StackRadar

CVE-2022-22965

CriticalKEV

Advisory

Published 31 Mar 2022In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.996
100th percentile
CISA KEV
Listed
since 4 Apr 2022
Charts affected
208
of 17,781 indexed, latest versions
Container images
156
deployed by those charts
Fix available
5 of 5
affected packages

Remote Code Execution in Spring Framework

Carried by container images the latest versions of 208 of 17,781 indexed charts deploy, on 156 images.

Affected packageAffected versionsFixed inImages
spring-beansmaven2.5.6.SEC03, 3.0.7, 3.0.7.RELEASE, 3.2.18.RELEASE+50 more5.2.20.RELEASE, 5.3.18156
spring-webmvcmaven2.5.6.SEC03, 3.2.18.RELEASE, 4.3.1.RELEASE, 4.3.2.RELEASE+41 more5.2.20.RELEASE, 5.3.18106
spring-boot-starter-webmaven1.4.0.RELEASE, 1.5.2.RELEASE, 1.5.3.RELEASE, 1.5.4.RELEASE+28 more2.5.12, 2.6.668
spring-webfluxmaven5.2.2.RELEASE, 5.2.7.RELEASE, 5.2.8.RELEASE, 5.3.1+5 more5.2.20.RELEASE, 5.3.1836
spring-boot-starter-webfluxmaven2.2.2.RELEASE, 2.3.1.RELEASE, 2.3.2.RELEASE, 2.3.3.RELEASE+2 more2.5.12, 2.6.69
OSV records
GHSA-36p3-wjmg-h94x

Charts affected

208 by stars
ChartLatestAffected imagesRadar Score
pagescrypticcode-helmchart1.0.01 of 3See more

pages crypticcode-helmchart 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
pagesdalston-pages1.0.01 of 3See more

pages dalston-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
pagesdaman-dell-kuber1.0.01 of 3See more

pages daman-dell-kuber 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
apache-ranger-admindata-platform-stableVerified publisher0.2.01 of 2See more

apache-ranger-admin data-platform-stable 0.2.0

1 of the 2 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
spring-beans@4.3.27.RELEASE
5.2.20.RELEASE

Open the chart page →

8,245
pagesdavid-pages1.0.01 of 3See more

pages david-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
pagesdebasish-pages1.0.01 of 3See more

pages debasish-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
eoloplannerdfa-amm-eoloplannerVerified publisher0.1.02 of 7See more

eoloplanner dfa-amm-eoloplanner 0.1.0

2 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
amartinm82/planner:v2.01184353ff57b
spring-beans@5.3.1
5.3.18
oscarsotosanchez/toposervice:v1.0d4d020e9f272
spring-beans@5.3.1
spring-boot-starter-webflux@2.4.0
spring-webflux@5.3.1
5.3.18
2.5.12
5.3.18

Open the chart page →

27,550
pagesdipak1.0.01 of 3See more

pages dipak 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
forwardauthdniel2.0.131 of 1See more

forwardauth dniel 2.0.13

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dniel/forwardauth:latestf67129ea1c64
spring-beans@5.1.8.RELEASE
5.2.20.RELEASE

Open the chart page →

4,592
eoloplannerdreyg-jescribanob-chart-eoloplanner0.1.01 of 7See more

eoloplanner dreyg-jescribanob-chart-eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
oscarsotosanchez/toposervice:v1.0d4d020e9f272
spring-beans@5.3.1
spring-boot-starter-webflux@2.4.0
spring-webflux@5.3.1
5.3.18
2.5.12
5.3.18

Open the chart page →

24,656
rundeckdwardu-helm-charts0.3.41 of 2See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
rundeck/rundeck:3.2.74d64fe56f767
spring-beans@4.3.24.RELEASE
spring-webmvc@4.3.24.RELEASE
5.2.20.RELEASE
5.2.20.RELEASE

Open the chart page →

19,802
dshackledysnixVerified publisher0.1.11 of 2See more

dshackle dysnix 0.1.1

1 of the 2 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
emeraldpay/dshackle:0.12ac2a4bc66ab6
spring-beans@5.3.12
5.3.18

