CVE-2022-22984

Medium

Advisory

Published 30 Nov 2022In the index since 8 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.3; base score, highest
EPSS: 0.031; 87th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4; of 17,781 indexed, latest versions
Container images: 5; deployed by those charts
Fix available: 8 of 8; affected packages

Snyk plugins vulnerable to Command Injection

Carried by container images the latest versions of 4 of 17,781 indexed charts deploy, on 5 images.

Affected package	Affected versions	Fixed in	Images
snyknpm	1.437.3, 1.551.0, 1.697.0, 1.736.0+1 more	1.1064.0	5
snyk-docker-pluginnpm	4.13.1, 4.19.3	5.6.5	2
snyk-gradle-pluginnpm	3.11.0, 3.14.0	3.24.5	2
snyk-mvn-pluginnpm	2.25.0, 2.25.3	2.31.3	2
snyk-python-pluginnpm	1.19.1, 1.19.8	1.24.2	2
snyk-sbt-pluginnpm	2.11.0	2.16.2	2
@snyk/snyk-cocoapods-pluginnpm	2.5.1, 2.5.2	2.5.3	2
@snyk/snyk-hex-pluginnpm	1.1.2	1.1.6	1

OSV records: GHSA-4x6g-3cmx-w76r

Charts affected

4 by stars

Chart

Latest

Affected images

Radar Score

browserless-chromesagikazarmark

0.0.5

1 of 1 See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2022-22984.

Container image	Digest	Package	Fixed in
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	snyk@1.697.0	1.1064.0

Open the chart page →

24,488

Governify-Bluejaygovernify

0.1.0

2 of 12 See more

Governify-Bluejay governify 0.1.0

2 of the 12 container images this version deploys carry CVE-2022-22984.

Container image	Digest	Package	Fixed in
governify/director :v1.4.0	608c6940bb98	snyk@1.736.0	1.1064.0
governify/registry :v3.4.0	d3f37f4f8168	@snyk/snyk-cocoapods-plugin@2.5.1 snyk@1.437.3 snyk-docker-plugin@4.13.1 snyk-gradle-plugin@3.11.0 snyk-mvn-plugin@2.25.0 snyk-python-plugin@1.19.1 snyk-sbt-plugin@2.11.0	2.5.3 1.1064.0 5.6.5 3.24.5 2.31.3 1.24.2 2.16.2

Open the chart page →

22,512

Governify-Falcongovernify

0.1.0

3 of 10 See more

Governify-Falcon governify 0.1.0

3 of the 10 container images this version deploys carry CVE-2022-22984.

Container image	Digest	Package	Fixed in
governify/collector-dynamic :v1.3.0	6d3d1a5b46a9	@snyk/snyk-cocoapods-plugin@2.5.2 @snyk/snyk-hex-plugin@1.1.2 snyk@1.551.0 snyk-docker-plugin@4.19.3 snyk-gradle-plugin@3.14.0 snyk-mvn-plugin@2.25.3 snyk-python-plugin@1.19.8 snyk-sbt-plugin@2.11.0	2.5.3 1.1.6 1.1064.0 5.6.5 3.24.5 2.31.3 1.24.2 2.16.2
governify/director :v1.4.0	608c6940bb98	snyk@1.736.0	1.1064.0
governify/registry :v3.4.0	d3f37f4f8168	@snyk/snyk-cocoapods-plugin@2.5.1 snyk@1.437.3 snyk-docker-plugin@4.13.1 snyk-gradle-plugin@3.11.0 snyk-mvn-plugin@2.25.0 snyk-python-plugin@1.19.1 snyk-sbt-plugin@2.11.0	2.5.3 1.1064.0 5.6.5 3.24.5 2.31.3 1.24.2 2.16.2

Open the chart page →

24,319

ferdi-serverobeone

1.0.3

1 of 2 See more

ferdi-server obeone 1.0.3

1 of the 2 container images this version deploys carry CVE-2022-22984.

Container image	Digest	Package	Fixed in
getferdi/ferdi-server :1.3.2	6e620b85afaa	snyk@1.870.0	1.1064.0

Open the chart page →

1,866

Container images carrying it

5 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container image	Digest	Package	Fixed in	Used by
governify/director :v1.4.0	608c6940bb98	snyk@1.736.0	1.1064.0	2
governify/registry :v3.4.0	d3f37f4f8168	@snyk/snyk-cocoapods-plugin@2.5.1 snyk@1.437.3 snyk-docker-plugin@4.13.1 snyk-gradle-plugin@3.11.0 snyk-mvn-plugin@2.25.0 snyk-python-plugin@1.19.1 snyk-sbt-plugin@2.11.0	2.5.3 1.1064.0 5.6.5 3.24.5 2.31.3 1.24.2 2.16.2	2
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	snyk@1.697.0	1.1064.0	1
getferdi/ferdi-server :1.3.2	6e620b85afaa	snyk@1.870.0	1.1064.0	1
governify/collector-dynamic :v1.3.0	6d3d1a5b46a9	@snyk/snyk-cocoapods-plugin@2.5.2 @snyk/snyk-hex-plugin@1.1.2 snyk@1.551.0 snyk-docker-plugin@4.19.3 snyk-gradle-plugin@3.14.0 snyk-mvn-plugin@2.25.3 snyk-python-plugin@1.19.8 snyk-sbt-plugin@2.11.0	2.5.3 1.1.6 1.1064.0 5.6.5 3.24.5 2.31.3 1.24.2 2.16.2	1