CVE-2022-25881

High

Advisory

Published 31 Jan 2023In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.016; 75th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 352; of 17,781 indexed, latest versions
Container images: 350; deployed by those charts
Fix available: 1 of 1; affected package

http-cache-semantics vulnerable to Regular Expression Denial of Service

Carried by container images the latest versions of 352 of 17,781 indexed charts deploy, on 350 images.

Affected package	Affected versions	Fixed in	Images
http-cache-semanticsnpm	3.7.3, 3.8.0, 3.8.1, 4.0.3+1 more	4.1.1	350

OSV records: GHSA-rc47-6667-2j5j

Charts affected

352 by stars

Chart

Latest

Affected images

Radar Score

helloworldyotron-helm-charts

0.1.0

1 of 1 See more

helloworld yotron-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-25881.

Container image	Digest	Package	Fixed in
a5hut0sh/helloworld :1.0	2ae77620e616	http-cache-semantics@3.8.1	4.1.1

Open the chart page →

1,309

alertmanager-matrix-forwarderzloi-space

1.0.1

1 of 2 See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2022-25881.

Container image	Digest	Package	Fixed in
zl0i/alertmanager-matrix-forwarder :v1.0.0	e94047931739	http-cache-semantics@4.1.0	4.1.1

Open the chart page →

3,118

Container images carrying it

350 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
activepieces/activepieces :0.23.0	c26188b44e62	http-cache-semantics@4.1.0	4.1.1	1
adrianberger/fluxcd-webui :latest	76848c0d2780	http-cache-semantics@3.8.1	4.1.1	1
adwerx/github-actions-runner :2.276.1-20.04-1	840d2b078682	http-cache-semantics@3.8.1	4.1.1	1
anoopnair/lifecycle-jira-integration :latest	d80c73a6089d	http-cache-semantics@4.1.0	4.1.1	1
aolde/bredbandskollen-prometheus-exporter :1.0.2	dc61ee713720	http-cache-semantics@4.1.0	4.1.1	1
apimap/developer :v1.3.1	406d3858e20c	http-cache-semantics@4.1.0	4.1.1	1
apimap/portal :v2.4.0	041a4790c65c	http-cache-semantics@4.1.0	4.1.1	1
arfath29/3-tier-app-backend :latest	ee0750b18406	http-cache-semantics@3.8.1	4.1.1	1
arfath29/3-tier-app-frontend :latest	384b3e377f47	http-cache-semantics@3.8.1	4.1.1	1
arturisimo/server-urjc :v1.0	d8dc4430531e	http-cache-semantics@4.1.0	4.1.1	1
assistiot/fl_orchestrator :api-latest	7473d77448e1	http-cache-semantics@3.8.1	4.1.1	1
assistiot/monitoring_notifying :2.0.0	68324d0fa5bb	http-cache-semantics@3.8.1	4.1.1	1
assistiot/open_api_frontend :1.0.1	f11d82defc70	http-cache-semantics@3.8.1	4.1.1	1
assistiot/smart-orchestrator_cluster :latest	4f41e1defe99	http-cache-semantics@4.1.0	4.1.1	1
assistiot/smart-orchestrator_enabler :latest	89f37e88c871	http-cache-semantics@3.8.1	4.1.1	1
assistiot/smart-orchestrator_repository :latest	a8b8dbed04a4	http-cache-semantics@3.8.1	4.1.1	1
aureliengasser/http-folder :1.1.1	11c4318c2571	http-cache-semantics@3.8.1	4.1.1	1
bastilimbach/docker-magicmirror :v2.15.0	41b0835ab31e	http-cache-semantics@3.8.1	4.1.1	1
bicarus/http-https-echo :27	85dd6a7e805e	http-cache-semantics@4.1.0	4.1.1	1
bicarus/mx-api-service :1.0.2-hf1	dab88659ae3b	http-cache-semantics@4.1.0	4.1.1	1
billimek/node-influx-uptimerobot :latest	5814f0bcf5ba	http-cache-semantics@3.8.1	4.1.1	1
blockscout/blockscout :5.1.5	c365a8f2dc12	http-cache-semantics@4.1.0	4.1.1	1
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	http-cache-semantics@4.1.0	4.1.1	1
carbonetes/carbonetes-analyzer :1.0.3	1b9b93c9a37f	http-cache-semantics@3.8.1	4.1.1	1
cnieg/maildev :v1.1.9	98ee05668915	http-cache-semantics@3.8.1	4.1.1	1
coderaiser/cloudcmd :16.6.1	b34a9775c7ce	http-cache-semantics@3.8.1	4.1.1	1
coldatom/containers-security-front :latest	7c2fbbb41bcf	http-cache-semantics@4.1.0	4.1.1	1
conduction/conduction-ui-app :dev	d591f5e6f2a9	http-cache-semantics@3.8.1	4.1.1	1
cspconsole/report-processor :1.0.27	9a2d8840bfdf	http-cache-semantics@3.8.1	4.1.1	1
daskdev/dask-notebook :1.1.0	052630f5ca04	http-cache-semantics@3.8.0	4.1.1	1
datarhei/restreamer :0.6.4	655e12f9eeed	http-cache-semantics@3.8.1	4.1.1	1
davidvmar/urjc-davidvmar-external-service :1.0.0	2a68e9ac7f09	http-cache-semantics@3.8.1	4.1.1	1
davidvmar/urjc-davidvmar-server :1.0.0	5663f5b24615	http-cache-semantics@3.8.1	4.1.1	1
decayofmind/hubot :3.3.2	1e18e92fe694	http-cache-semantics@3.8.1	4.1.1	1
denisshav/backend :latest	4cc8dc5a4499	http-cache-semantics@4.1.0	4.1.1	1
dessalines/lemmy-ui :0.19.20	ee4c620d8e93	http-cache-semantics@3.8.1	4.1.1	1
devspacecloud/ui :0.3.3	deef55ff29a7	http-cache-semantics@3.8.1	4.1.1	1
dipugodocker/pdf-editor :1.0-frontend	d431c37fe1cd	http-cache-semantics@4.1.0	4.1.1	1
ealen/echo-server :0.6.0	359761caae37	http-cache-semantics@4.1.0	4.1.1	1
eameti/node-app :latest	f36642affa86	http-cache-semantics@3.8.1	4.1.1	1
electerious/ackee :3.2.0	5e7173fa321c	http-cache-semantics@3.8.1	4.1.1	1
enketo/enketo-express :3.0.4	dcad9c2273f6	http-cache-semantics@3.8.1	4.1.1	1
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	http-cache-semantics@3.8.0	4.1.1	1
ethereumoptimism/data-transport-layer :0.5.56	e07968a0e686	http-cache-semantics@4.1.0	4.1.1	1
ethersphere/bzz-token-service :latest	7624f11a72ad	http-cache-semantics@4.1.0	4.1.1	1
ethersphere/onboarding-faucet :0.3.0	513154aab230	http-cache-semantics@4.1.0	4.1.1	1
ethpandaops/blobscan :latest	7a9ab6370657	http-cache-semantics@4.1.0	4.1.1	1
ethpandaops/blobscan-indexer :latest	c58eb9ffe446	http-cache-semantics@3.8.1	4.1.1	1
fallenbagel/jellyseerr :1.7.0	6dcdb5ba5091	http-cache-semantics@4.1.0	4.1.1	1
fanzynoodle/smeejas :0.0.1	5f9916c1a287	http-cache-semantics@4.1.0	4.1.1	1