StackRadar

CVE-2022-22965

CriticalKEV

Advisory

Published 31 Mar 2022In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.996
100th percentile
CISA KEV
Listed
since 4 Apr 2022
Charts affected
208
of 17,781 indexed, latest versions
Container images
156
deployed by those charts
Fix available
5 of 5
affected packages

Remote Code Execution in Spring Framework

Carried by container images the latest versions of 208 of 17,781 indexed charts deploy, on 156 images.

Affected packageAffected versionsFixed inImages
spring-beansmaven2.5.6.SEC03, 3.0.7, 3.0.7.RELEASE, 3.2.18.RELEASE+50 more5.2.20.RELEASE, 5.3.18156
spring-webmvcmaven2.5.6.SEC03, 3.2.18.RELEASE, 4.3.1.RELEASE, 4.3.2.RELEASE+41 more5.2.20.RELEASE, 5.3.18106
spring-boot-starter-webmaven1.4.0.RELEASE, 1.5.2.RELEASE, 1.5.3.RELEASE, 1.5.4.RELEASE+28 more2.5.12, 2.6.668
spring-webfluxmaven5.2.2.RELEASE, 5.2.7.RELEASE, 5.2.8.RELEASE, 5.3.1+5 more5.2.20.RELEASE, 5.3.1836
spring-boot-starter-webfluxmaven2.2.2.RELEASE, 2.3.1.RELEASE, 2.3.2.RELEASE, 2.3.3.RELEASE+2 more2.5.12, 2.6.69
OSV records
GHSA-36p3-wjmg-h94x

Charts affected

208 by stars
ChartLatestAffected imagesRadar Score
pagescrypticcode-helmchart1.0.01 of 3See more

pages crypticcode-helmchart 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
pagesdalston-pages1.0.01 of 3See more

pages dalston-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
pagesdaman-dell-kuber1.0.01 of 3See more

pages daman-dell-kuber 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
apache-ranger-admindata-platform-stableVerified publisher0.2.01 of 2See more

apache-ranger-admin data-platform-stable 0.2.0

1 of the 2 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
spring-beans@4.3.27.RELEASE
5.2.20.RELEASE

Open the chart page →

8,245
pagesdavid-pages1.0.01 of 3See more

pages david-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
pagesdebasish-pages1.0.01 of 3See more

pages debasish-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
eoloplannerdfa-amm-eoloplannerVerified publisher0.1.02 of 7See more

eoloplanner dfa-amm-eoloplanner 0.1.0

2 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
amartinm82/planner:v2.01184353ff57b
spring-beans@5.3.1
5.3.18
oscarsotosanchez/toposervice:v1.0d4d020e9f272
spring-beans@5.3.1
spring-boot-starter-webflux@2.4.0
spring-webflux@5.3.1
5.3.18
2.5.12
5.3.18

Open the chart page →

27,550
pagesdipak1.0.01 of 3See more

pages dipak 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
forwardauthdniel2.0.131 of 1See more

forwardauth dniel 2.0.13

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dniel/forwardauth:latestf67129ea1c64
spring-beans@5.1.8.RELEASE
5.2.20.RELEASE

Open the chart page →

4,592
eoloplannerdreyg-jescribanob-chart-eoloplanner0.1.01 of 7See more

eoloplanner dreyg-jescribanob-chart-eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
oscarsotosanchez/toposervice:v1.0d4d020e9f272
spring-beans@5.3.1
spring-boot-starter-webflux@2.4.0
spring-webflux@5.3.1
5.3.18
2.5.12
5.3.18

Open the chart page →

24,656
rundeckdwardu-helm-charts0.3.41 of 2See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
rundeck/rundeck:3.2.74d64fe56f767
spring-beans@4.3.24.RELEASE
spring-webmvc@4.3.24.RELEASE
5.2.20.RELEASE
5.2.20.RELEASE

Open the chart page →

19,802
dshackledysnixVerified publisher0.1.11 of 2See more

dshackle dysnix 0.1.1

1 of the 2 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
emeraldpay/dshackle:0.12ac2a4bc66ab6
spring-beans@5.3.12
5.3.18

