StackRadar

CVE-2022-25315

Critical

Advisory

Published 18 Feb 2022In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.048
91st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
394
of 17,781 indexed, latest versions
Container images
317
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 394 of 17,781 indexed charts deploy, on 317 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+6 more2.1.0-4ubuntu1.4+esm6, 2.1.0-7ubuntu0.16.04.5+esm5, 2.2.5-3ubuntu0.7, 2.2.9-1ubuntu0.4167
expatapk2.2.9-r1, 2.2.10-r0, 2.2.10-r1, 2.2.10-r2+3 more2.2.10-r2, 2.2.10-r4, 2.4.5-r0150
OSV records
ALPINE-CVE-2022-25315UBUNTU-CVE-2022-25315
Also known as
USN-5320-1

Charts affected

394 by stars
ChartLatestAffected imagesRadar Score
owncastgeek-cookbookVerified publisher3.4.21 of 1See more

owncast geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
gabekangas/owncast:0.0.797461aedb580
expat@2.2.9-r1
2.2.10-r2

Open the chart page →

3,167
protonmail-bridgegeek-cookbookVerified publisher5.4.21 of 1See more

protonmail-bridge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
shenxn/protonmail-bridge:1.8.7-1acf31af7c111
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.7

Open the chart page →

8,029
recipesgeek-cookbookVerified publisher6.6.21 of 2See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
vabene1111/recipes:1.0.5.2ec4e9e2905b0
expat@2.2.9-r1
2.2.10-r2

Open the chart page →

7,801
sabnzbdgeek-cookbookVerified publisher9.4.21 of 1See more

sabnzbd geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
expat@2.2.9-1build1
2.2.9-1ubuntu0.4

Open the chart page →

10,231
stashgeek-cookbookVerified publisher3.4.21 of 1See more

stash geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
stashapp/stash:latest24dbd7607174
expat@2.2.9-1build1
2.2.9-1ubuntu0.4

Open the chart page →

15,856
tdarrgeek-cookbookVerified publisher4.6.21 of 2See more

tdarr geek-cookbook 4.6.2

1 of the 2 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
haveagitgat/tdarr_node:2.00.101e3f9328327d
expat@2.2.9-1build1
2.2.9-1ubuntu0.4

Open the chart page →

31,000
uptimerobot-prometheusgeek-cookbookVerified publisher6.4.21 of 1See more

uptimerobot-prometheus geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
billimek/prometheus-uptimerobot-exporter:0.0.1f14ccd7aad0e
expat@2.2.9-r1
2.2.10-r2

Open the chart page →

2,265
youtubedl-materialgeek-cookbookVerified publisher4.4.21 of 1See more

youtubedl-material geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:4.23720b856bd2f
expat@2.2.9-r1
2.2.10-r2

Open the chart page →

4,410
powerdnsadminhalkeye0.3.11 of 1See more

powerdnsadmin halkeye 0.3.1

1 of the 1 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:0.2.3099371dd9ba6
expat@2.2.9-r1
2.2.10-r2

Open the chart page →

3,345
cniistio1.10.31 of 1See more

cni istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
istio/install-cni:1.10.32232f365aed6
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.7

Open the chart page →

10,400
discoveryistio1.10.31 of 1See more

discovery istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
istio/pilot:1.10.3e7e110a421c2
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.7

Open the chart page →

10,475
egressistio1.10.31 of 1See more

egress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.7

Open the chart page →

10,421
ingressistio1.10.31 of 1See more

ingress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.7

Open the chart page →

10,421
operatoristio1.10.31 of 1See more

operator istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
istio/operator:1.10.3655eefa11c84
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.7

Open the chart page →

10,701
alertmanager-gchat-integrationjulb-meVerified publisher1.0.51 of 1See more

alertmanager-gchat-integration julb-me 1.0.5

1 of the 1 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
julb/alertmanager-gchat-integration:1.0.5837c4038a0dd
expat@2.2.10-r1
2.2.10-r4

