StackRadar

CVE-2022-22965

CriticalKEV

Advisory

Published 31 Mar 2022In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.996
100th percentile
CISA KEV
Listed
since 4 Apr 2022
Charts affected
208
of 17,781 indexed, latest versions
Container images
156
deployed by those charts
Fix available
5 of 5
affected packages

Remote Code Execution in Spring Framework

Carried by container images the latest versions of 208 of 17,781 indexed charts deploy, on 156 images.

Affected packageAffected versionsFixed inImages
spring-beansmaven2.5.6.SEC03, 3.0.7, 3.0.7.RELEASE, 3.2.18.RELEASE+50 more5.2.20.RELEASE, 5.3.18156
spring-webmvcmaven2.5.6.SEC03, 3.2.18.RELEASE, 4.3.1.RELEASE, 4.3.2.RELEASE+41 more5.2.20.RELEASE, 5.3.18106
spring-boot-starter-webmaven1.4.0.RELEASE, 1.5.2.RELEASE, 1.5.3.RELEASE, 1.5.4.RELEASE+28 more2.5.12, 2.6.668
spring-webfluxmaven5.2.2.RELEASE, 5.2.7.RELEASE, 5.2.8.RELEASE, 5.3.1+5 more5.2.20.RELEASE, 5.3.1836
spring-boot-starter-webfluxmaven2.2.2.RELEASE, 2.3.1.RELEASE, 2.3.2.RELEASE, 2.3.3.RELEASE+2 more2.5.12, 2.6.69
OSV records
GHSA-36p3-wjmg-h94x

Charts affected

208 by stars
ChartLatestAffected imagesRadar Score
pagescrypticcode-helmchart1.0.01 of 3See more

pages crypticcode-helmchart 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
pagesdalston-pages1.0.01 of 3See more

pages dalston-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
pagesdaman-dell-kuber1.0.01 of 3See more

pages daman-dell-kuber 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
apache-ranger-admindata-platform-stableVerified publisher0.2.01 of 2See more

apache-ranger-admin data-platform-stable 0.2.0

1 of the 2 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
spring-beans@4.3.27.RELEASE
5.2.20.RELEASE

Open the chart page →

8,245
pagesdavid-pages1.0.01 of 3See more

pages david-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
pagesdebasish-pages1.0.01 of 3See more

pages debasish-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
eoloplannerdfa-amm-eoloplannerVerified publisher0.1.02 of 7See more

eoloplanner dfa-amm-eoloplanner 0.1.0

2 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
amartinm82/planner:v2.01184353ff57b
spring-beans@5.3.1
5.3.18
oscarsotosanchez/toposervice:v1.0d4d020e9f272
spring-beans@5.3.1
spring-boot-starter-webflux@2.4.0
spring-webflux@5.3.1
5.3.18
2.5.12
5.3.18

Open the chart page →

27,550
pagesdipak1.0.01 of 3See more

pages dipak 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
forwardauthdniel2.0.131 of 1See more

forwardauth dniel 2.0.13

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dniel/forwardauth:latestf67129ea1c64
spring-beans@5.1.8.RELEASE
5.2.20.RELEASE

Open the chart page →

4,592
eoloplannerdreyg-jescribanob-chart-eoloplanner0.1.01 of 7See more

eoloplanner dreyg-jescribanob-chart-eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
oscarsotosanchez/toposervice:v1.0d4d020e9f272
spring-beans@5.3.1
spring-boot-starter-webflux@2.4.0
spring-webflux@5.3.1
5.3.18
2.5.12
5.3.18

Open the chart page →

24,656
rundeckdwardu-helm-charts0.3.41 of 2See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
rundeck/rundeck:3.2.74d64fe56f767
spring-beans@4.3.24.RELEASE
spring-webmvc@4.3.24.RELEASE
5.2.20.RELEASE
5.2.20.RELEASE