Open the chart page →

2,237
pagesedgwarepages1.0.01 of 3See more

pages edgwarepages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
eolicplantseolicplantsVerified publisher0.1.02 of 7See more

eolicplants eolicplants 0.1.0

2 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
oscarsotosanchez/planner:v1.0730c00a099b8
spring-beans@5.3.1
5.3.18
oscarsotosanchez/toposervice:v1.0d4d020e9f272
spring-beans@5.3.1
spring-boot-starter-webflux@2.4.0
spring-webflux@5.3.1
5.3.18
2.5.12
5.3.18

Open the chart page →

27,291
eoloPlanteolo-plannerVerified publisher0.1.01 of 7See more

eoloPlant eolo-planner 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
spring-beans@5.3.13
5.3.18

Open the chart page →

27,537
eoloplannereoloplannerVerified publisher0.1.01 of 7See more

eoloplanner eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
spring-beans@5.3.13
5.3.18

Open the chart page →

32,205
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.01 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
spring-beans@5.3.13
5.3.18

Open the chart page →

27,537
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.02 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

2 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
franrobles8/planner:v3.099985392d63c
spring-beans@5.3.1
5.3.18
oscarsotosanchez/toposervice:v1.0d4d020e9f272
spring-beans@5.3.1
spring-boot-starter-webflux@2.4.0
spring-webflux@5.3.1
5.3.18
2.5.12
5.3.18

Open the chart page →

27,256
eoloplannereoloplanner-molynx-gat0.1.01 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
molynx/planner:v1441c9f52f092
spring-beans@5.3.13
5.3.18

Open the chart page →

28,482
eolo-plannereolo-planner-repo0.1.01 of 7See more

eolo-planner eolo-planner-repo 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
arturisimo/planner:v1.0fff9de644941
spring-beans@5.3.13
5.3.18

Open the chart page →

27,096
eoloplanteoloplant1.0.01 of 7See more

eoloplant eoloplant 1.0.0

1 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
spring-beans@5.3.13
5.3.18

Open the chart page →

27,537
eoloplantseoloplants-urjcVerified publisher0.1.01 of 7See more

eoloplants eoloplants-urjc 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
lourdesmorente/new-planner:1.0.0608745878cdb
spring-beans@5.3.13
5.3.18

Open the chart page →

27,721
servereoloserverVerified publisher0.1.01 of 7See more

server eoloserver 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
spring-beans@5.3.13
5.3.18

Open the chart page →

32,205
shenyuerdeng2.4.212 of 2See more

shenyu erdeng 2.4.21

2 of the 2 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.4.2e8b7c4ddd069
spring-beans@5.2.2.RELEASE
spring-boot-starter-web@2.2.2.RELEASE
spring-webmvc@5.2.2.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
spring-beans@5.2.2.RELEASE
spring-boot-starter-webflux@2.2.2.RELEASE
spring-webflux@5.2.2.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

12,513
findery-marketfindery-market0.1.01 of 7See more

findery-market findery-market 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
chandanteekinavar/findery-market-order-service:1.00cf52bf5ee9a
spring-beans@5.3.10
spring-webmvc@5.3.10
5.3.18
5.3.18

Open the chart page →

7,691
scorpio-brokerfiware0.3.310 of 10See more

scorpio-broker fiware 0.3.3

10 of the 10 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:RegistrySubscriptionManager_2.1.001e11d800459
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:eureka-server_2.1.03f05a113a4be
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:AtContextServer_2.1.05073ceef2fa0
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:gateway_2.1.062dae3dd0eeb
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:RegistryManager_2.1.0a2cfcf0947fd
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:QueryManager_2.1.0b742a53b2803
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:HistoryManager_2.1.0b7fe27a06ff5
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:config-server_1.1.0c46c1517e523
spring-beans@5.1.10.RELEASE
spring-boot-starter-web@2.1.9.RELEASE
spring-webmvc@5.1.10.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
scorpiobroker/scorpio:SubscriptionManager_2.1.0e08036670d66
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:EntityManager_2.1.0f02e8a429a08
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18

