StackRadar

CVE-2022-25901

Medium

Advisory

Published 18 Jan 2023In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.015
74th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
34
of 17,781 indexed, latest versions
Container images
33
deployed by those charts
Fix available
1 of 1
affected package

cookiejar Regular Expression Denial of Service via Cookie.parse function

Carried by container images the latest versions of 34 of 17,781 indexed charts deploy, on 33 images.

Affected packageAffected versionsFixed inImages
cookiejarnpm2.0.6, 2.1.2, 2.1.32.1.433
OSV records
GHSA-h452-7996-h45h

Charts affected

34 by stars
ChartLatestAffected imagesRadar Score
hedgedocadfinisVerified publisher0.6.11 of 2See more

hedgedoc adfinis 0.6.1

1 of the 2 container images this version deploys carry CVE-2022-25901.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.12.089bd85d7817f
cookiejar@2.0.6
2.1.4

Open the chart page →

2,938
wikijsgeek-cookbookVerified publisher6.4.21 of 1See more

wikijs geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2022-25901.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
cookiejar@2.1.2
2.1.4

Open the chart page →

5,946
hedgedocrobertobochetVerified publisher1.4.01 of 1See more

hedgedoc robertobochet 1.4.0

1 of the 1 container images this version deploys carry CVE-2022-25901.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.12.089bd85d7817f
cookiejar@2.0.6
2.1.4

Open the chart page →

977
ranetogabisonfire0.1.21 of 1See more

raneto gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-25901.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/raneto:version-0.16.6ef768f3df5d0
cookiejar@2.1.2
2.1.4

Open the chart page →

2,519
pdf-editor-helmpdf-editor-web1.0.01 of 4See more

pdf-editor-helm pdf-editor-web 1.0.0

1 of the 4 container images this version deploys carry CVE-2022-25901.

Container imageDigestPackageFixed in
dipugodocker/pdf-editor:1.0-frontendd431c37fe1cd
cookiejar@2.1.3
2.1.4

Open the chart page →

4,206
mx-apibicarus-labs0.1.01 of 4See more

mx-api bicarus-labs 0.1.0

1 of the 4 container images this version deploys carry CVE-2022-25901.

Container imageDigestPackageFixed in
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
cookiejar@2.1.3
2.1.4

Open the chart page →

4,455
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2022-25901.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
cookiejar@2.1.2
2.1.4

Open the chart page →

25,456
quickchartcowboysysopVerified publisher5.0.01 of 1See more

quickchart cowboysysop 5.0.0

1 of the 1 container images this version deploys carry CVE-2022-25901.

Container imageDigestPackageFixed in
ianw/quickchart:v1.7.1dc49dd460c37
cookiejar@2.1.3
2.1.4

Open the chart page →

5,488
hedgedocernail-hedgedoc5.0.01 of 1See more

hedgedoc ernail-hedgedoc 5.0.0

1 of the 1 container images this version deploys carry CVE-2022-25901.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.10.8abdb6b08815d
cookiejar@2.0.6
2.1.4

Open the chart page →

1,755
bzz-token-serviceethersphereVerified publisher0.2.01 of 1See more

bzz-token-service ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-25901.

Container imageDigestPackageFixed in
ethersphere/bzz-token-service:latest7624f11a72ad
cookiejar@2.1.2
2.1.4

Open the chart page →

3,260
onboarding-faucetethersphereVerified publisher0.2.01 of 1See more

onboarding-faucet ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-25901.

Container imageDigestPackageFixed in
ethersphere/onboarding-faucet:0.3.0513154aab230
cookiejar@2.1.3
2.1.4

Open the chart page →

3,320
smeejasfanzynoodle0.0.11 of 1See more

smeejas fanzynoodle 0.0.1

1 of the 1 container images this version deploys carry CVE-2022-25901.

Container imageDigestPackageFixed in
fanzynoodle/smeejas:0.0.15f9916c1a287
cookiejar@2.1.3
2.1.4

Open the chart page →

4,127
nightscoutgeek-cookbookVerified publisher1.2.21 of 1See more

nightscout geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-25901.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
cookiejar@2.1.2
2.1.4

Open the chart page →

4,043
Governify-Bluejaygovernify0.1.02 of 12See more

Governify-Bluejay governify 0.1.0

2 of the 12 container images this version deploys carry CVE-2022-25901.

Container imageDigestPackageFixed in
governify/registry:v3.4.0d3f37f4f8168
cookiejar@2.1.2
2.1.4
governify/reporter:v2.2.038595913458f
cookiejar@2.1.2
2.1.4

Open the chart page →

22,512
Governify-Falcongovernify0.1.02 of 10See more

Governify-Falcon governify 0.1.0

2 of the 10 container images this version deploys carry CVE-2022-25901.

