StackRadar

CVE-2022-28391

High

Advisory

Published 3 Apr 2022In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.035
88th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
516
of 17,787 indexed, latest versions
Container images
537
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 516 of 17,787 indexed charts deploy, on 537 images.

Affected packageAffected versionsFixed inImages
busyboxapk1.31.1-r16, 1.31.1-r19, 1.31.1-r20, 1.31.1-r21+11 more1.31.1-r22, 1.32.1-r8, 1.33.1-r7, 1.34.1-r5537
OSV records
ALPINE-CVE-2022-28391

Charts affected

516 by stars
ChartLatestAffected imagesRadar Score
k8s-replicatorolli-aiVerified publisher1.3.01 of 1See more

k8s-replicator olli-ai 1.3.0

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
olliai/k8s-replicator:1.3.05716f2a8bd4c
busybox@1.33.1-r3
1.33.1-r7

Open the chart page →

2,825
onlinejudgeonlinejudge0.1.01 of 4See more

onlinejudge onlinejudge 0.1.0

1 of the 4 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
library/redis:6.2.4-alpine3.1427cc6e902bde
busybox@1.33.1-r2
1.33.1-r7

Open the chart page →

1,287
basic-appopen-charts1.0.01 of 1See more

basic-app open-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
ovhplatform/what-is-my-pod:1.0.16d4d455e9aba
busybox@1.34.1-r3
1.34.1-r5

Open the chart page →

1,597
voltha-infraopencord2.14.01 of 10See more

voltha-infra opencord 2.14.0

1 of the 10 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
opencord/onos-classic-helm-utils:0.1.00d693ba85fd6
busybox@1.31.1-r20
1.31.1-r22

Open the chart page →

41,088
probuilderopenfaas0.2.01 of 2See more

probuilder openfaas 0.2.0

1 of the 2 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
moby/buildkit:v0.10.0c2aeafaed434
busybox@1.34.1-r3
1.34.1-r5

Open the chart page →

4,752
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
openwhisk/invoker:1.0.0f5831ec85525
busybox@1.31.1-r19
1.31.1-r22

Open the chart page →

36,230
orderregistratiecomponentorderregistratiecomponent1.0.01 of 3See more

orderregistratiecomponent orderregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/orderregistratiecomponent-php:latestd17257e4fa27
busybox@1.31.1-r16
1.31.1-r22

Open the chart page →

7,492
aptos-indexerortege0.2.61 of 3See more

aptos-indexer ortege 0.2.6

1 of the 3 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
blockstack/envsubst:latestd64d7430289a
busybox@1.32.1-r6
1.32.1-r8

Open the chart page →

946
cheoteemo-chartsVerified publisher0.1.52 of 2See more

che oteemo-charts 0.1.5

2 of the 2 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
quay.io/eclipse/che-devfile-registry:nightly5d25d47d6e17
busybox@1.31.1-r16
1.31.1-r22
quay.io/eclipse/che-plugin-registry:nightlya88add0f8c93
busybox@1.32.1-r6
1.32.1-r8

Open the chart page →

4,369
blockscoutparadeum-teamVerified publisher0.1.51 of 1See more

blockscout paradeum-team 0.1.5

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
quay.io/netwarps/blockscoutdigest-pinnedbecd3e39360a
busybox@1.34.1-r3
1.34.1-r5

Open the chart page →

3,448
keewebphntom0.1.31 of 1See more

keeweb phntom 0.1.3

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
phntom/keeweb:1.17.4-kix10c75ed6dd606
busybox@1.32.1-r3
1.32.1-r8

Open the chart page →

1,711
kochiphntom1.1.41 of 1See more

kochi phntom 1.1.4

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
phntom/kochi:1.1.33b82358bd56e
busybox@1.31.1-r19
1.31.1-r22