Open the chart page →

2,237
pagesedgwarepages1.0.01 of 3See more

pages edgwarepages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
eolicplantseolicplantsVerified publisher0.1.02 of 7See more

eolicplants eolicplants 0.1.0

2 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
oscarsotosanchez/planner:v1.0730c00a099b8
spring-beans@5.3.1
5.3.18
oscarsotosanchez/toposervice:v1.0d4d020e9f272
spring-beans@5.3.1
spring-boot-starter-webflux@2.4.0
spring-webflux@5.3.1
5.3.18
2.5.12
5.3.18

Open the chart page →

27,291
eoloPlanteolo-plannerVerified publisher0.1.01 of 7See more

eoloPlant eolo-planner 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
spring-beans@5.3.13
5.3.18

Open the chart page →

27,537
eoloplannereoloplannerVerified publisher0.1.01 of 7See more

eoloplanner eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
spring-beans@5.3.13
5.3.18

Open the chart page →

32,205
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.01 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
spring-beans@5.3.13
5.3.18

Open the chart page →

27,537
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.02 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

2 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
franrobles8/planner:v3.099985392d63c
spring-beans@5.3.1
5.3.18
oscarsotosanchez/toposervice:v1.0d4d020e9f272
spring-beans@5.3.1
spring-boot-starter-webflux@2.4.0
spring-webflux@5.3.1
5.3.18
2.5.12
5.3.18

Open the chart page →

27,256
eoloplannereoloplanner-molynx-gat0.1.01 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
molynx/planner:v1441c9f52f092
spring-beans@5.3.13
5.3.18

Open the chart page →

28,482
eolo-plannereolo-planner-repo0.1.01 of 7See more

eolo-planner eolo-planner-repo 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
arturisimo/planner:v1.0fff9de644941
spring-beans@5.3.13
5.3.18

Open the chart page →

27,096
eoloplanteoloplant1.0.01 of 7See more

eoloplant eoloplant 1.0.0

1 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
spring-beans@5.3.13
5.3.18

Open the chart page →

27,537
eoloplantseoloplants-urjcVerified publisher0.1.01 of 7See more

eoloplants eoloplants-urjc 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
lourdesmorente/new-planner:1.0.0608745878cdb
spring-beans@5.3.13
5.3.18

Open the chart page →

27,721
servereoloserverVerified publisher0.1.01 of 7See more

server eoloserver 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
spring-beans@5.3.13
5.3.18

Open the chart page →

32,205
shenyuerdeng2.4.212 of 2See more

shenyu erdeng 2.4.21

2 of the 2 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.4.2e8b7c4ddd069
spring-beans@5.2.2.RELEASE
spring-boot-starter-web@2.2.2.RELEASE
spring-webmvc@5.2.2.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
spring-beans@5.2.2.RELEASE
spring-boot-starter-webflux@2.2.2.RELEASE
spring-webflux@5.2.2.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

12,513
findery-marketfindery-market0.1.01 of 7See more

findery-market findery-market 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
chandanteekinavar/findery-market-order-service:1.00cf52bf5ee9a
spring-beans@5.3.10
spring-webmvc@5.3.10
5.3.18
5.3.18

Open the chart page →

7,691
scorpio-brokerfiware0.3.310 of 10See more

scorpio-broker fiware 0.3.3

10 of the 10 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:RegistrySubscriptionManager_2.1.001e11d800459
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:eureka-server_2.1.03f05a113a4be
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:AtContextServer_2.1.05073ceef2fa0
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:gateway_2.1.062dae3dd0eeb
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:RegistryManager_2.1.0a2cfcf0947fd
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:QueryManager_2.1.0b742a53b2803
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:HistoryManager_2.1.0b7fe27a06ff5
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:config-server_1.1.0c46c1517e523
spring-beans@5.1.10.RELEASE
spring-boot-starter-web@2.1.9.RELEASE
spring-webmvc@5.1.10.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
scorpiobroker/scorpio:SubscriptionManager_2.1.0e08036670d66
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:EntityManager_2.1.0f02e8a429a08
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18

