CVE-2022-2582
MediumAdvisory
Published 1 Jul 2022In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 4.3
- base score, highest
- EPSS
- 0.005
- 40th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 114
- of 17,781 indexed, latest versions
- Container images
- 103
- deployed by those charts
- Fix available
- 1 of 1
- affected package
AWS S3 Crypto SDK sends an unencrypted hash of the plaintext alongside the ciphertext as a metadata field
Carried by container images the latest versions of 114 of 17,781 indexed charts deploy, on 103 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v1.12.54, v1.15.24, v1.17.7, v1.17.14+46 more | 1.34.0 | 103 |
- OSV records
- GHSA-6jvc-q2x7-pchv
- Also known as
- GHSA-76wf-9vgp-pj7w, GO-2022-0391
Charts affected
114 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| kube-ebs-taggersstarcher | 0.1.0+7abf4f7 | 1 of 1See more | 3,096 |
| whitelisterstakaterVerified publisher | 0.0.16 | 1 of 1See more | 2,564 |
| cost-analyzerstatcan | 1.82.2 | 2 of 9See more | 16,506 |
| prometheus-operatorstatcan | 0.2.2 | 1 of 7See more | 12,237 |
| lokit3n | 1.0.0 | 1 of 1See more | 2,869 |
| promtailt3n | 1.0.0 | 1 of 1See more | 2,821 |
| temporaltemporal | 0.28.9 | 1 of 13See more | 21,005 |
| grafanatnh | 5.3.0 | 1 of 1See more | 3,191 |
| prometheustnh | 11.6.0 | 1 of 6See more | 8,484 |
| scrutinyvhdirkVerified publisher | 0.1.3 | 1 of 1See more | 4,382 |
| athens-proxywenerme | 0.5.2 | 1 of 2See more | 4,984 |
| temporalwenerme | 0.15.1 | 2 of 13See more | 22,665 |
| traefikwenerme | 9.1.1 | 1 of 1See more | 3,369 |
| zahori-consulzahoriVerified publisher | 1.0.1 | 1 of 2See more | 5,033 |
Container images carrying it
103 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| joeelliott/ | b4acd14642d0 | github.com/ | 1.34.0 | 1 |
| keptncontrib/ | 29969dd547de | github.com/ | 1.34.0 | 1 |
| kfserving/ | 63d79d04c2e3 | github.com/ | 1.34.0 | 1 |
| kubeflowkatib/ | 12a28c8a0b41 | github.com/ | 1.34.0 | 1 |
| kubeoperator/ | be8f0d624640 | github.com/ | 1.34.0 | 1 |
| library/ | ba10ac9ba17a | github.com/ | 1.34.0 | 1 |
| library/ | d7f5dd5f70e2 | github.com/ | 1.34.0 | 1 |
| library/ | f5af5a5ce17f | github.com/ | 1.34.0 | 1 |
| logiqai/ | 65b996bc7bdc | github.com/ | 1.34.0 | 1 |
| minio/ | 55f3aef5803e | github.com/ | 1.34.0 | 1 |
| mirrorgitlabcontainers/ | 06b19a4bc805 | github.com/ | 1.34.0 | 1 |
| mirrorgitlabcontainers/ | a6d7bf42805a | github.com/ | 1.34.0 | 1 |
| opsgenie/ | ecb246e4d260 | github.com/ | 1.34.0 | 1 |
| prom/ | 5880ec936055 | github.com/ | 1.34.0 | 1 |
| prom/ | cd134bd4fca0 | github.com/ | 1.34.0 | 1 |
| prom/ | e4ca62c0d62f | github.com/ | 1.34.0 | 1 |
| rancher/ | 42784bb38ed3 | github.com/ | 1.34.0 | 1 |
| rancher/ | d6a47d394c03 | github.com/ | 1.34.0 | 1 |
| reportportal/ | da5d8e1395fe | github.com/ | 1.34.0 | 1 |
| runatlantis/ | 45fbaf7e207c | github.com/ | 1.34.0 | 1 |
| slamdev/ | b173d809132d | github.com/ | 1.34.0 | 1 |
| sstarcher/ | 2d43c390cb19 | github.com/ | 1.34.0 | 1 |
| sstarcher/ | 1f8cae8cfa80 | github.com/ | 1.34.0 | 1 |
| stakater/ | 39107924063e | github.com/ | 1.34.0 | 1 |
| streamnative/ | ebcf7f033b54 | github.com/ | 1.34.0 | 1 |
| surajwarbhe/ | 85248611e9f1 | github.com/ | 1.34.0 | 1 |
| thanosio/ | b12d5c31bf5a | github.com/ | 1.34.0 | 1 |
| tobiasbp/ | 14bee6e33a26 | github.com/ | 1.34.0 | 1 |
| velero/ | 277fbfaf8dcf | github.com/ | 1.34.0 | 1 |
| velero/ | 8d784580931c | github.com/ | 1.34.0 | 1 |
| weaveworks/ | 174307de1b36 | github.com/ | 1.34.0 | 1 |
| gcr.io/ | e225fe7eaa55 | github.com/ | 1.34.0 | 1 |
| gcr.io/ | 873b968f02b5 | github.com/ | 1.34.0 | 1 |
| gcr.io/ | 1e3db4f2eeed | github.com/ | 1.34.0 | 1 |
| gcr.io/ | a5de0fb75046 | github.com/ | 1.34.0 | 1 |
| gcr.io/ | 2ef460356b17 | github.com/ | 1.34.0 | 1 |
| gcr.io/ | db6ceff2aab4 | github.com/ | 1.34.0 | 1 |
| gcr.io/ | 30ce73388ae5 | github.com/ | 1.34.0 | 1 |
| gcr.io/ | b2cd45b8a8a4 | github.com/ | 1.34.0 | 1 |
| gcr.io/ | d27b4495ccc3 | github.com/ | 1.34.0 | 1 |
| gcr.io/ | f16c0e022203 | github.com/ | 1.34.0 | 1 |
| gcr.io/ | 67f4f162da8d | github.com/ | 1.34.0 | 1 |
| gcr.io/ | 989a60847416 | github.com/ | 1.34.0 | 1 |
| gcr.io/ | 2b1a3d08caac | github.com/ | 1.34.0 | 1 |
| gcr.io/ | a348db3e4d74 | github.com/ | 1.34.0 | 1 |
| ghcr.io/ | 18689773150d | github.com/ | 1.34.0 | 1 |
| ghcr.io/ | edd095d3c0ee | github.com/ | 1.34.0 | 1 |
| ghcr.io/ | e949b0f733f0 | github.com/ | 1.34.0 | 1 |
| ghcr.io/ | 0fae829caf29 | github.com/ | 1.34.0 | 1 |
| quay.io/ | 6722d5041b47 | github.com/ | 1.34.0 | 1 |