Open the chart page →

55,600
scorpiobrokerfiware0.1.210 of 10See more

scorpiobroker fiware 0.1.2

10 of the 10 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:RegistrySubscriptionManager_2.1.001e11d800459
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:eureka-server_2.1.03f05a113a4be
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:AtContextServer_2.1.05073ceef2fa0
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:gateway_2.1.062dae3dd0eeb
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:RegistryManager_2.1.0a2cfcf0947fd
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:QueryManager_2.1.0b742a53b2803
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:HistoryManager_2.1.0b7fe27a06ff5
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:config-server_1.1.0c46c1517e523
spring-beans@5.1.10.RELEASE
spring-boot-starter-web@2.1.9.RELEASE
spring-webmvc@5.1.10.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
scorpiobroker/scorpio:SubscriptionManager_2.1.0e08036670d66
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:EntityManager_2.1.0f02e8a429a08
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18

Open the chart page →

55,600
scorpio-broker-aaiofiware0.4.151 of 1See more

scorpio-broker-aaio fiware 0.4.15

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:scorpio-aaio_2.1.0db55012043df
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18

Open the chart page →

5,286
my-chartfleet-web-app0.1.03 of 6See more

my-chart fleet-web-app 0.1.0

3 of the 6 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
richardchesterwood/k8s-fleetman-api-gateway:release2518f946b9f05
spring-beans@4.3.7.RELEASE
spring-boot-starter-web@1.5.2.RELEASE
spring-webmvc@4.3.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
richardchesterwood/k8s-fleetman-position-simulator:release20b540a28f5a6
spring-beans@4.3.2.RELEASE
5.2.20.RELEASE
richardchesterwood/k8s-fleetman-position-tracker:release336c43961214c
spring-beans@4.3.2.RELEASE
spring-boot-starter-web@1.4.0.RELEASE
spring-webmvc@4.3.2.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

24,296
pagesgary-pages1.0.01 of 3See more

pages gary-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
spring-beans@5.3.8
spring-boot-starter-web@2.5.1
spring-webmvc@5.3.8
5.3.18
2.5.12
5.3.18

Open the chart page →

18,230
booksonic-airgeek-cookbookVerified publisher6.4.21 of 1See more

booksonic-air geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
spring-beans@5.2.6.RELEASE
spring-boot-starter-web@2.2.7.RELEASE
spring-webmvc@5.2.6.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

19,215
komgageek-cookbookVerified publisher2.4.21 of 1See more

komga geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
gotson/komga:0.99.49b15ea6bfc30
spring-beans@5.3.7
spring-webmvc@5.3.7
5.3.18
5.3.18

Open the chart page →

12,581
nzbhydra2geek-cookbookVerified publisher10.4.21 of 1See more

nzbhydra2 geek-cookbook 10.4.2

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

17,702
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
spring-beans@3.2.18.RELEASE
spring-webmvc@3.2.18.RELEASE
5.2.20.RELEASE
5.2.20.RELEASE

Open the chart page →

27,949
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.81 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
spring-beans@5.2.12.RELEASE
spring-boot-starter-web@2.3.8.RELEASE
spring-webmvc@5.2.12.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

34,754
hapi-fhirhapi-fhirVerified publisher0.1.01 of 1See more

hapi-fhir hapi-fhir 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
polyakov/hapi-fhir-jpaserver-example:latestdbcef69146b8
spring-beans@4.3.1.RELEASE
spring-webmvc@4.3.1.RELEASE
5.2.20.RELEASE
5.2.20.RELEASE

Open the chart page →

6,362
nacosheidaodageshiwoVerified publisher0.1.51 of 1See more

nacos heidaodageshiwo 0.1.5

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
nacos/nacos-server:v2.1.0dcf04549c6d7
spring-beans@5.1.18.RELEASE
spring-boot-starter-web@2.1.17.RELEASE
spring-webmvc@5.1.18.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

