StackRadar

CVE-2022-24434

High

Advisory

Published 21 May 2022In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.034
88th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
48
of 17,781 indexed, latest versions
Container images
53
deployed by those charts
Fix available
None
affected package

Crash in HeaderParser in dicer

Carried by container images the latest versions of 48 of 17,781 indexed charts deploy, on 53 images.

Affected packageAffected versionsFixed inImages
dicernpm0.2.3, 0.2.5, 0.3.0no fix listed53
OSV records
GHSA-wm7h-9275-46v2

Charts affected

48 by stars
ChartLatestAffected imagesRadar Score
misskeyalytiVerified publisher1.0.01 of 1See more

misskey alyti 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
misskey/misskey:12.110.1e08b7c478093
dicer@0.2.5
no fix listed

Open the chart page →

5,251
backstagedeliveryheroVerified publisher0.1.151 of 2See more

backstage deliveryhero 0.1.15

1 of the 2 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
dicer@0.3.0
no fix listed

Open the chart page →

8,213
wikijsgeek-cookbookVerified publisher6.4.21 of 1See more

wikijs geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
dicer@0.2.5
no fix listed

Open the chart page →

5,946
graphql-gatewaygraphql-gatewayVerified publisher0.1.51 of 1See more

graphql-gateway graphql-gateway 0.1.5

1 of the 1 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
hansehe/graphql-gateway:1.0.458e09540afbc
dicer@0.2.5
no fix listed

Open the chart page →

1,660
audiobookshelfgeek-cookbookVerified publisher1.2.21 of 1See more

audiobookshelf geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.0.3140aed2752c3
dicer@0.3.0
no fix listed

Open the chart page →

1,959
kobotoolboxone-acre-fundVerified publisher0.7.41 of 9See more

kobotoolbox one-acre-fund 0.7.4

1 of the 9 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
enketo/enketo-express:3.0.4dcad9c2273f6
dicer@0.3.0
no fix listed

Open the chart page →

18,517
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
dicer@0.2.5
no fix listed

Open the chart page →

24,488
predatorzooz1.7.01 of 1See more

predator zooz 1.7.0

1 of the 1 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
zooz/predator:1.6f491d1f7a865
dicer@0.3.0
no fix listed

Open the chart page →

2,851
data-fairdata354-helmVerified publisher1.1.23 of 12See more

data-fair data354-helm 1.1.2

3 of the 12 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
ghcr.io/data-fair/data-fair:3cc9498b64b5b
dicer@0.2.5
no fix listed
ghcr.io/data-fair/portals:18b621866ceb2
dicer@0.2.5
no fix listed
ghcr.io/data-fair/simple-directory:438a4f32fad82
dicer@0.2.5
no fix listed

Open the chart page →

38,346
ghostgeek-cookbookVerified publisher2.2.01 of 1See more

ghost geek-cookbook 2.2.0

1 of the 1 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
library/ghost:4.37.0767230c0f263
dicer@0.2.5
no fix listed

Open the chart page →

4,260
overseerrgeek-cookbookVerified publisher5.4.21 of 1See more

overseerr geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
ghcr.io/sct/overseerr:1.26.1254d16af8f71
dicer@0.2.5
no fix listed

Open the chart page →

3,444
youtubedl-materialgeek-cookbookVerified publisher4.4.21 of 1See more

youtubedl-material geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:4.23720b856bd2f
dicer@0.2.5
no fix listed

Open the chart page →

4,410
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
dicer@0.2.5
no fix listed

Open the chart page →

13,738
flamerlex0.3.01 of 1See more

flame rlex 0.3.0

1 of the 1 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
pawelmalak/flame:2.1.193e7b0abb603
dicer@0.2.5
no fix listed

Open the chart page →

2,449
ackeesudaVerified publisher0.2.11 of 1See more

ackee suda 0.2.1

1 of the 1 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
electerious/ackee:3.2.05e7173fa321c
dicer@0.3.0
no fix listed

Open the chart page →

1,602
wikiwenerme2.2.01 of 2See more

wiki wenerme 2.2.0

1 of the 2 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
requarks/wiki:latest68f0d1848261
dicer@0.2.5
no fix listed

Open the chart page →

3,833
turborepo-remote-cacheadriantr1.1.11 of 1See more

turborepo-remote-cache adriantr 1.1.1

1 of the 1 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
ducktors/turborepo-remote-cache:latest31ec9e83c844
dicer@0.3.0
no fix listed