Open the chart page →

2,110
git-configmap-syncjulb-meVerified publisher1.0.11 of 2See more

git-configmap-sync julb-me 1.0.1

1 of the 2 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
julb/kubernetes-configmap-sync:1.1.0d7d8836366ad
expat@2.2.9-r1
2.2.10-r2

Open the chart page →

2,618
kubefarmkvaps0.13.41 of 6See more

kubefarm kvaps 0.13.4

1 of the 6 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
expat@2.2.9-1ubuntu0.2
2.2.9-1ubuntu0.4

Open the chart page →

12,422
opennebulakvaps2.1.15 of 9See more

opennebula kvaps 2.1.1

5 of the 9 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
expat@2.2.9-1build1
2.2.9-1ubuntu0.4
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
expat@2.2.9-1build1
2.2.9-1ubuntu0.4
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
expat@2.2.9-1build1
2.2.9-1ubuntu0.4
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
expat@2.2.9-1build1
2.2.9-1ubuntu0.4
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
expat@2.2.9-1build1
2.2.9-1ubuntu0.4

Open the chart page →

113,791
landelijketabellencataloguslandelijketabellencatalogus1.0.01 of 3See more

landelijketabellencatalogus landelijketabellencatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/landelijketabellencatalogus-php:latest26d91dcbba56
expat@2.2.9-r1
2.2.10-r2

Open the chart page →

7,510
flask-appmarcinkujawski1.0.01 of 3See more

flask-app marcinkujawski 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
marcinkujawski/flask-app:2.0.1a455017b9d0e
expat@2.4.1-r0
2.4.5-r0

Open the chart page →

2,912
librenmsmidokura-communityVerified publisher0.3.21 of 6See more

librenms midokura-community 0.3.2

1 of the 6 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
crazymax/rrdcached:1.7.2-r4042536a06596
expat@2.4.1-r0
2.4.5-r0

Open the chart page →

8,967
pvc-exporterpvc-exporter0.1.31 of 1See more

pvc-exporter pvc-exporter 0.1.3

1 of the 1 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
dockerid31415926/pvc-exporter:v0.1.35a1dd17e0e07
expat@2.4.1-r0
2.4.5-r0

Open the chart page →

1,762
laravel-octanerenoki-co1.0.01 of 1See more

laravel-octane renoki-co 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
quay.io/renokico/laravel-helm-demo:octane-0.6.0cad83090c58f
expat@2.2.9-r1
2.2.10-r2

Open the chart page →

3,634
service-names-port-numbersrm3lVerified publisher0.26.11 of 1See more

service-names-port-numbers rm3l 0.26.1

1 of the 1 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
rm3l/service-names-port-numbers:0.12.162d1cc4223e5
expat@2.2.9-1build1
2.2.9-1ubuntu0.4

Open the chart page →

10,120
delugerubxkubeVerified publisher1.2.11 of 1See more

deluge rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
linuxserver/deluge:18.04.10ac871624394
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.7

Open the chart page →

13,541
ckanstatcan0.0.351 of 8See more

ckan statcan 0.0.35

1 of the 8 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
statcan/ckan:2.93921305425b8
expat@2.2.9-1build1
2.2.9-1ubuntu0.4

Open the chart page →

24,930
prometheus-pve-exporterstenicVerified publisher0.1.11 of 1See more

prometheus-pve-exporter stenic 0.1.1

1 of the 1 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
prompve/prometheus-pve-exporter:2.0.1ff6749eb03b0
expat@2.2.9-r1
2.2.10-r2

Open the chart page →

2,469
terraform-controllerterraform-controller0.0.201 of 1See more

terraform-controller terraform-controller 0.0.20

1 of the 1 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
absaoss/terraform-controller:v0.0.20ad538a1285a0
expat@2.2.9-r1
2.2.10-r2

