StackRadar

CVE-2022-24785

High

Advisory

Published 4 Apr 2022In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.055
92nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
114
of 17,781 indexed, latest versions
Container images
117
deployed by those charts
Fix available
1 of 1
affected package

Path Traversal: 'dir/../../filename' in moment.locale

Carried by container images the latest versions of 114 of 17,781 indexed charts deploy, on 117 images.

Affected packageAffected versionsFixed inImages
momentnpm2.1.0, 2.5.1, 2.19.4, 2.21.0+8 more2.29.2117
OSV records
GHSA-8hfj-j24r-96c4

Charts affected

114 by stars
ChartLatestAffected imagesRadar Score
wekan-oldgabisonfire0.1.21 of 1See more

wekan-old gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
wekanteam/wekan:v4.2268a51f0327df
moment@2.27.0
2.29.2

Open the chart page →

5,941
grocygeek-cookbookVerified publisher8.5.21 of 1See more

grocy geek-cookbook 8.5.2

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
linuxserver/grocy:version-v3.1.3291296e66c2a
moment@2.29.1
2.29.2

Open the chart page →

1,043
nightscoutgeek-cookbookVerified publisher1.2.21 of 1See more

nightscout geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
moment@2.27.0
2.29.2

Open the chart page →

4,043
node-redgeek-cookbookVerified publisher10.3.21 of 1See more

node-red geek-cookbook 10.3.2

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
nodered/node-red:2.2.2e131dcadfe92
moment@2.29.1
2.29.2

Open the chart page →

2,102
shinobigeek-cookbookVerified publisher1.2.21 of 1See more

shinobi geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
shinobisystems/shinobi:dev3ca746937856
moment@2.29.1
2.29.2

Open the chart page →

4,591
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
library/ghost:5.79.083f7bf209844
moment@2.24.0
2.29.2

Open the chart page →

9,019
Governify-Bluejaygovernify0.1.05 of 12See more

Governify-Bluejay governify 0.1.0

5 of the 12 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
governify/assets-manager:v1.4.12987672448c7
moment@2.24.0
2.29.2
governify/director:v1.4.0608c6940bb98
moment@2.29.1
2.29.2
governify/registry:v3.4.0d3f37f4f8168
moment@2.29.1
2.29.2
governify/render:v2.2.0daeca1ce28e6
moment@2.29.1
2.29.2
governify/reporter:v2.2.038595913458f
moment@2.29.1
2.29.2

Open the chart page →

22,512
Governify-Falcongovernify0.1.06 of 10See more

Governify-Falcon governify 0.1.0

6 of the 10 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
governify/assets-manager:v1.4.12987672448c7
moment@2.24.0
2.29.2
governify/collector-dynamic:v1.3.06d3d1a5b46a9
moment@2.29.1
2.29.2
governify/director:v1.4.0608c6940bb98
moment@2.29.1
2.29.2
governify/registry:v3.4.0d3f37f4f8168
moment@2.29.1
2.29.2
governify/render:v2.2.0daeca1ce28e6
moment@2.29.1
2.29.2
governify/reporter:v2.2.038595913458f
moment@2.29.1
2.29.2

Open the chart page →

24,319
matrix-appservice-gitterhalkeye0.1.01 of 1See more

matrix-appservice-gitter halkeye 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
matrixdotorg/matrix-appservice-gitter:latest0d37b4d42b47
moment@2.24.0
2.29.2

Open the chart page →

3,003
zigbee2mqtthelm-chart-roeiVerified publisher1.19.01 of 1See more

zigbee2mqtt helm-chart-roei 1.19.0

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
koenkk/zigbee2mqtt:1.19.15f9129b1ffbc
moment@2.29.1
2.29.2

Open the chart page →

2,173
iofoghelm-chartsVerified publisher0.1.11 of 3See more

iofog helm-charts 0.1.1

1 of the 3 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
quay.io/ctrontesting/iofog-controller:latest10df27bc5560
moment@2.24.0
2.29.2