Open the chart page →

523
mx-apibicarus-labs0.1.01 of 4See more

mx-api bicarus-labs 0.1.0

1 of the 4 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
dicer@0.2.5
no fix listed

Open the chart page →

4,455
node-redcloudnativeapp1.2.21 of 1See more

node-red cloudnativeapp 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
nodered/node-red-docker:0.19.6-v8070643219ea2
dicer@0.2.5
no fix listed

Open the chart page →

4,790
exposrexposr0.12.01 of 1See more

exposr exposr 0.12.0

1 of the 1 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
ghcr.io/exposr/exposrd:v0.12.0561c8f23bdb6
dicer@0.3.0
no fix listed

Open the chart page →

570
keyrockfiware0.8.71 of 1See more

keyrock fiware 0.8.7

1 of the 1 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
fiware/idm:8.3.3a1b6ed4ae84f
dicer@0.2.5
no fix listed

Open the chart page →

3,159
flamegabe565Verified publisher0.6.01 of 1See more

flame gabe565 0.6.0

1 of the 1 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
pawelmalak/flame:multiarch2.3.19f88b17692a0
dicer@0.2.5
no fix listed

Open the chart page →

2,172
double-takegeek-cookbookVerified publisher2.3.21 of 1See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
jakowenko/double-take:1.6.0b858bac9e32a
dicer@0.2.5
no fix listed

Open the chart page →

12,222
haste-servergeek-cookbookVerified publisher3.4.21 of 1See more

haste-server geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
dicer@0.2.3
no fix listed

Open the chart page →

10,994
node-redgeek-cookbookVerified publisher10.3.21 of 1See more

node-red geek-cookbook 10.3.2

1 of the 1 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
nodered/node-red:2.2.2e131dcadfe92
dicer@0.2.5
no fix listed

Open the chart page →

2,102
shinobigeek-cookbookVerified publisher1.2.21 of 1See more

shinobi geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
shinobisystems/shinobi:dev3ca746937856
dicer@0.3.0
no fix listed

Open the chart page →

4,591
theloungegeek-cookbookVerified publisher3.4.21 of 1See more

thelounge geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
thelounge/thelounge:4.2.0-alpine639978459c3a
dicer@0.3.0
no fix listed

Open the chart page →

2,689
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
library/ghost:5.79.083f7bf209844
dicer@0.2.5
no fix listed

Open the chart page →

9,019
Governify-Bluejaygovernify0.1.04 of 12See more

Governify-Bluejay governify 0.1.0

4 of the 12 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
governify/assets-manager:v1.4.12987672448c7
dicer@0.3.0
no fix listed
governify/director:v1.4.0608c6940bb98
dicer@0.2.5
no fix listed
governify/registry:v3.4.0d3f37f4f8168
dicer@0.2.5
no fix listed
governify/reporter:v2.2.038595913458f
dicer@0.2.5
no fix listed

Open the chart page →

22,512
Governify-Falcongovernify0.1.05 of 10See more

Governify-Falcon governify 0.1.0

5 of the 10 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
governify/assets-manager:v1.4.12987672448c7
dicer@0.3.0
no fix listed
governify/collector-dynamic:v1.3.06d3d1a5b46a9
dicer@0.2.5
no fix listed
governify/director:v1.4.0608c6940bb98
dicer@0.2.5
no fix listed
governify/registry:v3.4.0d3f37f4f8168
dicer@0.2.5
no fix listed
governify/reporter:v2.2.038595913458f
dicer@0.2.5
no fix listed

Open the chart page →

24,319
theloungehalkeye4.3.11 of 1See more

thelounge halkeye 4.3.1

1 of the 1 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
thelounge/thelounge:4.3.0-alpine0037aa258261
dicer@0.3.0
no fix listed

Open the chart page →

1,938
streamsheetshelm-chartsVerified publisher0.2.34 of 8See more

streamsheets helm-charts 0.2.3

4 of the 8 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
dicer@0.2.5
no fix listed
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
dicer@0.3.0
no fix listed
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
dicer@0.2.5
no fix listed
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
dicer@0.2.5
no fix listed

Open the chart page →

89,959
backstagehelm-charts-nr0.1.151 of 2See more

backstage helm-charts-nr 0.1.15

1 of the 2 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
dicer@0.3.0
no fix listed

