StackRadar

CVE-2022-2582

Medium

Advisory

Published 1 Jul 2022In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.3
base score, highest
EPSS
0.005
40th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
114
of 17,781 indexed, latest versions
Container images
103
deployed by those charts
Fix available
1 of 1
affected package

AWS S3 Crypto SDK sends an unencrypted hash of the plaintext alongside the ciphertext as a metadata field

Carried by container images the latest versions of 114 of 17,781 indexed charts deploy, on 103 images.

Affected packageAffected versionsFixed inImages
github.com/aws/aws-sdk-gogolangv1.12.54, v1.15.24, v1.17.7, v1.17.14+46 more1.34.0103
OSV records
GHSA-6jvc-q2x7-pchv
Also known as
GHSA-76wf-9vgp-pj7w, GO-2022-0391

Charts affected

114 by stars
ChartLatestAffected imagesRadar Score
chaos-meshchaos-meshVerified publisher2.8.41 of 4See more

chaos-mesh chaos-mesh 2.8.4

1 of the 4 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-coredns:v0.2.838bfdf5e3774
github.com/aws/aws-sdk-go@v1.33.17
1.34.0

Open the chart page →

6,342
kube-prometheuschoerodon9.3.11 of 7See more

kube-prometheus choerodon 9.3.1

1 of the 7 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
github.com/aws/aws-sdk-go@v1.29.20
1.34.0

Open the chart page →

12,237
temporallemontechVerified publisher0.37.01 of 13See more

temporal lemontech 0.37.0

1 of the 13 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
github.com/aws/aws-sdk-go@v1.25.48
1.34.0

Open the chart page →

14,893
fadicetic0.3.11 of 25See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
grafana/grafana:7.3.5511bc20bfcd1
github.com/aws/aws-sdk-go@v1.33.12
1.34.0

Open the chart page →

52,919
aws-calicoaws0.3.111 of 1See more

aws-calico aws 0.3.11

1 of the 1 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
quay.io/tigera/operator:v1.20.1379efe0c2541
github.com/aws/aws-sdk-go@v1.19.6
1.34.0

Open the chart page →

2,250
statpinggeek-cookbookVerified publisher6.2.01 of 2See more

statping geek-cookbook 6.2.0

1 of the 2 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
statping/statping:v0.90.74e874da513a5c
github.com/aws/aws-sdk-go@v1.30.20
1.34.0

Open the chart page →

3,371
coreinstill-aiOfficialVerified publisher0.1.751 of 15See more

core instill-ai 0.1.75

1 of the 15 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
library/influxdb:2.3.0-alpined7f5dd5f70e2
github.com/aws/aws-sdk-go@v1.30.12
1.34.0

Open the chart page →

30,816
kube-prometheus-stackprometheus-worawutchan12.8.01 of 6See more

kube-prometheus-stack prometheus-worawutchan 12.8.0

1 of the 6 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
grafana/grafana:7.2.1733842cca5bd
github.com/aws/aws-sdk-go@v1.33.12
1.34.0

Open the chart page →

12,125
knative-servingsoftonic3.0.05 of 5See more

knative-serving softonic 3.0.0

5 of the 5 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/net-certmanager/cmd/webhookdigest-pinned873b968f02b5
github.com/aws/aws-sdk-go@v1.30.5
1.34.0
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinneda5de0fb75046
github.com/aws/aws-sdk-go@v1.29.34
1.34.0
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned2ef460356b17
github.com/aws/aws-sdk-go@v1.30.5
1.34.0
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned30ce73388ae5
github.com/aws/aws-sdk-go@v1.30.5
1.34.0
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinnedf16c0e022203
github.com/aws/aws-sdk-go@v1.30.5
1.34.0

Open the chart page →

12,502
maeshtraefikOfficialVerified publisher2.1.21 of 7See more

maesh traefik 2.1.2

1 of the 7 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
containous/maesh:v1.3.2587162516502
github.com/aws/aws-sdk-go@v1.30.20
1.34.0