Container imageDigestPackageFixed in
governify/registry:v3.4.0d3f37f4f8168
cookiejar@2.1.2
2.1.4
governify/reporter:v2.2.038595913458f
cookiejar@2.1.2
2.1.4

Open the chart page →

24,319
gitter-irc-bridgehalkeye0.1.11 of 1See more

gitter-irc-bridge halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2022-25901.

Container imageDigestPackageFixed in
halkeye/gitter-slack-bridge:v2.0.153eb2b3cd4cb
cookiejar@2.1.2
2.1.4

Open the chart page →

3,642
matrix-appservice-gitterhalkeye0.1.01 of 1See more

matrix-appservice-gitter halkeye 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-25901.

Container imageDigestPackageFixed in
matrixdotorg/matrix-appservice-gitter:latest0d37b4d42b47
cookiejar@2.1.2
2.1.4

Open the chart page →

3,003
streamsheetshelm-chartsVerified publisher0.2.34 of 8See more

streamsheets helm-charts 0.2.3

4 of the 8 container images this version deploys carry CVE-2022-25901.

Container imageDigestPackageFixed in
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
cookiejar@2.1.2
2.1.4
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
cookiejar@2.1.2
2.1.4
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
cookiejar@2.1.2
2.1.4
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
cookiejar@2.1.2
2.1.4

Open the chart page →

89,959
wikijshomeenterpriseinc1.4.01 of 1See more

wikijs homeenterpriseinc 1.4.0

1 of the 1 container images this version deploys carry CVE-2022-25901.

Container imageDigestPackageFixed in
requarks/wiki:canary-2.5.2438b5865a7386c
cookiejar@2.1.3
2.1.4

Open the chart page →

4,253
ibm-business-automation-insights-devibm-charts3.2.01 of 6See more

ibm-business-automation-insights-dev ibm-charts 3.2.0

1 of the 6 container images this version deploys carry CVE-2022-25901.

Container imageDigestPackageFixed in
ibmcom/bai-admin-dev:19.0.202d882f2836e
cookiejar@2.1.2
2.1.4

Open the chart page →

39,349
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2022-25901.

Container imageDigestPackageFixed in
ibmcom/microclimate-portal:latested5505e5c7ec
cookiejar@2.0.6
2.1.4

Open the chart page →

57,669
erpnextimprowisedVerified publisher3.3.01 of 3See more

erpnext improwised 3.3.0

1 of the 3 container images this version deploys carry CVE-2022-25901.

Container imageDigestPackageFixed in
frappe/frappe-socketio:v13.4.12095767a9e82
cookiejar@2.1.2
2.1.4

Open the chart page →

6,501
dtlinfradao0.0.11 of 1See more

dtl infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2022-25901.

Container imageDigestPackageFixed in
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
cookiejar@2.1.2
2.1.4

Open the chart page →

4,944
annotation-tooljtektVerified publisher0.1.51 of 2See more

annotation-tool jtekt 0.1.5

1 of the 2 container images this version deploys carry CVE-2022-25901.

Container imageDigestPackageFixed in
moreillon/api-proxy:a3e8b41e9e578c9653b6
cookiejar@2.1.3
2.1.4

Open the chart page →

2,315
polygonal-annotation-tooljtektVerified publisher0.1.51 of 2See more

polygonal-annotation-tool jtekt 0.1.5

1 of the 2 container images this version deploys carry CVE-2022-25901.

Container imageDigestPackageFixed in
moreillon/api-proxy:a3e8b41e9e578c9653b6
cookiejar@2.1.3
2.1.4

Open the chart page →

2,231
ohmyformkrzwiatrzyk0.0.11 of 1See more

ohmyform krzwiatrzyk 0.0.1

1 of the 1 container images this version deploys carry CVE-2022-25901.

Container imageDigestPackageFixed in
ohmyform/ohmyform:1.0.3afe53f4acdb1
cookiejar@2.1.3
2.1.4

Open the chart page →

4,230
kubevismario-fVerified publisher2.0.11 of 1See more

kubevis mario-f 2.0.1

1 of the 1 container images this version deploys carry CVE-2022-25901.

Container imageDigestPackageFixed in
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
cookiejar@2.1.2
2.1.4

Open the chart page →

5,287
face-recognitionmoreillonVerified publisher0.2.41 of 3See more

face-recognition moreillon 0.2.4

1 of the 3 container images this version deploys carry CVE-2022-25901.

Container imageDigestPackageFixed in
moreillon/face-recognition-fastapi-front:latestc1072f4ab6aa
cookiejar@2.1.3
2.1.4

Open the chart page →

8,556
sentence-collectormozilla0.1.21 of 2See more

sentence-collector mozilla 0.1.2

1 of the 2 container images this version deploys carry CVE-2022-25901.

