StackRadar

CVE-2022-24785

High

Advisory

Published 4 Apr 2022In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.055
92nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
114
of 17,781 indexed, latest versions
Container images
117
deployed by those charts
Fix available
1 of 1
affected package

Path Traversal: 'dir/../../filename' in moment.locale

Carried by container images the latest versions of 114 of 17,781 indexed charts deploy, on 117 images.

Affected packageAffected versionsFixed inImages
momentnpm2.1.0, 2.5.1, 2.19.4, 2.21.0+8 more2.29.2117
OSV records
GHSA-8hfj-j24r-96c4

Charts affected

114 by stars
ChartLatestAffected imagesRadar Score
lighthouse-cicowboysysopVerified publisher9.0.01 of 1See more

lighthouse-ci cowboysysop 9.0.0

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
patrickhulce/lhci-server:0.8.174b4b6a3954d
moment@2.29.1
2.29.2

Open the chart page →

2,213
misskeyalytiVerified publisher1.0.01 of 1See more

misskey alyti 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
misskey/misskey:12.110.1e08b7c478093
moment@2.24.0
2.29.2

Open the chart page →

5,251
fadicetic0.3.12 of 25See more

fadi cetic 0.3.1

2 of the 25 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
moment@2.29.1
2.29.2
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
moment@2.29.1
2.29.2

Open the chart page →

52,919
backstagedeliveryheroVerified publisher0.1.151 of 2See more

backstage deliveryhero 0.1.15

1 of the 2 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
moment@2.27.0
2.29.2

Open the chart page →

8,213
wikijsgeek-cookbookVerified publisher6.4.21 of 1See more

wikijs geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
moment@2.29.1
2.29.2

Open the chart page →

5,946
open5gsopen5gsVerified publisher2.3.41 of 5See more

open5gs open5gs 2.3.4

1 of the 5 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
gradiant/open5gs-webui:2.7.5fbd10c017541
moment@2.22.2
2.29.2

Open the chart page →

9,261
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
moment@2.29.1
2.29.2

Open the chart page →

22,773
zwavejs2mqttgeek-cookbookVerified publisher5.4.21 of 1See more

zwavejs2mqtt geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
zwavejs/zwavejs2mqtt:5.0.215a6040fb468
moment@2.29.1
2.29.2

Open the chart page →

3,476
kongakonga1.1.01 of 1See more

konga konga 1.1.0

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
moment@2.25.1
2.29.2

Open the chart page →

5,209
kubeviouskubevious1.2.21 of 7See more

kubevious kubevious 1.2.2

1 of the 7 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
kubevious/guard:1.2.19bf567704de2
moment@2.29.1
2.29.2

Open the chart page →

14,204
flagsmithone-acre-fundVerified publisher0.1.51 of 6See more

flagsmith one-acre-fund 0.1.5

1 of the 6 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
flagsmith/flagsmith-frontend:v2.6.0df02a29e8b0c
moment@2.22.2
2.29.2

Open the chart page →

6,868
kobotoolboxone-acre-fundVerified publisher0.7.42 of 9See more

kobotoolbox one-acre-fund 0.7.4

2 of the 9 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
enketo/enketo-express:3.0.4dcad9c2273f6
moment@2.29.1
2.29.2
kobotoolbox/kpi:2.022.24dbcacc01bccd4
moment@2.27.0
2.29.2

Open the chart page →

18,517
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-kbn:latest0570b27bb7c2
moment@2.28.0
2.29.2

Open the chart page →

17,896
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-kbn:latest2297b4350211
moment@2.29.1
2.29.2

Open the chart page →

10,730
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
ghcr.io/data-fair/simple-directory:438a4f32fad82
moment@2.29.1
2.29.2

Open the chart page →

38,346
joplin-serverdjjudas21Verified publisher5.5.81 of 1See more

joplin-server djjudas21 5.5.8

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
joplin/server:2.14.2-betab87564ef34e9
moment@2.29.1
2.29.2

Open the chart page →

3,925
ranetogabisonfire0.1.21 of 1See more

raneto gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/raneto:version-0.16.6ef768f3df5d0
moment@2.29.1
2.29.2

