StackRadar

CVE-2022-25168

Critical

Advisory

Published 5 Aug 2022In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.042
90th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
43
of 17,781 indexed, latest versions
Container images
36
deployed by those charts
Fix available
1 of 1
affected package

Apache Hadoop argument injection vulnerability

Carried by container images the latest versions of 43 of 17,781 indexed charts deploy, on 36 images.

Affected packageAffected versionsFixed inImages
hadoop-commonmaven2.7.0, 2.7.3, 2.7.4, 2.7.5+17 more2.10.2, 3.2.4, 3.3.336
OSV records
GHSA-8wm5-8h9c-47pc

Charts affected

43 by stars
ChartLatestAffected imagesRadar Score
sparkmicrosoft1.0.42 of 3See more

spark microsoft 1.0.4

2 of the 3 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
dbanda/livy:0.80ca125e68e53
hadoop-common@2.7.3
2.10.2
dbanda/spark:2.4.6d0e6367876ae
hadoop-common@3.1.3
3.2.4

Open the chart page →

13,738
solrpreferred-aiVerified publisher3.2.01 of 3See more

solr preferred-ai 3.2.0

1 of the 3 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
library/solr:8.7.0d124efd81fbb
hadoop-common@3.2.0
3.2.4

Open the chart page →

6,048
hadoopbigdata-chartsVerified publisher1.0.11 of 2See more

hadoop bigdata-charts 1.0.1

1 of the 2 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
marcelmay/hadoop-hdfs-fsimage-exporter:1.3abeccb740ef7
hadoop-common@3.2.0
3.2.4

Open the chart page →

12,111
hivebigdata-chartsVerified publisher0.1.81 of 1See more

hive bigdata-charts 0.1.8

1 of the 1 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
hadoop-common@3.2.3
3.2.4

Open the chart page →

7,166
hdfsdmwm-bigdataVerified publisher1.0.12 of 2See more

hdfs dmwm-bigdata 1.0.1

2 of the 2 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
gradiant/hdfs:3.2.2e3bf364fe713
hadoop-common@3.2.2
3.2.4
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
hadoop-common@2.7.5
2.10.2

Open the chart page →

7,948
hivedmwm-bigdataVerified publisher0.1.64 of 5See more

hive dmwm-bigdata 0.1.6

4 of the 5 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
hadoop-common@2.7.4
2.10.2
gradiant/hdfs:2.7.73b28784ba41f
hadoop-common@2.7.7
2.10.2
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
hadoop-common@2.7.4
2.10.2
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
hadoop-common@2.7.5
2.10.2

Open the chart page →

20,837
hive-metastoreheva-helm-chartsVerified publisher0.2.01 of 2See more

hive-metastore heva-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
sslhep/hive-metastore:3.1.39e80af083079
hadoop-common@3.1.0
3.2.4

Open the chart page →

7,335
cratedbhmdmph2.0.31 of 2See more

cratedb hmdmph 2.0.3

1 of the 2 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
library/crate:4.7.0c7984a05e15b
hadoop-common@2.8.1
2.10.2

Open the chart page →

1,335
hive-metastoreslamdev0.0.51 of 2See more

hive-metastore slamdev 0.0.5

1 of the 2 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
hadoop-common@2.10.1
2.10.2

Open the chart page →

8,198
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-thv:latestc8b6c7eaa0cd
hadoop-common@3.3.2
3.3.3

Open the chart page →

17,896
hadoopcloudnativeapp1.1.01 of 1See more

hadoop cloudnativeapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
hadoop-common@2.9.0
2.10.2

Open the chart page →

5,772
ignitecloudnativeapp1.0.01 of 1See more

ignite cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
apacheignite/ignite:2.7.0d7deab68b8fa
hadoop-common@2.7.7
2.10.2

Open the chart page →

7,891
hbasedmwm-bigdataVerified publisher0.1.63 of 5See more

hbase dmwm-bigdata 0.1.6

3 of the 5 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
hadoop-common@2.7.4
2.10.2
gradiant/hdfs:2.7.73b28784ba41f
hadoop-common@2.7.7
2.10.2
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
hadoop-common@2.7.5
2.10.2