Open the chart page →

3,538
atlantistrozz3.12.111 of 1See more

atlantis trozz 3.12.11

1 of the 1 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
runatlantis/atlantis:v0.16.145fbaf7e207c
expat@2.2.9-r1
2.2.10-r2

Open the chart page →

5,280
prerenderutkuozdemirVerified publisher1.1.21 of 1See more

prerender utkuozdemir 1.1.2

1 of the 1 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
tvanro/prerender-alpine:6.4.06909015f0328
expat@2.4.1-r0
2.4.5-r0

Open the chart page →

2,660
waardepapierenwaardepapieren1.0.01 of 3See more

waardepapieren waardepapieren 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/waardepapieren-php:latestb2666ffcbad8
expat@2.2.9-r1
2.2.10-r2

Open the chart page →

8,079
waardepapieren-baliewaardepapieren-balie1.0.01 of 3See more

waardepapieren-balie waardepapieren-balie 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/waardepapieren-balie-php:latestf36c423cd259
expat@2.2.9-r1
2.2.10-r2

Open the chart page →

7,871
waardepapieren-registerwaardepapieren-register1.1.01 of 4See more

waardepapieren-register waardepapieren-register 1.1.0

1 of the 4 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/waardepapieren-register-php:latest9affab218351
expat@2.2.9-r1
2.2.10-r2

Open the chart page →

7,429
wavefront-adapter-for-istiowavefront0.1.41 of 2See more

wavefront-adapter-for-istio wavefront 0.1.4

1 of the 2 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
wavefronthq/proxy:9.2d1064d28f6eb
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.7

Open the chart page →

15,970
kafka-devwikimedia0.2.01 of 1See more

kafka-dev wikimedia 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
expat@2.1.0-4ubuntu1
2.1.0-4ubuntu1.4+esm6

Open the chart page →

41,427
acos-prometheus-exporter-helm-charta10-prometheus-exporter0.1.01 of 1See more

acos-prometheus-exporter-helm-chart a10-prometheus-exporter 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
a10networks/acos-prometheus-exporter:latest8dc58d434d71
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.7

Open the chart page →

12,007
open5gsadaptivenetlabVerified publisher1.0.31 of 3See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
expat@2.2.9-1build1
2.2.9-1ubuntu0.4

Open the chart page →

25,443
adresserviceadresservice1.1.01 of 5See more

adresservice adresservice 1.1.0

1 of the 5 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/adresservice-php:latestc5075f0320cd
expat@2.2.9-r1
2.2.10-r2

Open the chart page →

7,447
agendaserviceagendaservice1.0.01 of 3See more

agendaservice agendaservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
conduction/agendaservice-php:latest9cfeeb6c7c20
expat@2.2.9-r1
2.2.10-r2

Open the chart page →

7,209
backupalexanderbadel1.1.01 of 1See more

backup alexanderbadel 1.1.0

1 of the 1 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
ghcr.io/alexanderbabel/database-s3-backup:1.3.33191b771a6f2
expat@2.4.1-r0
2.4.5-r0

Open the chart page →

2,803
fritzbox-exporteralexvanderberkelVerified publisher2.0.31 of 1See more

fritzbox-exporter alexvanderberkel 2.0.3

1 of the 1 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
sealife/fritzbox-exporter:1.0f5cc2f0f4c9b
expat@2.2.9-r1
2.2.10-r2

Open the chart page →

2,094
pagesalstom-pages-app1.0.02 of 3See more

pages alstom-pages-app 1.0.0

2 of the 3 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
2.2.9-1ubuntu0.4
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.7

Open the chart page →

20,190
pagesandrei-pages1.0.02 of 3See more

pages andrei-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
expat@2.2.9-1build1
2.2.9-1ubuntu0.4
flyway/flyway:6.4.422d97ceb0c47
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.7