Open the chart page →

2,519
ghostgeek-cookbookVerified publisher2.2.01 of 1See more

ghost geek-cookbook 2.2.0

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
library/ghost:4.37.0767230c0f263
moment@2.24.0
2.29.2

Open the chart page →

4,260
magic-mirrorgeek-cookbookVerified publisher4.4.21 of 1See more

magic-mirror geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
bastilimbach/docker-magicmirror:v2.15.041b0835ab31e
moment@2.29.1
2.29.2

Open the chart page →

4,405
overseerrgeek-cookbookVerified publisher5.4.21 of 1See more

overseerr geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
ghcr.io/sct/overseerr:1.26.1254d16af8f71
moment@2.29.1
2.29.2

Open the chart page →

3,444
recipesgeek-cookbookVerified publisher6.6.21 of 2See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
vabene1111/recipes:1.0.5.2ec4e9e2905b0
moment@2.29.1
2.29.2

Open the chart page →

7,801
uptimerobotgeek-cookbookVerified publisher3.0.41 of 1See more

uptimerobot geek-cookbook 3.0.4

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
billimek/node-influx-uptimerobot:latest5814f0bcf5ba
moment@2.22.2
2.29.2

Open the chart page →

1,669
youtubedl-materialgeek-cookbookVerified publisher4.4.21 of 1See more

youtubedl-material geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:4.23720b856bd2f
moment@2.29.1
2.29.2

Open the chart page →

4,410
zigbee2mqttgeek-cookbookVerified publisher9.4.21 of 1See more

zigbee2mqtt geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
koenkk/zigbee2mqtt:1.19.15f9129b1ffbc
moment@2.29.1
2.29.2

Open the chart page →

2,173
pdc-portali4trustVerified publisher2.3.21 of 1See more

pdc-portal i4trust 2.3.2

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
i4trust/pdc-portal:2.0.03e77858e1219
moment@2.29.1
2.29.2

Open the chart page →

2,723
open5gs-webuiopen5gs-webuiVerified publisher2.3.11 of 2See more

open5gs-webui open5gs-webui 2.3.1

1 of the 2 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
gradiant/open5gs-webui:2.7.5fbd10c017541
moment@2.22.2
2.29.2

Open the chart page →

5,300
flamerlex0.3.01 of 1See more

flame rlex 0.3.0

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
pawelmalak/flame:2.1.193e7b0abb603
moment@2.29.1
2.29.2

Open the chart page →

2,449
testhubteshubVerified publisher0.1.41 of 3See more

testhub teshub 0.1.4

1 of the 3 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
testhubio/testhub-frontend:on-preme86c2db53be8
moment@2.24.0
2.29.2

Open the chart page →

7,517
restreamerutkuozdemirVerified publisher1.1.01 of 1See more

restreamer utkuozdemir 1.1.0

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
datarhei/restreamer:0.6.4655e12f9eeed
moment@2.24.0
2.29.2

Open the chart page →

2,598
scrapoxywiremindVerified publisher0.3.41 of 1See more

scrapoxy wiremind 0.3.4

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
wiremind/scrapoxy:lateste7048929a676
moment@2.19.4
2.29.2

Open the chart page →

2,154
open5gsadaptivenetlabVerified publisher1.0.31 of 3See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
moment@2.22.2
2.29.2

Open the chart page →

25,443
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
moment@2.25.1
2.29.2

Open the chart page →

18,277
opendistro-esbeeinventor1.15.11 of 3See more

opendistro-es beeinventor 1.15.1

1 of the 3 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch-kibana:1.13.2c740d7a89475
moment@2.24.0
2.29.2

Open the chart page →

5,806
ghostchart-ghost0.1.51 of 2See more

ghost chart-ghost 0.1.5

1 of the 2 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
library/ghost:6.22.0-alpine3.23ac533a6988ee
moment@2.24.0
2.29.2

Open the chart page →

4,083
daskcloudnativeapp2.2.11 of 2See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
daskdev/dask-notebook:1.1.0052630f5ca04
moment@2.21.0
2.29.2