Open the chart page →

13,392
hive-metastoredmwm-bigdataVerified publisher0.1.31 of 2See more

hive-metastore dmwm-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
hadoop-common@2.7.4
2.10.2

Open the chart page →

6,882
opentsdbdmwm-bigdataVerified publisher0.1.73 of 6See more

opentsdb dmwm-bigdata 0.1.7

3 of the 6 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
hadoop-common@2.7.4
2.10.2
gradiant/hdfs:2.7.73b28784ba41f
hadoop-common@2.7.7
2.10.2
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
hadoop-common@2.7.5
2.10.2

Open the chart page →

17,511
hbasegradiant-bigdataVerified publisher0.1.63 of 5See more

hbase gradiant-bigdata 0.1.6

3 of the 5 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
hadoop-common@2.7.4
2.10.2
gradiant/hdfs:2.7.73b28784ba41f
hadoop-common@2.7.7
2.10.2
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
hadoop-common@2.7.5
2.10.2

Open the chart page →

13,392
stormgresearch1.2.01 of 3See more

storm gresearch 1.2.0

1 of the 3 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
library/storm:2.4.0bd5d420506d6
hadoop-common@2.8.5
2.10.2

Open the chart page →

6,165
gridgaingridgainOfficialVerified publisher1.0.61 of 1See more

gridgain gridgain 1.0.6

1 of the 1 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
gridgain/community:8.9.11d32d182a0e6a
hadoop-common@2.8.5
2.10.2

Open the chart page →

4,679
hadoopmiuler1.2.21 of 1See more

hadoop miuler 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
hadoop-common@2.9.0
2.10.2

Open the chart page →

5,772
starwhalestarwhaleVerified publisher0.6.151 of 4See more

starwhale starwhale 0.6.15

1 of the 4 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
ghcr.io/star-whale/server:0.6.158368359c8dd0
hadoop-common@2.10.1
2.10.2

Open the chart page →

13,486
ckanstatcan0.0.351 of 8See more

ckan statcan 0.0.35

1 of the 8 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
hadoop-common@3.2.2
3.2.4

Open the chart page →

24,930
chart-app-vidapp-vid-chartVerified publisher0.0.71 of 2See more

chart-app-vid app-vid-chart 0.0.7

1 of the 2 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
fimperato/sparkvid-api:1.0.5-RELEASE604012b77841
hadoop-common@2.7.4
2.10.2

Open the chart page →

8,866
spark-history-servercloudnativeapp1.0.01 of 3See more

spark-history-server cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
lightbend/spark-history-server:2.4.00bedf37f428a
hadoop-common@2.7.3
2.10.2

Open the chart page →

14,066
apache-ranger-admindata-platform-stableVerified publisher0.2.01 of 2See more

apache-ranger-admin data-platform-stable 0.2.0

1 of the 2 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
hadoop-common@3.1.1
3.2.4

Open the chart page →

8,245
spark-standalonedmwm-bigdataVerified publisher0.1.01 of 2See more

spark-standalone dmwm-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
gradiant/spark:2.4.4-python-alpine97657d56e927
hadoop-common@2.7.3
2.10.2

Open the chart page →

6,147
spark-shuffleduyet0.2.01 of 1See more

spark-shuffle duyet 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
snappydatainc/spark-shuffle:v2.2.0-kubernetes-0.5.1fd4b2070466f
hadoop-common@2.7.3
2.10.2

Open the chart page →

5,639
hdfsgradiant-bigdataVerified publisher0.1.102 of 2See more

hdfs gradiant-bigdata 0.1.10

2 of the 2 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
gradiant/hdfs:2.7.73b28784ba41f
hadoop-common@2.7.7
2.10.2
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
hadoop-common@2.7.5
2.10.2