Open the chart page →

20,190
games-on-whalesangelnu2.0.03 of 7See more

games-on-whales angelnu 2.0.0

3 of the 7 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
expat@2.2.9-1build1
2.2.9-1ubuntu0.4
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
expat@2.2.9-1build1
2.2.9-1ubuntu0.4
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
expat@2.2.9-1build1
2.2.9-1ubuntu0.4

Open the chart page →

42,126
sensitive-dataapicheck1.0.01 of 1See more

sensitive-data apicheck 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
bbvalabs/sensitive-data:1.0.13ea299ae63c0
expat@2.2.10-r1
2.2.10-r4

Open the chart page →

1,843
harbor-scanner-trivyaqua-helm0.17.01 of 1See more

harbor-scanner-trivy aqua-helm 0.17.0

1 of the 1 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
aquasec/harbor-scanner-trivy:0.20.07ea4aa3d2eb6
expat@2.2.10-r1
2.2.10-r4

Open the chart page →

5,202
keystonearzu0.2.291 of 4See more

keystone arzu 0.2.29

1 of the 4 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
library/rabbitmq:3.7-managementb6dd45cc35b3
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.7

Open the chart page →

22,568
dltkvassist-iot-data-integrity-verification0.2.02 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

2 of the 9 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm5
hyperledger/fabric-couchdb:0.4.15f6c724592abf
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm5

Open the chart page →

77,706
dltflassist-iot-dlt-based-fl0.2.02 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

2 of the 9 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm5
hyperledger/fabric-couchdb:0.4.15f6c724592abf
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm5

Open the chart page →

77,706
hcloud-csi-driveratem181.5.11 of 6See more

hcloud-csi-driver atem18 1.5.1

1 of the 6 container images this version deploys carry CVE-2022-25315.

Container imageDigestPackageFixed in
hetznercloud/hcloud-csi-driver:1.5.141dce5b33644
expat@2.2.9-r1
2.2.10-r2

Open the chart page →

6,491

Container images carrying it

317 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/wyrihaximusnet/default-backend:randomb24e63efd841
expat@2.4.1-r0
2.4.5-r0
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
expat@2.2.9-1build1
2.2.9-1ubuntu0.4
1
quay.io/eclipse/che-devfile-registry:nightly5d25d47d6e17
expat@2.2.9-r1
2.2.10-r2
1
quay.io/eclipse/che-plugin-registry:nightlya88add0f8c93
expat@2.2.10-r1
2.2.10-r4
1
quay.io/evl.ms/argocd-exporter:0.0.136ea8f34aa6b
expat@2.4.1-r0
2.4.5-r0
1
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
expat@2.2.10-r1
2.2.10-r4
1
quay.io/kiwigrid/k8s-sidecar:1.10.718feb3906286
expat@2.2.10-r1
2.2.10-r4
1
quay.io/kiwigrid/k8s-sidecar:1.15.1a25886092fa4
expat@2.4.3-r0
2.4.5-r0
1
quay.io/netwarps/blockscoutbecd3e39360a
expat@2.4.1-r0
2.4.5-r0
1
quay.io/opsmxpublic/awsgit:v2-openssh0d21ba756f44
expat@2.4.4-r0
2.4.5-r0
1
quay.io/opsmxpublic/oes-pre-configure:v29b052fbb046f
expat@2.2.9-r1
2.2.10-r2
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
expat@2.1.0-7ubuntu0.16.04.4
2.1.0-7ubuntu0.16.04.5+esm5
1
quay.io/renokico/laravel-helm-demo:0.6.03207f957e80c
expat@2.4.1-r0
2.4.5-r0
1
quay.io/renokico/laravel-helm-demo:worker-0.6.04b188259267e
expat@2.4.1-r0
2.4.5-r0
1
quay.io/renokico/laravel-helm-demo:octane-0.6.0cad83090c58f
expat@2.2.9-r1
2.2.10-r2
1
quay.io/soketi/pws:0.8-16-alpine399d2e6b10ef
expat@2.2.10-r1
2.2.10-r4
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
expat@2.2.9-1build1
2.2.9-1ubuntu0.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.