CVE-2022-25881

High

Advisory

Published 31 Jan 2023In the index since 6 Sept 2026

http-cache-semantics vulnerable to Regular Expression Denial of Service

Carried by container images the latest versions of 353 of 17,787 indexed charts deploy, on 351 images.

Affected package	Affected versions	Fixed in	Images
http-cache-semanticsnpm	3.7.3, 3.8.0, 3.8.1, 4.0.3+1 more	4.1.1	351

353 by stars

Chart

Latest

Affected images

Radar Score

1 of the 1 container images this version deploys carry CVE-2022-25881.

Container image	Digest	Package	Fixed in
ymuski/skooner :latest	67819ca511b5	http-cache-semantics@3.8.1	4.1.1

1,752

helloworldyotron-helm-charts

1 of the 1 container images this version deploys carry CVE-2022-25881.

Container image	Digest	Package	Fixed in
a5hut0sh/helloworld :1.0	2ae77620e616	http-cache-semantics@3.8.1	4.1.1

1,309

1 of the 2 container images this version deploys carry CVE-2022-25881.

Container image	Digest	Package	Fixed in
zl0i/alertmanager-matrix-forwarder :v1.0.0	e94047931739	http-cache-semantics@4.1.0	4.1.1

3,118

351 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
registry.gitlab.com/timvisee/send :v3.4.20	47986cf6ef69	http-cache-semantics@4.1.0	4.1.1	1