Open the chart page →

24,161
streamsheetshelm-chartsVerified publisher0.2.34 of 8See more

streamsheets helm-charts 0.2.3

4 of the 8 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
moment@2.26.0
2.29.2
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
moment@2.24.0
2.29.2
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
moment@2.24.0
2.29.2
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
moment@2.22.2
2.29.2

Open the chart page →

89,959
backstagehelm-charts-nr0.1.151 of 2See more

backstage helm-charts-nr 0.1.15

1 of the 2 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
moment@2.27.0
2.29.2

Open the chart page →

8,213
wikijshomeenterpriseinc1.4.01 of 1See more

wikijs homeenterpriseinc 1.4.0

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
requarks/wiki:canary-2.5.2438b5865a7386c
moment@2.29.1
2.29.2

Open the chart page →

4,253
crypto-watchdoghuseyinnurbaki0.1.01 of 1See more

crypto-watchdog huseyinnurbaki 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
hhaluk/crypto-watchdog:0.4.0a6555953d941
moment@2.29.1
2.29.2

Open the chart page →

2,656
ibm-app-navigatoribm-charts1.0.11 of 5See more

ibm-app-navigator ibm-charts 1.0.1

1 of the 5 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
ibmcom/app-nav-ui:1.0.1e2a86997b36b
moment@2.24.0
2.29.2

Open the chart page →

32,915
ibm-microclimateibm-charts0.1.02 of 8See more

ibm-microclimate ibm-charts 0.1.0

2 of the 8 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
ibmcom/microclimate-portal:latested5505e5c7ec
moment@2.21.0
2.29.2
ibmcom/microclimate-theia:lateste17bdccc5030
moment@2.21.0
2.29.2

Open the chart page →

57,669
ibm-voice-gateway-devibm-charts3.1.01 of 2See more

ibm-voice-gateway-dev ibm-charts 3.1.0

1 of the 2 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
ibmcom/voice-gateway-mr:1.0.5.00762ab1df6c1
moment@2.24.0
2.29.2

Open the chart page →

4,505
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:1.2.0e4770285aaf7
moment@2.29.1
2.29.2

Open the chart page →

37,671
interbtc-hydrainterlay0.1.151 of 4See more

interbtc-hydra interlay 0.1.15

1 of the 4 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
interlayhq/interbtc-hydra-processor:master-2c6e16e-1637088364423d567d47aa
moment@2.29.1
2.29.2

Open the chart page →

6,831
interlay-firesquidinterlay0.1.111 of 4See more

interlay-firesquid interlay 0.1.11

1 of the 4 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
interlayhq/interbtc-hydra-processor:0.10.55b2c414307b9
moment@2.29.1
2.29.2

Open the chart page →

4,667
yapijoelee2012Verified publisher0.2.01 of 1See more

yapi joelee2012 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
jayfong/yapi:1.10.2163e5d621910
moment@2.29.1
2.29.2

Open the chart page →

6,454
shinobik8s-home-lab-repo2.1.11 of 1See more

shinobi k8s-home-lab-repo 2.1.1

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
shinobisystems/shinobi:latestc2f5ce2e1067
moment@2.29.1
2.29.2

Open the chart page →

4,667
sqlpadkronkltdVerified publisher0.1.01 of 1See more

sqlpad kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
sqlpad/sqlpad:6.7d3d2f430dffd
moment@2.29.1
2.29.2

Open the chart page →

3,397
ohmyformkrzwiatrzyk0.0.11 of 1See more

ohmyform krzwiatrzyk 0.0.1

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
ohmyform/ohmyform:1.0.3afe53f4acdb1
moment@2.29.1
2.29.2

Open the chart page →

4,230
tooljetkrzwiatrzyk1.1.11 of 2See more

tooljet krzwiatrzyk 1.1.1

1 of the 2 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
tooljet/tooljet-ce:v1.18.0c85a4720e42e
moment@2.29.1
2.29.2

