring-beans@5.3.13
spring-boot-starter-web@2.4.13
spring-webmvc@5.3.13
5.3.18
2.5.12
5.3.18

Open the chart page →

5,624
Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacionVerified publisher1.0.11 of 6See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

1 of the 6 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
torrespro/mca-worker:2.0.06d3bd305a1ba
spring-beans@5.2.1.RELEASE
5.2.20.RELEASE

Open the chart page →

19,187
todo-apipavanelthepu0.1.01 of 2See more

todo-api pavanelthepu 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
pavanelthepu/todo-api:1.0.2f47658e3b24c
spring-beans@5.3.8
spring-webmvc@5.3.8
5.3.18
5.3.18

Open the chart page →

2,544
nifi-registryprofyu1.14.0-r0011 of 1See more

nifi-registry profyu 1.14.0-r001

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
apache/nifi-registry:1.14.0090b7f87ec7f
spring-beans@5.3.5
spring-boot-starter-web@2.5.1
spring-webmvc@5.3.8
5.3.18
2.5.12
5.3.18

Open the chart page →

4,621
service-names-port-numbersrm3lVerified publisher0.26.11 of 1See more

service-names-port-numbers rm3l 0.26.1

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
rm3l/service-names-port-numbers:0.12.162d1cc4223e5
spring-beans@5.3.13
spring-boot-starter-web@2.6.1
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
2.6.6
5.3.18
5.3.18

Open the chart page →

10,120
seldon-coreseldon0.2.72 of 3See more

seldon-core seldon 0.2.7

2 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
seldonio/apife:0.2.7ba81b17f00eb
spring-beans@4.3.20.RELEASE
spring-boot-starter-web@1.5.17.RELEASE
spring-webmvc@4.3.20.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
seldonio/cluster-manager:0.2.729e362bb1ba2
spring-beans@4.3.20.RELEASE
spring-boot-starter-web@1.5.17.RELEASE
spring-webmvc@4.3.20.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

13,798
akto-testing-db-layerakto1.42.161 of 2See more

akto-testing-db-layer akto 1.42.16

1 of the 2 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer:1.59.3_local8cdcb7e83f9f
spring-beans@5.3.16
5.3.18

Open the chart page →

5,489
pagesalstom-pages-app1.0.01 of 3See more

pages alstom-pages-app 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
pagesandrei-pages1.0.01 of 3See more

pages andrei-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
omada-controllerandrelote-k8sVerified publisher4.5.01 of 1See more

omada-controller andrelote-k8s 4.5.0

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
spring-beans@5.1.6.RELEASE
spring-webmvc@5.1.6.RELEASE
5.2.20.RELEASE
5.2.20.RELEASE

Open the chart page →

11,553
apache-iotdbapache-iotdb-single-nodeVerified publisher0.1.01 of 1See more

apache-iotdb apache-iotdb-single-node 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
apache/iotdb:0.11.28647309f95d1
spring-beans@4.3.18.RELEASE
spring-boot-starter-web@1.5.15.RELEASE
spring-webmvc@4.3.18.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

5,277
d.vazquezm.2021_helmapphelmVerified publisher1.0.01 of 6See more

d.vazquezm.2021_helm apphelm 1.0.0

1 of the 6 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
davidvmar/urjc-davidvmar-worker:1.0.10d221e834a21
spring-beans@5.2.1.RELEASE
5.2.20.RELEASE

Open the chart page →

19,745
chart-app-vidapp-vid-chartVerified publisher0.0.71 of 2See more

chart-app-vid app-vid-chart 0.0.7

1 of the 2 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
fimperato/sparkvid-api:1.0.5-RELEASE604012b77841
spring-beans@5.2.9.RELEASE
spring-boot-starter-web@2.3.4.RELEASE
spring-webmvc@5.2.9.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

8,866
url-shortenerbeastob1.0.21 of 3See more

url-shortener beastob 1.0.2

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
beastob/url-shortener:1.0.299a49885ab33
spring-beans@5.3.10
spring-webmvc@5.3.10
5.3.18
5.3.18

Open the chart page →

3,607
opendistro-esbeeinventor1.15.11 of 3See more

opendistro-es beeinventor 1.15.1

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
spring-beans@5.2.5.RELEASE
5.2.20.RELEASE