3,978
pageshelm-chart-repos-camden1.0.01 of 3See more

pages helm-chart-repos-camden 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
springboothelmcharts1.0.01 of 1See more

springboot helmcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
kimb88/hello-world-spring-boot:latest0639155241cb
spring-beans@5.0.8.RELEASE
spring-boot-starter-web@2.0.4.RELEASE
spring-webmvc@5.0.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

6,451
pageshelm-repo1.0.01 of 3See more

pages helm-repo 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
todo-apihelm-repo-sharif0.1.01 of 2See more

todo-api helm-repo-sharif 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
pavanelthepu/todo-api:1.0.2f47658e3b24c
spring-beans@5.3.8
spring-webmvc@5.3.8
5.3.18
5.3.18

Open the chart page →

2,544
eoloplanthttpd-eoloplant0.1.01 of 7See more

eoloplant httpd-eoloplant 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
spring-beans@5.3.13
5.3.18

Open the chart page →

32,205
skywalking-v1huangchengwu-helm-chart0.1.01 of 4See more

skywalking-v1 huangchengwu-helm-chart 0.1.0

1 of the 4 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
apache/skywalking-ui:8.9.180530f0308a5
spring-beans@5.3.7
spring-webflux@5.3.7
5.3.18
5.3.18

Open the chart page →

20,650
ibm-microclimateibm-charts0.1.02 of 8See more

ibm-microclimate ibm-charts 0.1.0

2 of the 8 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
spring-beans@4.3.9.RELEASE
spring-boot-starter-web@1.5.4.RELEASE
spring-webmvc@4.3.9.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
ibmcom/microclimate-theia:lateste17bdccc5030
spring-beans@4.3.9.RELEASE
spring-boot-starter-web@1.5.4.RELEASE
spring-webmvc@4.3.9.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

57,669
ibm-ws-dyn-agent-devibm-charts1.0.01 of 1See more

ibm-ws-dyn-agent-dev ibm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
spring-beans@3.0.7.RELEASE
5.2.20.RELEASE

Open the chart page →

19,295
eoloserverihuertas2021-vmartinp2021-helm0.1.01 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
huertaslopez/i.huertas.2021-v.martinp.2021-planner:2.0.0e2c18bd65472
spring-beans@5.3.13
5.3.18

Open the chart page →

27,721
jenkinsjenkins-x0.10.381 of 2See more

jenkins jenkins-x 0.10.38

1 of the 2 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
jenkinsci/jenkins:2.67a1f33f004659
spring-beans@2.5.6.SEC03
spring-webmvc@2.5.6.SEC03
5.2.20.RELEASE
5.2.20.RELEASE

Open the chart page →

10,682
spring-boot-chartjhidalgo3-githubVerified publisher4.0.01 of 1See more

spring-boot-chart jhidalgo3-github 4.0.0

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
jhidalgo3/spring-echo-example:lateste08733191ea0
spring-beans@5.3.3
spring-webmvc@5.3.3
5.3.18
5.3.18

Open the chart page →

1,703
kanbanapp-demokanbanapp-demo0.3.01 of 3See more

kanbanapp-demo kanbanapp-demo 0.3.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
sdandey/dandey-apps:kanban-board-kanban-appbef0f599737b
spring-beans@5.1.8.RELEASE
spring-boot-starter-web@2.1.6.RELEASE
spring-webmvc@5.1.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