Open the chart page →

4,136
anteonanteonVerified publisher2.6.41 of 13See more

anteon anteon 2.6.4

1 of the 13 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
library/influxdb:2.6.1-alpine44a366dd7724
github.com/aws/aws-sdk-go@v1.30.12
1.34.0

Open the chart page →

22,202
cert-exporterarzu3.0.11 of 1See more

cert-exporter arzu 3.0.1

1 of the 1 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
joeelliott/cert-exporter:v2.7.0b4acd14642d0
github.com/aws/aws-sdk-go@v1.27.0
1.34.0

Open the chart page →

2,819
db-backupballe-petersen0.1.41 of 1See more

db-backup balle-petersen 0.1.4

1 of the 1 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
tobiasbp/db-backup:0.0.314bee6e33a26
github.com/aws/aws-sdk-go@v1.25.31
1.34.0

Open the chart page →

4,814
chirpstackbeeinventor0.1.101 of 5See more

chirpstack beeinventor 0.1.10

1 of the 5 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
chirpstack/chirpstack-application-server:3.17.6e0b23dfd24d6
github.com/aws/aws-sdk-go@v1.26.3
1.34.0

Open the chart page →

7,807
agentbuildkite0.6.41 of 1See more

agent buildkite 0.6.4

1 of the 1 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
buildkite/agent:3.25.0aec38cfaae0e
github.com/aws/aws-sdk-go@v1.32.10
1.34.0

Open the chart page →

2,663
cubefscubefs3.2.01 of 10See more

cubefs cubefs 3.2.0

1 of the 10 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
github.com/aws/aws-sdk-go@v1.23.12
1.34.0

Open the chart page →

15,891
datadogdatadog-test2.4.231 of 2See more

datadog datadog-test 2.4.23

1 of the 2 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
datadog/agent:7.22.08f20e56b5311
github.com/aws/aws-sdk-go@v1.30.5
1.34.0

Open the chart page →

4,568
dnation-pingdnationcloud0.1.91 of 5See more

dnation-ping dnationcloud 0.1.9

1 of the 5 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
grafana/grafana:7.3.5511bc20bfcd1
github.com/aws/aws-sdk-go@v1.33.12
1.34.0

Open the chart page →

10,454
aws-efs-csi-driverkubesphere-testVerified publisher0.1.01 of 3See more

aws-efs-csi-driver kubesphere-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
amazon/aws-efs-csi-driver:v0.3.0b55277652ea8
github.com/aws/aws-sdk-go@v1.23.21
1.34.0

Open the chart page →

2,603
velero-s3-deploymentradar-baseVerified publisher0.4.21 of 4See more

velero-s3-deployment radar-base 0.4.2

1 of the 4 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
velero/velero:v1.9.0277fbfaf8dcf
github.com/aws/aws-sdk-go@v1.28.2
1.34.0

Open the chart page →

4,798
rke2-canalrke2-charts3.13.31 of 2See more

rke2-canal rke2-charts 3.13.3

1 of the 2 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
rancher/hardened-flannel:v0.13.0-rancher142784bb38ed3
github.com/aws/aws-sdk-go@v1.12.54
1.34.0

Open the chart page →

6,996
statpingstatping0.1.141 of 1See more

statping statping 0.1.14

1 of the 1 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
statping/statping:v0.90.74e874da513a5c
github.com/aws/aws-sdk-go@v1.30.20
1.34.0

Open the chart page →

3,371
Grafanasurajwarbhe-grafana0.1.01 of 1See more

Grafana surajwarbhe-grafana 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
surajwarbhe/grafana:v185248611e9f1
github.com/aws/aws-sdk-go@v1.29.20
1.34.0

Open the chart page →

2,597
atlantistrozz3.12.111 of 1See more

atlantis trozz 3.12.11

1 of the 1 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
runatlantis/atlantis:v0.16.145fbaf7e207c
github.com/aws/aws-sdk-go@v1.17.14
1.34.0

