StackRadarChart IndexLive demo

CVE-2022-24775

Medium

Advisory

Published 21 Mar 2022In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.025; 84th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 72; of 17,781 indexed, latest versions
Container images: 63; deployed by those charts
Fix available: 2 of 2; affected packages

Improper Input Validation in guzzlehttp/psr7

Carried by container images the latest versions of 72 of 17,781 indexed charts deploy, on 63 images.

Affected package	Affected versions	Fixed in	Images
guzzlehttp/psr7composer	1.4.2, 1.5.2, 1.6.1, 1.7.0+4 more	1.8.4, 2.1.1	63
drupal/corecomposer	8.9.20	9.2.16	1

OSV records: GHSA-q7rv-6hp3-vh96 DRUPAL-CORE-2022-006
Also known as: BIT-drupal-2022-24775

Charts affected

72 by stars

Chart

Latest

Affected images

Radar Score

notification-componentnotification-component

1 of 4 See more

notification-component notification-component 1.0.0

1 of the 4 container images this version deploys carry CVE-2022-24775.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/notification-component-php :latest	cd9656e6bc2c	guzzlehttp/psr7@1.7.0	1.8.4

Open the chart page →

7,527

openldapopenldap

1 of 2 See more

openldap openldap 0.1.1

1 of the 2 container images this version deploys carry CVE-2022-24775.

Container image	Digest	Package	Fixed in
ldapaccountmanager/lam :8.0.1	d46cf25d1dda	guzzlehttp/psr7@1.8.3	1.8.4

Open the chart page →

5,293

orderregistratiecomponentorderregistratiecomponent

1 of 3 See more

orderregistratiecomponent orderregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-24775.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/orderregistratiecomponent-php :latest	d17257e4fa27	guzzlehttp/psr7@1.7.0	1.8.4

Open the chart page →

7,492

procestypecatalogusprocestypecatalogus

1 of 4 See more

procestypecatalogus procestypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2022-24775.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/procestypecatalogus-php :latest	956c4fb64796	guzzlehttp/psr7@1.7.0	1.8.4

Open the chart page →

7,429

productenendienstencatalogusproductenendienstencatalogus

1 of 3 See more

productenendienstencatalogus productenendienstencatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-24775.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/productenendienstencatalogus-php :latest	7242da105081	guzzlehttp/psr7@1.7.0	1.8.4

Open the chart page →

7,510

panproto-application-nldesign

1 of 5 See more

pan proto-application-nldesign 0.1.0

1 of the 5 container images this version deploys carry CVE-2022-24775.

Container image	Digest	Package	Fixed in
conduction/pan-php :dev	24f03c57568f	guzzlehttp/psr7@1.7.0	1.8.4

Open the chart page →

8,725

proto-component-commongroundproto-component-commonground

1 of 3 See more

proto-component-commonground proto-component-commonground 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-24775.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/proto-component-commonground-php :latest	eb36ead1954e	guzzlehttp/psr7@1.7.0	1.8.4

Open the chart page →

7,510

laravel-workerrenoki-co

1 of 1 See more

laravel-worker renoki-co 1.1.0

1 of the 1 container images this version deploys carry CVE-2022-24775.

Container image	Digest	Package	Fixed in
quay.io/renokico/laravel-helm-demo :worker-0.6.0	4b188259267e	guzzlehttp/psr7@1.8.1	1.8.4

Open the chart page →

5,687

review-componentreview-component

1 of 3 See more

review-component review-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-24775.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/review-component-php :latest	afe623824b82	guzzlehttp/psr7@1.7.0	1.8.4

Open the chart page →

7,491

1 of 6 See more

shopware robjuz 2.0.0

1 of the 6 container images this version deploys carry CVE-2022-24775.

Container image	Digest	Package	Fixed in
shyim/shopware :6.4.6.0	a951c0e6b836	guzzlehttp/psr7@1.8.3	1.8.4

Open the chart page →

2,972

mauticromholdings

1 of 3 See more

mautic romholdings 0.1.3

1 of the 3 container images this version deploys carry CVE-2022-24775.

Container image	Digest	Package	Fixed in
mautic/mautic :2.13-apache	a954c5868d76	guzzlehttp/psr7@1.4.2	1.8.4

Open the chart page →

2,939

bookstackschmitzis

1 of 1 See more

bookstack schmitzis 0.1.1

1 of the 1 container images this version deploys carry CVE-2022-24775.

Container image	Digest	Package	Fixed in
solidnerd/bookstack :21.12	762ffd5c51d3	guzzlehttp/psr7@2.1.0	2.1.1

Open the chart page →

2,751

cachetsergiotocalini

1 of 1 See more

cachet sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-24775.