Open the chart page →

55,600
scorpiobrokerfiware0.1.210 of 10See more

scorpiobroker fiware 0.1.2

10 of the 10 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:RegistrySubscriptionManager_2.1.001e11d800459
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:eureka-server_2.1.03f05a113a4be
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:AtContextServer_2.1.05073ceef2fa0
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:gateway_2.1.062dae3dd0eeb
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:RegistryManager_2.1.0a2cfcf0947fd
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:QueryManager_2.1.0b742a53b2803
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:HistoryManager_2.1.0b7fe27a06ff5
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:config-server_1.1.0c46c1517e523
spring-beans@5.1.10.RELEASE
spring-boot-starter-web@2.1.9.RELEASE
spring-webmvc@5.1.10.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
scorpiobroker/scorpio:SubscriptionManager_2.1.0e08036670d66
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:EntityManager_2.1.0f02e8a429a08
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18

Open the chart page →

55,600
scorpio-broker-aaiofiware0.4.151 of 1See more

scorpio-broker-aaio fiware 0.4.15

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:scorpio-aaio_2.1.0db55012043df
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18

Open the chart page →

5,286
my-chartfleet-web-app0.1.03 of 6See more

my-chart fleet-web-app 0.1.0

3 of the 6 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
richardchesterwood/k8s-fleetman-api-gateway:release2518f946b9f05
spring-beans@4.3.7.RELEASE
spring-boot-starter-web@1.5.2.RELEASE
spring-webmvc@4.3.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
richardchesterwood/k8s-fleetman-position-simulator:release20b540a28f5a6
spring-beans@4.3.2.RELEASE
5.2.20.RELEASE
richardchesterwood/k8s-fleetman-position-tracker:release336c43961214c
spring-beans@4.3.2.RELEASE
spring-boot-starter-web@1.4.0.RELEASE
spring-webmvc@4.3.2.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

24,296
pagesgary-pages1.0.01 of 3See more

pages gary-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
spring-beans@5.3.8
spring-boot-starter-web@2.5.1
spring-webmvc@5.3.8
5.3.18
2.5.12
5.3.18

Open the chart page →

18,230
booksonic-airgeek-cookbookVerified publisher6.4.21 of 1See more

booksonic-air geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
spring-beans@5.2.6.RELEASE
spring-boot-starter-web@2.2.7.RELEASE
spring-webmvc@5.2.6.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

19,215
komgageek-cookbookVerified publisher2.4.21 of 1See more

komga geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
gotson/komga:0.99.49b15ea6bfc30
spring-beans@5.3.7
spring-webmvc@5.3.7
5.3.18
5.3.18

Open the chart page →

12,581
nzbhydra2geek-cookbookVerified publisher10.4.21 of 1See more

nzbhydra2 geek-cookbook 10.4.2

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

17,702
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
spring-beans@3.2.18.RELEASE
spring-webmvc@3.2.18.RELEASE
5.2.20.RELEASE
5.2.20.RELEASE

Open the chart page →

27,949
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.81 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
spring-beans@5.2.12.RELEASE
spring-boot-starter-web@2.3.8.RELEASE
spring-webmvc@5.2.12.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

34,754
hapi-fhirhapi-fhirVerified publisher0.1.01 of 1See more

hapi-fhir hapi-fhir 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
polyakov/hapi-fhir-jpaserver-example:latestdbcef69146b8
spring-beans@4.3.1.RELEASE
spring-webmvc@4.3.1.RELEASE
5.2.20.RELEASE
5.2.20.RELEASE

Open the chart page →

6,362
nacosheidaodageshiwoVerified publisher0.1.51 of 1See more

nacos heidaodageshiwo 0.1.5

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
nacos/nacos-server:v2.1.0dcf04549c6d7
spring-beans@5.1.18.RELEASE
spring-boot-starter-web@2.1.17.RELEASE
spring-webmvc@5.1.18.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