Open the chart page →

5,410
tampkubebb5.6.01 of 2See more

tamp kubebb 5.6.0

1 of the 2 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
kubebb/tamp-portal:v5.6.0fadac6d52470
moment@2.29.1
2.29.2

Open the chart page →

4,664
tapm-componentkubebb5.7.11 of 3See more

tapm-component kubebb 5.7.1

1 of the 3 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
refar/apm-portal:v5.7.1dcca8e4477a6
moment@2.29.1
2.29.2

Open the chart page →

10,264
tdsfkubebb5.7.01 of 3See more

tdsf kubebb 5.7.0

1 of the 3 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
kubebb/tdsf-portal:v5.7.0258458311bc9
moment@2.29.1
2.29.2

Open the chart page →

6,490
kubevious-agentkubevious1.0.41 of 1See more

kubevious-agent kubevious 1.0.4

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
kubevious/parser:1.0.151acf1a1f0b47
moment@2.29.1
2.29.2

Open the chart page →

1,927
nubladolsst-sqre0.9.233 of 5See more

nublado lsst-sqre 0.9.23

3 of the 5 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
lsstsqre/prepuller:latest19c2dfc4e4ff
moment@2.29.1
2.29.2
lsstsqre/sciplat-hub:latest5e0ade6bed1c
moment@2.29.1
2.29.2
lsstsqre/wfdispatcher:lateste9feb99f524d
moment@2.29.1
2.29.2

Open the chart page →

5,786
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
moment@2.29.1
2.29.2

Open the chart page →

17,779
opendistro-eslsst-sqre1.4.11 of 3See more

opendistro-es lsst-sqre 1.4.1

1 of the 3 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch-kibana:1.4.05126e2e79a1f
moment@2.24.0
2.29.2

Open the chart page →

7,929
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
opensearchproject/opensearch-dashboards:1.0.039695180364b
moment@2.24.0
2.29.2

Open the chart page →

10,603
standard-application-stackmintel11.4.01 of 12See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
opensearchproject/opensearch-dashboards:1.0.039695180364b
moment@2.24.0
2.29.2

Open the chart page →

10,603
account-lookup-servicemojaloop13.0.02 of 4See more

account-lookup-service mojaloop 13.0.0

2 of the 4 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
mojaloop/account-lookup-service:v11.8.0b06d3287ea82
moment@2.29.1
2.29.2
mojaloop/event-sidecar:v11.0.189b8ab71b74b
moment@2.29.1
2.29.2

Open the chart page →

11,695
account-lookup-service-adminmojaloop13.0.02 of 4See more

account-lookup-service-admin mojaloop 13.0.0

2 of the 4 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
mojaloop/account-lookup-service:v11.8.0b06d3287ea82
moment@2.29.1
2.29.2
mojaloop/event-sidecar:v11.0.189b8ab71b74b
moment@2.29.1
2.29.2

Open the chart page →

11,695
admin-api-svcmojaloop12.0.02 of 4See more

admin-api-svc mojaloop 12.0.0

2 of the 4 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
mojaloop/central-ledger:v13.14.01abc8a7aa71c
moment@2.29.1
2.29.2
mojaloop/event-sidecar:v11.0.189b8ab71b74b
moment@2.29.1
2.29.2

Open the chart page →

12,108
fspiop-transfer-api-svcmojaloop12.0.12 of 3See more

fspiop-transfer-api-svc mojaloop 12.0.1

2 of the 3 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
mojaloop/event-sidecar:v11.0.189b8ab71b74b
moment@2.29.1
2.29.2
mojaloop/ml-api-adapter:v11.1.6fb71d233c742
moment@2.27.0
2.29.2

Open the chart page →

11,479
mojaloopmojaloop14.0.04 of 6See more

mojaloop mojaloop 14.0.0

4 of the 6 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
mojaloop/account-lookup-service:v11.8.0b06d3287ea82
moment@2.29.1
2.29.2
mojaloop/central-ledger:v13.14.01abc8a7aa71c
moment@2.29.1
2.29.2
mojaloop/event-sidecar:v11.0.189b8ab71b74b
moment@2.29.1
2.29.2
mojaloop/ml-api-adapter:v11.1.6fb71d233c742
moment@2.27.0
2.29.2

