StackRadar

CVE-2022-25647

High

Advisory

Published 3 May 2022In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.7
base score, highest
EPSS
0.122
96th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
206
of 17,781 indexed, latest versions
Container images
141
deployed by those charts
Fix available
1 of 1
affected package

Deserialization of Untrusted Data in Gson

Carried by container images the latest versions of 206 of 17,781 indexed charts deploy, on 141 images.

Affected packageAffected versionsFixed inImages
gsonmaven2.6.2, 2.7, 2.8.0, 2.8.1+5 more2.8.9141
OSV records
GHSA-4jrv-ppp4-jm57
Also known as
SNYK-JAVA-COMGOOGLECODEGSON-1730327

Charts affected

206 by stars
ChartLatestAffected imagesRadar Score
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
gson@2.8.6
2.8.9

Open the chart page →

32,259
sonarqube-ltssonarqubeVerified publisher1.0.16+981 of 4See more

sonarqube-lts sonarqube 1.0.16+98

1 of the 4 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
library/sonarqube:8.9.2-community88cd63154d4b
gson@2.7
2.8.9

Open the chart page →

4,099
jira-softwaremoxVerified publisher2.7.11 of 3See more

jira-software mox 2.7.1

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
atlassian/jira-software:9.7.264a75aa4ec4e
gson@2.8.6
2.8.9

Open the chart page →

8,636
druidwiremindVerified publisher1.22.11 of 3See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
apache/druid:29.0.10cef139b6bf1
gson@2.8.6
2.8.9

Open the chart page →

7,930
flinkriskfocus0.2.01 of 1See more

flink riskfocus 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
library/flink:1.11.2-scala_2.121fe4fb22a2a5
gson@2.7
2.8.9

Open the chart page →

3,235
sonarqube-dcesonarqubeVerified publisher0.1.2+1212 of 5See more

sonarqube-dce sonarqube 0.1.2+121

2 of the 5 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
library/sonarqube:9.1.0-datacenter-search7e43ff493a47
gson@2.6.2
2.8.9
library/sonarqube:9.1.0-datacenter-appa9bc5a3a1fc3
gson@2.6.2
2.8.9

Open the chart page →

8,698
hivebigdata-chartsVerified publisher0.1.81 of 1See more

hive bigdata-charts 0.1.8

1 of the 1 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
gson@2.8.1
2.8.9

Open the chart page →

7,166
rocketmqgin1.1.01 of 2See more

rocketmq gin 1.1.0

1 of the 2 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
apache/rocketmq:4.9.35ac2a4e0f627
gson@2.8.6
2.8.9

Open the chart page →

9,154
nzbhydra2halkeye2.30.11 of 2See more

nzbhydra2 halkeye 2.30.1

1 of the 2 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
binhex/arch-nzbhydra2:3.1.0-1-01fb8952921ab6
gson@2.8.6
2.8.9

Open the chart page →

6,711
hive-metastoreheva-helm-chartsVerified publisher0.2.01 of 2See more

hive-metastore heva-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
sslhep/hive-metastore:3.1.39e80af083079
gson@2.8.1
2.8.9

Open the chart page →

7,335
skywalkingkubesphere-testVerified publisher3.1.02 of 4See more

skywalking kubesphere-test 3.1.0

2 of the 4 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.1.0-es7641237e0299b
gson@2.8.6
2.8.9
apache/skywalking-ui:8.1.067d50e4deff4
gson@2.8.2
2.8.9

Open the chart page →

18,042
hive-metastoreslamdev0.0.51 of 2See more

hive-metastore slamdev 0.0.5

1 of the 2 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
gson@2.8.5
2.8.9

Open the chart page →

8,198
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-elk:latestba1d85ec3739
gson@2.8.6
2.8.9

Open the chart page →

10,730
geoserver-cloudcamptocamp20.0.56 of 11See more

geoserver-cloud camptocamp2 0.0.5

6 of the 11 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
gson@2.8.6
2.8.9
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
gson@2.8.6
2.8.9
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
gson@2.8.6
2.8.9
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
gson@2.8.6
2.8.9
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
gson@2.8.6
2.8.9
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
gson@2.8.6
2.8.9

