StackRadar

CVE-2022-28391

High

Advisory

Published 3 Apr 2022In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.035
88th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
515
of 17,787 indexed, latest versions
Container images
536
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 515 of 17,787 indexed charts deploy, on 536 images.

Affected packageAffected versionsFixed inImages
busyboxapk1.31.1-r16, 1.31.1-r19, 1.31.1-r20, 1.31.1-r21+11 more1.31.1-r22, 1.32.1-r8, 1.33.1-r7, 1.34.1-r5536
OSV records
ALPINE-CVE-2022-28391

Charts affected

515 by stars
ChartLatestAffected imagesRadar Score
filebrowserwenerme1.0.01 of 1See more

filebrowser wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
filebrowser/filebrowser:v2.13.0c5d0a75a0041
busybox@1.32.1-r3
1.32.1-r8

Open the chart page →

3,174
frpcwenerme1.0.11 of 1See more

frpc wenerme 1.0.1

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
wener/frpc:v0.37.0cc9fd4da44c0
busybox@1.33.1-r3
1.33.1-r7

Open the chart page →

3,359
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
longhornio/longhorn-ui:v1.2.3148598de4b7d
busybox@1.32.1-r7
1.32.1-r8

Open the chart page →

15,230
nats-account-serverwenerme0.8.11 of 1See more

nats-account-server wenerme 0.8.1

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
natsio/nats-account-server:1.0.0a3381560aab6
busybox@1.33.1-r2
1.33.1-r7

Open the chart page →

2,634
sambawenerme1.0.01 of 1See more

samba wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
wener/samba:4.13.39a42bae466d4
busybox@1.32.1-r2
1.32.1-r8

Open the chart page →

2,555
temporalwenerme0.15.12 of 13See more

temporal wenerme 0.15.1

2 of the 13 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.15.135034611d981
busybox@1.32.1-r7
1.32.1-r8
temporalio/server:1.15.1e26758f5a1bf
busybox@1.32.1-r7
1.32.1-r8

Open the chart page →

22,665
docker-hub-rate-limit-exporterwiremindVerified publisher0.3.01 of 1See more

docker-hub-rate-limit-exporter wiremind 0.3.0

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
viadee/docker-hub-rate-limit-exporter:version-1.52e27e3b3ee56
busybox@1.31.1-r19
1.31.1-r22

Open the chart page →

1,843
mrtg-backendwitcom-gmbh0.7.01 of 2See more

mrtg-backend witcom-gmbh 0.7.0

1 of the 2 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.2.1febeebebe762
busybox@1.34.1-r3
1.34.1-r5

Open the chart page →

2,616
powerdnsadminwitcom-gmbh0.3.41 of 1See more

powerdnsadmin witcom-gmbh 0.3.4

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
busybox@1.32.1-r6
1.32.1-r8

Open the chart page →

2,643
default-backendwyrihaximusnetVerified publisher1.1.01 of 1See more

default-backend wyrihaximusnet 1.1.0

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
ghcr.io/wyrihaximusnet/default-backend:randomb24e63efd841
busybox@1.33.1-r6
1.33.1-r7

Open the chart page →

2,534
skoonerxdVerified publisher1.1.01 of 1See more

skooner xd 1.1.0

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
ymuski/skooner:latest67819ca511b5
busybox@1.34.1-r4
1.34.1-r5

Open the chart page →

1,752
rcloneymrs0.1.41 of 2See more

rclone ymrs 0.1.4

1 of the 2 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
quay.io/simplyzee/kube-rclone:v1.52.389a0c23d5ad3
busybox@1.31.1-r16
1.31.1-r22

Open the chart page →

1,198
version-checkerymrs0.2.31 of 1See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
busybox@1.31.1-r16
1.31.1-r22

Open the chart page →

3,023
posthogzeet0.23.21 of 9See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
edoburu/pgbouncer:1.12.0abc0a4123a81
busybox@1.32.1-r6
1.32.1-r8

Open the chart page →

3,697
alertmanager-matrix-forwarderzloi-space1.0.11 of 2See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
zl0i/alertmanager-matrix-forwarder:v1.0.0e94047931739
busybox@1.34.1-r3
1.34.1-r5

