CVE-2022-27406

High

Advisory

Published 22 Apr 2022In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.033; 88th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 259; of 17,781 indexed, latest versions
Container images: 195; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 259 of 17,781 indexed charts deploy, on 195 images.

Affected package	Affected versions	Fixed in	Images
freetypedeb	2.6.1-0.1ubuntu2.3, 2.6.1-0.1ubuntu2.4, 2.8.1-2ubuntu2, 2.8.1-2ubuntu2.1+2 more	2.6.1-0.1ubuntu2.5+esm1, 2.8.1-2ubuntu2.2, 2.10.1-2ubuntu0.2, 2.11.1+dfsg-1ubuntu0.1	106
freetypeapk	2.10.2-r0, 2.10.4-r0, 2.10.4-r1, 2.10.4-r2+3 more	2.10.4-r2, 2.10.4-r3, 2.11.1-r2	89

OSV records: ALPINE-CVE-2022-27406 UBUNTU-CVE-2022-27406
Also known as: USN-5453-1, USN-5528-1, USN-7352-2

Charts affected

259 by stars

Chart

Latest

Affected images

Radar Score

pock-helm-charttinote-chart

0.1.0

1 of 3 See more

pock-helm-chart tinote-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2022-27406.

Container image	Digest	Package	Fixed in
denisshav/frontend :latest	b97cc69fbac6	freetype@2.10.4-r1	2.10.4-r3

Open the chart page →

6,881

pagesvictor-pages

1.0.0

2 of 3 See more

pages victor-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2022-27406.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	freetype@2.10.1-2ubuntu0.1	2.10.1-2ubuntu0.2
flyway/flyway :6.4.4	22d97ceb0c47	freetype@2.8.1-2ubuntu2	2.8.1-2ubuntu2.2

Open the chart page →

20,190

pageswalter

1.0.0

2 of 3 See more

pages walter 1.0.0

2 of the 3 container images this version deploys carry CVE-2022-27406.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	freetype@2.10.1-2ubuntu0.1	2.10.1-2ubuntu0.2
flyway/flyway :6.4.4	22d97ceb0c47	freetype@2.8.1-2ubuntu2	2.8.1-2ubuntu2.2

Open the chart page →

20,190

queryservice-uiwbstack

0.2.0

1 of 1 See more

queryservice-ui wbstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-27406.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/queryservice-ui :1.4	bc79fbb50230	freetype@2.11.0-r0	2.11.1-r2

Open the chart page →

1,996

uiwbstack

0.4.0

1 of 1 See more

ui wbstack 0.4.0

1 of the 1 container images this version deploys carry CVE-2022-27406.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/ui :3.94	b01f67faadf1	freetype@2.11.1-r1	2.11.1-r2

Open the chart page →

1,523

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-27406.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	freetype@2.10.1-2ubuntu0.1	2.10.1-2ubuntu0.2

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2022-27406.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	freetype@2.10.1-2ubuntu0.1	2.10.1-2ubuntu0.2

Open the chart page →

28,605

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2022-27406.

Container image	Digest	Package	Fixed in
longhornio/longhorn-ui :v1.2.3	148598de4b7d	freetype@2.10.4-r1	2.10.4-r3

Open the chart page →

15,230

workadventureworkadventure

1.1.0

2 of 9 See more

workadventure workadventure 1.1.0

2 of the 9 container images this version deploys carry CVE-2022-27406.

Container image	Digest	Package	Fixed in
thecodingmachine/workadventure-chat :v1.17.7	da12f37e6795	freetype@2.11.1-r1	2.11.1-r2
thecodingmachine/workadventure-ejabberd :v1.17.7	01df99622ad3	freetype@2.11.1-r0	2.11.1-r2

