CVE-2022-22976
MediumAdvisory
Published 20 May 2022In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.3
- base score, highest
- EPSS
- 0.023
- 83rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 41
- of 17,781 indexed, latest versions
- Container images
- 61
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Integer overflow in BCrypt class in Spring Security
Carried by container images the latest versions of 41 of 17,781 indexed charts deploy, on 61 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| spring-security-coremaven | 5.2.1-plain, 5.2.1.RELEASE, 5.2.2.RELEASE, 5.2.4.RELEASE+12 more | 5.5.7, 5.6.4 | 61 |
- OSV records
- GHSA-wx54-3278-m5g4
Charts affected
41 by stars
Container images carrying it
61 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| apache/ | 0bd3b25c4be4 | spring-security-core | 5.5.7 | 3 |
| geoservercloud/ | 99540eef78ad | spring-security-core | 5.5.7 | 2 |
| geoservercloud/ | 5c254c53a357 | spring-security-core | 5.5.7 | 2 |
| geoservercloud/ | c687b1cbc891 | spring-security-core | 5.5.7 | 2 |
| geoservercloud/ | 5288f320cf36 | spring-security-core | 5.5.7 | 2 |
| geoservercloud/ | a30a60ac6cd0 | spring-security-core | 5.5.7 | 2 |
| hookiesolutions/ | 0629694246ba | spring-security-core | 5.6.4 | 2 |
| scorpiobroker/ | 01e11d800459 | spring-security-core | 5.6.4 | 2 |
| scorpiobroker/ | 3f05a113a4be | spring-security-core | 5.6.4 | 2 |
| scorpiobroker/ | 5073ceef2fa0 | spring-security-core | 5.6.4 | 2 |
| scorpiobroker/ | 62dae3dd0eeb | spring-security-core | 5.6.4 | 2 |
| scorpiobroker/ | a2cfcf0947fd | spring-security-core | 5.6.4 | 2 |
| scorpiobroker/ | b742a53b2803 | spring-security-core | 5.6.4 | 2 |
| scorpiobroker/ | b7fe27a06ff5 | spring-security-core | 5.6.4 | 2 |
| scorpiobroker/ | e08036670d66 | spring-security-core | 5.6.4 | 2 |
| scorpiobroker/ | f02e8a429a08 | spring-security-core | 5.6.4 | 2 |
| airsonicadvanced/ | f7cbafac2806 | spring-security-core | 5.5.7 | 1 |
| andrianrf/ | 46abe878d9d8 | spring-security-core | 5.5.7 | 1 |
| andrianrf/ | ba560086ce15 | spring-security-core | 5.5.7 | 1 |
| apache/ | 090b7f87ec7f | spring-security-core | 5.5.7 | 1 |
| apache/ | 974efa2f21da | spring-security-core | 5.5.7 | 1 |
| atlassian/ | 37bc46cbec1a | spring-security-core | 5.5.7 | 1 |
| atlassian/ | 64a75aa4ec4e | spring-security-core | 5.5.7 | 1 |
| binhex/ | fb8952921ab6 | spring-security-core | 5.5.7 | 1 |
| drpcorg/ | 8858fae1859d | spring-security-core | 5.5.7 | 1 |
| elastictranscoder/ | 963ab3858c6b | spring-security-core | 5.5.7 | 1 |
| elastictranscoder/ | 26208b8c2359 | spring-security-core | 5.5.7 | 1 |
| elastictranscoder/ | 5b75d19e2733 | spring-security-core | 5.5.7 | 1 |
| emeraldpay/ | 126f0ae0b388 | spring-security-core | 5.5.7 | 1 |
| emeraldpay/ | ac2a4bc66ab6 | spring-security-core | 5.5.7 | 1 |
| fimperato/ | 604012b77841 | spring-security-core | 5.5.7 | 1 |
| geonetwork/ | 20c9bb761f67 | spring-security-core | 5.5.7 | 1 |
| geoservercloud/ | 5dc0c93a1710 | spring-security-core | 5.5.7 | 1 |
| geoservercloud/ | 47ae1bdb4bcc | spring-security-core | 5.5.7 | 1 |
| geoservercloud/ | 28c3e5a8c5a3 | spring-security-core | 5.5.7 | 1 |
| geoservercloud/ | 8c70ee06d5ab | spring-security-core | 5.5.7 | 1 |
| geoservercloud/ | 42775ba6a4da | spring-security-core | 5.5.7 | 1 |
| gotson/ | 9b15ea6bfc30 | spring-security-core | 5.5.7 | 1 |
| gurolakman/ | 9abb3882bcbd | spring-security-core | 5.6.4 | 1 |
| gurolakman/ | ce23b20a8a17 | spring-security-core | 5.6.4 | 1 |
| gurolakman/ | b22e746edd5d | spring-security-core | 5.6.4 | 1 |
| gurolakman/ | bf18525c5ad9 | spring-security-core | 5.6.4 | 1 |
| housewrecker/ | f417dd0a7547 | spring-security-core | 5.6.4 | 1 |
| krontechnology/ | 7feef7d2ab42 | spring-security-core | 5.5.7 | 1 |
| lavandadelpatio/ | 94e225a5a6f8 | spring-security-core | 5.5.7 | 1 |
| lavandadelpatio/ | 92de3c3426d2 | spring-security-core | 5.5.7 | 1 |
| lavandadelpatio/ | 71f2ccec8c0d | spring-security-core | 5.5.7 | 1 |
| platform9community/ | 40a4970de568 | spring-security-core | 5.5.7 | 1 |
| platform9community/ | 2089811e5cc6 | spring-security-core | 5.5.7 | 1 |
| platform9community/ | d1165c94dfb3 | spring-security-core | 5.5.7 | 1 |