StackRadar

CVE-2022-28391

High

Advisory

Published 3 Apr 2022In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.035
88th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
516
of 17,787 indexed, latest versions
Container images
537
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 516 of 17,787 indexed charts deploy, on 537 images.

Affected packageAffected versionsFixed inImages
busyboxapk1.31.1-r16, 1.31.1-r19, 1.31.1-r20, 1.31.1-r21+11 more1.31.1-r22, 1.32.1-r8, 1.33.1-r7, 1.34.1-r5537
OSV records
ALPINE-CVE-2022-28391

Charts affected

516 by stars
ChartLatestAffected imagesRadar Score
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
ghcr.io/banzaicloud/tcheck:latest0147d87c2019
busybox@1.31.1-r16
1.31.1-r22

Open the chart page →

10,127
filebrowserwenerme1.0.01 of 1See more

filebrowser wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
filebrowser/filebrowser:v2.13.0c5d0a75a0041
busybox@1.32.1-r3
1.32.1-r8

Open the chart page →

3,174
frpcwenerme1.0.11 of 1See more

frpc wenerme 1.0.1

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
wener/frpc:v0.37.0cc9fd4da44c0
busybox@1.33.1-r3
1.33.1-r7

Open the chart page →

3,359
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
longhornio/longhorn-ui:v1.2.3148598de4b7d
busybox@1.32.1-r7
1.32.1-r8

Open the chart page →

15,287
nats-account-serverwenerme0.8.11 of 1See more

nats-account-server wenerme 0.8.1

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
natsio/nats-account-server:1.0.0a3381560aab6
busybox@1.33.1-r2
1.33.1-r7

Open the chart page →

2,634
sambawenerme1.0.01 of 1See more

samba wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
wener/samba:4.13.39a42bae466d4
busybox@1.32.1-r2
1.32.1-r8

Open the chart page →

2,555
temporalwenerme0.15.12 of 13See more

temporal wenerme 0.15.1

2 of the 13 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.15.135034611d981
busybox@1.32.1-r7
1.32.1-r8
temporalio/server:1.15.1e26758f5a1bf
busybox@1.32.1-r7
1.32.1-r8

Open the chart page →

22,665
docker-hub-rate-limit-exporterwiremindVerified publisher0.3.01 of 1See more

docker-hub-rate-limit-exporter wiremind 0.3.0

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
viadee/docker-hub-rate-limit-exporter:version-1.52e27e3b3ee56
busybox@1.31.1-r19
1.31.1-r22

Open the chart page →

1,843
mrtg-backendwitcom-gmbh0.7.01 of 2See more

mrtg-backend witcom-gmbh 0.7.0

1 of the 2 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.2.1febeebebe762
busybox@1.34.1-r3
1.34.1-r5

Open the chart page →

2,616
powerdnsadminwitcom-gmbh0.3.41 of 1See more

powerdnsadmin witcom-gmbh 0.3.4

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
busybox@1.32.1-r6
1.32.1-r8

Open the chart page →

2,643
default-backendwyrihaximusnetVerified publisher1.1.01 of 1See more

default-backend wyrihaximusnet 1.1.0

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
ghcr.io/wyrihaximusnet/default-backend:randomb24e63efd841
busybox@1.33.1-r6
1.33.1-r7

Open the chart page →

2,535
skoonerxdVerified publisher1.1.01 of 1See more

skooner xd 1.1.0

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
ymuski/skooner:latest67819ca511b5
busybox@1.34.1-r4
1.34.1-r5

Open the chart page →

1,752
rcloneymrs0.1.41 of 2See more

rclone ymrs 0.1.4

1 of the 2 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
quay.io/simplyzee/kube-rclone:v1.52.389a0c23d5ad3
busybox@1.31.1-r16
1.31.1-r22

Open the chart page →

1,198
version-checkerymrs0.2.31 of 1See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
busybox@1.31.1-r16
1.31.1-r22

Open the chart page →

3,023
posthogzeet0.23.21 of 9See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
edoburu/pgbouncer:1.12.0abc0a4123a81
busybox@1.32.1-r6
1.32.1-r8

Open the chart page →

3,697
alertmanager-matrix-forwarderzloi-space1.0.11 of 2See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
zl0i/alertmanager-matrix-forwarder:v1.0.0e94047931739
busybox@1.34.1-r3
1.34.1-r5