Open the chart page →

84,444
geoserverCloudcamptocamp20.0.66 of 11See more

geoserverCloud camptocamp2 0.0.6

6 of the 11 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
gson@2.8.6
2.8.9
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
gson@2.8.6
2.8.9
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
gson@2.8.6
2.8.9
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
gson@2.8.6
2.8.9
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
gson@2.8.6
2.8.9
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
gson@2.8.6
2.8.9

Open the chart page →

84,444
hbasedmwm-bigdataVerified publisher0.1.61 of 5See more

hbase dmwm-bigdata 0.1.6

1 of the 5 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
gson@2.8.1
2.8.9

Open the chart page →

13,392
opentsdbdmwm-bigdataVerified publisher0.1.71 of 6See more

opentsdb dmwm-bigdata 0.1.7

1 of the 6 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
gson@2.8.1
2.8.9

Open the chart page →

17,511
spinnakerdwardu-helm-charts2.2.61 of 2See more

spinnaker dwardu-helm-charts 2.2.6

1 of the 2 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
gson@2.8.6
2.8.9

Open the chart page →

8,752
hbasegradiant-bigdataVerified publisher0.1.61 of 5See more

hbase gradiant-bigdata 0.1.6

1 of the 5 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
gson@2.8.1
2.8.9

Open the chart page →

13,392
stormgresearch1.2.01 of 3See more

storm gresearch 1.2.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
library/storm:2.4.0bd5d420506d6
gson@2.8.1
2.8.9

Open the chart page →

6,165
hertzbeatkubesphere-testVerified publisher1.4.11 of 4See more

hertzbeat kubesphere-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
apache/iotdb:0.13.3-nodeafa47bf1692a
gson@2.8.8
2.8.9

Open the chart page →

7,710
linstorkvaps1.14.02 of 11See more

linstor kvaps 1.14.0

2 of the 11 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
ghcr.io/kvaps/linstor-controller:v1.14.000ce11c31087
gson@2.8.6
2.8.9
ghcr.io/kvaps/linstor-satellite:v1.14.0a573fb9bc809
gson@2.8.6
2.8.9

Open the chart page →

15,547
Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacionVerified publisher1.0.11 of 6See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

1 of the 6 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
torrespro/mca-worker:2.0.06d3bd305a1ba
gson@2.8.6
2.8.9

Open the chart page →

19,187
glowrootnovum-rgi-charts1.0.101 of 2See more

glowroot novum-rgi-charts 1.0.10

1 of the 2 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
novumrgi/glowroot-central:0.14.0-beta.38c54790675b1
gson@2.8.6
2.8.9

Open the chart page →

2,308
logstashromanow-helm-chartsVerified publisher1.5.01 of 1See more

logstash romanow-helm-charts 1.5.0

1 of the 1 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
library/logstash:7.17.817a4f64e9cf5
gson@2.8.5
2.8.9

Open the chart page →

7,529
routrroutr0.0.101 of 2See more

routr routr 0.0.10

1 of the 2 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
fonoster/routr:1.0.0-rc52ca65af17cbc
gson@2.7
2.8.9

Open the chart page →

4,983
seldon-coreseldon0.2.72 of 3See more

seldon-core seldon 0.2.7

2 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
seldonio/apife:0.2.7ba81b17f00eb
gson@2.8.5
2.8.9
seldonio/cluster-manager:0.2.729e362bb1ba2
gson@2.8.5
2.8.9

Open the chart page →

13,798
signserver-cesignserverOfficialVerified publisher2.3.51 of 1See more

signserver-ce signserver 2.3.5

1 of the 1 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
keyfactor/signserver-ce:7.3.2798fbbe00283
gson@2.8.4
2.8.9