Open the chart page →

5,280
vearchvearch3.3.41 of 4See more

vearch vearch 3.3.4

1 of the 4 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
github.com/aws/aws-sdk-go@v1.23.12
1.34.0

Open the chart page →

5,008
ddosifyanteonVerified publisher1.7.51 of 13See more

ddosify anteon 1.7.5

1 of the 13 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
library/influxdb:2.6.1-alpine44a366dd7724
github.com/aws/aws-sdk-go@v1.30.12
1.34.0

Open the chart page →

25,669
app-mobilityappmo0.1.02 of 5See more

app-mobility appmo 0.1.0

2 of the 5 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
dellemc/csm-application-mobility-controller:v0.1.0148ada9060a9
github.com/aws/aws-sdk-go@v1.28.2
1.34.0
velero/velero:v1.8.18d784580931c
github.com/aws/aws-sdk-go@v1.28.2
1.34.0

Open the chart page →

12,521
harbor-scanner-trivyaqua-helm0.17.01 of 1See more

harbor-scanner-trivy aqua-helm 0.17.0

1 of the 1 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
aquasec/harbor-scanner-trivy:0.20.07ea4aa3d2eb6
github.com/aws/aws-sdk-go@v1.31.6
1.34.0

Open the chart page →

5,202
appmesh-prometheusaws1.0.31 of 2See more

appmesh-prometheus aws 1.0.3

1 of the 2 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
github.com/aws/aws-sdk-go@v1.23.12
1.34.0

Open the chart page →

2,939
keptn-addonsazureorkestra0.1.01 of 4See more

keptn-addons azureorkestra 0.1.0

1 of the 4 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
keptncontrib/prometheus-service:0.6.029969dd547de
github.com/aws/aws-sdk-go@v1.29.18
1.34.0

Open the chart page →

10,621
catalyst-agentscatalyst-agents0.1.301 of 18See more

catalyst-agents catalyst-agents 0.1.30

1 of the 18 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-coredns:v0.2.838bfdf5e3774
github.com/aws/aws-sdk-go@v1.33.17
1.34.0

Open the chart page →

15,027
lokichoerodon0.29.01 of 1See more

loki choerodon 0.29.0

1 of the 1 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
grafana/loki:1.5.0922b3f412fdd
github.com/aws/aws-sdk-go@v1.27.0
1.34.0

Open the chart page →

2,869
promtailchoerodon0.23.01 of 1See more

promtail choerodon 0.23.0

1 of the 1 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
grafana/promtail:1.5.046e88d390cd6
github.com/aws/aws-sdk-go@v1.27.0
1.34.0

Open the chart page →

2,821
chubaofschubaofs1.5.11 of 6See more

chubaofs chubaofs 1.5.1

1 of the 6 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
github.com/aws/aws-sdk-go@v1.23.12
1.34.0

Open the chart page →

3,595
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert:1.3e225fe7eaa55
github.com/aws/aws-sdk-go@v1.33.8
1.34.0

Open the chart page →

20,900
katibcowboysysopVerified publisher2.4.21 of 4See more

katib cowboysysop 2.4.2

1 of the 4 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
kubeflowkatib/katib-controller:v0.12.012a28c8a0b41
github.com/aws/aws-sdk-go@v1.28.2
1.34.0

Open the chart page →

6,542
kfservingcowboysysopVerified publisher1.3.11 of 3See more

kfserving cowboysysop 1.3.1

1 of the 3 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
kfserving/kfserving-controller:v0.6.163d79d04c2e3
github.com/aws/aws-sdk-go@v1.31.12
1.34.0

Open the chart page →

3,830
cloudwatch-agent-prometheusdasmeta0.2.21 of 1See more

cloudwatch-agent-prometheus dasmeta 0.2.2

1 of the 1 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:1.247350.0b251780e745d1783c93
github.com/aws/aws-sdk-go@v1.30.15
1.34.0

