CVE-2022-28131
UnscoredAdvisory
Published 20 Jul 2022In the index since 5 Sept 2026
- Severity
- Unscored
- worst across findings
- CVSS
- —
- base score, highest
- EPSS
- 0.023
- 82nd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,159
- of 17,787 indexed, latest versions
- Container images
- 1,218
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Stack exhaustion from deeply nested XML documents in encoding/xml
Carried by container images the latest versions of 1,159 of 17,787 indexed charts deploy, on 1,218 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| stdlibgolang | go1.13, go1.13.1, go1.13.3, go1.13.4+73 more | 1.17.12 | 1,218 |
- OSV records
- GO-2022-0521
- Also known as
- BIT-golang-2022-28131
Charts affected
1,159 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| dex-k8s-authenticatorwiremindVerified publisher | 1.7.0 | 1 of 1See more | 2,791 |
| kafka-connect-uiwitcom-gmbh | 0.5.0 | 1 of 2See more | 2,506 |
| mrtg-backendwitcom-gmbh | 0.7.0 | 1 of 2See more | 2,616 |
| commentopluspluswyrihaximusnetVerified publisher | 0.4.0 | 1 of 1See more | 1,960 |
| matrixdb-operatorymatrixOfficialVerified publisher | 0.13.0 | 1 of 2See more | 1,958 |
| rawfile-csiymatrixVerified publisher | 0.2.1 | 4 of 4See more | 7,972 |
| nginx-vts-exporterymrs | 0.1.2 | 1 of 1See more | 1,336 |
| version-checkerymrs | 0.2.3 | 1 of 1See more | 3,023 |
| zookeeper-exporterzookeeper-exporter | 0.1.0 | 1 of 1See more | 1,248 |
Container images carrying it
1,218 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| library/ | 304ab8135187 | stdlib | 1.17.12 | 1 |
| library/ | 557fea37a744 | stdlib | 1.17.12 | 1 |
| library/ | 5660c2cbfea5 | stdlib | 1.17.12 | 1 |
| library/ | 5c265bf1fd30 | stdlib | 1.17.12 | 1 |
| library/ | 6567bca8d7bc | stdlib | 1.17.12 | 1 |
| library/ | 7062a2109c4b | stdlib | 1.17.12 | 1 |
| library/ | 7c8f48705831 | stdlib | 1.17.12 | 1 |
| library/ | 7e5df973a748 | stdlib | 1.17.12 | 1 |
| library/ | 8775adb39f0d | stdlib | 1.17.12 | 1 |
| library/ | aadf2c0696f5 | stdlib | 1.17.12 | 1 |
| library/ | ced3ba927f4c | stdlib | 1.17.12 | 1 |
| library/ | f565573d74ae | stdlib | 1.17.12 | 1 |
| library/ | fbcea1bd13b6 | stdlib | 1.17.12 | 1 |
| library/ | 091a7b5de688 | stdlib | 1.17.12 | 1 |
| library/ | 6a5130174e14 | stdlib | 1.17.12 | 1 |
| library/ | 6aaf3f5e6bc8 | stdlib | 1.17.12 | 1 |
| library/ | 77697a75da9f | stdlib | 1.17.12 | 1 |
| library/ | 83edc2b8e9ff | stdlib | 1.17.12 | 1 |
| library/ | 92b8b307ee28 | stdlib | 1.17.12 | 1 |
| library/ | bb142a9c18ac | stdlib | 1.17.12 | 1 |
| library/ | c1e88455c852 | stdlib | 1.17.12 | 1 |
| library/ | c9d92d840fd0 | stdlib | 1.17.12 | 1 |
| library/ | 28e98eece020 | stdlib | 1.17.12 | 1 |
| library/ | 794079a7f241 | stdlib | 1.17.12 | 1 |
| library/ | addb86c0c520 | stdlib | 1.17.12 | 1 |
| library/ | 2f603f8d3abe | stdlib | 1.17.12 | 1 |
| library/ | 5d47b7bb2546 | stdlib | 1.17.12 | 1 |
| library/ | 7d0228d19042 | stdlib | 1.17.12 | 1 |
| library/ | eda951fd29a8 | stdlib | 1.17.12 | 1 |
| library/ | f5af5a5ce17f | stdlib | 1.17.12 | 1 |
| library/ | cab8944a33a1 | stdlib | 1.17.12 | 1 |
| library/ | dfa9ba46d14b | stdlib | 1.17.12 | 1 |
| librenms/ | 4f1f3d667cc7 | stdlib | 1.17.12 | 1 |
| linuxserver/ | 241009026e6f | stdlib | 1.17.12 | 1 |
| linuxserver/ | 938810eca3d3 | stdlib | 1.17.12 | 1 |
| linuxserver/ | 45c5fe102ff3 | stdlib | 1.17.12 | 1 |
| livekit/ | ecf1409c75e0 | stdlib | 1.17.12 | 1 |
| livekit/ | 8391fd1b834f | stdlib | 1.17.12 | 1 |
| lmierzwa/ | 3751e5eed656 | stdlib | 1.17.12 | 1 |
| lmierzwa/ | d417abe7ddb5 | stdlib | 1.17.12 | 1 |
| loftsh/ | 310cc7d690f5 | stdlib | 1.17.12 | 1 |
| loftsh/ | 023b13bf5898 | stdlib | 1.17.12 | 1 |
| logiqai/ | 798306811f2d | stdlib | 1.17.12 | 1 |
| logiqai/ | 3e149f6781b8 | stdlib | 1.17.12 | 1 |
| logiqai/ | 4a746ff04d6a | stdlib | 1.17.12 | 1 |
| longhornio/ | dca34321452c | stdlib | 1.17.12 | 1 |
| longhornio/ | ede61fe2a472 | stdlib | 1.17.12 | 1 |
| louislam/ | 0b55bcb83a1c | stdlib | 1.17.12 | 1 |
| louislam/ | a4eab252e5a2 | stdlib | 1.17.12 | 1 |
| lumenvox/ | 7ff037a71c50 | stdlib | 1.17.12 | 1 |