StackRadarChart IndexLive demo

CVE-2022-23648

High

Advisory

Published 2 Mar 2022In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.274; 98th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 127; of 17,781 indexed, latest versions
Container images: 117; deployed by those charts
Fix available: 1 of 1; affected package

containerd CRI plugin: Insecure handling of image volumes

Carried by container images the latest versions of 127 of 17,781 indexed charts deploy, on 117 images.

Affected package	Affected versions	Fixed in	Images
github.com/containerd/containerdgolang	v1.3.0, v1.3.2, v1.3.3, v1.3.4+15 more	1.4.13, 1.5.10, 1.6.1	117

OSV records: GHSA-crp2-qrr5-8pq7
Also known as: GO-2022-0344

Charts affected

127 by stars

Chart

Latest

Affected images

Radar Score

panproto-application-nldesign

1 of 5 See more

pan proto-application-nldesign 0.1.0

1 of the 5 container images this version deploys carry CVE-2022-23648.

Container image	Digest	Package	Fixed in
conduction/pan-php :dev	24f03c57568f	github.com/containerd/containerd@v1.3.2	1.4.13

Open the chart page →

8,725

proto-component-commongroundproto-component-commonground

1 of 3 See more

proto-component-commonground proto-component-commonground 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-23648.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/proto-component-commonground-php :latest	eb36ead1954e	github.com/containerd/containerd@v1.3.2	1.4.13

Open the chart page →

7,510

loki-stackpyalive-cdmswebapp

1 of 4 See more

loki-stack pyalive-cdmswebapp 2.6.5

1 of the 4 container images this version deploys carry CVE-2022-23648.

Container image	Digest	Package	Fixed in
grafana/promtail :2.4.2	626900031c4e	github.com/containerd/containerd@v1.5.4	1.5.10

Open the chart page →

6,525

ansible-automation-platformredhat-cop

1 of 1 See more

ansible-automation-platform redhat-cop 0.0.9

1 of the 1 container images this version deploys carry CVE-2022-23648.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	github.com/containerd/containerd@v1.3.2	1.4.13

Open the chart page →

15,291

argocd-operatorredhat-cop

1 of 1 See more

argocd-operator redhat-cop 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-23648.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	github.com/containerd/containerd@v1.3.2	1.4.13

Open the chart page →

15,291

ploigosredhat-cop

1 of 2 See more

ploigos redhat-cop 0.0.9

1 of the 2 container images this version deploys carry CVE-2022-23648.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.6	6722d5041b47	github.com/containerd/containerd@v1.3.3	1.4.13

Open the chart page →

11,437

stackrox-chartredhat-cop

1 of 1 See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2022-23648.

Container image	Digest	Package	Fixed in
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	github.com/containerd/containerd@v1.4.3	1.4.13

Open the chart page →

29,227

review-componentreview-component

1 of 3 See more

review-component review-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-23648.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/review-component-php :latest	afe623824b82	github.com/containerd/containerd@v1.3.2	1.4.13

Open the chart page →

7,491

gitlab-operatorrock8s

1 of 2 See more

gitlab-operator rock8s 0.7.0

1 of the 2 container images this version deploys carry CVE-2022-23648.

Container image	Digest	Package	Fixed in
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator :0.5.1	36b19b72120e	github.com/containerd/containerd@v1.5.7	1.5.10

Open the chart page →

5,422

argocdromholdings

1 of 3 See more

argocd romholdings 1.8.1

1 of the 3 container images this version deploys carry CVE-2022-23648.

Container image	Digest	Package	Fixed in
argoproj/argocd :v1.8.1	830e86cacefd	github.com/containerd/containerd@v1.3.4	1.4.13

Open the chart page →

10,466

ed-traefik2scaleway-charts

1 of 1 See more

ed-traefik2 scaleway-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-23648.

Container image	Digest	Package	Fixed in
library/traefik :2.5.6	2f603f8d3abe	github.com/containerd/containerd@v1.5.8	1.5.10

Open the chart page →

3,160

centralbrainsciencemesh

1 of 5 See more

centralbrain sciencemesh 0.0.3

1 of the 5 container images this version deploys carry CVE-2022-23648.

Container image	Digest	Package	Fixed in
quay.io/prometheus/prometheus :v2.22.1	b899dbd1b901	github.com/containerd/containerd@v1.3.4	1.4.13

Open the chart page →

9,754

testing-multitoolsomeblackmagic

1 of 1 See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-23648.

Container image	Digest	Package	Fixed in
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	github.com/containerd/containerd@v1.5.9	1.5.10

Open the chart page →

30,687

allurestakater

1 of 1 See more

allure stakater 1.0.1

1 of the 1 container images this version deploys carry CVE-2022-23648.

Container image	Digest	Package	Fixed in
quay.io/eformat/jenkins-agent-graalvm :latest	a3b9a07648b6	github.com/containerd/containerd@v1.4.3	1.4.13

Open the chart page →

28,165

cost-analyzerstatcan

1 of 9 See more

cost-analyzer statcan 1.82.2

1 of the 9 container images this version deploys carry CVE-2022-23648.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.22.2	f7ffebdd428b	github.com/containerd/containerd@v1.3.4	1.4.13

Open the chart page →

16,506

taalhuizen-servicetaalhuizen-service

1 of 3 See more

taalhuizen-service taalhuizen-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-23648.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/taalhuizen-service-php :latest	04f1b7f0d573	github.com/containerd/containerd@v1.3.2	1.4.13

Open the chart page →

7,480

temporaltemporal

1 of 13 See more

temporal temporal 0.28.9

1 of the 13 container images this version deploys carry CVE-2022-23648.