Open the chart page →

19,802
dshackledysnixVerified publisher0.1.11 of 2See more

dshackle dysnix 0.1.1

1 of the 2 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
emeraldpay/dshackle:0.12ac2a4bc66ab6
spring-beans@5.3.12
5.3.18

Open the chart page →

2,237
pagesedgwarepages1.0.01 of 3See more

pages edgwarepages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
eolicplantseolicplantsVerified publisher0.1.02 of 7See more

eolicplants eolicplants 0.1.0

2 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
oscarsotosanchez/planner:v1.0730c00a099b8
spring-beans@5.3.1
5.3.18
oscarsotosanchez/toposervice:v1.0d4d020e9f272
spring-beans@5.3.1
spring-boot-starter-webflux@2.4.0
spring-webflux@5.3.1
5.3.18
2.5.12
5.3.18

Open the chart page →

27,291
eoloPlanteolo-plannerVerified publisher0.1.01 of 7See more

eoloPlant eolo-planner 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
spring-beans@5.3.13
5.3.18

Open the chart page →

27,537
eoloplannereoloplannerVerified publisher0.1.01 of 7See more

eoloplanner eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
spring-beans@5.3.13
5.3.18

Open the chart page →

32,205
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.01 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
spring-beans@5.3.13
5.3.18

Open the chart page →

27,537
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.02 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

2 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
franrobles8/planner:v3.099985392d63c
spring-beans@5.3.1
5.3.18
oscarsotosanchez/toposervice:v1.0d4d020e9f272
spring-beans@5.3.1
spring-boot-starter-webflux@2.4.0
spring-webflux@5.3.1
5.3.18
2.5.12
5.3.18

Open the chart page →

27,256
eoloplannereoloplanner-molynx-gat0.1.01 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
molynx/planner:v1441c9f52f092
spring-beans@5.3.13
5.3.18

Open the chart page →

28,482
eolo-plannereolo-planner-repo0.1.01 of 7See more

eolo-planner eolo-planner-repo 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
arturisimo/planner:v1.0fff9de644941
spring-beans@5.3.13
5.3.18

Open the chart page →

27,096
eoloplanteoloplant1.0.01 of 7See more

eoloplant eoloplant 1.0.0

1 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
spring-beans@5.3.13
5.3.18

Open the chart page →

27,537
eoloplantseoloplants-urjcVerified publisher0.1.01 of 7See more

eoloplants eoloplants-urjc 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
lourdesmorente/new-planner:1.0.0608745878cdb
spring-beans@5.3.13
5.3.18

Open the chart page →

27,721
servereoloserverVerified publisher0.1.01 of 7See more

server eoloserver 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
spring-beans@5.3.13
5.3.18

Open the chart page →

32,205
shenyuerdeng2.4.212 of 2See more

shenyu erdeng 2.4.21

2 of the 2 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.4.2e8b7c4ddd069
spring-beans@5.2.2.RELEASE
spring-boot-starter-web@2.2.2.RELEASE
spring-webmvc@5.2.2.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
spring-beans@5.2.2.RELEASE
spring-boot-starter-webflux@2.2.2.RELEASE
spring-webflux@5.2.2.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

12,513
findery-marketfindery-market0.1.01 of 7See more

findery-market findery-market 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
chandanteekinavar/findery-market-order-service:1.00cf52bf5ee9a
spring-beans@5.3.10
spring-webmvc@5.3.10
5.3.18
5.3.18

Open the chart page →

7,691
scorpio-brokerfiware0.3.310 of 10See more

scorpio-broker fiware 0.3.3

10 of the 10 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:RegistrySubscriptionManager_2.1.001e11d800459
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:eureka-server_2.1.03f05a113a4be
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:AtContextServer_2.1.05073ceef2fa0
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:gateway_2.1.062dae3dd0eeb
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:RegistryManager_2.1.0a2cfcf0947fd
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:QueryManager_2.1.0b742a53b2803
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:HistoryManager_2.1.0b7fe27a06ff5
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:config-server_1.1.0c46c1517e523
spring-beans@5.1.10.RELEASE
spring-boot-starter-web@2.1.9.RELEASE
spring-webmvc@5.1.10.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
scorpiobroker/scorpio:SubscriptionManager_2.1.0e08036670d66
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:EntityManager_2.1.0f02e8a429a08
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18