Open the chart page →

8,213
wikijshomeenterpriseinc1.4.01 of 1See more

wikijs homeenterpriseinc 1.4.0

1 of the 1 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
requarks/wiki:canary-2.5.2438b5865a7386c
dicer@0.2.5
no fix listed

Open the chart page →

4,253
crypto-watchdoghuseyinnurbaki0.1.01 of 1See more

crypto-watchdog huseyinnurbaki 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
hhaluk/crypto-watchdog:0.4.0a6555953d941
dicer@0.2.5
no fix listed

Open the chart page →

2,656
ibm-business-automation-insights-devibm-charts3.2.01 of 6See more

ibm-business-automation-insights-dev ibm-charts 3.2.0

1 of the 6 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
ibmcom/bai-admin-dev:19.0.202d882f2836e
dicer@0.2.5
no fix listed

Open the chart page →

39,349
backstageirembo-backstage-helmVerified publisher1.0.51 of 3See more

backstage irembo-backstage-helm 1.0.5

1 of the 3 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
roadiehq/community-backstage-image:latestef355bf5b639
dicer@0.3.0
no fix listed

Open the chart page →

7,232
yapijoelee2012Verified publisher0.2.01 of 1See more

yapi joelee2012 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
jayfong/yapi:1.10.2163e5d621910
dicer@0.2.5
no fix listed

Open the chart page →

6,454
shinobik8s-home-lab-repo2.1.11 of 1See more

shinobi k8s-home-lab-repo 2.1.1

1 of the 1 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
shinobisystems/shinobi:latestc2f5ce2e1067
dicer@0.3.0
no fix listed

Open the chart page →

4,667
ohmyformkrzwiatrzyk0.0.11 of 1See more

ohmyform krzwiatrzyk 0.0.1

1 of the 1 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
ohmyform/ohmyform:1.0.3afe53f4acdb1
dicer@0.2.5
no fix listed

Open the chart page →

4,230
tooljetkrzwiatrzyk1.1.11 of 2See more

tooljet krzwiatrzyk 1.1.1

1 of the 2 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
tooljet/tooljet-ce:v1.18.0c85a4720e42e
dicer@0.2.5
no fix listed

Open the chart page →

5,410
component-storekubebb0.0.231 of 1See more

component-store kubebb 0.0.23

1 of the 1 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
kubebb/component-store:latestfd8ecbd73213
dicer@0.3.0
no fix listed

Open the chart page →

2,178
kommandermesosphere-stable0.39.21 of 29See more

kommander mesosphere-stable 0.39.2

1 of the 29 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
mesosphere/kommander:6.100.13917e82333a9
dicer@0.3.0
no fix listed

Open the chart page →

68,284
opsportalmesosphere-stable0.9.51 of 3See more

opsportal mesosphere-stable 0.9.5

1 of the 3 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
mesosphere/kommander:6.100.13917e82333a9
dicer@0.3.0
no fix listed

Open the chart page →

7,027
smilencsaVerified publisher1.1.01 of 23See more

smile ncsa 1.1.0

1 of the 23 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
socialmediamacroscope/smile_server:0.3.31a528c794270
dicer@0.2.5
no fix listed

Open the chart page →

109,294
flomesh-consoleopenshift0.70.0-30-ubi81 of 2See more

flomesh-console openshift 0.70.0-30-ubi8

1 of the 2 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
dicer@0.3.0
no fix listed

Open the chart page →

9,968
vehicle-dashboardtest-vehi-dash0.1.01 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
samajh/alprbackend:latestea742b4372ad
dicer@0.2.5
no fix listed

Open the chart page →

20,270
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry CVE-2022-24434.