3,978
pageshelm-chart-repos-camden1.0.01 of 3See more

pages helm-chart-repos-camden 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
springboothelmcharts1.0.01 of 1See more

springboot helmcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
kimb88/hello-world-spring-boot:latest0639155241cb
spring-beans@5.0.8.RELEASE
spring-boot-starter-web@2.0.4.RELEASE
spring-webmvc@5.0.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

6,451
pageshelm-repo1.0.01 of 3See more

pages helm-repo 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
todo-apihelm-repo-sharif0.1.01 of 2See more

todo-api helm-repo-sharif 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
pavanelthepu/todo-api:1.0.2f47658e3b24c
spring-beans@5.3.8
spring-webmvc@5.3.8
5.3.18
5.3.18

Open the chart page →

2,544
eoloplanthttpd-eoloplant0.1.01 of 7See more

eoloplant httpd-eoloplant 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
spring-beans@5.3.13
5.3.18

Open the chart page →

32,205
skywalking-v1huangchengwu-helm-chart0.1.01 of 4See more

skywalking-v1 huangchengwu-helm-chart 0.1.0

1 of the 4 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
apache/skywalking-ui:8.9.180530f0308a5
spring-beans@5.3.7
spring-webflux@5.3.7
5.3.18
5.3.18

Open the chart page →

20,650
ibm-microclimateibm-charts0.1.02 of 8See more

ibm-microclimate ibm-charts 0.1.0

2 of the 8 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
spring-beans@4.3.9.RELEASE
spring-boot-starter-web@1.5.4.RELEASE
spring-webmvc@4.3.9.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
ibmcom/microclimate-theia:lateste17bdccc5030
spring-beans@4.3.9.RELEASE
spring-boot-starter-web@1.5.4.RELEASE
spring-webmvc@4.3.9.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

57,669
ibm-ws-dyn-agent-devibm-charts1.0.01 of 1See more

ibm-ws-dyn-agent-dev ibm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
spring-beans@3.0.7.RELEASE
5.2.20.RELEASE

Open the chart page →

19,295
eoloserverihuertas2021-vmartinp2021-helm0.1.01 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
huertaslopez/i.huertas.2021-v.martinp.2021-planner:2.0.0e2c18bd65472
spring-beans@5.3.13
5.3.18

Open the chart page →

27,721
jenkinsjenkins-x0.10.381 of 2See more

jenkins jenkins-x 0.10.38

1 of the 2 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
jenkinsci/jenkins:2.67a1f33f004659
spring-beans@2.5.6.SEC03
spring-webmvc@2.5.6.SEC03
5.2.20.RELEASE
5.2.20.RELEASE

Open the chart page →

10,682
spring-boot-chartjhidalgo3-githubVerified publisher4.0.01 of 1See more

spring-boot-chart jhidalgo3-github 4.0.0

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
jhidalgo3/spring-echo-example:lateste08733191ea0
spring-beans@5.3.3
spring-webmvc@5.3.3
5.3.18
5.3.18

Open the chart page →

1,703
kanbanapp-demokanbanapp-demo0.3.01 of 3See more

kanbanapp-demo kanbanapp-demo 0.3.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
sdandey/dandey-apps:kanban-board-kanban-appbef0f599737b
spring-beans@5.1.8.RELEASE
spring-boot-starter-web@2.1.6.RELEASE
spring-webmvc@5.1.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

