StackRadar

CVE-2022-25647

High

Advisory

Published 3 May 2022In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.7
base score, highest
EPSS
0.122
96th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
206
of 17,781 indexed, latest versions
Container images
141
deployed by those charts
Fix available
1 of 1
affected package

Deserialization of Untrusted Data in Gson

Carried by container images the latest versions of 206 of 17,781 indexed charts deploy, on 141 images.

Affected packageAffected versionsFixed inImages
gsonmaven2.6.2, 2.7, 2.8.0, 2.8.1+5 more2.8.9141
OSV records
GHSA-4jrv-ppp4-jm57
Also known as
SNYK-JAVA-COMGOOGLECODEGSON-1730327

Charts affected

206 by stars
ChartLatestAffected imagesRadar Score
pagespagesk1.0.01 of 3See more

pages pagesk 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
pagespages-microservice-ashim1.0.01 of 3See more

pages pages-microservice-ashim 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
pagespages-mihai1.0.01 of 3See more

pages pages-mihai 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
pagespages-nivesh1.0.01 of 3See more

pages pages-nivesh 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
pagespagessandeepgudu1.0.01 of 3See more

pages pagessandeepgudu 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
pagespages-shubhanker1.0.01 of 3See more

pages pages-shubhanker 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
pagespages-ssharma09091.0.01 of 3See more

pages pages-ssharma0909 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
pagespages-sucharitha1.0.01 of 3See more

pages pages-sucharitha 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
pagespages-sudhir1.0.01 of 3See more

pages pages-sudhir 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
pagespages-sushi1.0.01 of 3See more

pages pages-sushi 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
pagespages-vasanth58141.0.01 of 3See more

pages pages-vasanth5814 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
pagespages-vjp1.0.01 of 3See more

pages pages-vjp 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
pagespawan-pages1.0.01 of 3See more

pages pawan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
apache-knox-helmpfisterer-knox0.1.111 of 1See more

apache-knox-helm pfisterer-knox 0.1.11

1 of the 1 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
farberg/apache-knox-docker:1.6.14b4a22487394
gson@2.8.6
2.8.9

Open the chart page →

6,237
pagespighosh-pages1.0.01 of 3See more

pages pighosh-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
practica-helmpractica-helm0.1.01 of 7See more

practica-helm practica-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
slagattollas/planner-practica:latestcecd95e31486
gson@2.8.6
2.8.9

Open the chart page →

28,484
pagesprasanthi1.0.01 of 3See more

pages prasanthi 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
pagesranjinigogga1.0.01 of 3See more

pages ranjinigogga 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
pagesrebecca-pages1.0.01 of 3See more

pages rebecca-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
pagesroccohiggins-pages1.0.01 of 3See more

pages roccohiggins-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
pagesronan-pages1.0.01 of 3See more

pages ronan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
nacossaber0.1.111 of 1See more

nacos saber 0.1.11

1 of the 1 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
nacos/nacos-server:v2.1.0dcf04549c6d7
gson@2.8.6
2.8.9

Open the chart page →

3,978
pagessamanvithkaranth1.0.01 of 3See more

pages samanvithkaranth 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
pagessarubits-pages1.0.01 of 3See more

pages sarubits-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
pagessekharpkube1.0.01 of 3See more

pages sekharpkube 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
seldon-core-oauth-gatewayseldon0.3.11 of 2See more

seldon-core-oauth-gateway seldon 0.3.1

1 of the 2 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
seldonio/apife:0.3.1eea0d3f578ca
gson@2.8.5
2.8.9

Open the chart page →

8,098
sentry-dbsentry0.9.41 of 10See more

sentry-db sentry 0.9.4

1 of the 10 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:5.4.01bbda887bc53
gson@2.8.5
2.8.9

Open the chart page →

10,967
shenyushenyu0.6.32 of 2See more

shenyu shenyu 0.6.3

2 of the 2 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.5.1e2be712fc4f4
gson@2.8.6
2.8.9
apache/shenyu-bootstrap:2.5.11bd5756f6273
gson@2.8.6
2.8.9

