StackRadar

CVE-2022-23648

High

Advisory

Published 2 Mar 2022In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.274
98th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
127
of 17,781 indexed, latest versions
Container images
117
deployed by those charts
Fix available
1 of 1
affected package

containerd CRI plugin: Insecure handling of image volumes

Carried by container images the latest versions of 127 of 17,781 indexed charts deploy, on 117 images.

Affected packageAffected versionsFixed inImages
github.com/containerd/containerdgolangv1.3.0, v1.3.2, v1.3.3, v1.3.4+15 more1.4.13, 1.5.10, 1.6.1117
OSV records
GHSA-crp2-qrr5-8pq7
Also known as
GO-2022-0344

Charts affected

127 by stars
ChartLatestAffected imagesRadar Score
ambassador-operatordatawire0.3.01 of 1See more

ambassador-operator datawire 0.3.0

1 of the 1 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
datawire/ambassador-operator:v1.3.0f95ae710d75c
github.com/containerd/containerd@v1.3.0
1.4.13

Open the chart page →

7,486
argocddevtron1.8.11 of 3See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/containerd/containerd@v1.3.4
1.4.13

Open the chart page →

10,466
argocddevtron-labs1.8.11 of 3See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/containerd/containerd@v1.3.4
1.4.13

Open the chart page →

10,466
docparserdocparser0.1.01 of 4See more

docparser docparser 0.1.0

1 of the 4 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
conduction/docparser-php:devb6f95c8ead7d
github.com/containerd/containerd@v1.3.2
1.4.13

Open the chart page →

8,408
furan2dollarshaveclubVerified publisher0.2.01 of 1See more

furan2 dollarshaveclub 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
dollarshaveclub/furan2:master14a257836529
github.com/containerd/containerd@v1.4.8
1.4.13

Open the chart page →

3,046
drogue-cloud-metricsdrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-metrics drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.26.038d40a760569
github.com/containerd/containerd@v1.4.3
1.4.13

Open the chart page →

13,558
temporaldtrdnk-helm-chartsVerified publisher0.35.01 of 13See more

temporal dtrdnk-helm-charts 0.35.0

1 of the 13 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
github.com/containerd/containerd@v1.5.4
1.5.10

Open the chart page →

20,205
eav-componenteav-component1.0.01 of 3See more

eav-component eav-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eav-component-php:latest24bbca4a52a8
github.com/containerd/containerd@v1.3.2
1.4.13

Open the chart page →

7,255
education-componenteducation-component1.0.01 of 3See more

education-component education-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/education-component-php:latestda6b05a1a601
github.com/containerd/containerd@v1.3.2
1.4.13

Open the chart page →

7,327
eherkenning-uieherkenning-ui1.0.01 of 3See more

eherkenning-ui eherkenning-ui 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eherkenning-ui-php:latestdeed102b4255
github.com/containerd/containerd@v1.3.2
1.4.13

Open the chart page →

7,510
faasnetfaasnet0.0.41 of 5See more

faasnet faasnet 0.0.4

1 of the 5 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
simpleidserver/faasprometheus:0.0.425e378d57d78
github.com/containerd/containerd@v1.5.4
1.5.10

Open the chart page →

7,617
activityrelayfedihost0.1.41 of 2See more

activityrelay fedihost 0.1.4

1 of the 2 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
github.com/containerd/containerd@v1.5.9
1.5.10

Open the chart page →

13,450
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
github.com/containerd/containerd@v1.3.0
1.4.13

Open the chart page →

14,673
grafregistratiecomponentgrafregistratiecomponent1.0.01 of 3See more

grafregistratiecomponent grafregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/grafregistratiecomponent-php:latest35225eaa87ab
github.com/containerd/containerd@v1.3.2
1.4.13

Open the chart page →

7,510
siembolgresearch0.1.61 of 4See more

siembol gresearch 0.1.6

1 of the 4 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
alpine/k8s:1.18.16a41efe02a041
github.com/containerd/containerd@v1.4.4
1.4.13

Open the chart page →

14,312
instemmingserviceinstemmingservice1.0.01 of 3See more

instemmingservice instemmingservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/instemmingservice-php:latest4ffe222b3e3a
github.com/containerd/containerd@v1.3.2
1.4.13

Open the chart page →

7,510
missing-container-metricsjimdo-missing-container-metrics0.5.01 of 1See more

missing-container-metrics jimdo-missing-container-metrics 0.5.0

1 of the 1 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
dmilhdef/missing-container-metrics:v0.21.0fada1a6e7638
github.com/containerd/containerd@v1.4.4
1.4.13

Open the chart page →

2,409
librephotosk8sonlabVerified publisher1.1.61 of 7See more

librephotos k8sonlab 1.1.6

1 of the 7 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
alpine/k8s:1.22.600ac10bcb759
github.com/containerd/containerd@v1.5.9
1.5.10

Open the chart page →

14,801
kiaekiae0.1.61 of 9See more

kiae kiae 0.1.6

1 of the 9 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
grafana/promtail:2.6.1072527b12cdf
github.com/containerd/containerd@v1.5.9
1.5.10