7,498

Container images carrying it

156 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
lourdesmorente/new-planner:1.0.0608745878cdb
spring-beans@5.3.13
5.3.18
1
massimolauri/wso2is:5.11.0-centose08abf0ce767
spring-beans@5.1.2.RELEASE
5.2.20.RELEASE
1
microcks/microcks:0.8.0e3a3e0c67b09
spring-beans@4.3.20.RELEASE
spring-boot-starter-web@1.5.17.RELEASE
spring-webmvc@4.3.20.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
molynx/planner:v1441c9f52f092
spring-beans@5.3.13
5.3.18
1
nacos/nacos-server:1.4.1fe6e5688cdf3
spring-beans@5.1.18.RELEASE
spring-boot-starter-web@2.1.17.RELEASE
spring-webmvc@5.1.18.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
spring-beans@4.3.6.RELEASE
spring-webmvc@4.3.6.RELEASE
5.2.20.RELEASE
5.2.20.RELEASE
1
opencord/ves-agent:1.0.04187e2a8c918
spring-beans@5.0.6.RELEASE
spring-boot-starter-web@2.0.2.RELEASE
spring-webmvc@5.0.6.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
openkm/openkm-ce:6.3.113bc465a7461b
spring-beans@3.2.18.RELEASE
spring-webmvc@3.2.18.RELEASE
5.2.20.RELEASE
5.2.20.RELEASE
1
openzipkin/zipkin:2.21.060c3970df479
spring-beans@5.2.5.RELEASE
5.2.20.RELEASE
1
openzipkin/zipkin-gcp:0.15.2b5d51d1144e2
spring-beans@5.2.0.RELEASE
5.2.20.RELEASE
1
opsmx11/issuegen:v2.1.05c50ca123d88
spring-beans@5.1.10.RELEASE
spring-boot-starter-web@2.1.9.RELEASE
spring-webmvc@5.1.10.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
oscarsotosanchez/planner:v1.0730c00a099b8
spring-beans@5.3.1
5.3.18
1
paulczar/spring-helloworld:latestc7140cecd5f7
spring-beans@5.1.5.RELEASE
spring-boot-starter-web@2.1.3.RELEASE
spring-webmvc@5.1.5.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
pcarrascoponce/planner:v1.0981fc482442c
spring-beans@5.3.13
5.3.18
1
platform9community/admin-server:latestde3fa9b70df1
spring-beans@5.2.7.RELEASE
spring-boot-starter-webflux@2.3.1.RELEASE
spring-webflux@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
platform9community/api-gateway:latest40a4970de568
spring-beans@5.2.7.RELEASE
spring-boot-starter-webflux@2.3.1.RELEASE
spring-webflux@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
platform9community/customers-service:latest2089811e5cc6
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
platform9community/vets-service:latestd1165c94dfb3
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
platform9community/visits-service:latest8d11b50368c6
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
polyakov/hapi-fhir-jpaserver-example:latestdbcef69146b8
spring-beans@4.3.1.RELEASE
spring-webmvc@4.3.1.RELEASE
5.2.20.RELEASE
5.2.20.RELEASE
1
redestroyder/authorization-service:0.0.1740364a619fd
spring-beans@5.3.15
spring-webflux@5.3.15
5.3.18
5.3.18
1
redestroyder/business-service:0.0.1db03499a0726
spring-beans@5.3.15
spring-webflux@5.3.15
5.3.18
5.3.18
1
refar/apm-api:v5.7.1241373fa2972
spring-beans@5.2.8.RELEASE
spring-boot-starter-web@2.3.2.RELEASE
spring-webmvc@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
refar/apm-operator-server:v5.7.1e5490f050f9f
spring-beans@5.2.8.RELEASE
spring-boot-starter-web@2.3.2.RELEASE
spring-webmvc@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
reportportal/service-api:5.7.29df41f8fb320
spring-beans@5.2.4.RELEASE
spring-boot-starter-web@2.2.5.RELEASE
spring-webmvc@5.2.4.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
reportportal/service-authorization:5.7.09e73114dbd15
spring-beans@5.2.4.RELEASE
spring-boot-starter-web@2.2.5.RELEASE