Open the chart page →

2,963
loki-stackphntom2.10.21 of 2See more

loki-stack phntom 2.10.2

1 of the 2 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
grafana/loki:2.4.2b3af8ead67d7
busybox@1.32.1-r7
1.32.1-r8

Open the chart page →

5,708
mindavphntom0.1.61 of 2See more

mindav phntom 0.1.6

1 of the 2 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
phntom/mindav:0.1.7-kix35695f546abbb
busybox@1.32.1-r3
1.32.1-r8

Open the chart page →

4,158
npre-essentialsphntom0.1.601 of 22See more

npre-essentials phntom 0.1.60

1 of the 22 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
phntom/kochi:1.1.33b82358bd56e
busybox@1.31.1-r19
1.31.1-r22

Open the chart page →

26,840
stocks-nasdaq-crawlerphntom0.0.361 of 1See more

stocks-nasdaq-crawler phntom 0.0.36

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
phntom/stocks-nasdaq-crawler:0.0.28d2b844700b57
busybox@1.31.1-r16
1.31.1-r22

Open the chart page →

1,845
k8s-node-image-1-16pnnl-miscscripts0.2.711 of 2See more

k8s-node-image-1-16 pnnl-miscscripts 0.2.71

1 of the 2 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
pnnlmiscscripts/k8s-node-image:1.16.15-nginx-903b3fed5bdbc
busybox@1.32.1-r6
1.32.1-r8

Open the chart page →

2,343
liftbridgepozetron0.1.11 of 1See more

liftbridge pozetron 0.1.1

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
pozetroninc/liftbridge:v1.1.079fd6b9d93e6
busybox@1.31.1-r16
1.31.1-r22

Open the chart page →

3,167
presto-loadbalancerpresto-loadbalancer0.1.161 of 1See more

presto-loadbalancer presto-loadbalancer 0.1.16

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
garugaru/presto-loadbalancer:v0.1.589d66d117029
busybox@1.31.1-r16
1.31.1-r22

Open the chart page →

2,526
procestypecatalogusprocestypecatalogus1.1.01 of 4See more

procestypecatalogus procestypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/procestypecatalogus-php:latest956c4fb64796
busybox@1.31.1-r16
1.31.1-r22

Open the chart page →

7,429
productenendienstencatalogusproductenendienstencatalogus1.0.01 of 3See more

productenendienstencatalogus productenendienstencatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/productenendienstencatalogus-php:latest7242da105081
busybox@1.31.1-r16
1.31.1-r22

Open the chart page →

7,510
prometheus-druid-exporterprometheus-worawutchan0.9.01 of 1See more

prometheus-druid-exporter prometheus-worawutchan 0.9.0

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
quay.io/opstree/druid-exporter:v0.83f6d9885cfe2
busybox@1.31.1-r16
1.31.1-r22

Open the chart page →

2,090
panproto-application-nldesign0.1.01 of 5See more

pan proto-application-nldesign 0.1.0

1 of the 5 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
conduction/pan-php:dev24f03c57568f
busybox@1.31.1-r16
1.31.1-r22

Open the chart page →

8,724
proto-component-commongroundproto-component-commonground1.0.01 of 3See more

proto-component-commonground proto-component-commonground 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/proto-component-commonground-php:latesteb36ead1954e
busybox@1.31.1-r16
1.31.1-r22

Open the chart page →

7,510
pod-pvc-mappingpvc-exporter0.1.31 of 1See more

pod-pvc-mapping pvc-exporter 0.1.3

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
dockerid31415926/pod-pvc-mapping:v0.1.3354309669f16
busybox@1.34.1-r3
1.34.1-r5

Open the chart page →

1,762
dolibarrraphaelVerified publisher0.0.11 of 1See more

dolibarr raphael 0.0.1

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
monogramm/docker-dolibarr:13.0-alpine5afd99523984
busybox@1.32.1-r6
1.32.1-r8