Open the chart page →

2,406
ckanstatcan0.0.351 of 8See more

ckan statcan 0.0.35

1 of the 8 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
gson@2.7
2.8.9

Open the chart page →

24,930
graylogt3n1.0.01 of 3See more

graylog t3n 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
graylog2/server:2.4.3-38ff28c66e6c1
gson@2.6.2
2.8.9

Open the chart page →

8,063
snowplowt3n0.0.11 of 1See more

snowplow t3n 0.0.1

1 of the 1 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
snowplow/scala-stream-collector-pubsub:2.2.041d318841516
gson@2.8.6
2.8.9

Open the chart page →

2,269
wavefront-adapter-for-istiowavefront0.1.41 of 2See more

wavefront-adapter-for-istio wavefront 0.1.4

1 of the 2 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
wavefronthq/proxy:9.2d1064d28f6eb
gson@2.8.2
2.8.9

Open the chart page →

15,970
mautrix-signalalexanderbadel0.1.11 of 2See more

mautrix-signal alexanderbadel 0.1.1

1 of the 2 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
signald/signald:0.18.20ffad7ccc2eb
gson@2.8.5
2.8.9

Open the chart page →

2,099
pagesalstom-pages-app1.0.01 of 3See more

pages alstom-pages-app 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
pagesandrei-pages1.0.01 of 3See more

pages andrei-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
apache-iotdbapache-iotdb-single-nodeVerified publisher0.1.01 of 1See more

apache-iotdb apache-iotdb-single-node 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
apache/iotdb:0.11.28647309f95d1
gson@2.8.6
2.8.9

Open the chart page →

5,277
d.vazquezm.2021_helmapphelmVerified publisher1.0.01 of 6See more

d.vazquezm.2021_helm apphelm 1.0.0

1 of the 6 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
davidvmar/urjc-davidvmar-worker:1.0.10d221e834a21
gson@2.8.6
2.8.9

Open the chart page →

19,745
chart-app-vidapp-vid-chartVerified publisher0.0.71 of 2See more

chart-app-vid app-vid-chart 0.0.7

1 of the 2 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
fimperato/sparkvid-api:1.0.5-RELEASE604012b77841
gson@2.8.6
2.8.9

Open the chart page →

8,866
sdn-controllerassist-iot-sdn-controller2.4.01 of 1See more

sdn-controller assist-iot-sdn-controller 2.4.0

1 of the 1 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
assistiot/sdn_controller:2.4.0ea254b6d8a31
gson@2.7
2.8.9

Open the chart page →

7,936
opendistro-esbeeinventor1.15.11 of 3See more

opendistro-es beeinventor 1.15.1

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
gson@2.8.6
2.8.9

Open the chart page →

5,806
pagesberrutig-pages1.0.01 of 3See more

pages berrutig-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
pagesbrian-pages1.0.01 of 3See more

pages brian-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
pagesbrixton-mayuribhavsar23-pages1.0.01 of 3See more

pages brixton-mayuribhavsar23-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
pagesbrixton-pages1.0.01 of 3See more

pages brixton-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
pagescamden-pages1.0.01 of 3See more

pages camden-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
geoservercamptocamp20.0.36 of 12See more

geoserver camptocamp2 0.0.3

6 of the 12 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
gson@2.8.6
2.8.9
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
gson@2.8.6
2.8.9
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
gson@2.8.6
2.8.9
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
gson@2.8.6
2.8.9
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
gson@2.8.6
2.8.9
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
gson@2.8.6
2.8.9

Open the chart page →

88,335
pagescarina-pages1.0.01 of 3See more

pages carina-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
pagescarmel-pages-dell1.0.01 of 3See more

pages carmel-pages-dell 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
tsoragecetic0.4.111 of 8See more

tsorage cetic 0.4.11

1 of the 8 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:5.0.1c87b1c07fb53
gson@2.7
2.8.9

Open the chart page →

12,018
event-store-servicechoerodon0.8.01 of 2See more

event-store-service choerodon 0.8.0

1 of the 2 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
choerodon/event-store-service:0.8.03c94c97f6f69
gson@2.8.0
2.8.9

