StackRadar

CVE-2022-24302

Medium

Advisory

Published 17 Mar 2022In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.021
80th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
26
of 17,781 indexed, latest versions
Container images
34
deployed by those charts
Fix available
1 of 2
affected packages

Race Condition in Paramiko

Carried by container images the latest versions of 26 of 17,781 indexed charts deploy, on 34 images.

Affected packageAffected versionsFixed inImages
paramikopypi1.10.1, 2.1.2, 2.4.2, 2.6.0+4 more2.9.334
paramikodeb1.10.1-1git1ubuntu0.1no fix listed2
OSV records
GHSA-f8q4-jwww-x3wvUBUNTU-CVE-2022-24302PYSEC-2022-166

Charts affected

26 by stars
ChartLatestAffected imagesRadar Score
ansible-semaphoreansible-semaphore0.1.01 of 1See more

ansible-semaphore ansible-semaphore 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-24302.

Container imageDigestPackageFixed in
ansiblesemaphore/semaphore:v2.8.5303d1f8684027
paramiko@2.7.2
2.9.3

Open the chart page →

4,019
kubeviouskubevious1.2.21 of 7See more

kubevious kubevious 1.2.2

1 of the 7 container images this version deploys carry CVE-2022-24302.

Container imageDigestPackageFixed in
library/mysql:8.0.303c1aab708f6e
paramiko@2.9.2
2.9.3

Open the chart page →

14,204
datadogdatadog-test2.4.231 of 2See more

datadog datadog-test 2.4.23

1 of the 2 container images this version deploys carry CVE-2022-24302.

Container imageDigestPackageFixed in
datadog/agent:7.22.08f20e56b5311
paramiko@2.6.0
2.9.3

Open the chart page →

4,568
pgadmin4folio-org1.2.301 of 1See more

pgadmin4 folio-org 1.2.30

1 of the 1 container images this version deploys carry CVE-2022-24302.

Container imageDigestPackageFixed in
dpage/pgadmin4:4.22b1f00b8163cf
paramiko@2.7.1
2.9.3

Open the chart page →

2,034
prometheus-pve-exporterstenicVerified publisher0.1.11 of 1See more

prometheus-pve-exporter stenic 0.1.1

1 of the 1 container images this version deploys carry CVE-2022-24302.

Container imageDigestPackageFixed in
prompve/prometheus-pve-exporter:2.0.1ff6749eb03b0
paramiko@2.7.1
2.9.3

Open the chart page →

2,469
couchpotatobryanalves0.3.01 of 1See more

couchpotato bryanalves 0.3.0

1 of the 1 container images this version deploys carry CVE-2022-24302.

Container imageDigestPackageFixed in
linuxserver/couchpotato:75e576ee-ls32c4d2766b9eb7
paramiko@2.7.1
2.9.3

Open the chart page →

2,018
sickchillbryanalves0.3.01 of 1See more

sickchill bryanalves 0.3.0

1 of the 1 container images this version deploys carry CVE-2022-24302.

Container imageDigestPackageFixed in
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
paramiko@2.7.1
2.9.3

Open the chart page →

2,504
ekorrecamptocamp30.1.11 of 1See more

ekorre camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2022-24302.

Container imageDigestPackageFixed in
camptocamp/ekorre:0.1.035c91d5fda04
paramiko@2.7.1
2.9.3

Open the chart page →

3,891
check-mkcloudnativeapp0.2.11 of 1See more

check-mk cloudnativeapp 0.2.1

1 of the 1 container images this version deploys carry CVE-2022-24302.

Container imageDigestPackageFixed in
nlmacamp/check_mk:latest5dbb8589f824
paramiko@2.1.2
2.9.3

Open the chart page →

2,408
cloudlaunchcloudve0.6.01 of 5See more

cloudlaunch cloudve 0.6.0

1 of the 5 container images this version deploys carry CVE-2022-24302.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
paramiko@2.8.0
2.9.3

Open the chart page →

12,457
cloudlaunch-servercloudve0.2.01 of 5See more

cloudlaunch-server cloudve 0.2.0

1 of the 5 container images this version deploys carry CVE-2022-24302.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
paramiko@2.8.0
2.9.3

