StackRadarChart IndexLive demo

CVE-2022-23221

Critical

Advisory

Published 21 Jan 2022In the index since 6 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.8; base score, highest
EPSS: 0.648; 99th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 115; of 17,781 indexed, latest versions
Container images: 45; deployed by those charts
Fix available: 1 of 1; affected package

Arbitrary code execution in H2 Console

Carried by container images the latest versions of 115 of 17,781 indexed charts deploy, on 45 images.

Affected package	Affected versions	Fixed in	Images
h2maven	1.4.198, 1.4.199, 1.4.200	2.1.210	45

OSV records: GHSA-45hx-wfhj-473x

Charts affected

115 by stars

Chart

Latest

Affected images

Radar Score

sonatype-nexus3simcube

1 of 2 See more

sonatype-nexus3 simcube 1.0.1

1 of the 2 container images this version deploys carry CVE-2022-23221.

Container image	Digest	Package	Fixed in
sonatype/nexus3 :3.58.1	586060431b64	h2@1.4.200	2.1.210

Open the chart page →

4,946

atlassian-confluencesomeblackmagic

1 of 1 See more

atlassian-confluence someblackmagic 3.4.1

1 of the 1 container images this version deploys carry CVE-2022-23221.

Container image	Digest	Package	Fixed in
atlassian/confluence-server :7.10.0	3b9222ab32ef	h2@1.4.200	2.1.210

Open the chart page →

13,605

smtp-fake-serversomeblackmagic

1 of 1 See more

smtp-fake-server someblackmagic 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-23221.

Container image	Digest	Package	Fixed in
someblackmagic/smtp-fake-server :latest	0d63ba37a560	h2@1.4.200	2.1.210

Open the chart page →

4,278

pagessrinipages

1 of 3 See more

20,190

trinostatcan

1 of 2 See more

13,767

pagesstephendillondell

1 of 3 See more

pages stephendillondell 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-23221.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.1.210

Open the chart page →

20,190

pagessunilb2590-pages

1 of 3 See more

pages sunilb2590-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-23221.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.1.210

Open the chart page →

20,190

pagestest4322

1 of 3 See more

20,190

shenyutest-helm

1 of 2 See more

shenyu test-helm 2.4.21

1 of the 2 container images this version deploys carry CVE-2022-23221.

Container image	Digest	Package	Fixed in
apache/shenyu-admin :2.4.2	e8b7c4ddd069	h2@1.4.200	2.1.210

Open the chart page →

12,513

pagesthiru-pages

1 of 3 See more

pages thiru-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-23221.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.1.210

Open the chart page →

20,190

pagesthuy-pages

1 of 3 See more

20,190

pagesvictor-pages

1 of 3 See more

pages victor-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-23221.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.1.210

Open the chart page →

20,190

pageswalter

1 of 3 See more

20,190

sonarqubewebencryptor

1 of 3 See more

sonarqube webencryptor 6.7.3

1 of the 3 container images this version deploys carry CVE-2022-23221.

Container image	Digest	Package	Fixed in
library/sonarqube :8.2-community	a246bc64207e	h2@1.4.199	2.1.210

Open the chart page →

5,460

is-pattern-1wso2is-pattern1

1 of 2 See more

is-pattern-1 wso2is-pattern1 5.11.0

1 of the 2 container images this version deploys carry CVE-2022-23221.

Container image	Digest	Package	Fixed in
massimolauri/wso2is :5.11.0-centos	e08abf0ce767	h2@1.4.199	2.1.210