Open the chart page →

3,118

Container images carrying it

537 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/tauffer-consulting/domino-frontend:latesta923b86a0903
busybox@1.32.1-r6
1.32.1-r8
1
ghcr.io/wbstack/queryservice-ui:1.4bc79fbb50230
busybox@1.34.1-r3
1.34.1-r5
1
ghcr.io/wyrihaximusnet/default-backend:randomb24e63efd841
busybox@1.33.1-r6
1.33.1-r7
1
public.ecr.aws/jtekt-corporation/ecr-pullsecret-renewer:latest442cc3b32935
busybox@1.31.1-r16
1.31.1-r22
1
quay.io/chriscowley/openldap_exporter:v2.1.16c308e9732e1
busybox@1.32.1-r0
1.32.1-r8
1
quay.io/cortexproject/cortex:v1.9.05d1c2cf4c538
busybox@1.32.1-r6
1.32.1-r8
1
quay.io/eclipse/che-devfile-registry:nightly5d25d47d6e17
busybox@1.31.1-r16
1.31.1-r22
1
quay.io/eclipse/che-plugin-registry:nightlya88add0f8c93
busybox@1.32.1-r6
1.32.1-r8
1
quay.io/evl.ms/argocd-exporter:0.0.136ea8f34aa6b
busybox@1.33.1-r3
1.33.1-r7
1
quay.io/evl.ms/pgbouncer:1.16.1b550ae5c7179
busybox@1.33.1-r6
1.33.1-r7
1
quay.io/giantswarm/helloworld:0.2.07a07ee730305
busybox@1.33.1-r3
1.33.1-r7
1
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
busybox@1.32.1-r6
1.32.1-r8
1
quay.io/influxdb/chronograf:1.9.4bb0a980bc2bf
busybox@1.31.1-r21
1.31.1-r22
1
quay.io/influxdb/chronograf:1.9.3c2ed16080689
busybox@1.31.1-r21
1.31.1-r22
1
quay.io/kiwigrid/k8s-sidecar:1.10.718feb3906286
busybox@1.32.1-r3
1.32.1-r8
1
quay.io/kiwigrid/k8s-sidecar:1.15.61f025ae37b7b
busybox@1.34.1-r4
1.34.1-r5
1
quay.io/kiwigrid/k8s-sidecar:1.15.1a25886092fa4
busybox@1.34.1-r3
1.34.1-r5
1
quay.io/kube-ops/promtail-cri-autoconfig:1.0.1eaa71a8cadef
busybox@1.31.1-r20
1.31.1-r22
1
quay.io/kubernetes-multicluster/kubefed:v0.7.06d56f69b15a3
busybox@1.32.1-r3
1.32.1-r8
1
quay.io/metallb/controller:v0.10.221164241c045
busybox@1.32.1-r6
1.32.1-r8
1
quay.io/metallb/speaker:v0.10.258cb99053bb3
busybox@1.32.1-r6
1.32.1-r8
1
quay.io/netwarps/blockscoutbecd3e39360a
busybox@1.34.1-r3
1.34.1-r5
1
quay.io/oauth2-proxy/oauth2-proxy:v7.1.3ecd26b74a01f
busybox@1.32.1-r3
1.32.1-r8
1
quay.io/oauth2-proxy/oauth2-proxy:v7.2.1febeebebe762
busybox@1.34.1-r3
1.34.1-r5
1
quay.io/opsmxpublic/awsgit:v2-openssh0d21ba756f44
busybox@1.34.1-r3
1.34.1-r5
1
quay.io/opsmxpublic/awsgit:v3-js15a6faada3d4
busybox@1.33.1-r3
1.33.1-r7
1
quay.io/opsmxpublic/k8s-decoder:halfec086394aa9
busybox@1.32.1-r2
1.32.1-r8
1
quay.io/opsmxpublic/oes-pre-configure:v29b052fbb046f
busybox@1.31.1-r16
1.31.1-r22
1
quay.io/opstree/druid-exporter:v0.83f6d9885cfe2
busybox@1.31.1-r16
1.31.1-r22
1
quay.io/renokico/laravel-helm-demo:0.6.03207f957e80c
busybox@1.33.1-r3
1.33.1-r7
1
quay.io/renokico/laravel-helm-demo:worker-0.6.04b188259267e
busybox@1.33.1-r3
1.33.1-r7
1
quay.io/renokico/laravel-helm-demo:octane-0.6.0cad83090c58f
busybox@1.31.1-r20
1.31.1-r22
1
quay.io/simplyzee/kube-rclone:v1.52.389a0c23d5ad3
busybox@1.31.1-r16
1.31.1-r22
1
quay.io/soketi/pws:0.8-16-alpine399d2e6b10ef
busybox@1.32.1-r6
1.32.1-r8
1
quay.io/srcmaxim/gradle-example-app:1.1.37c3fc28746ef
busybox@1.32.1-r6
1.32.1-r8
1
registry.gitlab.com/arm-research/smarter/smarter-device-manager:v1.20.7864fc338571e
busybox@1.32.1-r6
1.32.1-r8
1
registry.gitlab.com/timvisee/send:v3.4.2047986cf6ef69
busybox@1.32.1-r7
1.32.1-r8
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.