Open the chart page →

9,808

Container images carrying it

141 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
lsmaster/kafka-connect-wrapper:6.1.0-0.1061eb5fbfa00
gson@2.8.6
2.8.9
1
ma1uta/ma1sd:2.5.0ee2a56d8b8ca
gson@2.7
2.8.9
1
massimolauri/wso2is:5.11.0-centose08abf0ce767
gson@2.8.5
2.8.9
1
nacos/nacos-server:1.4.1fe6e5688cdf3
gson@2.8.6
2.8.9
1
novumrgi/glowroot-central:0.14.0-beta.38c54790675b1
gson@2.8.6
2.8.9
1
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
gson@2.8.8
2.8.9
1
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
gson@2.8.0
2.8.9
1
onosproject/onos:2.2.144914a8d4b3f
gson@2.7
2.8.9
1
opencord/ves-agent:1.0.04187e2a8c918
gson@2.8.5
2.8.9
1
openhab/openhab:3.2.0d0aa4af452c1
gson@2.8.6
2.8.9
1
openwhisk/invoker:1.0.0f5831ec85525
gson@2.7
2.8.9
1
oscarsotosanchez/planner:v1.0730c00a099b8
gson@2.8.6
2.8.9
1
owasp/dependency-track:3.8.0efc65e702ee1
gson@2.8.0
2.8.9
1
penpotapp/backend:2.2.147853d9bb9dd
gson@2.7
2.8.9
1
polyakov/hapi-fhir-jpaserver-example:latestdbcef69146b8
gson@2.7
2.8.9
1
rundeck/rundeck:3.2.74d64fe56f767
gson@2.8.2
2.8.9
1
rundeck/rundeck:3.0.16b13e8059ad72
gson@2.8.5
2.8.9
1
seldonio/apife:0.2.7ba81b17f00eb
gson@2.8.5
2.8.9
1
seldonio/apife:0.3.1eea0d3f578ca
gson@2.8.5
2.8.9
1
seldonio/cluster-manager:0.2.729e362bb1ba2
gson@2.8.5
2.8.9
1
signald/signald:0.18.20ffad7ccc2eb
gson@2.8.5
2.8.9
1
slagattollas/planner-practica:latestcecd95e31486
gson@2.8.6
2.8.9
1
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
gson@2.8.5
2.8.9
1
snowplow/scala-stream-collector-pubsub:2.2.041d318841516
gson@2.8.6
2.8.9
1
sslhep/hive-metastore:3.1.39e80af083079
gson@2.8.1
2.8.9
1
torrespro/mca-worker:2.0.06d3bd305a1ba
gson@2.8.6
2.8.9
1
trinodb/trino:405ee80ab5eeab2
gson@2.8.5
2.8.9
1
voltha/voltha-onos:5.1.8e038acb950d3
gson@2.7
2.8.9
1
wavefronthq/proxy:9.2d1064d28f6eb
gson@2.8.2
2.8.9
1
wistefan/mvf:lateste0887302b2d8
gson@2.8.6
2.8.9
1
xeotek/kadeck:4.2.94c6b04d9ce55
gson@2.8.6
2.8.9
1
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
gson@2.8.6
2.8.9
1
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
gson@2.8.1
2.8.9
1
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
gson@2.7
2.8.9
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
gson@2.8.6
2.8.9
1
ghcr.io/kvaps/linstor-controller:v1.14.000ce11c31087
gson@2.8.6
2.8.9
1
ghcr.io/kvaps/linstor-satellite:v1.14.0a573fb9bc809
gson@2.8.6
2.8.9
1
ghcr.io/skyoo2003/digdag:0.0.1821fd6a6f2cd
gson@2.8.5
2.8.9
1
ghcr.io/wbstack/queryservice-updater:0.3.84_3.97525a57ac3f1
gson@2.8.8
2.8.9
1
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
gson@2.8.6
2.8.9
1
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
gson@2.8.2
2.8.9
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.