Open the chart page →

2,977
aws-s3-proxydeliveryheroVerified publisher0.1.71 of 1See more

aws-s3-proxy deliveryhero 0.1.7

1 of the 1 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
pottava/s3-proxy:2.020a0bcb15f76
github.com/aws/aws-sdk-go@v1.25.25
1.34.0

Open the chart page →

1,323
k8s-cloudwatch-adapterdeliveryheroVerified publisher0.2.21 of 1See more

k8s-cloudwatch-adapter deliveryhero 0.2.2

1 of the 1 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
chankh/k8s-cloudwatch-adapter:v0.9.0963c44c7f8b1
github.com/aws/aws-sdk-go@v1.33.5
1.34.0

Open the chart page →

2,468
prometheus-aws-limits-exporterdeliveryheroVerified publisher0.2.21 of 1See more

prometheus-aws-limits-exporter deliveryhero 0.2.2

1 of the 1 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
danielfm/aws-limits-exporter:0.6.07152b84e57cb
github.com/aws/aws-sdk-go@v1.25.34
1.34.0

Open the chart page →

1,846
securitydevtron0.2.21 of 1See more

security devtron 0.2.2

1 of the 1 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
github.com/aws/aws-sdk-go@v1.27.0
1.34.0

Open the chart page →

2,435
securitydevtron-labs0.2.21 of 1See more

security devtron-labs 0.2.2

1 of the 1 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
github.com/aws/aws-sdk-go@v1.27.0
1.34.0

Open the chart page →

2,435
furan2dollarshaveclubVerified publisher0.2.01 of 1See more

furan2 dollarshaveclub 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
dollarshaveclub/furan2:master14a257836529
github.com/aws/aws-sdk-go@v1.33.7
1.34.0

Open the chart page →

3,046
temporaldtrdnk-helm-chartsVerified publisher0.35.01 of 13See more

temporal dtrdnk-helm-charts 0.35.0

1 of the 13 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
github.com/aws/aws-sdk-go@v1.25.48
1.34.0

Open the chart page →

20,205
duplicacyduplicacy0.1.21 of 2See more

duplicacy duplicacy 0.1.2

1 of the 2 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
drumsergio/duplicacy-container:0.1.0dd3ee9703969
github.com/aws/aws-sdk-go@v1.30.7
1.34.0

Open the chart page →

2,412
ai-scale-authdysnixVerified publisher0.1.12 of 3See more

ai-scale-auth dysnix 0.1.1

2 of the 3 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
alex6021710/ai-scale-auth:latest6c7a47e470c3
github.com/aws/aws-sdk-go@v1.17.7
1.34.0
alex6021710/ai-scale-migrator:latest744b8a924f35
github.com/aws/aws-sdk-go@v1.17.7
1.34.0

Open the chart page →

6,141
grafanaedu5.3.01 of 1See more

grafana edu 5.3.0

1 of the 1 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
github.com/aws/aws-sdk-go@v1.29.20
1.34.0

Open the chart page →

3,191
prometheusedu11.6.01 of 6See more

prometheus edu 11.6.0

1 of the 6 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
prom/prometheus:v2.19.0bfad037f95e5
github.com/aws/aws-sdk-go@v1.31.9
1.34.0

Open the chart page →

8,484
chaos-meshethereum-helm-chartsVerified publisher0.0.31 of 4See more

chaos-mesh ethereum-helm-charts 0.0.3

1 of the 4 container images this version deploys carry CVE-2022-2582.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-coredns:v0.2.678dc63bc5b89
github.com/aws/aws-sdk-go@v1.33.17
1.34.0

Open the chart page →

12,127

Container images carrying it

103 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
github.com/aws/aws-sdk-go@v1.31.6
1.34.0
1
quay.io/tigera/operator:v1.20.1379efe0c2541
github.com/aws/aws-sdk-go@v1.19.6
1.34.0
1
quay.io/tigera/operator:v1.15.1c6591da87aa8
github.com/aws/aws-sdk-go@v1.19.6
1.34.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.