Open the chart page →

7,073
hivegradiant-bigdataVerified publisher0.1.64 of 5See more

hive gradiant-bigdata 0.1.6

4 of the 5 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
hadoop-common@2.7.4
2.10.2
gradiant/hdfs:2.7.73b28784ba41f
hadoop-common@2.7.7
2.10.2
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
hadoop-common@2.7.4
2.10.2
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
hadoop-common@2.7.5
2.10.2

Open the chart page →

20,837
hive-metastoregradiant-bigdataVerified publisher0.1.31 of 2See more

hive-metastore gradiant-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
hadoop-common@2.7.4
2.10.2

Open the chart page →

6,882
opentsdbgradiant-bigdataVerified publisher0.1.73 of 6See more

opentsdb gradiant-bigdata 0.1.7

3 of the 6 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
hadoop-common@2.7.4
2.10.2
gradiant/hdfs:2.7.73b28784ba41f
hadoop-common@2.7.7
2.10.2
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
hadoop-common@2.7.5
2.10.2

Open the chart page →

17,511
spark-standalonegradiant-bigdataVerified publisher0.1.01 of 2See more

spark-standalone gradiant-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
gradiant/spark:2.4.4-python-alpine97657d56e927
hadoop-common@2.7.3
2.10.2

Open the chart page →

6,147
hazelcast-jethazelcastVerified publisher1.17.11 of 1See more

hazelcast-jet hazelcast 1.17.1

1 of the 1 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
hazelcast/hazelcast-jet:4.5.3a825ecbe9fda
hadoop-common@3.3.0
3.3.3

Open the chart page →

6,102
hbasehbase0.1.71 of 4See more

hbase hbase 0.1.7

1 of the 4 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
ghcr.io/fleeksoft/hbase/hbase-base:2.4.13.2c144bdd688d7
hadoop-common@2.10.0
2.10.2

Open the chart page →

10,540
ibm-business-automation-insights-devibm-charts3.2.01 of 6See more

ibm-business-automation-insights-dev ibm-charts 3.2.0

1 of the 6 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
ibmcom/bai-flink-dev:19.0.2e31ff09e8aad
hadoop-common@2.8.3
2.10.2

Open the chart page →

39,349
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
dremio/dremio-oss:24.1.080ed2e3b7c43
hadoop-common@3.3.2-dremio-202305122016210436-942ab1c
3.3.3

Open the chart page →

37,671
delta-sharing-serverinseefrlab1.2.11 of 1See more

delta-sharing-server inseefrlab 1.2.1

1 of the 1 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
deltaio/delta-sharing-server:0.2.08b75118187c5
hadoop-common@2.10.1
2.10.2

Open the chart page →

6,174
pinotinseefrlab0.2.01 of 2See more

pinot inseefrlab 0.2.0

1 of the 2 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
apachepinot/pinot:latest-jdk110018bb04ced7
hadoop-common@2.7.0
2.10.2

Open the chart page →

10,777
hive-metastoreolehrgfVerified publisher0.1.01 of 1See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
hadoop-common@3.3.2
3.3.3

Open the chart page →

8,540
apache-knox-helmpfisterer-knox0.1.111 of 1See more

apache-knox-helm pfisterer-knox 0.1.11

1 of the 1 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
farberg/apache-knox-docker:1.6.14b4a22487394
hadoop-common@3.2.1
3.2.4

Open the chart page →

6,237
hive-metastorepresto-loadbalancer0.2.31 of 1See more

hive-metastore presto-loadbalancer 0.2.3

1 of the 1 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
datappeal/hive-metastore:lateste38c085a3567
hadoop-common@3.2.0
3.2.4

Open the chart page →

9,606
fdi-dotstatsuite-sfs-solrstatcan1.0.21 of 4See more

fdi-dotstatsuite-sfs-solr statcan 1.0.2

1 of the 4 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
hadoop-common@3.2.2
3.2.4

Open the chart page →

6,065
solrstatcan1.5.101 of 3See more

solr statcan 1.5.10

1 of the 3 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
hadoop-common@3.2.2
3.2.4