Container image	Digest	Package	Fixed in
cachethq/docker :2.3.15	a61ff0f67ea7	guzzlehttp/psr7@1.4.2	1.8.4

Open the chart page →

1,896

taalhuizen-servicetaalhuizen-service

1 of 3 See more

taalhuizen-service taalhuizen-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-24775.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/taalhuizen-service-php :latest	04f1b7f0d573	guzzlehttp/psr7@1.8.2	1.8.4

Open the chart page →

7,480

repmanteam-blue

1 of 5 See more

repman team-blue 0.3.0

1 of the 5 container images this version deploys carry CVE-2022-24775.

Container image	Digest	Package	Fixed in
buddy/repman :1.4.0	097c897f8b54	guzzlehttp/psr7@1.8.3	1.8.4

Open the chart page →

3,993

trouw-servicetrouw-service

1 of 3 See more

trouw-service trouw-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-24775.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/trouw-service-php :latest	f745e2870692	guzzlehttp/psr7@1.7.0	1.8.4

Open the chart page →

7,510

verhuis-serviceverhuis-service

1 of 3 See more

verhuis-service verhuis-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-24775.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verhuis-service-php :latest	66bbaf95a123	guzzlehttp/psr7@1.7.0	1.8.4

Open the chart page →

7,510

verzoekconversieserviceverzoekconversieservice

1 of 3 See more

verzoekconversieservice verzoekconversieservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-24775.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoekconversieservice-php :latest	e918014fb8d3	guzzlehttp/psr7@1.7.0	1.8.4

Open the chart page →

7,528

verzoekregistratiecomponentverzoekregistratiecomponent

1 of 4 See more

verzoekregistratiecomponent verzoekregistratiecomponent 1.1.0

1 of the 4 container images this version deploys carry CVE-2022-24775.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoekregistratiecomponent-php :latest	c4f6c03af5d3	guzzlehttp/psr7@1.7.0	1.8.4

Open the chart page →

7,429

verzoektypecatalogusverzoektypecatalogus

1 of 4 See more

verzoektypecatalogus verzoektypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2022-24775.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoektypecatalogus-php :latest	64f5eb7a398b	guzzlehttp/psr7@1.7.0	1.8.4

Open the chart page →

7,429

mediawikiwbstack

1 of 1 See more

mediawiki wbstack 0.14.0

1 of the 1 container images this version deploys carry CVE-2022-24775.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/mediawiki :1.37-7.4-20220621-fp-beta-0	c3012c8a34b4	guzzlehttp/psr7@1.8.3	1.8.4

Open the chart page →

2,132

tool-quickstatementswbstack

1 of 1 See more

tool-quickstatements wbstack 0.4.0

1 of the 1 container images this version deploys carry CVE-2022-24775.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/quickstatements :1.3.5	88423e422ea8	guzzlehttp/psr7@2.1.0	2.1.1

Open the chart page →

1,698

Container images carrying it

63 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/conductionnl/verzoekregistratiecomponent-php :latest	c4f6c03af5d3	guzzlehttp/psr7@1.7.0	1.8.4	1
ghcr.io/conductionnl/verzoektypecatalogus-php :latest	64f5eb7a398b	guzzlehttp/psr7@1.7.0	1.8.4	1
ghcr.io/conductionnl/waardepapieren-balie-php :latest	f36c423cd259	guzzlehttp/psr7@1.7.0	1.8.4	1
ghcr.io/conductionnl/waardepapieren-php :latest	b2666ffcbad8	guzzlehttp/psr7@1.7.0	1.8.4	1
ghcr.io/conductionnl/waardepapieren-register-php :latest	9affab218351	guzzlehttp/psr7@1.7.0	1.8.4	1
ghcr.io/linuxserver/bookstack :version-v21.12	f05447347ff1	guzzlehttp/psr7@2.1.0	2.1.1	1
ghcr.io/nathanvaughn/webtrees :2.0.19	69423a100fab	guzzlehttp/psr7@1.8.3	1.8.4	1
ghcr.io/wbstack/mediawiki :1.37-7.4-20220621-fp-beta-0	c3012c8a34b4	guzzlehttp/psr7@1.8.3	1.8.4	1
ghcr.io/wbstack/quickstatements :1.3.5	88423e422ea8	guzzlehttp/psr7@2.1.0	2.1.1	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	guzzlehttp/psr7@1.7.0	1.8.4	1
quay.io/renokico/laravel-helm-demo :0.6.0	3207f957e80c	guzzlehttp/psr7@1.8.1	1.8.4	1
quay.io/renokico/laravel-helm-demo :worker-0.6.0	4b188259267e	guzzlehttp/psr7@1.8.1	1.8.4	1
quay.io/renokico/laravel-helm-demo :octane-0.6.0	cad83090c58f	guzzlehttp/psr7@1.8.1	1.8.4	1