StackRadar

CVE-2022-27406

High

Advisory

Published 22 Apr 2022In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.033
88th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
259
of 17,781 indexed, latest versions
Container images
195
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 259 of 17,781 indexed charts deploy, on 195 images.

Affected packageAffected versionsFixed inImages
freetypedeb2.6.1-0.1ubuntu2.3, 2.6.1-0.1ubuntu2.4, 2.8.1-2ubuntu2, 2.8.1-2ubuntu2.1+2 more2.6.1-0.1ubuntu2.5+esm1, 2.8.1-2ubuntu2.2, 2.10.1-2ubuntu0.2, 2.11.1+dfsg-1ubuntu0.1106
freetypeapk2.10.2-r0, 2.10.4-r0, 2.10.4-r1, 2.10.4-r2+3 more2.10.4-r2, 2.10.4-r3, 2.11.1-r289
OSV records
ALPINE-CVE-2022-27406UBUNTU-CVE-2022-27406
Also known as
USN-5453-1, USN-5528-1, USN-7352-2

Charts affected

259 by stars
ChartLatestAffected imagesRadar Score
pock-helm-charttinote-chart0.1.01 of 3See more

pock-helm-chart tinote-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2022-27406.

Container imageDigestPackageFixed in
denisshav/frontend:latestb97cc69fbac6
freetype@2.10.4-r1
2.10.4-r3

Open the chart page →

6,881
pagesvictor-pages1.0.02 of 3See more

pages victor-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2022-27406.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
flyway/flyway:6.4.422d97ceb0c47
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.2

Open the chart page →

20,190
pageswalter1.0.02 of 3See more

pages walter 1.0.0

2 of the 3 container images this version deploys carry CVE-2022-27406.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
flyway/flyway:6.4.422d97ceb0c47
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.2

Open the chart page →

20,190
queryservice-uiwbstack0.2.01 of 1See more

queryservice-ui wbstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-27406.

Container imageDigestPackageFixed in
ghcr.io/wbstack/queryservice-ui:1.4bc79fbb50230
freetype@2.11.0-r0
2.11.1-r2

Open the chart page →

1,996
uiwbstack0.4.01 of 1See more

ui wbstack 0.4.0

1 of the 1 container images this version deploys carry CVE-2022-27406.

Container imageDigestPackageFixed in
ghcr.io/wbstack/ui:3.94b01f67faadf1
freetype@2.11.1-r1
2.11.1-r2

Open the chart page →

1,523
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-27406.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2

Open the chart page →

14,364
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2022-27406.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2

Open the chart page →

28,605
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2022-27406.

Container imageDigestPackageFixed in
longhornio/longhorn-ui:v1.2.3148598de4b7d
freetype@2.10.4-r1
2.10.4-r3

Open the chart page →

15,230
workadventureworkadventure1.1.02 of 9See more

workadventure workadventure 1.1.0

2 of the 9 container images this version deploys carry CVE-2022-27406.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-chat:v1.17.7da12f37e6795
freetype@2.11.1-r1
2.11.1-r2
thecodingmachine/workadventure-ejabberd:v1.17.701df99622ad3
freetype@2.11.1-r0
2.11.1-r2