Open the chart page →

19,168
cadvisorkrakazyabraVerified publisher1.0.11 of 1See more

cadvisor krakazyabra 1.0.1

1 of the 1 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
gcr.io/cadvisor/cadvisor:v0.40.0135327c978de
github.com/containerd/containerd@v1.5.2
1.5.10

Open the chart page →

3,176
apm-serverkube-opsVerified publisher0.1.21 of 1See more

apm-server kube-ops 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
elastic/apm-server:7.17.6c7a1c63257d0
github.com/containerd/containerd@v1.5.6
1.5.10

Open the chart page →

7,157
promtailkube-opsVerified publisher1.5.11 of 2See more

promtail kube-ops 1.5.1

1 of the 2 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
quay.io/kube-ops/promtail:2.2.134de6387233b
github.com/containerd/containerd@v1.4.1
1.4.13

Open the chart page →

4,149
brudi-operatorkubernetes-replicator0.2.31 of 1See more

brudi-operator kubernetes-replicator 0.2.3

1 of the 1 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
quay.io/mittwald/brudi-operator:v0.2.3edb322094359
github.com/containerd/containerd@v1.4.11
1.4.13

Open the chart page →

3,622
harborkubesphereVerified publisher1.9.32 of 11See more

harbor kubesphere 1.9.3

2 of the 11 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
goharbor/chartmuseum-photon:v2.5.36ab3ca28e9e5
github.com/containerd/containerd@v1.5.9
1.5.10
goharbor/trivy-adapter-photon:v2.5.3b9522c3f5056
github.com/containerd/containerd@v1.6.1-0.20220606171923-c1bcabb45419
1.6.1

Open the chart page →

17,798
cranekubesphere-stable0.5.21 of 3See more

crane kubesphere-stable 0.5.2

1 of the 3 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
gocrane/craned:v0.5.1a1400909118c
github.com/containerd/containerd@v1.4.4
1.4.13

Open the chart page →

8,883
kvkkvkservice0.1.01 of 4See more

kvk kvkservice 0.1.0

1 of the 4 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
conduction/kvk-php:dev8f177f9f8a7b
github.com/containerd/containerd@v1.3.2
1.4.13

Open the chart page →

8,534
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
kubeoperator/webkubectl:v2.4.0be8f0d624640
github.com/containerd/containerd@v1.3.2
1.4.13

Open the chart page →

26,356
ocatiecataloguslocatiecatalogus1.0.01 of 3See more

ocatiecatalogus locatiecatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/ocatiecatalogus-php:latestc22764cbfa97
github.com/containerd/containerd@v1.3.2
1.4.13

Open the chart page →

7,510
devspace-cloudloftVerified publisher0.3.31 of 8See more

devspace-cloud loft 0.3.3

1 of the 8 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
devspacecloud/manager:0.3.349c397413f7b
github.com/containerd/containerd@v1.3.2
1.4.13

Open the chart page →

9,880
kioskloftVerified publisher0.2.111 of 1See more

kiosk loft 0.2.11

1 of the 1 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
kiosksh/kiosk:0.2.11501725ba2025
github.com/containerd/containerd@v1.4.3
1.4.13

Open the chart page →

3,086
loggingcomponentloggingcomponent1.0.01 of 3See more

loggingcomponent loggingcomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/loggingcomponent-php:latest834b8e1af290
github.com/containerd/containerd@v1.3.2
1.4.13

Open the chart page →

7,492
logicservicelogicservice1.0.01 of 4See more

logicservice logicservice 1.0.0

1 of the 4 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/logicservice-php:latest72aae2080595
github.com/containerd/containerd@v1.3.2
1.4.13

Open the chart page →

7,499
mattermost-calls-offloadermattermostVerified publisher0.2.11 of 1See more

mattermost-calls-offloader mattermost 0.2.1

1 of the 1 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
mattermost/calls-offloader:v0.9.0b440b282599e
github.com/containerd/containerd@v1.5.7
1.5.10

Open the chart page →

1,414
medewerkercatalogusmedewerkercatalogus1.0.01 of 3See more

medewerkercatalogus medewerkercatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/medewerkercatalogus-php:latest1ea5412bed26
github.com/containerd/containerd@v1.3.2
1.4.13

Open the chart page →

7,327
memo-componentmemo-component1.0.01 of 3See more

memo-component memo-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/memo-component-php:latestef77f4c089a1
github.com/containerd/containerd@v1.3.2
1.4.13

Open the chart page →

7,510
traefik2mesosphere9.18.01 of 1See more

traefik2 mesosphere 9.18.0

1 of the 1 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
library/traefik:2.4.8eda951fd29a8
github.com/containerd/containerd@v1.3.2
1.4.13

Open the chart page →

3,341
kommandermesosphere-stable0.39.22 of 29See more

kommander mesosphere-stable 0.39.2

2 of the 29 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
mesosphere/kommander-federation-utility-apiserver:v0.21.2f9b769c65e24
github.com/containerd/containerd@v1.4.1-0.20210113014526-124fc14a469e
1.4.13
thanosio/thanos:v0.15.0b12d5c31bf5a
github.com/containerd/containerd@v1.3.4
1.4.13

