StackRadar

CVE-2022-25883

High

Advisory

Published 21 Jun 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.028
85th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
457
of 17,787 indexed, latest versions
Container images
458
deployed by those charts
Fix available
1 of 2
affected packages

semver vulnerable to Regular Expression Denial of Service

Carried by container images the latest versions of 457 of 17,787 indexed charts deploy, on 458 images.

Affected packageAffected versionsFixed inImages
semvernpm2.1.0, 2.3.2, 4.3.2, 4.3.6+20 more5.7.2, 6.3.1, 7.5.2457
node-semverdeb2.1.0-2, 5.4.1-1, 7.1.3-1, 7.3.5+~7.3.9-2+1 moreno fix listed8
OSV records
DEBIAN-CVE-2022-25883GHSA-c2qf-rxjj-qqgwUBUNTU-CVE-2022-25883

Charts affected

457 by stars
ChartLatestAffected imagesRadar Score
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2022-25883.

Container imageDigestPackageFixed in
temporalio/web:1.14.033cfa863d8ce
semver@6.3.0
6.3.1

Open the chart page →

22,665
opendistro-eswitcom-gmbh1.13.31 of 3See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry CVE-2022-25883.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch-kibana:1.13.2c740d7a89475
semver@5.7.1
5.7.2

Open the chart page →

5,806
workadventureworkadventure1.1.04 of 9See more

workadventure workadventure 1.1.0

4 of the 9 container images this version deploys carry CVE-2022-25883.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-back:v1.17.764001369dad5
semver@7.3.7
7.5.2
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
semver@7.3.7
7.5.2
thecodingmachine/workadventure-play:v1.17.7d8f66979b9b4
semver@7.3.7
7.5.2
thecodingmachine/workadventure-uploader:v1.17.73ccd467543b3
semver@7.3.7
7.5.2

Open the chart page →

16,083
skoonerxdVerified publisher1.1.01 of 1See more

skooner xd 1.1.0

1 of the 1 container images this version deploys carry CVE-2022-25883.

Container imageDigestPackageFixed in
ymuski/skooner:latest67819ca511b5
semver@5.7.1
5.7.2

Open the chart page →

1,752
helloworldyotron-helm-charts0.1.01 of 1See more

helloworld yotron-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-25883.

Container imageDigestPackageFixed in
a5hut0sh/helloworld:1.02ae77620e616
semver@5.5.1
5.7.2

Open the chart page →

1,309
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-25883.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latestf166a963b550
semver@7.5.0
7.5.2

Open the chart page →

1,589
alertmanager-matrix-forwarderzloi-space1.0.11 of 2See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2022-25883.

Container imageDigestPackageFixed in
zl0i/alertmanager-matrix-forwarder:v1.0.0e94047931739
semver@7.3.5
7.5.2