7,498

Container images carrying it

156 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
binhex/arch-nzbhydra2:3.1.0-1-01fb8952921ab6
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
chandanteekinavar/findery-market-order-service:1.00cf52bf5ee9a
spring-beans@5.3.10
spring-webmvc@5.3.10
5.3.18
5.3.18
1
choerodon/event-store-service:0.8.03c94c97f6f69
spring-beans@4.3.8.RELEASE
spring-boot-starter-web@1.5.3.RELEASE
spring-webmvc@4.3.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
craigwillis/c2metadata-bd:latestae317d7e4724
spring-beans@4.1.1.RELEASE
spring-webmvc@4.3.3.RELEASE
5.2.20.RELEASE
5.2.20.RELEASE
1
davidvmar/urjc-davidvmar-worker:1.0.10d221e834a21
spring-beans@5.2.1.RELEASE
5.2.20.RELEASE
1
dellcloud/category:distributed02fc234353a9
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
dellcloud/pages:1.04d2eb25b9225
spring-beans@5.3.4
spring-webmvc@5.3.4
5.3.18
5.3.18
1
dniel/forwardauth:latestf67129ea1c64
spring-beans@5.1.8.RELEASE
5.2.20.RELEASE
1
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
spring-beans@4.3.27.RELEASE
5.2.20.RELEASE
1
elastictranscoder/media:627e21dc963ab3858c6b
spring-beans@5.3.8
spring-webmvc@5.3.8
5.3.18
5.3.18
1
elastictranscoder/media-storage:f6d861a026208b8c2359
spring-beans@5.3.8
spring-webflux@5.3.8
spring-webmvc@5.3.8
5.3.18
5.3.18
5.3.18
1
elastictranscoder/transcoder:627e21dcb4a0327029e6
spring-beans@5.3.8
spring-webmvc@5.3.8
5.3.18
5.3.18
1
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
spring-beans@5.3.8
spring-webmvc@5.3.8
5.3.18
5.3.18
1
emeraldpay/dshackle:0.12ac2a4bc66ab6
spring-beans@5.3.12
5.3.18
1
expediagroup/pitchfork:1.314f2cf61e7de9
spring-beans@5.3.10
spring-webflux@5.3.10
5.3.18
5.3.18
1
farberg/apache-knox-docker:1.6.14b4a22487394
spring-beans@5.3.2
5.3.18
1
fimperato/sparkvid-api:1.0.5-RELEASE604012b77841
spring-beans@5.2.9.RELEASE
spring-boot-starter-web@2.3.4.RELEASE
spring-webmvc@5.2.9.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
fjvela/urjc-fjvela-worker:1.0.170cebf67bd66
spring-beans@5.2.1.RELEASE
5.2.20.RELEASE
1
franrobles8/planner:v3.099985392d63c
spring-beans@5.3.1
5.3.18
1
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
spring-beans@5.2.12.RELEASE
spring-boot-starter-web@2.3.8.RELEASE
spring-webmvc@5.2.12.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
spring-beans@5.2.8.RELEASE
spring-boot-starter-webflux@2.3.3.RELEASE
spring-webflux@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
spring-beans@5.2.8.RELEASE
spring-boot-starter-web@2.3.3.RELEASE
spring-webflux@5.2.8.RELEASE
spring-webmvc@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
5.2.20.RELEASE
1
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
spring-beans@5.2.8.RELEASE
spring-boot-starter-web@2.3.3.RELEASE
spring-webflux@5.2.8.RELEASE
spring-webmvc@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
5.2.20.RELEASE
1
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
spring-beans@5.2.8.RELEASE
spring-boot-starter-web@2.3.3.RELEASE
spring-webflux@5.2.8.RELEASE
spring-webmvc@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
5.2.20.RELEASE
1
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
spring-beans@5.2.8.RELEASE
spring-boot-starter-web@2.3.3.RELEASE
spring-webflux@5.2.8.RELEASE
spring-webmvc@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
5.2.20.RELEASE
1
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
