StackRadar

CVE-2022-22971

Medium

Advisory

Published 13 May 2022In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.032
87th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
59
of 17,781 indexed, latest versions
Container images
73
deployed by those charts
Fix available
1 of 1
affected package

Allocation of Resources Without Limits or Throttling in Spring Framework

Carried by container images the latest versions of 59 of 17,781 indexed charts deploy, on 73 images.

Affected packageAffected versionsFixed inImages
spring-messagingmaven4.3.1.RELEASE, 4.3.2.RELEASE, 4.3.6.RELEASE, 4.3.7.RELEASE+21 more5.2.22.RELEASE, 5.3.2073
OSV records
GHSA-rqph-vqwm-22vc

Charts affected

59 by stars
ChartLatestAffected imagesRadar Score
myappp4-helm0.1.01 of 6See more

myapp p4-helm 0.1.0

1 of the 6 container images this version deploys carry CVE-2022-22971.

Container imageDigestPackageFixed in
fjvela/urjc-fjvela-worker:1.0.170cebf67bd66
spring-messaging@5.2.1.RELEASE
5.2.22.RELEASE

Open the chart page →

19,720
Practica_4_helmpr04helm0.1.01 of 7See more

Practica_4_helm pr04helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-22971.

Container imageDigestPackageFixed in
pcarrascoponce/planner:v1.0981fc482442c
spring-messaging@5.3.13
5.3.20

Open the chart page →

27,558
practica-helmpractica-helm0.1.01 of 7See more

practica-helm practica-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-22971.

Container imageDigestPackageFixed in
slagattollas/planner-practica:latestcecd95e31486
spring-messaging@5.3.1
5.3.20

Open the chart page →

28,484
reportportalreportportal5.7.22 of 8See more

reportportal reportportal 5.7.2

2 of the 8 container images this version deploys carry CVE-2022-22971.

Container imageDigestPackageFixed in
reportportal/service-api:5.7.29df41f8fb320
spring-messaging@5.2.4.RELEASE
5.2.22.RELEASE
reportportal/service-jobs:5.7.2dc166c58485a
spring-messaging@5.3.4
5.3.20

Open the chart page →

25,737
shenyushenyu-helm-chart-test2.4.271 of 2See more

shenyu shenyu-helm-chart-test 2.4.27

1 of the 2 container images this version deploys carry CVE-2022-22971.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.4.2e8b7c4ddd069
spring-messaging@5.2.2.RELEASE
5.2.22.RELEASE

Open the chart page →

12,513
streamastreama1.0.11 of 2See more

streama streama 1.0.1

1 of the 2 container images this version deploys carry CVE-2022-22971.

Container imageDigestPackageFixed in
just1not2/streama:1.10.48a2305192dec
spring-messaging@4.3.6.RELEASE
5.2.22.RELEASE

Open the chart page →

8,554
shenyutest-helm2.4.211 of 2See more

shenyu test-helm 2.4.21

1 of the 2 container images this version deploys carry CVE-2022-22971.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.4.2e8b7c4ddd069
spring-messaging@5.2.2.RELEASE
5.2.22.RELEASE

Open the chart page →

12,513
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-22971.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
spring-messaging@5.3.15
5.3.20

Open the chart page →

14,364
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2022-22971.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
spring-messaging@5.3.15
5.3.20

Open the chart page →

28,605

Container images carrying it

73 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
just1not2/streama:1.10.48a2305192dec
spring-messaging@4.3.6.RELEASE
5.2.22.RELEASE
1
ladeit/ladeit:latest962b665ffe82
spring-messaging@5.1.3.RELEASE
5.2.22.RELEASE
1
lavandadelpatio/automated-download-films:0.0.2094e225a5a6f8
spring-messaging@5.2.9.RELEASE
5.2.22.RELEASE
1
lavandadelpatio/automated-download-shows:0.0.492de3c3426d2
spring-messaging@5.2.9.RELEASE
5.2.22.RELEASE
1
lavandadelpatio/filebot:0.0.671f2ccec8c0d
spring-messaging@5.3.5
5.3.20
1
lavandadelpatio/filebot-bot:0.0.1-SNAPSHOTd2cba20aa4d8
spring-messaging@5.3.14
5.3.20
1
lavandadelpatio/tmdb:0.0.2f36af885e915
spring-messaging@5.3.5
5.3.20
1
lourdesmorente/new-planner:1.0.0608745878cdb
spring-messaging@5.3.13
5.3.20
1
molynx/planner:v1441c9f52f092
spring-messaging@5.3.13
5.3.20
1
oscarsotosanchez/planner:v1.0730c00a099b8
spring-messaging@5.3.1
5.3.20
1
pcarrascoponce/planner:v1.0981fc482442c
spring-messaging@5.3.13
5.3.20
1
polyakov/hapi-fhir-jpaserver-example:latestdbcef69146b8
spring-messaging@4.3.1.RELEASE
5.2.22.RELEASE
1
remche/shinyproxy:2.6.18bcda8a04d3b
spring-messaging@5.3.18
5.3.20
1
reportportal/service-api:5.7.29df41f8fb320
spring-messaging@5.2.4.RELEASE
5.2.22.RELEASE
1
reportportal/service-jobs:5.7.2dc166c58485a
spring-messaging@5.3.4
5.3.20
1
richardchesterwood/k8s-fleetman-api-gateway:release2518f946b9f05
spring-messaging@4.3.7.RELEASE
5.2.22.RELEASE
1
richardchesterwood/k8s-fleetman-position-simulator:release20b540a28f5a6
spring-messaging@4.3.2.RELEASE
5.2.22.RELEASE
1
richardchesterwood/k8s-fleetman-position-tracker:release336c43961214c
spring-messaging@4.3.2.RELEASE
5.2.22.RELEASE
1
rm3l/service-names-port-numbers:0.12.162d1cc4223e5
spring-messaging@5.3.13
5.3.20
1
scorpiobroker/scorpio:scorpio-aaio_2.1.0db55012043df
spring-messaging@5.3.13
5.3.20
1
slagattollas/planner-practica:latestcecd95e31486
spring-messaging@5.3.1
5.3.20
1
torrespro/mca-worker:2.0.06d3bd305a1ba
spring-messaging@5.2.1.RELEASE
5.2.22.RELEASE
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
spring-messaging@5.2.7.RELEASE
5.2.22.RELEASE
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.