Open the chart page →

5,806
pagesberrutig-pages1.0.01 of 3See more

pages berrutig-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
pagesbrian-pages1.0.01 of 3See more

pages brian-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
pagesbrixton-mayuribhavsar23-pages1.0.01 of 3See more

pages brixton-mayuribhavsar23-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
pagesbrixton-pages1.0.01 of 3See more

pages brixton-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
category-microservicebusi-adsVerified publisher1.0.01 of 2See more

category-microservice busi-ads 1.0.0

1 of the 2 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/category:distributed02fc234353a9
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

11,869
pagescamden-pages1.0.01 of 3See more

pages camden-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
geoservercamptocamp20.0.36 of 12See more

geoserver camptocamp2 0.0.3

6 of the 12 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
spring-beans@5.2.8.RELEASE
spring-boot-starter-webflux@2.3.3.RELEASE
spring-webflux@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
spring-beans@5.2.8.RELEASE
spring-boot-starter-web@2.3.3.RELEASE
spring-webflux@5.2.8.RELEASE
spring-webmvc@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
5.2.20.RELEASE
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
spring-beans@5.2.8.RELEASE
spring-boot-starter-web@2.3.3.RELEASE
spring-webflux@5.2.8.RELEASE
spring-webmvc@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
5.2.20.RELEASE
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
spring-beans@5.2.8.RELEASE
spring-boot-starter-web@2.3.3.RELEASE
spring-webflux@5.2.8.RELEASE
spring-webmvc@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
5.2.20.RELEASE
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
spring-beans@5.2.8.RELEASE
spring-boot-starter-web@2.3.3.RELEASE
spring-webflux@5.2.8.RELEASE
spring-webmvc@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
5.2.20.RELEASE
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
spring-beans@5.2.8.RELEASE
spring-boot-starter-web@2.3.3.RELEASE
spring-webflux@5.2.8.RELEASE
spring-webmvc@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
5.2.20.RELEASE

Open the chart page →

88,335
pagescarina-pages1.0.01 of 3See more

pages carina-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
pagescarmel-pages-dell1.0.01 of 3See more

pages carmel-pages-dell 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
Chart-Oracle-Host-Appchart-oracle-host-appVerified publisher0.1.21 of 1See more

Chart-Oracle-Host-App chart-oracle-host-app 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
stanislovesid/oracle-host-app:14fe1ed26e194
spring-beans@5.3.12
spring-webmvc@5.3.12
5.3.18
5.3.18

Open the chart page →

2,434
event-store-servicechoerodon0.8.01 of 2See more

event-store-service choerodon 0.8.0

1 of the 2 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
choerodon/event-store-service:0.8.03c94c97f6f69
spring-beans@4.3.8.RELEASE
spring-boot-starter-web@1.5.3.RELEASE
spring-webmvc@4.3.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

9,808
cosbenchcloudnativeapp1.0.11 of 1See more

cosbench cloudnativeapp 1.0.1

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
zenko/zenko-cosbench:0.0.6386a1f48ec0e
spring-beans@3.0.7
5.2.20.RELEASE

Open the chart page →

4,906
gocdcloudnativeapp1.9.21 of 2See more

gocd cloudnativeapp 1.9.2

1 of the 2 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
gocd/gocd-server:v19.3.02da45cb09d57
spring-beans@4.3.22.RELEASE
spring-webmvc@4.3.22.RELEASE
5.2.20.RELEASE
5.2.20.RELEASE

Open the chart page →

9,144
rundeckcloudnativeapp0.1.01 of 2See more

rundeck cloudnativeapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
rundeck/rundeck:3.0.16b13e8059ad72
spring-beans@4.3.18.RELEASE
spring-webmvc@4.3.18.RELEASE
5.2.20.RELEASE
5.2.20.RELEASE

Open the chart page →

23,665
unificloudnativeapp0.4.21 of 1See more

unifi cloudnativeapp 0.4.2

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
jacobalberty/unifi:5.10.19c409924e2463
spring-beans@5.1.2.RELEASE
5.2.20.RELEASE

Open the chart page →

22,442
robot-shopcloud-native-toolkit1.1.11 of 12See more

robot-shop cloud-native-toolkit 1.1.1

1 of the 12 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
robotshop/rs-shipping:latest89753ab48919
spring-beans@5.2.8.RELEASE
spring-boot-starter-web@2.3.3.RELEASE
spring-webmvc@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