Open the chart page →

29,901
ethereumcloudnativeapp1.0.01 of 3See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
moment@2.19.4
2.29.2

Open the chart page →

27,417
hubotcloudnativeapp0.0.11 of 1See more

hubot cloudnativeapp 0.0.1

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
minddocdev/hubot:0.1.96c60b11a4fa7
moment@2.22.2
2.29.2

Open the chart page →

2,580
node-redcloudnativeapp1.2.21 of 1See more

node-red cloudnativeapp 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
nodered/node-red-docker:0.19.6-v8070643219ea2
moment@2.24.0
2.29.2

Open the chart page →

4,790
robot-shopcloud-native-toolkit1.1.13 of 12See more

robot-shop cloud-native-toolkit 1.1.1

3 of the 12 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
robotshop/rs-cart:latest388349d5cb3c
moment@2.29.1
2.29.2
robotshop/rs-catalogue:latestd545747c1b97
moment@2.29.1
2.29.2
robotshop/rs-user:latestea509182c180
moment@2.29.1
2.29.2

Open the chart page →

29,555
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
conduction/conduction-ui-app:devd591f5e6f2a9
moment@2.29.1
2.29.2

Open the chart page →

12,907
kongacreate-databases0.1.01 of 1See more

konga create-databases 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
moment@2.25.1
2.29.2

Open the chart page →

5,209
eoloplannerdfa-amm-eoloplannerVerified publisher0.1.01 of 7See more

eoloplanner dfa-amm-eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
moment@2.29.1
2.29.2

Open the chart page →

27,550
mergeabledoubanVerified publisher0.2.21 of 1See more

mergeable douban 0.2.2

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
ghcr.io/leoquote/mergeable:latest451706815103
moment@2.25.3
2.29.2

Open the chart page →

4,223
eoloplannerdreyg-jescribanob-chart-eoloplanner0.1.01 of 7See more

eoloplanner dreyg-jescribanob-chart-eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
moment@2.29.1
2.29.2

Open the chart page →

24,656
amundsenduyet1.1.01 of 7See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
amundsendev/amundsen-frontend:2.1.169e7915e61c1
moment@2.22.2
2.29.2

Open the chart page →

11,174
eolicplantseolicplantsVerified publisher0.1.01 of 7See more

eolicplants eolicplants 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
moment@2.29.1
2.29.2

Open the chart page →

27,291
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.01 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
moment@2.29.1
2.29.2

Open the chart page →

27,256
testnet-faucetethereum-helm-chartsVerified publisher0.1.31 of 1See more

testnet-faucet ethereum-helm-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
parithoshj/testnet-faucet:9859e0dcdca426fea6d
moment@2.24.0
2.29.2

Open the chart page →

3,005
iotagent-ulfiware0.1.21 of 1See more

iotagent-ul fiware 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
fiware/iotagent-ul:1.14.0fe11f55a926d
moment@2.28.0
2.29.2

Open the chart page →

3,337
flamegabe565Verified publisher0.6.01 of 1See more

flame gabe565 0.6.0

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
pawelmalak/flame:multiarch2.3.19f88b17692a0
moment@2.29.1
2.29.2