Open the chart page →

6,213

Container images carrying it

45 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.1.210	79
apache/shenyu-admin :2.4.2	e8b7c4ddd069	h2@1.4.200	2.1.210	3
geoservercloud/geoserver-cloud-rest :1.0-RC3	99540eef78ad	h2@1.4.200	2.1.210	2
geoservercloud/geoserver-cloud-wcs :1.0-RC3	5c254c53a357	h2@1.4.200	2.1.210	2
geoservercloud/geoserver-cloud-webui :1.0-RC3	c687b1cbc891	h2@1.4.200	2.1.210	2
geoservercloud/geoserver-cloud-wfs :1.0-RC3	5288f320cf36	h2@1.4.200	2.1.210	2
geoservercloud/geoserver-cloud-wms :1.0-RC3	a30a60ac6cd0	h2@1.4.200	2.1.210	2
andrianrf/bpjstk-service :latest	46abe878d9d8	h2@1.4.200	2.1.210	1
andrianrf/iso-client :latest	ba560086ce15	h2@1.4.200	2.1.210	1
apache/nifi-registry :1.14.0	090b7f87ec7f	h2@1.4.199	2.1.210	1
apache/nifi-registry :0.8.0	974efa2f21da	h2@1.4.199	2.1.210	1
apache/shenyu-admin :2.5.1	e2be712fc4f4	h2@1.4.200	2.1.210	1
apicurio/apicurio-studio-api :0.2.62.Final	302d202ed149	h2@1.4.200	2.1.210	1
apicurio/apicurio-studio-ws :0.2.62.Final	27a91978a388	h2@1.4.200	2.1.210	1
atlassian/confluence-server :7.10.0	3b9222ab32ef	h2@1.4.200	2.1.210	1
beastob/url-shortener :1.0.2	99a49885ab33	h2@1.4.200	2.1.210	1
binhex/arch-nzbhydra2 :3.1.0-1-01	fb8952921ab6	h2@1.4.200	2.1.210	1
eikek0/sharry :1.8.0	661ff3ef42cd	h2@1.4.200	2.1.210	1
esperotech/yaade :latest	24d2d692d948	h2@1.4.200	2.1.210	1
geoservercloud/geoserver-cloud-rest :1.0-RC2	5dc0c93a1710	h2@1.4.200	2.1.210	1
geoservercloud/geoserver-cloud-wcs :1.0-RC2	47ae1bdb4bcc	h2@1.4.200	2.1.210	1
geoservercloud/geoserver-cloud-webui :1.0-RC2	28c3e5a8c5a3	h2@1.4.200	2.1.210	1
geoservercloud/geoserver-cloud-wfs :1.0-RC2	8c70ee06d5ab	h2@1.4.200	2.1.210	1
geoservercloud/geoserver-cloud-wms :1.0-RC2	42775ba6a4da	h2@1.4.200	2.1.210	1
gocd/gocd-server :v26.1.0	720d1012b93f	h2@1.4.200	2.1.210	1
library/sonarqube :9.1.0-datacenter-search	7e43ff493a47	h2@1.4.199	2.1.210	1
library/sonarqube :8.9.2-community	88cd63154d4b	h2@1.4.199	2.1.210	1
library/sonarqube :8.2-community	a246bc64207e	h2@1.4.199	2.1.210	1
library/sonarqube :9.1.0-datacenter-app	a9bc5a3a1fc3	h2@1.4.199	2.1.210	1
library/sonarqube :8.9-community	eb2f0be32efd	h2@1.4.199	2.1.210	1
massimolauri/wso2is :5.11.0-centos	e08abf0ce767	h2@1.4.199	2.1.210	1
odavid/my-bloody-jenkins :2.462.3-306	e7ab3bbc948e	h2@1.4.199	2.1.210	1
owasp/dependency-track :3.8.0	efc65e702ee1	h2@1.4.200	2.1.210	1
remche/shinyproxy :2.6.1	8bcda8a04d3b	h2@1.4.200	2.1.210	1
rundeck/rundeck :3.2.7	4d64fe56f767	h2@1.4.199	2.1.210	1
salaboy/fmtok8s-monolith :v0.1.0	f225568e6d03	h2@1.4.200	2.1.210	1
sismics/docs :v1.10	f4b0ef019cf1	h2@1.4.199	2.1.210	1
someblackmagic/smtp-fake-server :latest	0d63ba37a560	h2@1.4.200	2.1.210	1
sonatype/nexus3 :3.58.1	586060431b64	h2@1.4.200	2.1.210	1
trinodb/trino :405	ee80ab5eeab2	h2@1.4.200	2.1.210	1
xeotek/kadeck :4.2.9	4c6b04d9ce55	h2@1.4.198	2.1.210	1
ghcr.io/jenkins-x/nexus :0.1.37	8caf5289fe73	h2@1.4.200	2.1.210	1
ghcr.io/k8s-at-home/nzbhydra2 :v3.14.2	ef3670f7e0a8	h2@1.4.200	2.1.210	1
quay.io/fiware/canis-major :1.5.15	bb40472e4ff5	h2@1.4.200	2.1.210	1
quay.io/fiware/endpoint-configuration-service :0.4.3	0dc38a87b844	h2@1.4.200	2.1.210	1