Open the chart page →

8,806
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2022-25168.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
hadoop-common@3.1.3
3.2.4

Open the chart page →

13,767

Container images carrying it

36 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
hadoop-common@2.7.5
2.10.2
8
gradiant/hdfs:2.7.73b28784ba41f
hadoop-common@2.7.7
2.10.2
7
bde2020/hive:2.3.2-postgresql-metastore620267768985
hadoop-common@2.7.4
2.10.2
4
gradiant/hbase-base:2.0.1a1ee6de94c04
hadoop-common@2.7.4
2.10.2
4
library/solr:8.11.18c5f7881cebb
hadoop-common@3.2.2
3.2.4
3
danisla/hadoop:2.9.0255ba2dd739b
hadoop-common@2.9.0
2.10.2
2
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
hadoop-common@2.7.4
2.10.2
2
gradiant/spark:2.4.4-python-alpine97657d56e927
hadoop-common@2.7.3
2.10.2
2
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
hadoop-common@3.2.3
3.2.4
1
apacheignite/ignite:2.7.0d7deab68b8fa
hadoop-common@2.7.7
2.10.2
1
apachepinot/pinot:latest-jdk110018bb04ced7
hadoop-common@2.7.0
2.10.2
1
assistiot/cybersecurity-monitoring_ir-thv:latestc8b6c7eaa0cd
hadoop-common@3.3.2
3.3.3
1
datappeal/hive-metastore:lateste38c085a3567
hadoop-common@3.2.0
3.2.4
1
dbanda/livy:0.80ca125e68e53
hadoop-common@2.7.3
2.10.2
1
dbanda/spark:2.4.6d0e6367876ae
hadoop-common@3.1.3
3.2.4
1
deltaio/delta-sharing-server:0.2.08b75118187c5
hadoop-common@2.10.1
2.10.2
1
dremio/dremio-oss:24.1.080ed2e3b7c43
hadoop-common@3.3.2-dremio-202305122016210436-942ab1c
3.3.3
1
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
hadoop-common@3.1.1
3.2.4
1
farberg/apache-knox-docker:1.6.14b4a22487394
hadoop-common@3.2.1
3.2.4
1
fimperato/sparkvid-api:1.0.5-RELEASE604012b77841
hadoop-common@2.7.4
2.10.2
1
gradiant/hdfs:3.2.2e3bf364fe713
hadoop-common@3.2.2
3.2.4
1
gridgain/community:8.9.11d32d182a0e6a
hadoop-common@2.8.5
2.10.2
1
hazelcast/hazelcast-jet:4.5.3a825ecbe9fda
hadoop-common@3.3.0
3.3.3
1
ibmcom/bai-flink-dev:19.0.2e31ff09e8aad
hadoop-common@2.8.3
2.10.2
1
library/crate:4.7.0c7984a05e15b
hadoop-common@2.8.1
2.10.2
1
library/solr:8.7.0d124efd81fbb
hadoop-common@3.2.0
3.2.4
1
library/storm:2.4.0bd5d420506d6
hadoop-common@2.8.5
2.10.2
1
lightbend/spark-history-server:2.4.00bedf37f428a
hadoop-common@2.7.3
2.10.2
1
marcelmay/hadoop-hdfs-fsimage-exporter:1.3abeccb740ef7
hadoop-common@3.2.0
3.2.4
1
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
hadoop-common@2.10.1
2.10.2
1
snappydatainc/spark-shuffle:v2.2.0-kubernetes-0.5.1fd4b2070466f
hadoop-common@2.7.3
2.10.2
1
sslhep/hive-metastore:3.1.39e80af083079
hadoop-common@3.1.0
3.2.4
1
trinodb/trino:405ee80ab5eeab2
hadoop-common@3.1.3
3.2.4
1
ghcr.io/fleeksoft/hbase/hbase-base:2.4.13.2c144bdd688d7
hadoop-common@2.10.0
2.10.2
1
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
hadoop-common@3.3.2
3.3.3
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
hadoop-common@2.10.1
2.10.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.