Open the chart page →

3,118

Container images carrying it

536 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/conductionnl/taalhuizen-service-php:latest04f1b7f0d573
busybox@1.31.1-r16
1.31.1-r22
1
ghcr.io/conductionnl/trouw-service-php:latestf745e2870692
busybox@1.31.1-r16
1.31.1-r22
1
ghcr.io/conductionnl/verhuis-service-php:latest66bbaf95a123
busybox@1.31.1-r16
1.31.1-r22
1
ghcr.io/conductionnl/verzoekconversieservice-php:lateste918014fb8d3
busybox@1.31.1-r16
1.31.1-r22
1
ghcr.io/conductionnl/verzoekregistratiecomponent-php:latestc4f6c03af5d3
busybox@1.31.1-r16
1.31.1-r22
1
ghcr.io/conductionnl/verzoektypecatalogus-php:latest64f5eb7a398b
busybox@1.31.1-r16
1.31.1-r22
1
ghcr.io/conductionnl/waardepapieren-balie-php:latestf36c423cd259
busybox@1.31.1-r16
1.31.1-r22
1
ghcr.io/conductionnl/waardepapieren-php:latestb2666ffcbad8
busybox@1.31.1-r16
1.31.1-r22
1
ghcr.io/conductionnl/waardepapieren-register-php:latest9affab218351
busybox@1.31.1-r16
1.31.1-r22
1
ghcr.io/crazy-max/samba:4.15.5bed6f4ec2e82
busybox@1.34.1-r3
1.34.1-r5
1
ghcr.io/data-fair/simple-directory:438a4f32fad82
busybox@1.33.1-r6
1.33.1-r7
1
ghcr.io/deepch/rtsptoweb:v2.2.0f9de3a1a5deb
busybox@1.34.1-r3
1.34.1-r5
1
ghcr.io/devplayer0/dnsmasq:0.1.1dd7b949b504a
busybox@1.33.1-r2
1.33.1-r7
1
ghcr.io/devplayer0/lxd8s:0.3.1e159ba41aede
busybox@1.33.1-r3
1.33.1-r7
1
ghcr.io/devplayer0/octolxd:0.1.119b18fd97eab
busybox@1.33.1-r2
1.33.1-r7
1
ghcr.io/douban/aliyun-exporter:mainb7c694331362
busybox@1.34.1-r3
1.34.1-r5
1
ghcr.io/douban/qiniu-exporter:maind1da3bcfad7d
busybox@1.34.1-r3
1.34.1-r5
1
ghcr.io/douban/ucloud-exporter:mainb4bb8a9021a2
busybox@1.34.1-r3
1.34.1-r5
1
ghcr.io/douban/upyun-exporter:main6810900c9c4a
busybox@1.34.1-r3
1.34.1-r5
1
ghcr.io/eshepelyuk/dckr/cmak2zk:1.2.022de6314c31e
busybox@1.32.1-r7
1.32.1-r8
1
ghcr.io/hadron-project/hadron/hadron-operator:v0.1.0-beta.10244335958e0
busybox@1.33.1-r3
1.33.1-r7
1
ghcr.io/hascheksolutions/pictshare:19d7cb06987f95505e9f
busybox@1.33.1-r3
1.33.1-r7
1
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
busybox@1.33.1-r6
1.33.1-r7
1
ghcr.io/k8s-at-home/cni-plugins:v0.9.1241592d93640
busybox@1.32.1-r6
1.32.1-r8
1
ghcr.io/kore3lab/kore-board.frontend:v0.5.584ece8ee5d35
busybox@1.32.1-r6
1.32.1-r8
1
ghcr.io/leoquote/tencentcloud-info-exporter:maind523c2c010cd
busybox@1.34.1-r3
1.34.1-r5
1
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
busybox@1.32.1-r6
1.32.1-r8
1
ghcr.io/miguelndecarvalho/speedtest-exporter:v3.2.29e36964bce26
busybox@1.32.1-r6
1.32.1-r8
1
ghcr.io/mmontes11/github-explorer:v0.7.0bf2234545584
busybox@1.31.1-r19
1.31.1-r22
1
ghcr.io/mmontes11/iot-back:v3.11.096683c54ae65
busybox@1.31.1-r19
1.31.1-r22
1
ghcr.io/mmontes11/iot-biot:v3.11.033f7976b26a8
busybox@1.31.1-r19
1.31.1-r22
1
ghcr.io/mmontes11/iot-front:v3.11.0eb942172cda9
busybox@1.31.1-r19
1.31.1-r22
1
ghcr.io/mmontes11/iot-nginx:v3.11.0dc8c7bb6605e
busybox@1.31.1-r19
1.31.1-r22
1
ghcr.io/mmontes11/iot-thing:v3.11.0542e91e8499c
busybox@1.31.1-r19
1.31.1-r22
1
ghcr.io/mmontes11/iot-worker:v3.11.0491bb243f555
busybox@1.31.1-r19
1.31.1-r22
1
ghcr.io/nerdswords/yet-another-cloudwatch-exporter:v0.32.0-alpha71e24278a049
busybox@1.33.1-r6
1.33.1-r7
1
ghcr.io/netsoc/docs:latest48890a52b327
busybox@1.33.1-r6
1.33.1-r7
1
ghcr.io/netsoc/iamd:1.1.22fe6b69b20d7
busybox@1.33.1-r2
1.33.1-r7
1
ghcr.io/netsoc/shhd:0.1.60bb44992b62c
busybox@1.32.1-r6
1.32.1-r8
1
ghcr.io/netsoc/webspaced:0.5.1edc238a538a0
busybox@1.33.1-r3
1.33.1-r7
1
ghcr.io/nimbolus/k8s-openstack-node-upgrade-agent:0.1.0e0c7cf2415f0
busybox@1.34.1-r3
1.34.1-r5
1
ghcr.io/nousefreak/clusterfan:v0.1.04ea05e2a7b57
busybox@1.34.1-r3
1.34.1-r5
1
ghcr.io/openappsec/smartsync:latest580d68c50cc7
busybox@1.32.1-r6
1.32.1-r8
1
ghcr.io/openappsec/smartsync-shared-files:latest30c1daa0b33e
busybox@1.32.1-r6
1.32.1-r8
1
ghcr.io/paganuzzi/ngrokoperator:latest5a10cd095699
busybox@1.32.1-r6
1.32.1-r8
1
ghcr.io/reitermarkus/strongswan:v1.0.0e7a8afe6e6eb
busybox@1.34.1-r3
1.34.1-r5
1
ghcr.io/saiakhil46/burger-app:latest68b76520c0a9
busybox@1.32.1-r6
1.32.1-r8
1
ghcr.io/skyoo2003/digdag:0.0.1821fd6a6f2cd
busybox@1.32.1-r3
1.32.1-r8
1
ghcr.io/skyoo2003/wait-for-it:0.0.11677336db39c
busybox@1.32.1-r3
1.32.1-r8
1
ghcr.io/tauffer-consulting/domino-frontend:latesta923b86a0903
busybox@1.32.1-r6
1.32.1-r8
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.