Open the chart page →

16,083

Container images carrying it

195 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ohif/viewer :latest	b4bfecdc7cc6	freetype@2.10.4-r1	2.10.4-r3	1
omecproject/c3po-hssdb :master-latest	28a90cc26716	freetype@2.10.1-2ubuntu0.1	2.10.1-2ubuntu0.2	1
omecproject/cdn-antmedia :1.0.0	b4ae7d0d6b74	freetype@2.8.1-2ubuntu2	2.8.1-2ubuntu2.2	1
omecproject/onos-progran :1.0.0	5715e5648aa0	freetype@2.6.1-0.1ubuntu2.3	2.6.1-0.1ubuntu2.5+esm1	1
onosproject/onos :2.2.1	44914a8d4b3f	freetype@2.8.1-2ubuntu2	2.8.1-2ubuntu2.2	1
opendatacube/wms :latest	1b90cdf68831	freetype@2.8.1-2ubuntu2	2.8.1-2ubuntu2.2	1
openemr/openemr :6.1.0	89eaa6d9a4e3	freetype@2.11.0-r0	2.11.1-r2	1
openwhisk/ow-utils :1.0.0	c80dba0de3aa	freetype@2.8.1-2ubuntu2	2.8.1-2ubuntu2.2	1
openzipkin/zipkin-dependencies :2.6.4	5ff2fa849a82	freetype@2.10.4-r0	2.10.4-r2	1
phntom/keeweb :1.17.4-kix1	0c75ed6dd606	freetype@2.10.4-r1	2.10.4-r3	1
photoprism/photoprism :220629-jammy	2954334adbda	freetype@2.11.1+dfsg-1build1	2.11.1+dfsg-1ubuntu0.1	1
pnnlmiscscripts/k8s-node-image :1.16.15-nginx-9	03b3fed5bdbc	freetype@2.10.4-r1	2.10.4-r3	1
pnnlmiscscripts/k8s-node-image :1.18.20-nginx-32	3bfca2cfaaaf	freetype@2.10.4-r2	2.10.4-r3	1
pnnlmiscscripts/k8s-node-image :1.17.17-nginx-36	85debe11edc4	freetype@2.10.4-r2	2.10.4-r3	1
pnnlmiscscripts/k8s-node-image :1.19.16-nginx-20	c5c2b19e53a2	freetype@2.10.4-r2	2.10.4-r3	1
project2team4/react :latest	3ff031a08887	freetype@2.10.1-2ubuntu0.1	2.10.1-2ubuntu0.2	1
reportportal/service-authorization :5.7.0	9e73114dbd15	freetype@2.11.1-r0	2.11.1-r2	1
rm3l/service-names-port-numbers :0.12.1	62d1cc4223e5	freetype@2.10.1-2ubuntu0.1	2.10.1-2ubuntu0.2	1
rundeck/rundeck :3.2.7	4d64fe56f767	freetype@2.6.1-0.1ubuntu2.4	2.6.1-0.1ubuntu2.5+esm1	1
rundeck/rundeck :3.0.16	b13e8059ad72	freetype@2.6.1-0.1ubuntu2.3	2.6.1-0.1ubuntu2.5+esm1	1
saiakhil46/pizza-app :main-1ffbdf3	dc39ce11e5d0	freetype@2.10.4-r1	2.10.4-r3	1
scrapinghub/splash :3.4.1	a5f89bc84606	freetype@2.8.1-2ubuntu2	2.8.1-2ubuntu2.2	1
seafileltd/seafile-mc :8.0.7	ed0fcda5e6a9	freetype@2.10.1-2ubuntu0.1	2.10.1-2ubuntu0.2	1
sentriz/gonic :v0.13.1	a74012a6adf3	freetype@2.10.4-r1	2.10.4-r3	1
sismics/docs :v1.10	f4b0ef019cf1	freetype@2.8.1-2ubuntu2	2.8.1-2ubuntu2.2	1
smailkoz/torrserver :1.0.111	7b52d15de8f0	freetype@2.11.0-r0	2.11.1-r2	1
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	freetype@2.10.1-2ubuntu0.1	2.10.1-2ubuntu0.2	1
soulou2019/angular-nginx :latest	a3970f97c215	freetype@2.11.0-r0	2.11.1-r2	1
stashapp/stash :latest	24dbd7607174	freetype@2.10.1-2ubuntu0.1	2.10.1-2ubuntu0.2	1
swaggerapi/swagger-ui :v4.12.0	0d7088d47928	freetype@2.11.1-r1	2.11.1-r2	1
t3nde/matomo :4.3.1-fpm-alpine	329ce194393a	freetype@2.10.4-r1	2.10.4-r3	1
taemon1337/ingress-dashboard :0.0.10	e8f5096c66bb	freetype@2.11.0-r0	2.11.1-r2	1
taigaio/taiga-front :6.4.2	4d367b1e1250	freetype@2.10.4-r1	2.10.4-r3	1
tensorflow/tensorflow :1.6.0-devel	1e3172090703	freetype@2.6.1-0.1ubuntu2.3	2.6.1-0.1ubuntu2.5+esm1	1
thecodingmachine/workadventure-chat :v1.17.7	da12f37e6795	freetype@2.11.1-r1	2.11.1-r2	1
thecodingmachine/workadventure-ejabberd :v1.17.7	01df99622ad3	freetype@2.11.1-r0	2.11.1-r2	1
timescale/timescaledb-ha :pg14-ts2.6-latest	ed719c0cd19d	freetype@2.11.1+dfsg-1build1	2.11.1+dfsg-1ubuntu0.1	1
timescale/timescaledb-postgis :latest-pg12	7758704d4a14	freetype@2.10.4-r1	2.10.4-r3	1
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	freetype@2.6.1-0.1ubuntu2.3	2.6.1-0.1ubuntu2.5+esm1	1
trafex/php-nginx :2.4.0	7282edfca2bf	freetype@2.10.4-r1	2.10.4-r3	1
trafex/php-nginx :2.2.0	ee0b7c6cce07	freetype@2.10.4-r1	2.10.4-r3	1
turt2live/matrix-media-repo :v1.2.8	bfbd459f89a5	freetype@2.10.4-r1	2.10.4-r3	1
tvanro/prerender-alpine :6.4.0	6909015f0328	freetype@2.10.4-r1	2.10.4-r3	1
tzahi12345/youtubedl-material :4.2	3720b856bd2f	freetype@2.10.4-r0	2.10.4-r2	1
vectorim/riot-web :v1.7.8	080e313abd37	freetype@2.10.2-r0	2.10.4-r2	1
vectorim/riot-web :v1.7.16	234bed2ac92a	freetype@2.10.4-r0	2.10.4-r2	1
vectorim/riot-web :v1.7.33	84bb5af00b5d	freetype@2.10.4-r1	2.10.4-r3	1
voltha/voltha-onos :5.1.8	e038acb950d3	freetype@2.8.1-2ubuntu2	2.8.1-2ubuntu2.2	1
wallabag/wallabag :2.4.2	5e4c26a7fb4a	freetype@2.10.4-r0	2.10.4-r2	1
wavefronthq/proxy :9.2	d1064d28f6eb	freetype@2.8.1-2ubuntu2	2.8.1-2ubuntu2.2	1