Container imageDigestPackageFixed in
mozilla/sentencecollector:2.0.91da6ff5c4895
cookiejar@2.1.2
2.1.4

Open the chart page →

6,684
smilencsaVerified publisher1.1.01 of 23See more

smile ncsa 1.1.0

1 of the 23 container images this version deploys carry CVE-2022-25901.

Container imageDigestPackageFixed in
socialmediamacroscope/smile_server:0.3.31a528c794270
cookiejar@2.1.2
2.1.4

Open the chart page →

109,294
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2022-25901.

Container imageDigestPackageFixed in
linuxserver/codimd:latestb801bbcf6386
cookiejar@2.0.6
2.1.4

Open the chart page →

27,465
hedgedocschmitzis0.1.121 of 1See more

hedgedoc schmitzis 0.1.12

1 of the 1 container images this version deploys carry CVE-2022-25901.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
cookiejar@2.0.6
2.1.4

Open the chart page →

3,118
hedgedocsi-gitops0.12.31 of 2See more

hedgedoc si-gitops 0.12.3

1 of the 2 container images this version deploys carry CVE-2022-25901.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.12.089bd85d7817f
cookiejar@2.0.6
2.1.4

Open the chart page →

2,638
hedgedocvista0.1.11 of 1See more

hedgedoc vista 0.1.1

1 of the 1 container images this version deploys carry CVE-2022-25901.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
cookiejar@2.0.6
2.1.4

Open the chart page →

3,118

Container images carrying it

33 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/hedgedoc/hedgedoc:1.12.089bd85d7817f
cookiejar@2.0.6
2.1.4
3
governify/registry:v3.4.0d3f37f4f8168
cookiejar@2.1.2
2.1.4
2
governify/reporter:v2.2.038595913458f
cookiejar@2.1.2
2.1.4
2
moreillon/api-proxy:a3e8b41e9e578c9653b6
cookiejar@2.1.3
2.1.4
2
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
cookiejar@2.0.6
2.1.4
2
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
cookiejar@2.1.3
2.1.4
1
dipugodocker/pdf-editor:1.0-frontendd431c37fe1cd
cookiejar@2.1.3
2.1.4
1
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
cookiejar@2.1.2
2.1.4
1
ethersphere/bzz-token-service:latest7624f11a72ad
cookiejar@2.1.2
2.1.4
1
ethersphere/onboarding-faucet:0.3.0513154aab230
cookiejar@2.1.3
2.1.4
1
fanzynoodle/smeejas:0.0.15f9916c1a287
cookiejar@2.1.3
2.1.4
1
frappe/frappe-socketio:v13.4.12095767a9e82
cookiejar@2.1.2
2.1.4
1
halkeye/gitter-slack-bridge:v2.0.153eb2b3cd4cb
cookiejar@2.1.2
2.1.4
1
ianw/quickchart:v1.7.1dc49dd460c37
cookiejar@2.1.3
2.1.4
1
ibmcom/bai-admin-dev:19.0.202d882f2836e
cookiejar@2.1.2
2.1.4
1
ibmcom/microclimate-portal:latested5505e5c7ec
cookiejar@2.0.6
2.1.4
1
linuxserver/codimd:latestb801bbcf6386
cookiejar@2.0.6
2.1.4
1
matrixdotorg/matrix-appservice-gitter:latest0d37b4d42b47
cookiejar@2.1.2
2.1.4
1
moreillon/face-recognition-fastapi-front:latestc1072f4ab6aa
cookiejar@2.1.3
2.1.4
1
mozilla/sentencecollector:2.0.91da6ff5c4895
cookiejar@2.1.2
2.1.4
1
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
cookiejar@2.1.2
2.1.4
1
ohmyform/ohmyform:1.0.3afe53f4acdb1
cookiejar@2.1.3
2.1.4
1
requarks/wiki:canary-2.5.2438b5865a7386c
cookiejar@2.1.3
2.1.4
1
socialmediamacroscope/smile_server:0.3.31a528c794270
cookiejar@2.1.2
2.1.4
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
cookiejar@2.1.2
2.1.4
1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
cookiejar@2.1.2
2.1.4
1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
cookiejar@2.1.2
2.1.4
1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
cookiejar@2.1.2
2.1.4
1
ghcr.io/linuxserver/raneto:version-0.16.6ef768f3df5d0
cookiejar@2.1.2
2.1.4
1
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
cookiejar@2.1.2
2.1.4
1
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
cookiejar@2.1.2
2.1.4
1
quay.io/hedgedoc/hedgedoc:1.10.8abdb6b08815d
cookiejar@2.0.6
2.1.4
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
cookiejar@2.1.2
2.1.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.