Open the chart page →

3,466
postfixrasooll0.0.11 of 1See more

postfix rasooll 0.0.1

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
rasooll/postfix:lateste731e21c3f67
busybox@1.31.1-r16
1.31.1-r22

Open the chart page →

848
stunnelrasooll0.0.11 of 1See more

stunnel rasooll 0.0.1

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
rasooll/stunnel:5.56-r18c8ca63cb92e
busybox@1.31.1-r16
1.31.1-r22

Open the chart page →

778
saleorrc-helm-charts0.1.12 of 5See more

saleor rc-helm-charts 0.1.1

2 of the 5 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:1.22.0ca6b73330616
busybox@1.31.1-r19
1.31.1-r22
mailhog/mailhog:v1.0.18d76a3d4ffa3
busybox@1.31.1-r16
1.31.1-r22

Open the chart page →

3,738
authentication-serviceredestroyder0.2.21 of 1See more

authentication-service redestroyder 0.2.2

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
redestroyder/authorization-service:0.0.1740364a619fd
busybox@1.34.1-r3
1.34.1-r5

Open the chart page →

2,583
business-serviceredestroyder0.2.11 of 1See more

business-service redestroyder 0.2.1

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
redestroyder/business-service:0.0.1db03499a0726
busybox@1.34.1-r3
1.34.1-r5

Open the chart page →

2,600
laravel-workerrenoki-co1.1.01 of 1See more

laravel-worker renoki-co 1.1.0

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
quay.io/renokico/laravel-helm-demo:worker-0.6.04b188259267e
busybox@1.33.1-r3
1.33.1-r7

Open the chart page →

5,687
reporting-chartreporting-application0.1.01 of 1See more

reporting-chart reporting-application 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
ibarreche/cloud-reporting-ci:latest1f45af91da6a
busybox@1.34.1-r3
1.34.1-r5

Open the chart page →

1,584
reportportalreportportal5.7.21 of 8See more

reportportal reportportal 5.7.2

1 of the 8 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
reportportal/migrations:5.7.0da5d8e1395fe
busybox@1.34.1-r4
1.34.1-r5

Open the chart page →

25,739
review-componentreview-component1.0.01 of 3See more

review-component review-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/review-component-php:latestafe623824b82
busybox@1.31.1-r16
1.31.1-r22

Open the chart page →

7,490
jsonplaceholderrgnu1.0.01 of 1See more

jsonplaceholder rgnu 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
svenwal/jsonplaceholder:latestba2f285af432
busybox@1.34.1-r3
1.34.1-r5

Open the chart page →

1,547
kubernetes-diff-loggerrlex0.1.21 of 1See more

kubernetes-diff-logger rlex 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
grafana/kubernetes-diff-logger:0.0.598f6d1cd1e25
busybox@1.33.1-r2
1.33.1-r7

Open the chart page →

2,454
argocdromholdings1.8.12 of 3See more

argocd romholdings 1.8.1

2 of the 3 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
library/redis:5.0.10-alpine24b1579f6759
busybox@1.32.1-r3
1.32.1-r8
quay.io/dexidp/dex:v2.25.07bcf286807b8
busybox@1.31.1-r16
1.31.1-r22

Open the chart page →

10,468
devtron-enterpriseromholdings48.0.02 of 28See more

devtron-enterprise romholdings 48.0.0

2 of the 28 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
busybox@1.34.1-r3
1.34.1-r5
quay.io/devtron/dex:v2.30.22e4c14d1b444
busybox@1.33.1-r6
1.33.1-r7

Open the chart page →

66,542
devtron-operatorromholdings0.23.32 of 11See more

devtron-operator romholdings 0.23.3

2 of the 11 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
busybox@1.34.1-r3
1.34.1-r5
quay.io/devtron/dex:v2.30.22e4c14d1b444
busybox@1.33.1-r6
1.33.1-r7

