CVE-2022-28391
HighAdvisory
Published 3 Apr 2022In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.8
- base score, highest
- EPSS
- 0.035
- 88th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 514
- of 17,781 indexed, latest versions
- Container images
- 535
- deployed by those charts
- Fix available
- 1 of 1
- affected package
The matching OSV records carry no description.
Carried by container images the latest versions of 514 of 17,781 indexed charts deploy, on 535 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| busyboxapk | 1.31.1-r16, 1.31.1-r19, 1.31.1-r20, 1.31.1-r21+11 more | 1.31.1-r22, 1.32.1-r8, 1.33.1-r7, 1.34.1-r5 | 535 |
- OSV records
- ALPINE-CVE-2022-28391
Charts affected
514 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| frpcwenerme | 1.0.1 | 1 of 1See more | 3,359 |
| longhornwenerme | 1.2.3 | 1 of 2See more | 15,230 |
| nats-account-serverwenerme | 0.8.1 | 1 of 1See more | 2,634 |
| sambawenerme | 1.0.0 | 1 of 1See more | 2,555 |
| temporalwenerme | 0.15.1 | 2 of 13See more | 22,665 |
| docker-hub-rate-limit-exporterwiremindVerified publisher | 0.3.0 | 1 of 1See more | 1,843 |
| mrtg-backendwitcom-gmbh | 0.7.0 | 1 of 2See more | 2,616 |
| powerdnsadminwitcom-gmbh | 0.3.4 | 1 of 1See more | 2,643 |
| default-backendwyrihaximusnetVerified publisher | 1.1.0 | 1 of 1See more | 2,534 |
| skoonerxdVerified publisher | 1.1.0 | 1 of 1See more | 1,752 |
| rcloneymrs | 0.1.4 | 1 of 2See more | 1,198 |
| version-checkerymrs | 0.2.3 | 1 of 1See more | 3,023 |
| posthogzeet | 0.23.2 | 1 of 9See more | 3,697 |
| alertmanager-matrix-forwarderzloi-space | 1.0.1 | 1 of 2See more | 3,118 |
Container images carrying it
535 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| conduction/ | 8f177f9f8a7b | busybox | 1.31.1-r22 | 1 |
| conduction/ | 24f03c57568f | busybox | 1.31.1-r22 | 1 |
| contribsys/ | 5f9a23ee4e86 | busybox | 1.32.1-r8 | 1 |
| crazymax/ | 042536a06596 | busybox | 1.33.1-r7 | 1 |
| curlimages/ | a37d88a5b626 | busybox | 1.33.1-r7 | 1 |
| datawire/ | 07f8fe4f4f8e | busybox | 1.31.1-r22 | 1 |
| datawire/ | 2beb65062c8b | busybox | 1.31.1-r22 | 1 |
| datawire/ | 9716efbdd24b | busybox | 1.31.1-r22 | 1 |
| dchesterton/ | cc70f2238aa9 | busybox | 1.33.1-r7 | 1 |
| deluan/ | 4e9ae3bff6aa | busybox | 1.32.1-r8 | 1 |
| denisshav/ | b97cc69fbac6 | busybox | 1.32.1-r8 | 1 |
| devopstales/ | 42c40a0e9f1b | busybox | 1.34.1-r5 | 1 |
| deyaeddin/ | 797b0d06210a | busybox | 1.33.1-r7 | 1 |
| digitalist/ | eec27ad73eaa | busybox | 1.34.1-r5 | 1 |
| dniel/ | d3e38df449a2 | busybox | 1.33.1-r7 | 1 |
| dockerid31415926/ | 354309669f16 | busybox | 1.34.1-r5 | 1 |
| dockerid31415926/ | 5a1dd17e0e07 | busybox | 1.34.1-r5 | 1 |
| dollarshaveclub/ | 14a257836529 | busybox | 1.32.1-r8 | 1 |
| dollarshaveclub/ | 663cbf25fcfe | busybox | 1.33.1-r7 | 1 |
| duyetdev/ | 25e59d223eaa | busybox | 1.31.1-r22 | 1 |
| dysnix/ | c166f958f86a | busybox | 1.34.1-r5 | 1 |
| ebrianne/ | 9cd17700c9ec | busybox | 1.34.1-r5 | 1 |
| ecadlabs/ | 4bcbe5d1cdd2 | busybox | 1.33.1-r7 | 1 |
| edoburu/ | abc0a4123a81 | busybox | 1.32.1-r8 | 1 |
| eikek0/ | 661ff3ef42cd | busybox | 1.32.1-r8 | 1 |
| elastisys/ | 509b94f1da55 | busybox | 1.31.1-r22 | 1 |
| emqx/ | 1d36535ba9de | busybox | 1.34.1-r5 | 1 |
| emqx/ | 71db5ed95db3 | busybox | 1.34.1-r5 | 1 |
| envoyproxy/ | 6225750f76e1 | busybox | 1.31.1-r22 | 1 |
| envoyproxy/ | bf862e5f5eca | busybox | 1.31.1-r22 | 1 |
| epamedp/ | 96028c86f0dd | busybox | 1.32.1-r8 | 1 |
| epamedp/ | b71fb39e0c9e | busybox | 1.32.1-r8 | 1 |
| epamedp/ | ff25e9fe4419 | busybox | 1.32.1-r8 | 1 |
| epamedp/ | 5d352199e12e | busybox | 1.32.1-r8 | 1 |
| epamedp/ | 449a53804699 | busybox | 1.32.1-r8 | 1 |
| ethereum/ | d99fbb9585c7 | busybox | 1.34.1-r5 | 1 |
| ethpandaops/ | 7a9ab6370657 | busybox | 1.31.1-r22 | 1 |
| everpcpc/ | b378d137ae8b | busybox | 1.33.1-r7 | 1 |
| factly/ | 140fbaa6d555 | busybox | 1.33.1-r7 | 1 |
| factly/ | 0cf361b41798 | busybox | 1.33.1-r7 | 1 |
| factly/ | 24be158ec7d3 | busybox | 1.32.1-r8 | 1 |
| felddy/ | 6c5d90b90349 | busybox | 1.32.1-r8 | 1 |
| filebrowser/ | 4fcd47af573c | busybox | 1.33.1-r7 | 1 |
| filebrowser/ | c5d0a75a0041 | busybox | 1.32.1-r8 | 1 |
| fission/ | 3fcfd8a0fa5d | busybox | 1.32.1-r8 | 1 |
| fission/ | fa0f24cdb9cd | busybox | 1.32.1-r8 | 1 |
| fission/ | 04c6e06af175 | busybox | 1.32.1-r8 | 1 |
| flant/ | 2355a44928d6 | busybox | 1.31.1-r22 | 1 |
| fluxcd/ | 92b891e495d8 | busybox | 1.32.1-r8 | 1 |
| fluxcd/ | 31a8c79a6803 | busybox | 1.32.1-r8 | 1 |