StackRadarChart IndexLive demo

CVE-2022-25883

High

Advisory

Published 21 Jun 2023In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.028; 85th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 459; of 17,787 indexed, latest versions
Container images: 459; deployed by those charts
Fix available: 1 of 2; affected packages

semver vulnerable to Regular Expression Denial of Service

Carried by container images the latest versions of 459 of 17,787 indexed charts deploy, on 459 images.

Affected package	Affected versions	Fixed in	Images
semvernpm	2.1.0, 2.3.2, 4.3.2, 4.3.6+20 more	5.7.2, 6.3.1, 7.5.2	458
node-semverdeb	2.1.0-2, 5.4.1-1, 7.1.3-1, 7.3.5+~7.3.9-2+1 more	no fix listed	8

OSV records: DEBIAN-CVE-2022-25883 GHSA-c2qf-rxjj-qqgw UBUNTU-CVE-2022-25883

Charts affected

459 by stars

Chart

Latest

Affected images

Radar Score

webhookie-allwebhookie

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2022-25883.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	semver@7.3.5	7.5.2

Open the chart page →

28,699

cadencewenerme

1 of 5 See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2022-25883.

Container image	Digest	Package	Fixed in
ubercadence/web :v3.29.5	8564a5b44a6d	semver@6.3.0	6.3.1

Open the chart page →

10,127

temporalwenerme

1 of 13 See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2022-25883.

Container image	Digest	Package	Fixed in
temporalio/web :1.14.0	33cfa863d8ce	semver@6.3.0	6.3.1

Open the chart page →

22,665

opendistro-eswitcom-gmbh

1 of 3 See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry CVE-2022-25883.

Container image	Digest	Package	Fixed in
amazon/opendistro-for-elasticsearch-kibana :1.13.2	c740d7a89475	semver@5.7.1	5.7.2

Open the chart page →

5,807

workadventureworkadventure

4 of 9 See more

workadventure workadventure 1.1.0

4 of the 9 container images this version deploys carry CVE-2022-25883.

Container image	Digest	Package	Fixed in
thecodingmachine/workadventure-back :v1.17.7	64001369dad5	semver@7.3.7	7.5.2
thecodingmachine/workadventure-map-storage :v1.17.7	5bdab56da2fa	semver@7.3.7	7.5.2
thecodingmachine/workadventure-play :v1.17.7	d8f66979b9b4	semver@7.3.7	7.5.2
thecodingmachine/workadventure-uploader :v1.17.7	3ccd467543b3	semver@7.3.7	7.5.2

Open the chart page →

16,083

1 of 1 See more

1,752

helloworldyotron-helm-charts

1 of 1 See more

helloworld yotron-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-25883.

Container image	Digest	Package	Fixed in
a5hut0sh/helloworld :1.0	2ae77620e616	semver@5.5.1	5.7.2

Open the chart page →

1,309

sockpuppetbrowserzekker6

1 of 1 See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-25883.

Container image	Digest	Package	Fixed in
dgtlmoon/sockpuppetbrowser :latest	f166a963b550	semver@7.5.0	7.5.2

Open the chart page →

1,588

alertmanager-matrix-forwarderzloi-space

1 of 2 See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2022-25883.

Container image	Digest	Package	Fixed in
zl0i/alertmanager-matrix-forwarder :v1.0.0	e94047931739	semver@7.3.5	7.5.2

Open the chart page →

3,118

Container images carrying it

459 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/soketi/k8soketi :0.1-18-debian	4cd9ea9434c4	semver@7.3.7	7.5.2	1
quay.io/soketi/pws :0.8-16-alpine	399d2e6b10ef	semver@6.3.0	6.3.1	1
quay.io/soketi/soketi :1.6-16-debian	713223456cf1	semver@6.3.0	6.3.1	1
quay.io/t3n/dashkiosk :v2.7.8	c973e166a5dc	semver@5.7.1	5.7.2	1
quay.io/wekan/wekan :v5.65	cb17600883a3	semver@5.4.1	5.7.2	1
quay.io/wi_stefan/consent-manager :0.0.6	56399619568b	semver@7.0.0	7.5.2	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer :1.0.31	0e3cd8c7776d	semver@7.0.0	7.5.2	1
registry.gitlab.com/infinitydon/registry/open5gs-webui :v2.2.2	fda21b0a0344	semver@5.7.1	5.7.2	1
registry.gitlab.com/timvisee/send :v3.4.20	47986cf6ef69	semver@7.3.5	7.5.2	1