StackRadar

CVE-2022-24772

High

Advisory

Published 18 Mar 2022In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.011
64th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
56
of 17,781 indexed, latest versions
Container images
51
deployed by those charts
Fix available
1 of 1
affected package

Improper Verification of Cryptographic Signature in node-forge

Carried by container images the latest versions of 56 of 17,781 indexed charts deploy, on 51 images.

Affected packageAffected versionsFixed inImages
node-forgenpm0.7.1, 0.7.6, 0.8.0, 0.8.5+4 more1.3.051
OSV records
GHSA-x4jg-mjrx-434g

Charts affected

56 by stars
ChartLatestAffected imagesRadar Score
nordmart-reviewstakaterVerified publisher0.0.61 of 3See more

nordmart-review stakater 0.0.6

1 of the 3 container images this version deploys carry CVE-2022-24772.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
node-forge@0.10.0
1.3.0

Open the chart page →

11,554
nordmart-review-instancestakaterVerified publisher1.0.01 of 3See more

nordmart-review-instance stakater 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-24772.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
node-forge@0.10.0
1.3.0

Open the chart page →

11,554
fdi-dotstatsuite-dlmstatcan0.3.11 of 1See more

fdi-dotstatsuite-dlm statcan 0.3.1

1 of the 1 container images this version deploys carry CVE-2022-24772.

Container imageDigestPackageFixed in
siscc/dotstatsuite-data-lifecycle-manager:v14.0.0b6f9a7c888fc
node-forge@0.10.0
1.3.0

Open the chart page →

3,881
vehicle-dashboardtest-vehi-dash0.1.01 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-24772.

Container imageDigestPackageFixed in
samajh/alprfrontend:latest05ef4fddbb75
node-forge@0.10.0
1.3.0

Open the chart page →

20,270
kubernetes-external-secretstrozz6.3.01 of 1See more

kubernetes-external-secrets trozz 6.3.0

1 of the 1 container images this version deploys carry CVE-2022-24772.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/kubernetes-external-secrets:6.3.0eab9bd0b6986
node-forge@0.10.0
1.3.0

Open the chart page →

2,838
opendistro-eswitcom-gmbh1.13.31 of 3See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry CVE-2022-24772.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch-kibana:1.13.2c740d7a89475
node-forge@0.10.0
1.3.0

Open the chart page →

5,806

Container images carrying it

51 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
amazon/opendistro-for-elasticsearch-kibana:1.13.2c740d7a89475
node-forge@0.10.0
1.3.0
2
chatwoot/chatwoot:v3.1.0d530ab8c1753
node-forge@0.10.0
1.3.0
2
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
node-forge@0.9.0
1.3.0
2
opensearchproject/opensearch-dashboards:1.0.039695180364b
node-forge@0.10.0
1.3.0
2
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
node-forge@0.10.0
1.3.0
2
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
node-forge@0.10.0
1.3.0
2
arfath29/3-tier-app-frontend:latest384b3e377f47
node-forge@0.10.0
1.3.0
1
assistiot/cybersecurity-monitoring_id-kbn:latest2297b4350211
node-forge@0.10.0
1.3.0
1
assistiot/cybersecurity-monitoring_ir-kbn:latest0570b27bb7c2
node-forge@0.10.0
1.3.0
1
chatwoot/chatwoot:v4.15.167ebc751c171
node-forge@0.10.0
1.3.0
1
conduction/conduction-ui-app:devd591f5e6f2a9
node-forge@0.10.0
1.3.0
1
enketo/enketo-express:3.0.4dcad9c2273f6
node-forge@0.10.0
1.3.0
1
fiware/idm:8.3.3a1b6ed4ae84f
node-forge@0.10.0
1.3.0
1
gristlabs/grist:0.7.96e71b1914a7e
node-forge@0.10.0
1.3.0
1
henrywhitaker3/speedtest-tracker:latest47159a940229
node-forge@0.10.0
1.3.0
1
i4trust/pdc-portal:2.0.03e77858e1219
node-forge@0.10.0
1.3.0
1
ibarreche/cloud-front-ci:latestc8970ac1c8dc
node-forge@0.10.0
1.3.0
1
kubeflownotebookswg/centraldashboard:v1.6.137300551dea6
node-forge@0.10.0
1.3.0
1
kubeflownotebookswg/centraldashboard:v1.9.2af55c22ef5de
node-forge@0.10.0
1.3.0
1
library/ghost:4.37.0767230c0f263
node-forge@1.2.1
1.3.0
1
linuxserver/codimd:latestb801bbcf6386
node-forge@0.10.0
1.3.0
1
lissy93/dashy:2.0.51991f7be5ed0
node-forge@0.10.0
1.3.0
1
misskey/misskey:12.110.1e08b7c478093
node-forge@0.9.0
1.3.0
1
mozilla/sentencecollector:2.0.91da6ff5c4895
node-forge@0.7.6
1.3.0
1
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
node-forge@0.7.6
1.3.0
1
obolnetwork/charon-dkg-sidecar:maine263be0a7440
node-forge@0.10.0
1.3.0
1
phntom/codimd:2.4.31b9aafbb62e6
node-forge@0.7.6
1.3.0
1
requarks/wiki:canary-2.5.2438b5865a7386c
node-forge@0.10.0
1.3.0
1
roadiehq/community-backstage-image:latestef355bf5b639
node-forge@0.8.5
1.3.0
1
samajh/alprfrontend:latest05ef4fddbb75
node-forge@0.10.0
1.3.0
1
shinobisystems/shinobi:dev3ca746937856
node-forge@0.10.0
1.3.0
1
shinobisystems/shinobi:latestc2f5ce2e1067
node-forge@0.10.0
1.3.0
1
siscc/dotstatsuite-data-lifecycle-manager:v14.0.0b6f9a7c888fc
node-forge@0.10.0
1.3.0
1
socialmediamacroscope/smile_server:0.3.31a528c794270
node-forge@0.7.6
1.3.0
1
sqlpad/sqlpad:6.7d3d2f430dffd
node-forge@0.10.0
1.3.0
1
testhubio/testhub-frontend:on-preme86c2db53be8
node-forge@0.9.0
1.3.0
1
thelounge/thelounge:4.3.0-alpine0037aa258261
node-forge@0.10.0
1.3.0
1
thelounge/thelounge:4.2.0-alpine639978459c3a
node-forge@0.9.1
1.3.0
1
tooljet/tooljet-ce:v1.18.0c85a4720e42e
node-forge@1.2.1
1.3.0
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
node-forge@0.10.0
1.3.0
1
willwill/kube-slack:v4.1.1d443017aae98
node-forge@0.8.0
1.3.0
1
zazuko/trifid:2.3.7054be137de70
node-forge@0.10.0
1.3.0
1
gcr.io/google-samples/microservices-demo/currencyservice:v0.2.349d458a3650f
node-forge@0.10.0
1.3.0
1
gcr.io/google-samples/microservices-demo/paymentservice:v0.2.36eb201217a8f
node-forge@0.10.0
1.3.0
1
ghcr.io/external-secrets/kubernetes-external-secrets:6.3.0eab9bd0b6986
node-forge@0.10.0
1.3.0
1
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
node-forge@0.10.0
1.3.0
1
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
node-forge@0.10.0
1.3.0
1
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
node-forge@0.10.0
1.3.0
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
node-forge@0.9.0
1.3.0
1
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
node-forge@0.10.0
1.3.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.