CVE-2022-27191
HighAdvisory
Published 19 Mar 2022In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.039
- 90th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 737
- of 17,787 indexed, latest versions
- Container images
- 767
- deployed by those charts
- Fix available
- 1 of 1
- affected package
golang.org/x/crypto/ssh Denial of service via crafted Signer
Carried by container images the latest versions of 737 of 17,787 indexed charts deploy, on 767 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| golang.org/ | v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+82 more | 0.0.0-20220314234659-1baeb1ce4c0b | 767 |
- OSV records
- GHSA-8c26-wmh5-6g9v
- Also known as
- GO-2021-0356
Charts affected
737 by stars
Container images carrying it
767 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 878ef6a31fa0 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | ec6d67fbedfa | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | feffc0b8227d | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | c966a4f8a4b7 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | e72aa733faf2 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | 57419b6d3830 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | bd109b2bda38 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | 47f88b18fb7c | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | 05aa441b20aa | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | 00ce11c31087 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | 087618d16b83 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | 8e7b44bbd123 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | 5e409a6332b4 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | d523c2c010cd | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | 23dc6274cc4b | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | 0b2a41c2a43e | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | ded797477896 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | e949b0f733f0 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | aac0389614e4 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | 04ae1fc698a5 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | 09741c86aee7 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | 1f7f89bc6585 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | dfa5907170c4 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | 3609a075c825 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | 2fe6b69b20d7 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | 0bb44992b62c | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | edc238a538a0 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | f5dd1f7794c6 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | b61c750ade19 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | 5a10cd095699 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | 0fae829caf29 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | 119e24f24b1d | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | fafb72e98f22 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | e9bde36e34b7 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | f4324baa2aad | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | f681e0343a31 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | 3491a0f31c4a | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | 7f21d50e69cb | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| ghcr.io/ | a2523c532c0c | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| mcr.microsoft.com/ | ec1803037ed9 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| mcr.microsoft.com/ | f55f30876129 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| mcr.microsoft.com/ | 667b1b1ea1e4 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| mcr.microsoft.com/ | 7997e0f236bc | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| public.ecr.aws/ | 9637c80dd23f | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| public.ecr.aws/ | 67b89ae52240 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| public.ecr.aws/ | 02aed3370fce | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| public.ecr.aws/ | b32c99e7bc45 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| public.ecr.aws/ | 783d550ad813 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| public.ecr.aws/ | cac3ed9a9826 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |
| public.ecr.aws/ | ae59d222fd87 | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b | 1 |