Open the chart page →

31,447
kube-prometheus-stackromholdings19.3.02 of 6See more

kube-prometheus-stack romholdings 19.3.0

2 of the 6 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
grafana/grafana:8.2.500568d89c4f8
busybox@1.33.1-r3
1.33.1-r7
quay.io/kiwigrid/k8s-sidecar:1.14.235654389f8a9
busybox@1.33.1-r3
1.33.1-r7

Open the chart page →

8,645
caddysagikazarmarkVerified publisher0.0.141 of 1See more

caddy sagikazarmark 0.0.14

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
library/caddy:2.4.5874405536b3e
busybox@1.33.1-r3
1.33.1-r7

Open the chart page →

2,960
ed-traefik2scaleway-charts0.2.01 of 1See more

ed-traefik2 scaleway-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
library/traefik:2.5.62f603f8d3abe
busybox@1.33.1-r6
1.33.1-r7

Open the chart page →

3,160
certsschmitzis1.2.01 of 1See more

certs schmitzis 1.2.0

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
mathnao/certs:1.1.12d38581b447ad
busybox@1.31.1-r20
1.31.1-r22

Open the chart page →

713
icinga2-masterschmitzis0.2.01 of 6See more

icinga2-master schmitzis 0.2.0

1 of the 6 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
grafana/grafana:8.0.3696823fbc561
busybox@1.32.1-r6
1.32.1-r8

Open the chart page →

3,731
version-checkerschmitzis0.2.21 of 1See more

version-checker schmitzis 0.2.2

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
busybox@1.31.1-r16
1.31.1-r22

Open the chart page →

3,023
cernboxsciencebox0.0.41 of 6See more

cernbox sciencebox 0.0.4

1 of the 6 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
cs3org/revad:v1.19.03b57a34a7dfd
busybox@1.32.1-r7
1.32.1-r8

Open the chart page →

2,330
centralbrainsciencemeshVerified publisher0.0.31 of 5See more

centralbrain sciencemesh 0.0.3

1 of the 5 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
grafana/grafana:7.3.315b977f5207d
busybox@1.31.1-r19
1.31.1-r22

Open the chart page →

9,754
dashysergiotocaliniVerified publisher1.0.01 of 1See more

dashy sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
busybox@1.34.1-r3
1.34.1-r5

Open the chart page →

3,143
mailhogsitepilot1.0.21 of 1See more

mailhog sitepilot 1.0.2

1 of the 1 container images this version deploys carry CVE-2022-28391.

Container imageDigestPackageFixed in
mailhog/mailhog:v1.0.18d76a3d4ffa3
busybox@1.31.1-r16
1.31.1-r22