spring-webmvc@5.2.4.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
reportportal/service-jobs:5.7.2dc166c58485a
spring-beans@5.3.4
spring-webmvc@5.3.4
5.3.18
5.3.18
1
richardchesterwood/k8s-fleetman-api-gateway:release2518f946b9f05
spring-beans@4.3.7.RELEASE
spring-boot-starter-web@1.5.2.RELEASE
spring-webmvc@4.3.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
richardchesterwood/k8s-fleetman-position-simulator:release20b540a28f5a6
spring-beans@4.3.2.RELEASE
5.2.20.RELEASE
1
richardchesterwood/k8s-fleetman-position-tracker:release336c43961214c
spring-beans@4.3.2.RELEASE
spring-boot-starter-web@1.4.0.RELEASE
spring-webmvc@4.3.2.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
rm3l/service-names-port-numbers:0.12.162d1cc4223e5
spring-beans@5.3.13
spring-boot-starter-web@2.6.1
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
2.6.6
5.3.18
5.3.18
1
robotshop/rs-shipping:latest89753ab48919
spring-beans@5.2.8.RELEASE
spring-boot-starter-web@2.3.3.RELEASE
spring-webmvc@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
rundeck/rundeck:3.2.74d64fe56f767
spring-beans@4.3.24.RELEASE
spring-webmvc@4.3.24.RELEASE
5.2.20.RELEASE
5.2.20.RELEASE
1
rundeck/rundeck:3.0.16b13e8059ad72
spring-beans@4.3.18.RELEASE
spring-webmvc@4.3.18.RELEASE
5.2.20.RELEASE
5.2.20.RELEASE
1
salaboy/fmtok8s-monolith:v0.1.0f225568e6d03
spring-beans@5.2.8.RELEASE
spring-boot-starter-webflux@2.3.2.RELEASE
spring-webflux@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
scorpiobroker/scorpio:scorpio-aaio_2.1.0db55012043df
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
1
sdandey/dandey-apps:kanban-board-kanban-appbef0f599737b
spring-beans@5.1.8.RELEASE
spring-boot-starter-web@2.1.6.RELEASE
spring-webmvc@5.1.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
seataio/seata-server:1.5.1ee1ed55f4144
spring-beans@5.3.13
spring-boot-starter-web@2.4.13
spring-webmvc@5.3.13
5.3.18
2.5.12
5.3.18
1
seldonio/apife:0.2.7ba81b17f00eb
spring-beans@4.3.20.RELEASE
spring-boot-starter-web@1.5.17.RELEASE
spring-webmvc@4.3.20.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
seldonio/apife:0.3.1eea0d3f578ca
spring-beans@4.3.20.RELEASE
spring-boot-starter-web@1.5.17.RELEASE
spring-webmvc@4.3.20.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
seldonio/cluster-manager:0.2.729e362bb1ba2
spring-beans@4.3.20.RELEASE
spring-boot-starter-web@1.5.17.RELEASE
spring-webmvc@4.3.20.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
slagattollas/planner-practica:latestcecd95e31486
spring-beans@5.3.1
5.3.18
1
slagattollas/toposervice-practica:latestdc63973dae0d
spring-beans@5.3.1
spring-boot-starter-webflux@2.4.0
spring-webflux@5.3.1
5.3.18
2.5.12
5.3.18
1
slamdev/hetzner-irobo:0.0.13ca20c184c55
spring-beans@5.3.10
spring-boot-starter-web@2.5.5
spring-webmvc@5.3.10
5.3.18
2.5.12
5.3.18
1
someblackmagic/smtp-fake-server:latest0d63ba37a560
spring-beans@5.3.2
spring-webmvc@5.3.2
5.3.18
5.3.18
1
stanislovesid/oracle-host-app:14fe1ed26e194
spring-beans@5.3.12
spring-webmvc@5.3.12
5.3.18
5.3.18
1
torrespro/mca-worker:2.0.06d3bd305a1ba
spring-beans@5.2.1.RELEASE
5.2.20.RELEASE
1
vientoprojects/kubernetes-monitoring-telegram-bot:latesteb2a71531741
spring-beans@5.3.9
spring-webmvc@5.3.9
5.3.18
5.3.18
1
xetusoss/archiva:v2.2.588f25242b9ee
spring-beans@4.2.1.RELEASE
5.2.20.RELEASE
1
zenko/zenko-cosbench:0.0.6386a1f48ec0e
spring-beans@3.0.7
5.2.20.RELEASE
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.