Open the chart page →

16,083

Container images carrying it

195 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
factly/dega-studio:0.15.1140fbaa6d555
freetype@2.10.4-r1
2.10.4-r3
1
factly/kavach-web:0.22.30cf361b41798
freetype@2.10.4-r1
2.10.4-r3
1
factly/vidcheck-studio:0.12.024be158ec7d3
freetype@2.10.4-r1
2.10.4-r3
1
frankescobar/allure-docker-service:2.21.08a4d7e9308de
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.2
1
frankescobar/allure-docker-service:2.19.0cafa03b94dac
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.2
1
gabekangas/owncast:0.0.797461aedb580
freetype@2.10.4-r0
2.10.4-r2
1
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.2
1
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
1
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
1
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
1
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
1
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
1
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
1
gethue/hue:4.10.05702b2c37ff9
freetype@2.8.1-2ubuntu2.1
2.8.1-2ubuntu2.2
1
gmelillo/nginx:2021-01-091b30f79cf7ea
freetype@2.10.4-r0
2.10.4-r2
1
golenski/fibonacci-front:2.0.048cfd60b8413
freetype@2.10.2-r0
2.10.4-r2
1
gotson/komga:0.99.49b15ea6bfc30
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.2
1
graphiteapp/graphite-statsd:1.1.7-604a0037cc2ae
freetype@2.10.2-r0
2.10.4-r2
1
haveagitgat/tdarr:2.00.181256348872ce
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
1
housewrecker/gaps:latestf417dd0a7547
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
1
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
freetype@2.8.1-2ubuntu2.1
2.8.1-2ubuntu2.2
1
hugohg34/toposervice:0.0.2812a03b3f274
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
1
hyperledger/fabric-couchdb:0.4.10c65891b6c237
freetype@2.6.1-0.1ubuntu2.3
2.6.1-0.1ubuntu2.5+esm1
1
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
1
jacobalberty/unifi:v7.1.664a3616625dda
freetype@2.8.1-2ubuntu2.1
2.8.1-2ubuntu2.2
1
jacobalberty/unifi:5.10.19c409924e2463
freetype@2.6.1-0.1ubuntu2.3
2.6.1-0.1ubuntu2.5+esm1
1
jakowenko/double-take:1.6.0b858bac9e32a
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
1
jlesage/handbrake:v1.24.25fa191e3c7ee
freetype@2.10.4-r0
2.10.4-r2
1
johnblack77/clustereye:latest-amd64bb53ceb8442e
freetype@2.10.4-r1
2.10.4-r3
1
kanboard/kanboard:v1.2.200b6d33dbbc16
freetype@2.10.4-r1
2.10.4-r3
1
lavandadelpatio/frontend:masterccfc0cd77803
freetype@2.10.4-r1
2.10.4-r3
1
library/cassandra:3.11.10b095ff3248c6
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
1
library/kibana:7.17.3e2e2031c15be
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
1
library/nginx:1.19.3-alpine5aa44b407756
freetype@2.10.4-r0
2.10.4-r2
1
library/sonarqube:9.1.0-datacenter-search7e43ff493a47
freetype@2.10.4-r1
2.10.4-r3
1
library/sonarqube:8.9.2-community88cd63154d4b
freetype@2.10.4-r0
2.10.4-r2
1
library/sonarqube:9.1.0-datacenter-appa9bc5a3a1fc3
freetype@2.10.4-r1
2.10.4-r3
1
librenms/librenms:22.4.14f1f3d667cc7
freetype@2.11.1-r0
2.11.1-r2
1
linuxserver/calibre:version-v5.21.0a847b5b2d860
freetype@2.8.1-2ubuntu2.1
2.8.1-2ubuntu2.2
1
linuxserver/calibre-web:version-0.6.12938810eca3d3
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
1
linuxserver/codimd:latestb801bbcf6386
freetype@2.8.1-2ubuntu2.1
2.8.1-2ubuntu2.2
1
linuxserver/deluge:18.04.10ac871624394
freetype@2.8.1-2ubuntu2.1
2.8.1-2ubuntu2.2
1
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
freetype@2.8.1-2ubuntu2.1
2.8.1-2ubuntu2.2
1
linuxserver/jellyfin:10.7.72427dde159a2
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
1
linuxserver/lazylibrarian:version-1152df82f93d2560e233
freetype@2.8.1-2ubuntu2.1
2.8.1-2ubuntu2.2
1
longhornio/longhorn-ui:v1.2.3148598de4b7d
freetype@2.10.4-r1
2.10.4-r3
1
longhornio/longhorn-ui:v1.1.165560eabe3ee
freetype@2.10.4-r1
2.10.4-r3
1
misskey/misskey:12.110.1e08b7c478093
freetype@2.11.1-r0
2.11.1-r2
1
monogramm/docker-dolibarr:13.0-alpine5afd99523984
freetype@2.10.4-r1
2.10.4-r3
1
muluder/prograncontrollermcord:0.1.843b597a93da7
freetype@2.6.1-0.1ubuntu2.3
2.6.1-0.1ubuntu2.5+esm1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.