Open the chart page →

68,284
notification-componentnotification-component1.0.01 of 4See more

notification-component notification-component 1.0.0

1 of the 4 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/notification-component-php:latestcd9656e6bc2c
github.com/containerd/containerd@v1.3.2
1.4.13

Open the chart page →

7,527
one-green-coreone-green-coreVerified publisher0.0.71 of 8See more

one-green-core one-green-core 0.0.7

1 of the 8 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
library/telegraf:1.20.428e98eece020
github.com/containerd/containerd@v1.5.7
1.5.10

Open the chart page →

9,558
anchore-engineopencloudcx1.13.01 of 2See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.10.0bde9eedf639d
github.com/containerd/containerd@v1.3.4
1.4.13

Open the chart page →

18,023
voltha-infraopencord2.14.01 of 10See more

voltha-infra opencord 2.14.0

1 of the 10 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
opencord/onos-classic-helm-utils:0.1.00d693ba85fd6
github.com/containerd/containerd@v1.4.4
1.4.13

Open the chart page →

41,044
opscruiseopenshift0.35.1001 of 11See more

opscruise openshift 0.35.100

1 of the 11 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
grafana/promtail:2.0.05fd12edcc694
github.com/containerd/containerd@v1.3.4
1.4.13

Open the chart page →

8,201
redhat-trusted-application-pipelineopenshift1.0.21 of 2See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/containerd/containerd@v1.5.1
1.5.10

Open the chart page →

8,599
orderregistratiecomponentorderregistratiecomponent1.0.01 of 3See more

orderregistratiecomponent orderregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/orderregistratiecomponent-php:latestd17257e4fa27
github.com/containerd/containerd@v1.3.2
1.4.13

Open the chart page →

7,492
pet-battle-infrapetbattle1.0.321 of 2See more

pet-battle-infra petbattle 1.0.32

1 of the 2 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.8bb5e052770e5
github.com/containerd/containerd@v1.4.3
1.4.13

Open the chart page →

15,466
pet-battle-tournamentpetbattle1.0.401 of 3See more

pet-battle-tournament petbattle 1.0.40

1 of the 3 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.8bb5e052770e5
github.com/containerd/containerd@v1.4.3
1.4.13

Open the chart page →

15,466
loki-stackphntom2.10.21 of 2See more

loki-stack phntom 2.10.2

1 of the 2 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
grafana/promtail:2.4.2626900031c4e
github.com/containerd/containerd@v1.5.4
1.5.10

Open the chart page →

5,708
gitlab-runner-operatorpnnl-miscscripts0.1.61 of 1See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
github.com/containerd/containerd@v1.3.2
1.4.13

Open the chart page →

11,151
procestypecatalogusprocestypecatalogus1.1.01 of 4See more

procestypecatalogus procestypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/procestypecatalogus-php:latest956c4fb64796
github.com/containerd/containerd@v1.3.2
1.4.13

Open the chart page →

7,429
productenendienstencatalogusproductenendienstencatalogus1.0.01 of 3See more

productenendienstencatalogus productenendienstencatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-23648.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/productenendienstencatalogus-php:latest7242da105081
github.com/containerd/containerd@v1.3.2
1.4.13

Open the chart page →

7,510

Container images carrying it

117 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/conductionnl/waardepapieren-php:latestb2666ffcbad8
github.com/containerd/containerd@v1.3.2
1.4.13
1
ghcr.io/conductionnl/waardepapieren-register-php:latest9affab218351
github.com/containerd/containerd@v1.3.2
1.4.13
1
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
github.com/containerd/containerd@v1.3.2
1.4.13
1
ghcr.io/substra/fabric-peer:0.2.4f681e0343a31
github.com/containerd/containerd@v1.4.1
1.4.13
1
ghcr.io/substra/fabric-tools:0.2.43491a0f31c4a
github.com/containerd/containerd@v1.4.1
1.4.13
1
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
github.com/containerd/containerd@v1.5.9
1.5.10
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
github.com/containerd/containerd@v1.5.1
1.5.10
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/containerd/containerd@v1.5.1
1.5.10
1
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
github.com/containerd/containerd@v1.4.3
1.4.13
1
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
github.com/containerd/containerd@v1.3.2
1.4.13
1
quay.io/kube-ops/promtail:2.2.134de6387233b
github.com/containerd/containerd@v1.4.1
1.4.13
1
quay.io/mittwald/brudi-operator:v0.2.3edb322094359
github.com/containerd/containerd@v1.4.11
1.4.13
1
quay.io/openshift/origin-cli:4.66722d5041b47
github.com/containerd/containerd@v1.3.3
1.4.13
1
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
github.com/containerd/containerd@v1.5.7
1.5.10
1
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/containerd/containerd@v1.5.1
1.5.10
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
github.com/containerd/containerd@v1.4.3
1.4.13
1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
github.com/containerd/containerd@v1.5.7
1.5.10
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.