CVE-2022-2582
MediumAdvisory
Published 1 Jul 2022In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 4.3
- base score, highest
- EPSS
- 0.005
- 40th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 114
- of 17,781 indexed, latest versions
- Container images
- 103
- deployed by those charts
- Fix available
- 1 of 1
- affected package
AWS S3 Crypto SDK sends an unencrypted hash of the plaintext alongside the ciphertext as a metadata field
Carried by container images the latest versions of 114 of 17,781 indexed charts deploy, on 103 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v1.12.54, v1.15.24, v1.17.7, v1.17.14+46 more | 1.34.0 | 103 |
- OSV records
- GHSA-6jvc-q2x7-pchv
- Also known as
- GHSA-76wf-9vgp-pj7w, GO-2022-0391
Charts affected
114 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| kube-ebs-taggersstarcher | 0.1.0+7abf4f7 | 1 of 1See more | 3,096 |
| whitelisterstakaterVerified publisher | 0.0.16 | 1 of 1See more | 2,564 |
| cost-analyzerstatcan | 1.82.2 | 2 of 9See more | 16,506 |
| prometheus-operatorstatcan | 0.2.2 | 1 of 7See more | 12,237 |
| lokit3n | 1.0.0 | 1 of 1See more | 2,869 |
| promtailt3n | 1.0.0 | 1 of 1See more | 2,821 |
| temporaltemporal | 0.28.9 | 1 of 13See more | 21,005 |
| grafanatnh | 5.3.0 | 1 of 1See more | 3,191 |
| prometheustnh | 11.6.0 | 1 of 6See more | 8,484 |
| scrutinyvhdirkVerified publisher | 0.1.3 | 1 of 1See more | 4,382 |
| athens-proxywenerme | 0.5.2 | 1 of 2See more | 4,984 |
| temporalwenerme | 0.15.1 | 2 of 13See more | 22,665 |
| traefikwenerme | 9.1.1 | 1 of 1See more | 3,369 |
| zahori-consulzahoriVerified publisher | 1.0.1 | 1 of 2See more | 5,033 |
Container images carrying it
103 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| grafana/ | d72946c8e5d5 | github.com/ | 1.34.0 | 6 |
| prom/ | 0a8caa2e9f19 | github.com/ | 1.34.0 | 5 |
| grafana/ | 1ff3999e0fc0 | github.com/ | 1.34.0 | 4 |
| prom/ | bfad037f95e5 | github.com/ | 1.34.0 | 3 |
| quay.io/ | 88c64b1b6ec8 | github.com/ | 1.34.0 | 3 |
| abutaha/ | 190ed2d1dfc8 | github.com/ | 1.34.0 | 2 |
| bitnamilegacy/ | d17df1f9d745 | github.com/ | 1.34.0 | 2 |
| chankh/ | 963c44c7f8b1 | github.com/ | 1.34.0 | 2 |
| danielfm/ | 7152b84e57cb | github.com/ | 1.34.0 | 2 |
| garugaru/ | 541852cafda5 | github.com/ | 1.34.0 | 2 |
| grafana/ | 511bc20bfcd1 | github.com/ | 1.34.0 | 2 |
| grafana/ | 922b3f412fdd | github.com/ | 1.34.0 | 2 |
| grafana/ | 46e88d390cd6 | github.com/ | 1.34.0 | 2 |
| hashicorp/ | 538a3436398d | github.com/ | 1.34.0 | 2 |
| library/ | 44a366dd7724 | github.com/ | 1.34.0 | 2 |
| pottava/ | 20a0bcb15f76 | github.com/ | 1.34.0 | 2 |
| prom/ | 42d2395cd719 | github.com/ | 1.34.0 | 2 |
| statping/ | e874da513a5c | github.com/ | 1.34.0 | 2 |
| ghcr.io/ | 38bfdf5e3774 | github.com/ | 1.34.0 | 2 |
| ghcr.io/ | 78dc63bc5b89 | github.com/ | 1.34.0 | 2 |
| alex6021710/ | 6c7a47e470c3 | github.com/ | 1.34.0 | 1 |
| alex6021710/ | 744b8a924f35 | github.com/ | 1.34.0 | 1 |
| amazon/ | b55277652ea8 | github.com/ | 1.34.0 | 1 |
| amazon/ | e745d1783c93 | github.com/ | 1.34.0 | 1 |
| anchore/ | bde9eedf639d | github.com/ | 1.34.0 | 1 |
| aquasec/ | 7ea4aa3d2eb6 | github.com/ | 1.34.0 | 1 |
| buildkite/ | aec38cfaae0e | github.com/ | 1.34.0 | 1 |
| chirpstack/ | e0b23dfd24d6 | github.com/ | 1.34.0 | 1 |
| chirpstack/ | fb7667fe037f | github.com/ | 1.34.0 | 1 |
| cockroachdb/ | 983312754620 | github.com/ | 1.34.0 | 1 |
| containous/ | 587162516502 | github.com/ | 1.34.0 | 1 |
| coredns/ | 73ca82b4ce82 | github.com/ | 1.34.0 | 1 |
| datadog/ | 8f20e56b5311 | github.com/ | 1.34.0 | 1 |
| datappeal/ | e38c085a3567 | github.com/ | 1.34.0 | 1 |
| datappeal/ | 325b91c2b09e | github.com/ | 1.34.0 | 1 |
| dellemc/ | 148ada9060a9 | github.com/ | 1.34.0 | 1 |
| dollarshaveclub/ | 14a257836529 | github.com/ | 1.34.0 | 1 |
| drumsergio/ | dd3ee9703969 | github.com/ | 1.34.0 | 1 |
| garugaru/ | 5201314c28f3 | github.com/ | 1.34.0 | 1 |
| goharbor/ | fd91a4a1273f | github.com/ | 1.34.0 | 1 |
| goharbor/ | a92b51aa7d6e | github.com/ | 1.34.0 | 1 |
| gomods/ | d714c7ff0231 | github.com/ | 1.34.0 | 1 |
| gomods/ | efb811df7844 | github.com/ | 1.34.0 | 1 |
| grafana/ | 052147d7e0ec | github.com/ | 1.34.0 | 1 |
| grafana/ | 15b977f5207d | github.com/ | 1.34.0 | 1 |
| grafana/ | 6d42886b3ebe | github.com/ | 1.34.0 | 1 |
| grafana/ | 733842cca5bd | github.com/ | 1.34.0 | 1 |
| grafana/ | befcd84da2c1 | github.com/ | 1.34.0 | 1 |
| hashicorp/ | 62bed1bf8106 | github.com/ | 1.34.0 | 1 |
| inseefrlab/ | 31f04ca7436b | github.com/ | 1.34.0 | 1 |