CVE-2022-28391
HighAdvisory
Published 3 Apr 2022In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.8
- base score, highest
- EPSS
- 0.035
- 88th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 514
- of 17,781 indexed, latest versions
- Container images
- 535
- deployed by those charts
- Fix available
- 1 of 1
- affected package
The matching OSV records carry no description.
Carried by container images the latest versions of 514 of 17,781 indexed charts deploy, on 535 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| busyboxapk | 1.31.1-r16, 1.31.1-r19, 1.31.1-r20, 1.31.1-r21+11 more | 1.31.1-r22, 1.32.1-r8, 1.33.1-r7, 1.34.1-r5 | 535 |
- OSV records
- ALPINE-CVE-2022-28391
Charts affected
514 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| frpcwenerme | 1.0.1 | 1 of 1See more | 3,359 |
| longhornwenerme | 1.2.3 | 1 of 2See more | 15,230 |
| nats-account-serverwenerme | 0.8.1 | 1 of 1See more | 2,634 |
| sambawenerme | 1.0.0 | 1 of 1See more | 2,555 |
| temporalwenerme | 0.15.1 | 2 of 13See more | 22,665 |
| docker-hub-rate-limit-exporterwiremindVerified publisher | 0.3.0 | 1 of 1See more | 1,843 |
| mrtg-backendwitcom-gmbh | 0.7.0 | 1 of 2See more | 2,616 |
| powerdnsadminwitcom-gmbh | 0.3.4 | 1 of 1See more | 2,643 |
| default-backendwyrihaximusnetVerified publisher | 1.1.0 | 1 of 1See more | 2,534 |
| skoonerxdVerified publisher | 1.1.0 | 1 of 1See more | 1,752 |
| rcloneymrs | 0.1.4 | 1 of 2See more | 1,198 |
| version-checkerymrs | 0.2.3 | 1 of 1See more | 3,023 |
| posthogzeet | 0.23.2 | 1 of 9See more | 3,697 |
| alertmanager-matrix-forwarderzloi-space | 1.0.1 | 1 of 2See more | 3,118 |
Container images carrying it
535 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| thesisrobot/ | 2d1c388a4bda | busybox | 1.31.1-r22 | 2 |
| tkpd/ | 74441dadcfbd | busybox | 1.31.1-r22 | 2 |
| ghcr.io/ | 5e88f2205de1 | busybox | 1.32.1-r8 | 2 |
| ghcr.io/ | 920867eb0bf8 | busybox | 1.33.1-r7 | 2 |
| ghcr.io/ | acb40032ad4b | busybox | 1.34.1-r5 | 2 |
| quay.io/ | 5f6f8ba0b671 | busybox | 1.31.1-r22 | 2 |
| absaoss/ | ad538a1285a0 | busybox | 1.31.1-r22 | 1 |
| acockburn/ | 3a93281d7e94 | busybox | 1.32.1-r8 | 1 |
| adferrand/ | 6fea97b02758 | busybox | 1.31.1-r22 | 1 |
| ajanvier/ | 91ac61b88c85 | busybox | 1.32.1-r8 | 1 |
| alex6021710/ | 6c7a47e470c3 | busybox | 1.31.1-r22 | 1 |
| alex6021710/ | 31e533cf7cd3 | busybox | 1.31.1-r22 | 1 |
| alex6021710/ | 744b8a924f35 | busybox | 1.31.1-r22 | 1 |
| alpine/ | a41efe02a041 | busybox | 1.33.1-r7 | 1 |
| ansiblesemaphore/ | 03d1f8684027 | busybox | 1.32.1-r8 | 1 |
| apache/ | b4eabafa83cc | busybox | 1.32.1-r8 | 1 |
| apache/ | c010ea7d1694 | busybox | 1.34.1-r5 | 1 |
| apache/ | 412f92cde0b3 | busybox | 1.32.1-r8 | 1 |
| aquasec/ | 7ea4aa3d2eb6 | busybox | 1.32.1-r8 | 1 |
| balihb/ | 5b95e1cf1158 | busybox | 1.34.1-r5 | 1 |
| balihb/ | ee48e79f5d76 | busybox | 1.34.1-r5 | 1 |
| bbvalabs/ | 3ea299ae63c0 | busybox | 1.32.1-r8 | 1 |
| billimek/ | f14ccd7aad0e | busybox | 1.31.1-r22 | 1 |
| blockstack/ | d64d7430289a | busybox | 1.32.1-r8 | 1 |
| brodul/ | ad1c00a491ad | busybox | 1.31.1-r22 | 1 |
| carbonetes/ | 1b9b93c9a37f | busybox | 1.32.1-r8 | 1 |
| cbeneke/ | dc658078d7ba | busybox | 1.31.1-r22 | 1 |
| chaosnative/ | 07b82a82a702 | busybox | 1.34.1-r5 | 1 |
| chaostoolkit/ | 734f3af86125 | busybox | 1.31.1-r22 | 1 |
| chaostoolkit/ | 7f4a7eb9f7df | busybox | 1.31.1-r22 | 1 |
| chaostoolkit/ | b95ba4961cfc | busybox | 1.31.1-r22 | 1 |
| chirpstack/ | e0b23dfd24d6 | busybox | 1.34.1-r5 | 1 |
| chirpstack/ | ce3f2cdca8a9 | busybox | 1.34.1-r5 | 1 |
| chirpstack/ | c98d7fe06bce | busybox | 1.34.1-r5 | 1 |
| clastix/ | 87fabaccb3a6 | busybox | 1.34.1-r5 | 1 |
| clastix/ | d0376d87ac6b | busybox | 1.34.1-r5 | 1 |
| cloudecho/ | f76ede067ab9 | busybox | 1.33.1-r7 | 1 |
| cloudentity/ | 9402ec4b5016 | busybox | 1.33.1-r7 | 1 |
| cloudentity/ | 8a1890eb8265 | busybox | 1.33.1-r7 | 1 |
| cloudentity/ | ee83cdd45b7b | busybox | 1.33.1-r7 | 1 |
| cloudentity/ | 5728654cecb7 | busybox | 1.33.1-r7 | 1 |
| cloudentity/ | 8ca94ae6acf4 | busybox | 1.33.1-r7 | 1 |
| cloudentity/ | c04eb10c77b7 | busybox | 1.33.1-r7 | 1 |
| conduction/ | 9cfeeb6c7c20 | busybox | 1.31.1-r22 | 1 |
| conduction/ | c36094a41369 | busybox | 1.31.1-r22 | 1 |
| conduction/ | ece1ab544c57 | busybox | 1.31.1-r22 | 1 |
| conduction/ | 3423845692c1 | busybox | 1.31.1-r22 | 1 |
| conduction/ | 2744565516e8 | busybox | 1.31.1-r22 | 1 |
| conduction/ | e1d4ad1e22a8 | busybox | 1.31.1-r22 | 1 |
| conduction/ | b6f95c8ead7d | busybox | 1.31.1-r22 | 1 |