Open the chart page →

55,600
scorpiobrokerfiware0.1.210 of 10See more

scorpiobroker fiware 0.1.2

10 of the 10 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:RegistrySubscriptionManager_2.1.001e11d800459
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:eureka-server_2.1.03f05a113a4be
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:AtContextServer_2.1.05073ceef2fa0
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:gateway_2.1.062dae3dd0eeb
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:RegistryManager_2.1.0a2cfcf0947fd
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:QueryManager_2.1.0b742a53b2803
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:HistoryManager_2.1.0b7fe27a06ff5
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:config-server_1.1.0c46c1517e523
spring-beans@5.1.10.RELEASE
spring-boot-starter-web@2.1.9.RELEASE
spring-webmvc@5.1.10.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
scorpiobroker/scorpio:SubscriptionManager_2.1.0e08036670d66
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
scorpiobroker/scorpio:EntityManager_2.1.0f02e8a429a08
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18

Open the chart page →

55,600
scorpio-broker-aaiofiware0.4.151 of 1See more

scorpio-broker-aaio fiware 0.4.15

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:scorpio-aaio_2.1.0db55012043df
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18

Open the chart page →

5,286
my-chartfleet-web-app0.1.03 of 6See more

my-chart fleet-web-app 0.1.0

3 of the 6 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
richardchesterwood/k8s-fleetman-api-gateway:release2518f946b9f05
spring-beans@4.3.7.RELEASE
spring-boot-starter-web@1.5.2.RELEASE
spring-webmvc@4.3.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
richardchesterwood/k8s-fleetman-position-simulator:release20b540a28f5a6
spring-beans@4.3.2.RELEASE
5.2.20.RELEASE
richardchesterwood/k8s-fleetman-position-tracker:release336c43961214c
spring-beans@4.3.2.RELEASE
spring-boot-starter-web@1.4.0.RELEASE
spring-webmvc@4.3.2.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

24,296
pagesgary-pages1.0.01 of 3See more

pages gary-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
spring-beans@5.3.8
spring-boot-starter-web@2.5.1
spring-webmvc@5.3.8
5.3.18
2.5.12
5.3.18

Open the chart page →

18,230
booksonic-airgeek-cookbookVerified publisher6.4.21 of 1See more

booksonic-air geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
spring-beans@5.2.6.RELEASE
spring-boot-starter-web@2.2.7.RELEASE
spring-webmvc@5.2.6.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

19,215
komgageek-cookbookVerified publisher2.4.21 of 1See more

komga geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
gotson/komga:0.99.49b15ea6bfc30
spring-beans@5.3.7
spring-webmvc@5.3.7
5.3.18
5.3.18

Open the chart page →

12,581
nzbhydra2geek-cookbookVerified publisher10.4.21 of 1See more

nzbhydra2 geek-cookbook 10.4.2

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

17,702
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
spring-beans@3.2.18.RELEASE
spring-webmvc@3.2.18.RELEASE
5.2.20.RELEASE
5.2.20.RELEASE

Open the chart page →

27,949
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.81 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
spring-beans@5.2.12.RELEASE
spring-boot-starter-web@2.3.8.RELEASE
spring-webmvc@5.2.12.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

34,754
hapi-fhirhapi-fhirVerified publisher0.1.01 of 1See more

hapi-fhir hapi-fhir 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
polyakov/hapi-fhir-jpaserver-example:latestdbcef69146b8
spring-beans@4.3.1.RELEASE
spring-webmvc@4.3.1.RELEASE
5.2.20.RELEASE
5.2.20.RELEASE

Open the chart page →

6,362
nacosheidaodageshiwoVerified publisher0.1.51 of 1See more

nacos heidaodageshiwo 0.1.5

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
nacos/nacos-server:v2.1.0dcf04549c6d7
spring-beans@5.1.18.RELEASE
spring-boot-starter-web@2.1.17.RELEASE
spring-webmvc@5.1.18.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