Open the chart page →

2,172

Container images carrying it

117 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
kubebb/tamp-portal:v5.6.0fadac6d52470
moment@2.29.1
2.29.2
1
kubebb/tdsf-portal:v5.7.0258458311bc9
moment@2.29.1
2.29.2
1
kubevious/guard:1.2.19bf567704de2
moment@2.29.1
2.29.2
1
kubevious/parser:1.0.151acf1a1f0b47
moment@2.29.1
2.29.2
1
library/ghost:6.25.12654b1e90413
moment@2.24.0
2.29.2
1
library/ghost:4.37.0767230c0f263
moment@2.24.0
2.29.2
1
library/ghost:5.79.083f7bf209844
moment@2.24.0
2.29.2
1
library/ghost:6.22.0-alpine3.23ac533a6988ee
moment@2.24.0
2.29.2
1
linuxserver/calibre:version-v5.21.0a847b5b2d860
moment@2.29.1
2.29.2
1
linuxserver/cloud9:latest45c5fe102ff3
moment@2.1.0
2.29.2
1
linuxserver/codimd:latestb801bbcf6386
moment@2.29.1
2.29.2
1
linuxserver/grocy:version-v3.1.3291296e66c2a
moment@2.29.1
2.29.2
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
moment@2.29.1
2.29.2
1
lsstsqre/prepuller:latest19c2dfc4e4ff
moment@2.29.1
2.29.2
1
lsstsqre/sciplat-hub:latest5e0ade6bed1c
moment@2.29.1
2.29.2
1
lsstsqre/wfdispatcher:lateste9feb99f524d
moment@2.29.1
2.29.2
1
matrixdotorg/matrix-appservice-gitter:latest0d37b4d42b47
moment@2.24.0
2.29.2
1
minddocdev/hubot:0.1.96c60b11a4fa7
moment@2.22.2
2.29.2
1
misskey/misskey:12.110.1e08b7c478093
moment@2.24.0
2.29.2
1
mozilla/sentencecollector:2.0.91da6ff5c4895
moment@2.27.0
2.29.2
1
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
moment@2.27.0
2.29.2
1
nodered/node-red:2.2.2e131dcadfe92
moment@2.29.1
2.29.2
1
nodered/node-red-docker:0.19.6-v8070643219ea2
moment@2.24.0
2.29.2
1
ohmyform/ohmyform:1.0.3afe53f4acdb1
moment@2.29.1
2.29.2
1
openwhisk/alarmprovider:2.2.0b695a6ceb406
moment@2.27.0
2.29.2
1
parithoshj/testnet-faucet:9859e0dcdca426fea6d
moment@2.24.0
2.29.2
1
patrickhulce/lhci-server:0.8.174b4b6a3954d
moment@2.29.1
2.29.2
1
pawelmalak/flame:2.1.193e7b0abb603
moment@2.29.1
2.29.2
1
pawelmalak/flame:multiarch2.3.19f88b17692a0
moment@2.29.1
2.29.2
1
polonel/trudesk:1.2.60cf6513f6fe3
moment@2.24.0
2.29.2
1
refar/apm-portal:v5.7.1dcca8e4477a6
moment@2.29.1
2.29.2
1
requarks/wiki:canary-2.5.2438b5865a7386c
moment@2.29.1
2.29.2
1
robotshop/rs-cart:latest388349d5cb3c
moment@2.29.1
2.29.2
1
robotshop/rs-catalogue:latestd545747c1b97
moment@2.29.1
2.29.2
1
robotshop/rs-user:latestea509182c180
moment@2.29.1
2.29.2
1
shinobisystems/shinobi:dev3ca746937856
moment@2.29.1
2.29.2
1
shinobisystems/shinobi:latestc2f5ce2e1067
moment@2.29.1
2.29.2
1
siscc/dotstatsuite-data-lifecycle-manager:v14.0.0b6f9a7c888fc
moment@2.29.1
2.29.2
1
slagattollas/server-practica:latest6dd8ead8e2b1
moment@2.29.1
2.29.2
1
someblackmagic/alertmanager-to-alerta-bot:latest78bf43744ea5
moment@2.29.1
2.29.2
1
sqlpad/sqlpad:6.7d3d2f430dffd
moment@2.29.1
2.29.2
1
temporalio/web:1.14.033cfa863d8ce
moment@2.27.0
2.29.2
1
testhubio/testhub-frontend:on-preme86c2db53be8
moment@2.24.0
2.29.2
1
tooljet/tooljet-ce:v1.18.0c85a4720e42e
moment@2.29.1
2.29.2
1
tzahi12345/youtubedl-material:4.23720b856bd2f
moment@2.29.1
2.29.2
1
ubercadence/web:v3.29.58564a5b44a6d
moment@2.29.1
2.29.2
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
moment@2.29.1
2.29.2
1
wekanteam/wekan:v4.2268a51f0327df
moment@2.27.0
2.29.2
1
wiremind/scrapoxy:lateste7048929a676
moment@2.19.4
2.29.2
1
zwavejs/zwavejs2mqtt:5.0.215a6040fb468
moment@2.29.1
2.29.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.