Container image	Digest	Package	Fixed in
quay.io/prometheus/prometheus :v2.31.1	a8779cfe553e	github.com/containerd/containerd@v1.5.4	1.5.10

Open the chart page →

21,005

monitoringthl-charts

1 of 10 See more

monitoring thl-charts 0.1.1

1 of the 10 container images this version deploys carry CVE-2022-23648.

Container image	Digest	Package	Fixed in
grafana/promtail :2.4.2	626900031c4e	github.com/containerd/containerd@v1.5.4	1.5.10

Open the chart page →

18,908

trouw-servicetrouw-service

1 of 3 See more

trouw-service trouw-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-23648.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/trouw-service-php :latest	f745e2870692	github.com/containerd/containerd@v1.3.2	1.4.13

Open the chart page →

7,510

verhuis-serviceverhuis-service

1 of 3 See more

verhuis-service verhuis-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-23648.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verhuis-service-php :latest	66bbaf95a123	github.com/containerd/containerd@v1.3.2	1.4.13

Open the chart page →

7,510

verzoekconversieserviceverzoekconversieservice

1 of 3 See more

verzoekconversieservice verzoekconversieservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-23648.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoekconversieservice-php :latest	e918014fb8d3	github.com/containerd/containerd@v1.3.2	1.4.13

Open the chart page →

7,528

verzoekregistratiecomponentverzoekregistratiecomponent

1 of 4 See more

verzoekregistratiecomponent verzoekregistratiecomponent 1.1.0

1 of the 4 container images this version deploys carry CVE-2022-23648.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoekregistratiecomponent-php :latest	c4f6c03af5d3	github.com/containerd/containerd@v1.3.2	1.4.13

Open the chart page →

7,429

verzoektypecatalogusverzoektypecatalogus

1 of 4 See more

verzoektypecatalogus verzoektypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2022-23648.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoektypecatalogus-php :latest	64f5eb7a398b	github.com/containerd/containerd@v1.3.2	1.4.13

Open the chart page →

7,429

wazuhwazuh-helm-eks

1 of 6 See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry CVE-2022-23648.

Container image	Digest	Package	Fixed in
wazuh/wazuh-manager :4.14.4	5a065930682d	github.com/containerd/containerd@v1.3.3	1.4.13

Open the chart page →

5,484

wazuh-manager-filebeatwazuh-manager-filebeat

1 of 1 See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2022-23648.

Container image	Digest	Package	Fixed in
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	github.com/containerd/containerd@v1.3.3	1.4.13

Open the chart page →

11,119

webresourcecataloguswebresourcecatalogus

1 of 4 See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2022-23648.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/webresourcecatalogus-php :latest	8f1bbd5cda85	github.com/containerd/containerd@v1.3.2	1.4.13

Open the chart page →

7,552

traefikwenerme

1 of 1 See more

traefik wenerme 9.1.1

1 of the 1 container images this version deploys carry CVE-2022-23648.

Container image	Digest	Package	Fixed in
library/traefik :2.2.8	f5af5a5ce17f	github.com/containerd/containerd@v1.3.2	1.4.13

Open the chart page →

3,369

Container images carrying it

117 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/conductionnl/waardepapieren-php :latest	b2666ffcbad8	github.com/containerd/containerd@v1.3.2	1.4.13	1
ghcr.io/conductionnl/waardepapieren-register-php :latest	9affab218351	github.com/containerd/containerd@v1.3.2	1.4.13	1
ghcr.io/conductionnl/webresourcecatalogus-php :latest	8f1bbd5cda85	github.com/containerd/containerd@v1.3.2	1.4.13	1
ghcr.io/substra/fabric-peer :0.2.4	f681e0343a31	github.com/containerd/containerd@v1.4.1	1.4.13	1
ghcr.io/substra/fabric-tools :0.2.4	3491a0f31c4a	github.com/containerd/containerd@v1.4.1	1.4.13	1
quay.io/argoproj/argocd :v2.4.11	5b6701d8fb31	github.com/containerd/containerd@v1.5.9	1.5.10	1
quay.io/cloudnativetoolkit/cli-tools :v1.1-v1.8.2	d6fd2a9e3273	github.com/containerd/containerd@v1.5.1	1.5.10	1
quay.io/cloudnativetoolkit/cloud-pak-deployer :latest	13aaae779248	github.com/containerd/containerd@v1.5.1	1.5.10	1
quay.io/eformat/jenkins-agent-graalvm :latest	a3b9a07648b6	github.com/containerd/containerd@v1.4.3	1.4.13	1
quay.io/ibmgaragecloud/cli-tools :v0.15	9663f06adcb1	github.com/containerd/containerd@v1.3.2	1.4.13	1
quay.io/kube-ops/promtail :2.2.1	34de6387233b	github.com/containerd/containerd@v1.4.1	1.4.13	1
quay.io/mittwald/brudi-operator :v0.2.3	edb322094359	github.com/containerd/containerd@v1.4.11	1.4.13	1
quay.io/openshift/origin-cli :4.6	6722d5041b47	github.com/containerd/containerd@v1.3.3	1.4.13	1
quay.io/openshift/origin-console :4.10.0	0bbe8b451fa3	github.com/containerd/containerd@v1.5.7	1.5.10	1
quay.io/redhat-appstudio/appstudio-utils :dbbdd82734232e6289e8fbae5b4c858481a7c057	7b4202c25b67	github.com/containerd/containerd@v1.5.1	1.5.10	1
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	github.com/containerd/containerd@v1.4.3	1.4.13	1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator :0.5.1	36b19b72120e	github.com/containerd/containerd@v1.5.7	1.5.10	1