29,555
clamapicnieg2.0.51 of 2See more

clamapi cnieg 2.0.5

1 of the 2 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
audig/clamapi:2.1.62c3fe34ee430
spring-beans@5.2.8.RELEASE
spring-boot-starter-web@2.3.2.RELEASE
spring-webmvc@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

4,671
pulsarcnieg1.0.81 of 2See more

pulsar cnieg 1.0.8

1 of the 2 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
spring-beans@5.0.6.RELEASE
spring-boot-starter-web@2.0.2.RELEASE
spring-webmvc@5.0.6.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

16,860

Container images carrying it

156 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
79
mastercloudapps/planner:v1.2340a950b311b2
spring-beans@5.3.13
5.3.18
4
oscarsotosanchez/toposervice:v1.0d4d020e9f272
spring-beans@5.3.1
spring-boot-starter-webflux@2.4.0
spring-webflux@5.3.1
5.3.18
2.5.12
5.3.18
4
apache/shenyu-admin:2.4.2e8b7c4ddd069
spring-beans@5.2.2.RELEASE
spring-boot-starter-web@2.2.2.RELEASE
spring-webmvc@5.2.2.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
3
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
spring-beans@5.2.2.RELEASE
spring-boot-starter-webflux@2.2.2.RELEASE
spring-webflux@5.2.2.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
3
codeurjc/planner:v1.0800cf520c245
spring-beans@5.3.13
5.3.18
3
pavanelthepu/todo-api:1.0.2f47658e3b24c
spring-beans@5.3.8
spring-webmvc@5.3.8
5.3.18
5.3.18
3
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
spring-beans@5.2.5.RELEASE
5.2.20.RELEASE
2
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
spring-beans@5.0.6.RELEASE
spring-boot-starter-web@2.0.2.RELEASE
spring-webmvc@5.0.6.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
2
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
spring-beans@5.2.8.RELEASE
spring-boot-starter-webflux@2.3.3.RELEASE
spring-webflux@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
2
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
spring-beans@5.2.8.RELEASE
spring-boot-starter-web@2.3.3.RELEASE
spring-webflux@5.2.8.RELEASE
spring-webmvc@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
5.2.20.RELEASE
2
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
spring-beans@5.2.8.RELEASE
spring-boot-starter-web@2.3.3.RELEASE
spring-webflux@5.2.8.RELEASE
spring-webmvc@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
5.2.20.RELEASE
2
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
spring-beans@5.2.8.RELEASE
spring-boot-starter-web@2.3.3.RELEASE
spring-webflux@5.2.8.RELEASE
spring-webmvc@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
5.2.20.RELEASE
2
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
spring-beans@5.2.8.RELEASE
spring-boot-starter-web@2.3.3.RELEASE
spring-webflux@5.2.8.RELEASE
spring-webmvc@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
5.2.20.RELEASE
2
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
spring-beans@5.2.8.RELEASE
spring-boot-starter-web@2.3.3.RELEASE
spring-webflux@5.2.8.RELEASE
spring-webmvc@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
5.2.20.RELEASE
2
hookiesolutions/webhookie:latest0629694246ba
spring-beans@5.3.15
spring-webflux@5.3.15
5.3.18
5.3.18
2
mbentley/omada-controller:4.3f4e682274bed
spring-beans@5.1.6.RELEASE
spring-webmvc@5.1.6.RELEASE
5.2.20.RELEASE
5.2.20.RELEASE
2
nacos/nacos-server:v2.1.0dcf04549c6d7
spring-beans@5.1.18.RELEASE
spring-boot-starter-web@2.1.17.RELEASE
spring-webmvc@5.1.18.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
2
opensearchproject/opensearch:1.1.0967d7f57f72f
spring-beans@5.2.5.RELEASE
5.2.20.RELEASE
2
scorpiobroker/scorpio:RegistrySubscriptionManager_2.1.001e11d800459
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
2
scorpiobroker/scorpio:eureka-server_2.1.03f05a113a4be