3,978
pageshelm-chart-repos-camden1.0.01 of 3See more

pages helm-chart-repos-camden 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
springboothelmcharts1.0.01 of 1See more

springboot helmcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
kimb88/hello-world-spring-boot:latest0639155241cb
spring-beans@5.0.8.RELEASE
spring-boot-starter-web@2.0.4.RELEASE
spring-webmvc@5.0.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

6,451
pageshelm-repo1.0.01 of 3See more

pages helm-repo 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

20,190
todo-apihelm-repo-sharif0.1.01 of 2See more

todo-api helm-repo-sharif 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
pavanelthepu/todo-api:1.0.2f47658e3b24c
spring-beans@5.3.8
spring-webmvc@5.3.8
5.3.18
5.3.18

Open the chart page →

2,544
eoloplanthttpd-eoloplant0.1.01 of 7See more

eoloplant httpd-eoloplant 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
spring-beans@5.3.13
5.3.18

Open the chart page →

32,205
skywalking-v1huangchengwu-helm-chart0.1.01 of 4See more

skywalking-v1 huangchengwu-helm-chart 0.1.0

1 of the 4 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
apache/skywalking-ui:8.9.180530f0308a5
spring-beans@5.3.7
spring-webflux@5.3.7
5.3.18
5.3.18

Open the chart page →

20,650
ibm-microclimateibm-charts0.1.02 of 8See more

ibm-microclimate ibm-charts 0.1.0

2 of the 8 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
spring-beans@4.3.9.RELEASE
spring-boot-starter-web@1.5.4.RELEASE
spring-webmvc@4.3.9.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
ibmcom/microclimate-theia:lateste17bdccc5030
spring-beans@4.3.9.RELEASE
spring-boot-starter-web@1.5.4.RELEASE
spring-webmvc@4.3.9.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

57,669
ibm-ws-dyn-agent-devibm-charts1.0.01 of 1See more

ibm-ws-dyn-agent-dev ibm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
spring-beans@3.0.7.RELEASE
5.2.20.RELEASE

Open the chart page →

19,295
eoloserverihuertas2021-vmartinp2021-helm0.1.01 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
huertaslopez/i.huertas.2021-v.martinp.2021-planner:2.0.0e2c18bd65472
spring-beans@5.3.13
5.3.18

Open the chart page →

27,721
jenkinsjenkins-x0.10.381 of 2See more

jenkins jenkins-x 0.10.38

1 of the 2 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
jenkinsci/jenkins:2.67a1f33f004659
spring-beans@2.5.6.SEC03
spring-webmvc@2.5.6.SEC03
5.2.20.RELEASE
5.2.20.RELEASE

Open the chart page →

10,682
spring-boot-chartjhidalgo3-githubVerified publisher4.0.01 of 1See more

spring-boot-chart jhidalgo3-github 4.0.0

1 of the 1 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
jhidalgo3/spring-echo-example:lateste08733191ea0
spring-beans@5.3.3
spring-webmvc@5.3.3
5.3.18
5.3.18

Open the chart page →

1,703
kanbanapp-demokanbanapp-demo0.3.01 of 3See more

kanbanapp-demo kanbanapp-demo 0.3.0

1 of the 3 container images this version deploys carry CVE-2022-22965.