spring-beans@5.2.8.RELEASE
spring-boot-starter-web@2.3.3.RELEASE
spring-webflux@5.2.8.RELEASE
spring-webmvc@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
5.2.20.RELEASE
1
gocd/gocd-server:v19.3.02da45cb09d57
spring-beans@4.3.22.RELEASE
spring-webmvc@4.3.22.RELEASE
5.2.20.RELEASE
5.2.20.RELEASE
1
gocd/gocd-server:v26.1.0720d1012b93f
spring-beans@4.3.30.RELEASE
spring-webmvc@4.3.30.RELEASE
5.2.20.RELEASE
5.2.20.RELEASE
1
gotson/komga:0.99.49b15ea6bfc30
spring-beans@5.3.7
spring-webmvc@5.3.7
5.3.18
5.3.18
1
huertaslopez/i.huertas.2021-v.martinp.2021-planner:2.0.0e2c18bd65472
spring-beans@5.3.13
5.3.18
1
hugohg34/planner:0.0.2171f61e8d7e2
spring-beans@5.3.13
5.3.18
1
hugohg34/toposervice:0.0.2812a03b3f274
spring-beans@5.3.13
spring-boot-starter-webflux@2.6.0
spring-webflux@5.3.13
5.3.18
2.6.6
5.3.18
1
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
spring-beans@3.0.7.RELEASE
5.2.20.RELEASE
1
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
spring-beans@4.3.9.RELEASE
spring-boot-starter-web@1.5.4.RELEASE
spring-webmvc@4.3.9.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
ibmcom/microclimate-theia:lateste17bdccc5030
spring-beans@4.3.9.RELEASE
spring-boot-starter-web@1.5.4.RELEASE
spring-webmvc@4.3.9.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
jacobalberty/unifi:v7.1.664a3616625dda
spring-beans@5.3.15
spring-webmvc@5.3.15
5.3.18
5.3.18
1
jacobalberty/unifi:5.10.19c409924e2463
spring-beans@5.1.2.RELEASE
5.2.20.RELEASE
1
jenkinsci/jenkins:2.67a1f33f004659
spring-beans@2.5.6.SEC03
spring-webmvc@2.5.6.SEC03
5.2.20.RELEASE
5.2.20.RELEASE
1
jhidalgo3/spring-echo-example:lateste08733191ea0
spring-beans@5.3.3
spring-webmvc@5.3.3
5.3.18
5.3.18
1
just1not2/streama:1.10.48a2305192dec
spring-beans@4.3.6.RELEASE
spring-webmvc@4.3.6.RELEASE
5.2.20.RELEASE
5.2.20.RELEASE
1
kimb88/hello-world-spring-boot:latest0639155241cb
spring-beans@5.0.8.RELEASE
spring-boot-starter-web@2.0.4.RELEASE
spring-webmvc@5.0.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
krontechnology/aapm-agent:1.1.07feef7d2ab42
spring-beans@5.3.1
spring-boot-starter-web@2.4.0
spring-webmvc@5.3.1
5.3.18
2.5.12
5.3.18
1
ladeit/ladeit:latest962b665ffe82
spring-beans@5.1.3.RELEASE
spring-boot-starter-web@2.1.1.RELEASE
spring-webmvc@5.1.3.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
lavandadelpatio/automated-download-films:0.0.2094e225a5a6f8
spring-beans@5.2.9.RELEASE
spring-boot-starter-web@2.3.4.RELEASE
spring-webmvc@5.2.9.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
lavandadelpatio/automated-download-shows:0.0.492de3c3426d2
spring-beans@5.2.9.RELEASE
spring-boot-starter-web@2.3.4.RELEASE
spring-webmvc@5.2.9.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
lavandadelpatio/filebot:0.0.671f2ccec8c0d
spring-beans@5.3.5
spring-boot-starter-web@2.4.4
spring-webmvc@5.3.5
5.3.18
2.5.12
5.3.18
1
lavandadelpatio/filebot-bot:0.0.1-SNAPSHOTd2cba20aa4d8
spring-beans@5.3.14
spring-boot-starter-web@2.6.2
spring-webmvc@5.3.14
5.3.18
2.6.6
5.3.18
1
lavandadelpatio/tmdb:0.0.2f36af885e915
spring-beans@5.3.5
spring-boot-starter-web@2.4.4
spring-webmvc@5.3.5
5.3.18
2.5.12
5.3.18
1
library/sonarqube:9.1.0-datacenter-search7e43ff493a47
spring-beans@5.3.7
5.3.18
1
library/sonarqube:9.1.0-datacenter-appa9bc5a3a1fc3
spring-beans@5.3.7
5.3.18
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.