Open the chart page →

8,804
shenyushenyu-helm-chart-test2.4.272 of 2See more

shenyu shenyu-helm-chart-test 2.4.27

2 of the 2 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.4.2e8b7c4ddd069
gson@2.8.6
2.8.9
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
gson@2.8.0
2.8.9

Open the chart page →

12,513
pagesshrutiujlan-pages1.0.01 of 3See more

pages shrutiujlan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
digdagskyoo20030.5.21 of 4See more

digdag skyoo2003 0.5.2

1 of the 4 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
ghcr.io/skyoo2003/digdag:0.0.1821fd6a6f2cd
gson@2.8.5
2.8.9

Open the chart page →

6,949
atlassian-confluencesomeblackmagic3.4.11 of 1See more

atlassian-confluence someblackmagic 3.4.1

1 of the 1 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
atlassian/confluence-server:7.10.03b9222ab32ef
gson@2.8.6
2.8.9

Open the chart page →

13,605
atlassian-jirasomeblackmagic3.3.21 of 1See more

atlassian-jira someblackmagic 3.3.2

1 of the 1 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
atlassian/jira-software:8.14.037bc46cbec1a
gson@2.8.5
2.8.9

Open the chart page →

13,079
pagessrinipages1.0.01 of 3See more

pages srinipages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
newrelic-private-minionsstarcher0.1.21 of 1See more

newrelic-private-minion sstarcher 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
gson@2.8.2
2.8.9

Open the chart page →

3,164
sonarqubestakaterVerified publisher0.10.31 of 2See more

sonarqube stakater 0.10.3

1 of the 2 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
library/sonarqube:6.7.6-community0ae5169e3d0f
gson@2.7
2.8.9

Open the chart page →

11,841
unifistartechnicaVerified publisher0.1.31 of 2See more

unifi startechnica 0.1.3

1 of the 2 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.1.664a3616625dda
gson@2.8.5
2.8.9

Open the chart page →

14,493
fdi-dotstatsuite-sfs-solrstatcan1.0.21 of 4See more

fdi-dotstatsuite-sfs-solr statcan 1.0.2

1 of the 4 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
gson@2.7
2.8.9

Open the chart page →

6,065
solrstatcan1.5.101 of 3See more

solr statcan 1.5.10

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
gson@2.7
2.8.9

Open the chart page →

8,806
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
gson@2.8.5
2.8.9

Open the chart page →

13,767
pagesstephendillondell1.0.01 of 3See more

pages stephendillondell 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
streamastreama1.0.11 of 2See more

streama streama 1.0.1

1 of the 2 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
just1not2/streama:1.10.48a2305192dec
gson@2.7
2.8.9

Open the chart page →

8,554
pagessunilb2590-pages1.0.01 of 3See more

pages sunilb2590-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
pagestest43221.0.01 of 3See more

pages test4322 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
shenyutest-helm2.4.212 of 2See more

shenyu test-helm 2.4.21

2 of the 2 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.4.2e8b7c4ddd069
gson@2.8.6
2.8.9
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
gson@2.8.0
2.8.9

Open the chart page →

12,513
pagesthiru-pages1.0.01 of 3See more

pages thiru-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
pagesthuy-pages1.0.01 of 3See more

pages thuy-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
pagesvictor-pages1.0.01 of 3See more

pages victor-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
pageswalter1.0.01 of 3See more

pages walter 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
gson@2.8.6
2.8.9

Open the chart page →

20,190
queryservice-updaterwbstack0.3.01 of 1See more

queryservice-updater wbstack 0.3.0

1 of the 1 container images this version deploys carry CVE-2022-25647.