Container imageDigestPackageFixed in
sdandey/dandey-apps:kanban-board-kanban-appbef0f599737b
spring-beans@5.1.8.RELEASE
spring-boot-starter-web@2.1.6.RELEASE
spring-webmvc@5.1.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE

Open the chart page →

7,498

Container images carrying it

156 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
dellcloud/pages:monitor6ba7b22caacd
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
79
mastercloudapps/planner:v1.2340a950b311b2
spring-beans@5.3.13
5.3.18
4
oscarsotosanchez/toposervice:v1.0d4d020e9f272
spring-beans@5.3.1
spring-boot-starter-webflux@2.4.0
spring-webflux@5.3.1
5.3.18
2.5.12
5.3.18
4
apache/shenyu-admin:2.4.2e8b7c4ddd069
spring-beans@5.2.2.RELEASE
spring-boot-starter-web@2.2.2.RELEASE
spring-webmvc@5.2.2.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
3
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
spring-beans@5.2.2.RELEASE
spring-boot-starter-webflux@2.2.2.RELEASE
spring-webflux@5.2.2.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
3
codeurjc/planner:v1.0800cf520c245
spring-beans@5.3.13
5.3.18
3
pavanelthepu/todo-api:1.0.2f47658e3b24c
spring-beans@5.3.8
spring-webmvc@5.3.8
5.3.18
5.3.18
3
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
spring-beans@5.2.5.RELEASE
5.2.20.RELEASE
2
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
spring-beans@5.0.6.RELEASE
spring-boot-starter-web@2.0.2.RELEASE
spring-webmvc@5.0.6.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
2
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
spring-beans@5.2.8.RELEASE
spring-boot-starter-webflux@2.3.3.RELEASE
spring-webflux@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
2
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
spring-beans@5.2.8.RELEASE
spring-boot-starter-web@2.3.3.RELEASE
spring-webflux@5.2.8.RELEASE
spring-webmvc@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
5.2.20.RELEASE
2
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
spring-beans@5.2.8.RELEASE
spring-boot-starter-web@2.3.3.RELEASE
spring-webflux@5.2.8.RELEASE
spring-webmvc@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
5.2.20.RELEASE
2
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
spring-beans@5.2.8.RELEASE
spring-boot-starter-web@2.3.3.RELEASE
spring-webflux@5.2.8.RELEASE
spring-webmvc@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
5.2.20.RELEASE
2
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
spring-beans@5.2.8.RELEASE
spring-boot-starter-web@2.3.3.RELEASE
spring-webflux@5.2.8.RELEASE
spring-webmvc@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
5.2.20.RELEASE
2
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
spring-beans@5.2.8.RELEASE
spring-boot-starter-web@2.3.3.RELEASE
spring-webflux@5.2.8.RELEASE
spring-webmvc@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
5.2.20.RELEASE
2
hookiesolutions/webhookie:latest0629694246ba
spring-beans@5.3.15
spring-webflux@5.3.15
5.3.18
5.3.18
2
mbentley/omada-controller:4.3f4e682274bed
spring-beans@5.1.6.RELEASE
spring-webmvc@5.1.6.RELEASE
5.2.20.RELEASE
5.2.20.RELEASE
2
nacos/nacos-server:v2.1.0dcf04549c6d7
spring-beans@5.1.18.RELEASE
spring-boot-starter-web@2.1.17.RELEASE
spring-webmvc@5.1.18.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
2
opensearchproject/opensearch:1.1.0967d7f57f72f
spring-beans@5.2.5.RELEASE
5.2.20.RELEASE
2
scorpiobroker/scorpio:RegistrySubscriptionManager_2.1.001e11d800459
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
2
scorpiobroker/scorpio:eureka-server_2.1.03f05a113a4be
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
2
scorpiobroker/scorpio:AtContextServer_2.1.05073ceef2fa0
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
2