Open the chart page →

12,131
cloudlaunchservercloudve0.6.01 of 4See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2022-24302.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
paramiko@2.8.0
2.9.3

Open the chart page →

11,592
galaxy-stablecloudve2.0.02 of 5See more

galaxy-stable cloudve 2.0.0

2 of the 5 container images this version deploys carry CVE-2022-24302.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
paramiko@1.10.1-1git1ubuntu0.1
paramiko@1.10.1
no fix listed
2.9.3
galaxy/galaxy-stable:v18.018e577a626dfd
paramiko@1.10.1-1git1ubuntu0.1
paramiko@1.10.1
no fix listed
2.9.3

Open the chart page →

70,895
cp-helm-chartscp-helm-charts0.6.17 of 8See more

cp-helm-charts cp-helm-charts 0.6.1

7 of the 8 container images this version deploys carry CVE-2022-24302.

Container imageDigestPackageFixed in
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
paramiko@2.4.2
2.9.3
confluentinc/cp-enterprise-kafka:6.1.08f1544df1f48
paramiko@2.4.2
2.9.3
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
paramiko@2.4.2
2.9.3
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
paramiko@2.4.2
2.9.3
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
paramiko@2.4.2
2.9.3
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
paramiko@2.4.2
2.9.3
confluentinc/cp-zookeeper:6.1.078c190f4472c
paramiko@2.4.2
2.9.3

Open the chart page →

58,857
couchpotatocronce0.0.11 of 1See more

couchpotato cronce 0.0.1

1 of the 1 container images this version deploys carry CVE-2022-24302.

Container imageDigestPackageFixed in
linuxserver/couchpotato:75e576ee-ls389cd8d5fb1ac
paramiko@2.4.2
2.9.3

Open the chart page →

3,871
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2022-24302.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
paramiko@2.6.0
2.9.3

Open the chart page →

14,673
wallabaggeek-cookbookVerified publisher7.2.01 of 1See more

wallabag geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2022-24302.

Container imageDigestPackageFixed in
wallabag/wallabag:2.4.25e4c26a7fb4a
paramiko@2.7.1
2.9.3

Open the chart page →

4,358
pgadminhalkeye1.0.01 of 1See more

pgadmin halkeye 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-24302.

Container imageDigestPackageFixed in
chorss/docker-pgadmin4:4.115c549cacb8ab
paramiko@2.6.0
2.9.3

Open the chart page →

2,555
redashinseefrlab2.1.01 of 3See more

redash inseefrlab 2.1.0

1 of the 3 container images this version deploys carry CVE-2022-24302.

Container imageDigestPackageFixed in
redash/redash:10.0.0.b503639392753c0376
paramiko@2.7.2
2.9.3

Open the chart page →

3,314
elasticsearch2ncsaVerified publisher0.2.21 of 2See more

elasticsearch2 ncsa 0.2.2

1 of the 2 container images this version deploys carry CVE-2022-24302.

Container imageDigestPackageFixed in
elastichq/elasticsearch-hq:latestbb3bd22c2b87
paramiko@2.6.0
2.9.3

Open the chart page →

4,911
comacopencord1.0.02 of 9See more

comac opencord 1.0.0

2 of the 9 container images this version deploys carry CVE-2022-24302.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
paramiko@2.4.2
2.9.3
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
paramiko@2.4.2
2.9.3

Open the chart page →

88,546
comac-platformopencord0.0.171 of 11See more

comac-platform opencord 0.0.17

1 of the 11 container images this version deploys carry CVE-2022-24302.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
paramiko@2.4.2
2.9.3

Open the chart page →

26,211
ponsimv2opencord1.2.31 of 2See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry CVE-2022-24302.

Container imageDigestPackageFixed in
voltha/voltha-tester:1.7.0655c3048a602
paramiko@2.6.0
2.9.3

Open the chart page →

12,609
sebaopencord1.0.04 of 17See more

seba opencord 1.0.0

4 of the 17 container images this version deploys carry CVE-2022-24302.