Container imageDigestPackageFixed in
requarks/wiki:268f0d1848261
dicer@0.2.5
no fix listed

Open the chart page →

5,459

Container images carrying it

53 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
governify/assets-manager:v1.4.12987672448c7
dicer@0.3.0
no fix listed
2
governify/director:v1.4.0608c6940bb98
dicer@0.2.5
no fix listed
2
governify/registry:v3.4.0d3f37f4f8168
dicer@0.2.5
no fix listed
2
governify/reporter:v2.2.038595913458f
dicer@0.2.5
no fix listed
2
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
dicer@0.3.0
no fix listed
2
mesosphere/kommander:6.100.13917e82333a9
dicer@0.3.0
no fix listed
2
requarks/wiki:2:latest68f0d1848261
dicer@0.2.5
no fix listed
2
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
dicer@0.2.5
no fix listed
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
dicer@0.2.5
no fix listed
1
ducktors/turborepo-remote-cache:latest31ec9e83c844
dicer@0.3.0
no fix listed
1
electerious/ackee:3.2.05e7173fa321c
dicer@0.3.0
no fix listed
1
enketo/enketo-express:3.0.4dcad9c2273f6
dicer@0.3.0
no fix listed
1
fiware/idm:8.3.3a1b6ed4ae84f
dicer@0.2.5
no fix listed
1
governify/collector-dynamic:v1.3.06d3d1a5b46a9
dicer@0.2.5
no fix listed
1
hansehe/graphql-gateway:1.0.458e09540afbc
dicer@0.2.5
no fix listed
1
hhaluk/crypto-watchdog:0.4.0a6555953d941
dicer@0.2.5
no fix listed
1
ibmcom/bai-admin-dev:19.0.202d882f2836e
dicer@0.2.5
no fix listed
1
jakowenko/double-take:1.6.0b858bac9e32a
dicer@0.2.5
no fix listed
1
jayfong/yapi:1.10.2163e5d621910
dicer@0.2.5
no fix listed
1
kubebb/component-store:latestfd8ecbd73213
dicer@0.3.0
no fix listed
1
library/ghost:4.37.0767230c0f263
dicer@0.2.5
no fix listed
1
library/ghost:5.79.083f7bf209844
dicer@0.2.5
no fix listed
1
misskey/misskey:12.110.1e08b7c478093
dicer@0.2.5
no fix listed
1
moreillon/food-manager:lateste8fd856e593d
dicer@0.2.5
no fix listed
1
nodered/node-red:2.2.2e131dcadfe92
dicer@0.2.5
no fix listed
1
nodered/node-red-docker:0.19.6-v8070643219ea2
dicer@0.2.5
no fix listed
1
ohmyform/ohmyform:1.0.3afe53f4acdb1
dicer@0.2.5
no fix listed
1
pawelmalak/flame:2.1.193e7b0abb603
dicer@0.2.5
no fix listed
1
pawelmalak/flame:multiarch2.3.19f88b17692a0
dicer@0.2.5
no fix listed
1
requarks/wiki:canary-2.5.2438b5865a7386c
dicer@0.2.5
no fix listed
1
roadiehq/community-backstage-image:latestef355bf5b639
dicer@0.3.0
no fix listed
1
samajh/alprbackend:latestea742b4372ad
dicer@0.2.5
no fix listed
1
shinobisystems/shinobi:dev3ca746937856
dicer@0.3.0
no fix listed
1
shinobisystems/shinobi:latestc2f5ce2e1067
dicer@0.3.0
no fix listed
1
socialmediamacroscope/smile_server:0.3.31a528c794270
dicer@0.2.5
no fix listed
1
thelounge/thelounge:4.3.0-alpine0037aa258261
dicer@0.3.0
no fix listed
1
thelounge/thelounge:4.2.0-alpine639978459c3a
dicer@0.3.0
no fix listed
1
tooljet/tooljet-ce:v1.18.0c85a4720e42e
dicer@0.2.5
no fix listed
1
tzahi12345/youtubedl-material:4.23720b856bd2f
dicer@0.2.5
no fix listed
1
zooz/predator:1.6f491d1f7a865
dicer@0.3.0
no fix listed
1
ghcr.io/advplyr/audiobookshelf:2.0.3140aed2752c3
dicer@0.3.0
no fix listed
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
dicer@0.2.5
no fix listed
1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
dicer@0.3.0
no fix listed
1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
dicer@0.2.5
no fix listed
1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
dicer@0.2.5
no fix listed
1
ghcr.io/data-fair/data-fair:3cc9498b64b5b
dicer@0.2.5
no fix listed
1
ghcr.io/data-fair/portals:18b621866ceb2
dicer@0.2.5
no fix listed
1
ghcr.io/data-fair/simple-directory:438a4f32fad82
dicer@0.2.5
no fix listed
1
ghcr.io/exposr/exposrd:v0.12.0561c8f23bdb6
dicer@0.3.0
no fix listed
1
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
dicer@0.2.3
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.