StackRadar

CVE-2022-27406

High

Advisory

Published 22 Apr 2022In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.033
88th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
259
of 17,781 indexed, latest versions
Container images
195
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 259 of 17,781 indexed charts deploy, on 195 images.

Affected packageAffected versionsFixed inImages
freetypedeb2.6.1-0.1ubuntu2.3, 2.6.1-0.1ubuntu2.4, 2.8.1-2ubuntu2, 2.8.1-2ubuntu2.1+2 more2.6.1-0.1ubuntu2.5+esm1, 2.8.1-2ubuntu2.2, 2.10.1-2ubuntu0.2, 2.11.1+dfsg-1ubuntu0.1106
freetypeapk2.10.2-r0, 2.10.4-r0, 2.10.4-r1, 2.10.4-r2+3 more2.10.4-r2, 2.10.4-r3, 2.11.1-r289
OSV records
ALPINE-CVE-2022-27406UBUNTU-CVE-2022-27406
Also known as
USN-5453-1, USN-5528-1, USN-7352-2

Charts affected

259 by stars
ChartLatestAffected imagesRadar Score
pock-helm-charttinote-chart0.1.01 of 3See more

pock-helm-chart tinote-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2022-27406.

Container imageDigestPackageFixed in
denisshav/frontend:latestb97cc69fbac6
freetype@2.10.4-r1
2.10.4-r3

Open the chart page →

6,881
pagesvictor-pages1.0.02 of 3See more

pages victor-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2022-27406.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
flyway/flyway:6.4.422d97ceb0c47
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.2

Open the chart page →

20,190
pageswalter1.0.02 of 3See more

pages walter 1.0.0

2 of the 3 container images this version deploys carry CVE-2022-27406.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
flyway/flyway:6.4.422d97ceb0c47
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.2

Open the chart page →

20,190
queryservice-uiwbstack0.2.01 of 1See more

queryservice-ui wbstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-27406.

Container imageDigestPackageFixed in
ghcr.io/wbstack/queryservice-ui:1.4bc79fbb50230
freetype@2.11.0-r0
2.11.1-r2

Open the chart page →

1,996
uiwbstack0.4.01 of 1See more

ui wbstack 0.4.0

1 of the 1 container images this version deploys carry CVE-2022-27406.

Container imageDigestPackageFixed in
ghcr.io/wbstack/ui:3.94b01f67faadf1
freetype@2.11.1-r1
2.11.1-r2

Open the chart page →

1,523
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-27406.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2

Open the chart page →

14,364
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2022-27406.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2

Open the chart page →

28,605
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2022-27406.

Container imageDigestPackageFixed in
longhornio/longhorn-ui:v1.2.3148598de4b7d
freetype@2.10.4-r1
2.10.4-r3

Open the chart page →

15,230
workadventureworkadventure1.1.02 of 9See more

workadventure workadventure 1.1.0

2 of the 9 container images this version deploys carry CVE-2022-27406.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-chat:v1.17.7da12f37e6795
freetype@2.11.1-r1
2.11.1-r2
thecodingmachine/workadventure-ejabberd:v1.17.701df99622ad3
freetype@2.11.1-r0
2.11.1-r2

Open the chart page →

16,083

Container images carrying it

195 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
dellcloud/pages:monitor6ba7b22caacd
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
79
flyway/flyway:6.4.422d97ceb0c47
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.2
79
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
freetype@2.6.1-0.1ubuntu2.3
2.6.1-0.1ubuntu2.5+esm1
4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
freetype@2.6.1-0.1ubuntu2.3
2.6.1-0.1ubuntu2.5+esm1
4
nginxinc/nginx-unprivileged:1.19-alpine084242d8028c
freetype@2.10.4-r1
2.10.4-r3
3
omecproject/cdn-video-repo:1.0.0:remote-v3d59ccb138ffb
freetype@2.6.1-0.1ubuntu2.3
2.6.1-0.1ubuntu2.5+esm1
3
selenium/hub:3.141.5902f251d48d5f
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
3
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
2
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
2
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
2
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
2
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
2
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
2
hookiesolutions/webhookie:latest0629694246ba
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
2
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
2
library/cassandra:3.11.65aa8400b4b3b
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.2
2
library/nginx:1.19-alpine07ab71a2c8e4
freetype@2.10.4-r1
2.10.4-r3
2
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
2
privatebin/pdo:1.3.500466418121c
freetype@2.11.1-r0
2.11.1-r2
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
2
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
2
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
freetype@2.11.1+dfsg-1build1
2.11.1+dfsg-1ubuntu0.1
2
quay.io/iver-wharf/wharf-web:v1.6.2dc5d1ed91c26
freetype@2.11.1-r1
2.11.1-r2
2
adferrand/backuppc:4.4.06fea97b02758
freetype@2.10.2-r0
2.10.4-r2
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
1
ajanvier/polr:2.3.091ac61b88c85
freetype@2.10.4-r1
2.10.4-r3
1
apachepulsar/pulsar:2.10.03b262ab7a7d9
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
1
apachepulsar/pulsar:2.9.0d056c89b7131
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
1
apachepulsar/pulsar:2.8.2d538416d5afe
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
1
apache/skywalking-oap-server:8.9.1b4ec8c18d079
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
1
apache/skywalking-ui:8.9.180530f0308a5
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
1
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
1
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
1
chaosnative/cle-frontend:2.7.007b82a82a702
freetype@2.11.0-r0
2.11.1-r2
1
cheyang/distributed-tf:1.6.046cc34755493
freetype@2.6.1-0.1ubuntu2.3
2.6.1-0.1ubuntu2.5+esm1
1
crazymax/rrdcached:1.7.2-r4042536a06596
freetype@2.10.4-r1
2.10.4-r3
1
daskdev/dask-notebook:1.1.0052630f5ca04
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.2
1
dellcloud/category:distributed02fc234353a9
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
1
dellcloud/pages:1.04d2eb25b9225
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.2
1
deluan/navidrome:0.43.04e9ae3bff6aa
freetype@2.10.4-r1
2.10.4-r3
1
denisshav/frontend:latestb97cc69fbac6
freetype@2.10.4-r1
2.10.4-r3
1
digitalist/nginx:1.21.6eec27ad73eaa
freetype@2.11.0-r0
2.11.1-r2
1
dniel/forwardauth-spademo:masterd3e38df449a2
freetype@2.10.4-r1
2.10.4-r3
1
eikek0/sharry:1.8.0661ff3ef42cd
freetype@2.10.4-r1
2.10.4-r3
1
elastictranscoder/media:627e21dc963ab3858c6b
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.2
1
elastictranscoder/media-storage:f6d861a026208b8c2359
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.2
1
elastictranscoder/transcoder:627e21dcb4a0327029e6
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.2
1
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.2
1
esailors/aws-ecr-http-proxy:1.5.15608ae045fa7
freetype@2.11.1-r0
2.11.1-r2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.