Open the chart page →

3,118

Container images carrying it

458 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
minddocdev/hubot:0.1.96c60b11a4fa7
semver@5.0.3
5.7.2
1
mintproject/data-catalog:9be70359feabe03ed55bfdbf92c20a7e43ab928b67d2f2103085
semver@7.3.5
7.5.2
1
mintproject/ensemble-manager:d5656dbc01623e291564d2894c72f0e7cb2408f4222e3b941a36
semver@7.0.0
7.5.2
1
misskey/misskey:12.110.1e08b7c478093
semver@7.3.5
7.5.2
1
mitchxxx/amazon:214e72480ec63a
semver@7.5.0
7.5.2
1
moonrailgun/tianji:1.11.2b528c8f8fcc4
semver@7.3.8
7.5.2
1
moreillon/api-proxy:2373c1953739ef6956b5
semver@7.0.0
7.5.2
1
moreillon/camera-proxy:latestce60056b50c2
semver@7.3.7
7.5.2
1
moreillon/face-recognition-fastapi-front:latestc1072f4ab6aa
semver@6.3.0
6.3.1
1
moreillon/food-manager:lateste8fd856e593d
semver@7.0.0
7.5.2
1
moreillon/mqtt-logger:9ffbf7180a8a7daf56f6
semver@7.3.7
7.5.2
1
mozilla/sentencecollector:2.0.91da6ff5c4895
semver@5.7.1
5.7.2
1
muluder/prograncontrollermcord:0.1.843b597a93da7
semver@5.4.1
5.7.2
1
n8nio/n8n:1.86.08b39ed5a2de9
semver@5.3.0
5.7.2
1
n8nio/n8n:0.212.0a9195bc499a3
semver@5.7.1
5.7.2
1
n8nio/n8n:1.33.1dd171d45102a
semver@5.3.0
5.7.2
1
netrisai/controller-web-service-backend:4.6.0-0086e865080e86c
semver@5.7.1
5.7.2
1
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
semver@5.7.1
5.7.2
1
nightscout/cgm-remote-monitor:15.0.2ad29ca7a4de6
semver@5.7.1
5.7.2
1
nightscout/cgm-remote-monitor:15.0.3f604dc4c03ca
semver@5.7.1
5.7.2
1
nodered/node-red:2.2.2e131dcadfe92
semver@7.3.5
7.5.2
1
nodered/node-red:3.0.2-18e2632a7a35dd
semver@7.3.7
7.5.2
1
nodered/node-red-docker:0.19.6-v8070643219ea2
semver@5.3.0
5.7.2
1
nonkronk/tristian-id:latest0a3694d70647
semver@5.7.1
5.7.2
1
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
node-semver@7.3.5+~7.3.9-2
semver@7.3.5
no fix listed
7.5.2
1
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
node-semver@7.3.5+~7.3.9-2
semver@7.3.5
no fix listed
7.5.2
1
ohmyform/ohmyform:1.0.3afe53f4acdb1
semver@5.7.1
5.7.2
1
okaforuchena/uo-docker:V1.0.0004e81250f48
semver@7.5.1
7.5.2
1
omecproject/onos-progran:1.0.05715e5648aa0
semver@5.3.0
5.7.2
1
ondrejsika/parking:latestb1fd497416c8
semver@7.0.0
7.5.2
1
ooghenekaro/amazon:latest03394ba1d6d8
semver@7.5.0
7.5.2
1
ooghenekaro/hans-docker:v1.0.0d1f972aa844a
semver@7.5.1
7.5.2
1
ooghenekaro/nodejswebapp:latestea5b71588a76
semver@7.3.8
7.5.2
1
openbas/caldera-server:5.1.0a277796d9724
semver@7.3.7
7.5.2
1
openemr/openemr:6.1.089eaa6d9a4e3
semver@6.3.0
6.3.1
1
openhab/openhab-cloud:a8138a329dd2bac8c4b
semver@7.3.4
7.5.2
1
openproject/community:12.0.2734743d11094
semver@5.7.1
5.7.2
1
opensearchproject/opensearch-dashboards:1.0.039695180364b
semver@5.7.1
5.7.2
1
openthread/otbr:latestf307f59f6432
semver@5.4.1
node-semver@5.4.1-1
5.7.2
no fix listed
1
openwhisk/alarmprovider:2.2.0b695a6ceb406
semver@5.7.1
5.7.2
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
semver@5.4.1
node-semver@5.4.1-1
5.7.2
no fix listed
1
oryd/hive-selfservice-ui-node:v0.0.426347ef0a2de
semver@5.7.1
5.7.2
1
oryd/kratos-selfservice-ui-node:v26.2.046a7bac1ad0c
semver@7.3.7
7.5.2
1
oryd/kratos-selfservice-ui-node:v0.13.0-20d454c21c11bc
semver@7.3.7
7.5.2
1
pachyderm/grpc-proxy:0.4.92b27f41d4d02
semver@5.5.0
5.7.2
1
parithoshj/testnet-faucet:9859e0dcdca426fea6d
semver@5.7.1
5.7.2
1
patdada/bella-docker:v1.0.075127147a624
semver@5.7.1
5.7.2
1
patrickhulce/lhci-server:0.8.174b4b6a3954d
semver@5.7.1
5.7.2
1
pawelmalak/flame:2.1.193e7b0abb603
semver@5.7.1
5.7.2
1
pawelmalak/flame:multiarch2.3.19f88b17692a0
semver@7.3.5
7.5.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.