Container imageDigestPackageFixed in
voltha/voltha-cli:1.6.0c4e41e92f046
paramiko@2.4.2
2.9.3
voltha/voltha-netconf:1.6.037f80524c207
paramiko@2.4.2
2.9.3
voltha/voltha-ofagent:1.6.09ee8c1f4428c
paramiko@2.4.2
2.9.3
voltha/voltha-voltha:1.6.0ff596b62de59
paramiko@2.4.2
2.9.3

Open the chart page →

93,855
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2022-24302.

Container imageDigestPackageFixed in
openwhisk/ow-utils:1.0.0c80dba0de3aa
paramiko@2.7.2
2.9.3

Open the chart page →

36,215
pgadminstakaterVerified publisher0.1.141 of 1See more

pgadmin stakater 0.1.14

1 of the 1 container images this version deploys carry CVE-2022-24302.

Container imageDigestPackageFixed in
dpage/pgadmin4:4.5a5a656e1d5fd
paramiko@2.4.2
2.9.3

Open the chart page →

2,060

Container images carrying it

34 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
cloudve/cloudlaunch-server:latest4a3d7fae90bb
paramiko@2.8.0
2.9.3
3
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
paramiko@2.4.2
2.9.3
2
ansiblesemaphore/semaphore:v2.8.5303d1f8684027
paramiko@2.7.2
2.9.3
1
camptocamp/ekorre:0.1.035c91d5fda04
paramiko@2.7.1
2.9.3
1
chorss/docker-pgadmin4:4.115c549cacb8ab
paramiko@2.6.0
2.9.3
1
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
paramiko@2.4.2
2.9.3
1
confluentinc/cp-enterprise-kafka:6.1.08f1544df1f48
paramiko@2.4.2
2.9.3
1
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
paramiko@2.4.2
2.9.3
1
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
paramiko@2.4.2
2.9.3
1
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
paramiko@2.4.2
2.9.3
1
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
paramiko@2.4.2
2.9.3
1
confluentinc/cp-zookeeper:6.1.078c190f4472c
paramiko@2.4.2
2.9.3
1
datadog/agent:7.22.08f20e56b5311
paramiko@2.6.0
2.9.3
1
dpage/pgadmin4:4.5a5a656e1d5fd
paramiko@2.4.2
2.9.3
1
dpage/pgadmin4:4.22b1f00b8163cf
paramiko@2.7.1
2.9.3
1
elastichq/elasticsearch-hq:latestbb3bd22c2b87
paramiko@2.6.0
2.9.3
1
galaxy/galaxy-init:v18.010267bad550e6
paramiko@1.10.1-1git1ubuntu0.1
paramiko@1.10.1
no fix listed
2.9.3
1
galaxy/galaxy-stable:v18.018e577a626dfd
paramiko@1.10.1-1git1ubuntu0.1
paramiko@1.10.1
no fix listed
2.9.3
1
jmferrer/azure-devops-agent:latest030f68ec6998
paramiko@2.6.0
2.9.3
1
library/mysql:8.0.303c1aab708f6e
paramiko@2.9.2
2.9.3
1
linuxserver/couchpotato:75e576ee-ls389cd8d5fb1ac
paramiko@2.4.2
2.9.3
1
linuxserver/couchpotato:75e576ee-ls32c4d2766b9eb7
paramiko@2.7.1
2.9.3
1
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
paramiko@2.7.1
2.9.3
1
nlmacamp/check_mk:latest5dbb8589f824
paramiko@2.1.2
2.9.3
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
paramiko@2.4.2
2.9.3
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
paramiko@2.7.2
2.9.3
1
prompve/prometheus-pve-exporter:2.0.1ff6749eb03b0
paramiko@2.7.1
2.9.3
1
redash/redash:10.0.0.b503639392753c0376
paramiko@2.7.2
2.9.3
1
voltha/voltha-cli:1.6.0c4e41e92f046
paramiko@2.4.2
2.9.3
1
voltha/voltha-netconf:1.6.037f80524c207
paramiko@2.4.2
2.9.3
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
paramiko@2.4.2
2.9.3
1
voltha/voltha-tester:1.7.0655c3048a602
paramiko@2.6.0
2.9.3
1
voltha/voltha-voltha:1.6.0ff596b62de59
paramiko@2.4.2
2.9.3
1
wallabag/wallabag:2.4.25e4c26a7fb4a
paramiko@2.7.1
2.9.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.