Container imageDigestPackageFixed in
ghcr.io/wbstack/queryservice-updater:0.3.84_3.97525a57ac3f1
gson@2.8.8
2.8.9

Open the chart page →

3,176

Container images carrying it

141 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
lsmaster/kafka-connect-wrapper:6.1.0-0.1061eb5fbfa00
gson@2.8.6
2.8.9
1
ma1uta/ma1sd:2.5.0ee2a56d8b8ca
gson@2.7
2.8.9
1
massimolauri/wso2is:5.11.0-centose08abf0ce767
gson@2.8.5
2.8.9
1
nacos/nacos-server:1.4.1fe6e5688cdf3
gson@2.8.6
2.8.9
1
novumrgi/glowroot-central:0.14.0-beta.38c54790675b1
gson@2.8.6
2.8.9
1
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
gson@2.8.8
2.8.9
1
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
gson@2.8.0
2.8.9
1
onosproject/onos:2.2.144914a8d4b3f
gson@2.7
2.8.9
1
opencord/ves-agent:1.0.04187e2a8c918
gson@2.8.5
2.8.9
1
openhab/openhab:3.2.0d0aa4af452c1
gson@2.8.6
2.8.9
1
openwhisk/invoker:1.0.0f5831ec85525
gson@2.7
2.8.9
1
oscarsotosanchez/planner:v1.0730c00a099b8
gson@2.8.6
2.8.9
1
owasp/dependency-track:3.8.0efc65e702ee1
gson@2.8.0
2.8.9
1
penpotapp/backend:2.2.147853d9bb9dd
gson@2.7
2.8.9
1
polyakov/hapi-fhir-jpaserver-example:latestdbcef69146b8
gson@2.7
2.8.9
1
rundeck/rundeck:3.2.74d64fe56f767
gson@2.8.2
2.8.9
1
rundeck/rundeck:3.0.16b13e8059ad72
gson@2.8.5
2.8.9
1
seldonio/apife:0.2.7ba81b17f00eb
gson@2.8.5
2.8.9
1
seldonio/apife:0.3.1eea0d3f578ca
gson@2.8.5
2.8.9
1
seldonio/cluster-manager:0.2.729e362bb1ba2
gson@2.8.5
2.8.9
1
signald/signald:0.18.20ffad7ccc2eb
gson@2.8.5
2.8.9
1
slagattollas/planner-practica:latestcecd95e31486
gson@2.8.6
2.8.9
1
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
gson@2.8.5
2.8.9
1
snowplow/scala-stream-collector-pubsub:2.2.041d318841516
gson@2.8.6
2.8.9
1
sslhep/hive-metastore:3.1.39e80af083079
gson@2.8.1
2.8.9
1
torrespro/mca-worker:2.0.06d3bd305a1ba
gson@2.8.6
2.8.9
1
trinodb/trino:405ee80ab5eeab2
gson@2.8.5
2.8.9
1
voltha/voltha-onos:5.1.8e038acb950d3
gson@2.7
2.8.9
1
wavefronthq/proxy:9.2d1064d28f6eb
gson@2.8.2
2.8.9
1
wistefan/mvf:lateste0887302b2d8
gson@2.8.6
2.8.9
1
xeotek/kadeck:4.2.94c6b04d9ce55
gson@2.8.6
2.8.9
1
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
gson@2.8.6
2.8.9
1
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
gson@2.8.1
2.8.9
1
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
gson@2.7
2.8.9
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
gson@2.8.6
2.8.9
1
ghcr.io/kvaps/linstor-controller:v1.14.000ce11c31087
gson@2.8.6
2.8.9
1
ghcr.io/kvaps/linstor-satellite:v1.14.0a573fb9bc809
gson@2.8.6
2.8.9
1
ghcr.io/skyoo2003/digdag:0.0.1821fd6a6f2cd
gson@2.8.5
2.8.9
1
ghcr.io/wbstack/queryservice-updater:0.3.84_3.97525a57ac3f1
gson@2.8.8
2.8.9
1
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
gson@2.8.6
2.8.9
1
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
gson@2.8.2
2.8.9
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.