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
2
scorpiobroker/scorpio:AtContextServer_2.1.05073ceef2fa0
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
2
scorpiobroker/scorpio:gateway_2.1.062dae3dd0eeb
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
2
scorpiobroker/scorpio:RegistryManager_2.1.0a2cfcf0947fd
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
2
scorpiobroker/scorpio:QueryManager_2.1.0b742a53b2803
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
2
scorpiobroker/scorpio:HistoryManager_2.1.0b7fe27a06ff5
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
2
scorpiobroker/scorpio:config-server_1.1.0c46c1517e523
spring-beans@5.1.10.RELEASE
spring-boot-starter-web@2.1.9.RELEASE
spring-webmvc@5.1.10.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
2
scorpiobroker/scorpio:SubscriptionManager_2.1.0e08036670d66
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
2
scorpiobroker/scorpio:EntityManager_2.1.0f02e8a429a08
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
2
adagber/planner:v1.0e5c1ed097752
spring-beans@5.3.13
5.3.18
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
spring-beans@5.3.8
spring-boot-starter-web@2.5.1
spring-webmvc@5.3.8
5.3.18
2.5.12
5.3.18
1
amartinm82/planner:v2.01184353ff57b
spring-beans@5.3.1
5.3.18
1
andrianrf/bpjstk-service:latest46abe878d9d8
spring-beans@5.2.9.RELEASE
spring-boot-starter-web@2.3.4.RELEASE
spring-webmvc@5.2.9.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
andrianrf/bpjstk-simulator:latestb63fdb51d39d
spring-beans@5.2.9.RELEASE
spring-boot-starter-web@2.3.4.RELEASE
spring-webmvc@5.2.9.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
andrianrf/iso-client:latestba560086ce15
spring-beans@5.2.9.RELEASE
spring-boot-starter-web@2.3.4.RELEASE
spring-webmvc@5.2.9.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
andrianrf/iso-server:latest7da47f525c7d
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
apacheignite/ignite:2.7.0d7deab68b8fa
spring-beans@4.3.18.RELEASE
5.2.20.RELEASE
1
apache/iotdb:0.11.28647309f95d1
spring-beans@4.3.18.RELEASE
spring-boot-starter-web@1.5.15.RELEASE
spring-webmvc@4.3.18.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
apache/nifi-registry:1.14.0090b7f87ec7f
spring-beans@5.3.5
spring-boot-starter-web@2.5.1
spring-webmvc@5.3.8
5.3.18
2.5.12
5.3.18
1
apache/nifi-registry:0.8.0974efa2f21da
spring-beans@5.2.5.RELEASE
spring-boot-starter-web@2.2.6.RELEASE
spring-webmvc@5.2.5.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
apacherocketmq/rocketmq-dashboard:1.0.024799aff6cf8
spring-beans@5.2.1.RELEASE
spring-boot-starter-web@2.2.2.RELEASE
spring-webmvc@5.2.2.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
apache/skywalking-ui:8.1.067d50e4deff4
spring-beans@4.3.15.RELEASE
spring-boot-starter-web@1.5.11.RELEASE
spring-webmvc@4.3.15.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
apache/skywalking-ui:8.9.180530f0308a5
spring-beans@5.3.7
spring-webflux@5.3.7
5.3.18
5.3.18
1
arturisimo/planner:v1.0fff9de644941
spring-beans@5.3.13
5.3.18
1
arturisimo/webapp-db-java:v2c95524e90b57
spring-beans@5.3.15
spring-webmvc@5.3.15
5.3.18
5.3.18
1
assistiot/cybersecurity-monitoring_id-elk:latestba1d85ec3739
spring-beans@5.2.5.RELEASE
5.2.20.RELEASE
1
atlassian/confluence-server:7.10.03b9222ab32ef
spring-beans@5.1.18.RELEASE
spring-webmvc@5.1.18.RELEASE
5.2.20.RELEASE
5.2.20.RELEASE
1
atlassian/jira-software:8.14.037bc46cbec1a
spring-beans@5.0.10.RELEASE
5.2.20.RELEASE
1
audig/clamapi:2.1.62c3fe34ee430
spring-beans@5.2.8.RELEASE
spring-boot-starter-web@2.3.2.RELEASE
spring-webmvc@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
beastob/url-shortener:1.0.299a49885ab33
spring-beans@5.3.10
spring-webmvc@5.3.10
5.3.18
5.3.18
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.