Open the chart page →

778

Container images carrying it

537 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/tauffer-consulting/domino-frontend:latesta923b86a0903
busybox@1.32.1-r6
1.32.1-r8
1
ghcr.io/wbstack/queryservice-ui:1.4bc79fbb50230
busybox@1.34.1-r3
1.34.1-r5
1
ghcr.io/wyrihaximusnet/default-backend:randomb24e63efd841
busybox@1.33.1-r6
1.33.1-r7
1
public.ecr.aws/jtekt-corporation/ecr-pullsecret-renewer:latest442cc3b32935
busybox@1.31.1-r16
1.31.1-r22
1
quay.io/chriscowley/openldap_exporter:v2.1.16c308e9732e1
busybox@1.32.1-r0
1.32.1-r8
1
quay.io/cortexproject/cortex:v1.9.05d1c2cf4c538
busybox@1.32.1-r6
1.32.1-r8
1
quay.io/eclipse/che-devfile-registry:nightly5d25d47d6e17
busybox@1.31.1-r16
1.31.1-r22
1
quay.io/eclipse/che-plugin-registry:nightlya88add0f8c93
busybox@1.32.1-r6
1.32.1-r8
1
quay.io/evl.ms/argocd-exporter:0.0.136ea8f34aa6b
busybox@1.33.1-r3
1.33.1-r7
1
quay.io/evl.ms/pgbouncer:1.16.1b550ae5c7179
busybox@1.33.1-r6
1.33.1-r7
1
quay.io/giantswarm/helloworld:0.2.07a07ee730305
busybox@1.33.1-r3
1.33.1-r7
1
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
busybox@1.32.1-r6
1.32.1-r8
1
quay.io/influxdb/chronograf:1.9.4bb0a980bc2bf
busybox@1.31.1-r21
1.31.1-r22
1
quay.io/influxdb/chronograf:1.9.3c2ed16080689
busybox@1.31.1-r21
1.31.1-r22
1
quay.io/kiwigrid/k8s-sidecar:1.10.718feb3906286
busybox@1.32.1-r3
1.32.1-r8
1
quay.io/kiwigrid/k8s-sidecar:1.15.61f025ae37b7b
busybox@1.34.1-r4
1.34.1-r5
1
quay.io/kiwigrid/k8s-sidecar:1.15.1a25886092fa4
busybox@1.34.1-r3
1.34.1-r5
1
quay.io/kube-ops/promtail-cri-autoconfig:1.0.1eaa71a8cadef
busybox@1.31.1-r20
1.31.1-r22
1
quay.io/kubernetes-multicluster/kubefed:v0.7.06d56f69b15a3
busybox@1.32.1-r3
1.32.1-r8
1
quay.io/metallb/controller:v0.10.221164241c045
busybox@1.32.1-r6
1.32.1-r8
1
quay.io/metallb/speaker:v0.10.258cb99053bb3
busybox@1.32.1-r6
1.32.1-r8
1
quay.io/netwarps/blockscoutbecd3e39360a
busybox@1.34.1-r3
1.34.1-r5
1
quay.io/oauth2-proxy/oauth2-proxy:v7.1.3ecd26b74a01f
busybox@1.32.1-r3
1.32.1-r8
1
quay.io/oauth2-proxy/oauth2-proxy:v7.2.1febeebebe762
busybox@1.34.1-r3
1.34.1-r5
1
quay.io/opsmxpublic/awsgit:v2-openssh0d21ba756f44
busybox@1.34.1-r3
1.34.1-r5
1
quay.io/opsmxpublic/awsgit:v3-js15a6faada3d4
busybox@1.33.1-r3
1.33.1-r7
1
quay.io/opsmxpublic/k8s-decoder:halfec086394aa9
busybox@1.32.1-r2
1.32.1-r8
1
quay.io/opsmxpublic/oes-pre-configure:v29b052fbb046f
busybox@1.31.1-r16
1.31.1-r22
1
quay.io/opstree/druid-exporter:v0.83f6d9885cfe2
busybox@1.31.1-r16
1.31.1-r22
1
quay.io/renokico/laravel-helm-demo:0.6.03207f957e80c
busybox@1.33.1-r3
1.33.1-r7
1
quay.io/renokico/laravel-helm-demo:worker-0.6.04b188259267e
busybox@1.33.1-r3
1.33.1-r7
1
quay.io/renokico/laravel-helm-demo:octane-0.6.0cad83090c58f
busybox@1.31.1-r20
1.31.1-r22
1
quay.io/simplyzee/kube-rclone:v1.52.389a0c23d5ad3
busybox@1.31.1-r16
1.31.1-r22
1
quay.io/soketi/pws:0.8-16-alpine399d2e6b10ef
busybox@1.32.1-r6
1.32.1-r8
1
quay.io/srcmaxim/gradle-example-app:1.1.37c3fc28746ef
busybox@1.32.1-r6
1.32.1-r8
1
registry.gitlab.com/arm-research/smarter/smarter-device-manager:v1.20.7864fc338571e
busybox@1.32.1-r6
1.32.1-r8
1
registry.gitlab.com/timvisee/send:v3.4.2047986cf6ef69
busybox@1.32.1-r7
1.32.1-r8
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.