scorpiobroker/scorpio:gateway_2.1.062dae3dd0eeb
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
2
scorpiobroker/scorpio:RegistryManager_2.1.0a2cfcf0947fd
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
2
scorpiobroker/scorpio:QueryManager_2.1.0b742a53b2803
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
2
scorpiobroker/scorpio:HistoryManager_2.1.0b7fe27a06ff5
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
2
scorpiobroker/scorpio:config-server_1.1.0c46c1517e523
spring-beans@5.1.10.RELEASE
spring-boot-starter-web@2.1.9.RELEASE
spring-webmvc@5.1.10.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
2
scorpiobroker/scorpio:SubscriptionManager_2.1.0e08036670d66
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
2
scorpiobroker/scorpio:EntityManager_2.1.0f02e8a429a08
spring-beans@5.3.13
spring-webflux@5.3.13
spring-webmvc@5.3.13
5.3.18
5.3.18
5.3.18
2
adagber/planner:v1.0e5c1ed097752
spring-beans@5.3.13
5.3.18
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
spring-beans@5.3.8
spring-boot-starter-web@2.5.1
spring-webmvc@5.3.8
5.3.18
2.5.12
5.3.18
1
amartinm82/planner:v2.01184353ff57b
spring-beans@5.3.1
5.3.18
1
andrianrf/bpjstk-service:latest46abe878d9d8
spring-beans@5.2.9.RELEASE
spring-boot-starter-web@2.3.4.RELEASE
spring-webmvc@5.2.9.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
andrianrf/bpjstk-simulator:latestb63fdb51d39d
spring-beans@5.2.9.RELEASE
spring-boot-starter-web@2.3.4.RELEASE
spring-webmvc@5.2.9.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
andrianrf/iso-client:latestba560086ce15
spring-beans@5.2.9.RELEASE
spring-boot-starter-web@2.3.4.RELEASE
spring-webmvc@5.2.9.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
andrianrf/iso-server:latest7da47f525c7d
spring-beans@5.2.7.RELEASE
spring-boot-starter-web@2.3.1.RELEASE
spring-webmvc@5.2.7.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
apacheignite/ignite:2.7.0d7deab68b8fa
spring-beans@4.3.18.RELEASE
5.2.20.RELEASE
1
apache/iotdb:0.11.28647309f95d1
spring-beans@4.3.18.RELEASE
spring-boot-starter-web@1.5.15.RELEASE
spring-webmvc@4.3.18.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
apache/nifi-registry:1.14.0090b7f87ec7f
spring-beans@5.3.5
spring-boot-starter-web@2.5.1
spring-webmvc@5.3.8
5.3.18
2.5.12
5.3.18
1
apache/nifi-registry:0.8.0974efa2f21da
spring-beans@5.2.5.RELEASE
spring-boot-starter-web@2.2.6.RELEASE
spring-webmvc@5.2.5.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
apacherocketmq/rocketmq-dashboard:1.0.024799aff6cf8
spring-beans@5.2.1.RELEASE
spring-boot-starter-web@2.2.2.RELEASE
spring-webmvc@5.2.2.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
apache/skywalking-ui:8.1.067d50e4deff4
spring-beans@4.3.15.RELEASE
spring-boot-starter-web@1.5.11.RELEASE
spring-webmvc@4.3.15.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
apache/skywalking-ui:8.9.180530f0308a5
spring-beans@5.3.7
spring-webflux@5.3.7
5.3.18
5.3.18
1
arturisimo/planner:v1.0fff9de644941
spring-beans@5.3.13
5.3.18
1
arturisimo/webapp-db-java:v2c95524e90b57
spring-beans@5.3.15
spring-webmvc@5.3.15
5.3.18
5.3.18
1
assistiot/cybersecurity-monitoring_id-elk:latestba1d85ec3739
spring-beans@5.2.5.RELEASE
5.2.20.RELEASE
1
atlassian/confluence-server:7.10.03b9222ab32ef
spring-beans@5.1.18.RELEASE
spring-webmvc@5.1.18.RELEASE
5.2.20.RELEASE
5.2.20.RELEASE
1
atlassian/jira-software:8.14.037bc46cbec1a
spring-beans@5.0.10.RELEASE
5.2.20.RELEASE
1
audig/clamapi:2.1.62c3fe34ee430
spring-beans@5.2.8.RELEASE
spring-boot-starter-web@2.3.2.RELEASE
spring-webmvc@5.2.8.RELEASE
5.2.20.RELEASE
2.5.12
5.2.20.RELEASE
1
beastob/url-shortener:1.0.299a49885ab33
spring-beans@5.3.10
spring-webmvc@5.3.10
5.3.18
5.3.18
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.