Open the chart page →

19,226
sample-appmongodb-helm-charts0.1.01 of 2See more

sample-app mongodb-helm-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
moment@2.29.1
2.29.2

Open the chart page →

6,438
sentence-collectormozilla0.1.21 of 2See more

sentence-collector mozilla 0.1.2

1 of the 2 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
mozilla/sentencecollector:2.0.91da6ff5c4895
moment@2.27.0
2.29.2

Open the chart page →

6,684
ghostmt1905028.25.11 of 3See more

ghost mt190502 8.25.1

1 of the 3 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
library/ghost:6.25.12654b1e90413
moment@2.24.0
2.29.2

Open the chart page →

4,960
example-dev-toolsnoygal0.2.82 of 3See more

example-dev-tools noygal 0.2.8

2 of the 3 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
linuxserver/cloud9:latest45c5fe102ff3
moment@2.1.0
2.29.2
linuxserver/codimd:latestb801bbcf6386
moment@2.29.1
2.29.2

Open the chart page →

27,465
ferdi-serverobeoneVerified publisher1.0.31 of 2See more

ferdi-server obeone 1.0.3

1 of the 2 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
getferdi/ferdi-server:1.3.26e620b85afaa
moment@2.24.0
2.29.2

Open the chart page →

1,866
flomesh-consoleopenshift0.70.0-30-ubi81 of 2See more

flomesh-console openshift 0.70.0-30-ubi8

1 of the 2 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
moment@2.29.1
2.29.2

Open the chart page →

9,968
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
openwhisk/alarmprovider:2.2.0b695a6ceb406
moment@2.27.0
2.29.2

Open the chart page →

36,215
practica-helmpractica-helm0.1.01 of 7See more

practica-helm practica-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
slagattollas/server-practica:latest6dd8ead8e2b1
moment@2.29.1
2.29.2

Open the chart page →

28,484
gristrlex0.1.01 of 1See more

grist rlex 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
gristlabs/grist:0.7.96e71b1914a7e
moment@2.29.1
2.29.2

Open the chart page →

5,215
joplinrubxkubeVerified publisher1.3.11 of 2See more

joplin rubxkube 1.3.1

1 of the 2 container images this version deploys carry CVE-2022-24785.

Container imageDigestPackageFixed in
joplin/server:3.0-beta52af57880c0e
moment@2.29.1
2.29.2

Open the chart page →

7,413

Container images carrying it

117 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
moment@2.26.0
2.29.2
1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
moment@2.24.0
2.29.2
1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
moment@2.24.0
2.29.2
1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
moment@2.22.2
2.29.2
1
ghcr.io/data-fair/simple-directory:438a4f32fad82
moment@2.29.1
2.29.2
1
ghcr.io/leoquote/mergeable:latest451706815103
moment@2.25.3
2.29.2
1
ghcr.io/linuxserver/raneto:version-0.16.6ef768f3df5d0
moment@2.29.1
2.29.2
1
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
moment@2.29.1
2.29.2
1
ghcr.io/sct/overseerr:1.26.1254d16af8f71
moment@2.29.1
2.29.2
1
ghcr.io/wbstack/queryservice-gateway:2.2ab8e2f583e56
moment@2.24.0
2.29.2
1
quay.io/ctrontesting/iofog-controller:latest10df27bc5560
moment@2.24.0
2.29.2
1
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
moment@2.29.1
2.29.2
1
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
moment@2.29.1
2.29.2
1
quay.io/soketi/pws:0.8-16-alpine399d2e6b10ef
moment@2.29.1
2.29.2
1
quay.io/t3n/dashkiosk:v2.7.8c973e166a5dc
moment@2.5.1
2.29.2
1
quay.io/wekan/wekan:v5.65cb17600883a3
moment@2.29.1
2.29.2
1
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
moment@2.22.2
2.29.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.