CVE-2022-28391
HighAdvisory
Published 3 Apr 2022In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.8
- base score, highest
- EPSS
- 0.035
- 88th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 514
- of 17,781 indexed, latest versions
- Container images
- 535
- deployed by those charts
- Fix available
- 1 of 1
- affected package
The matching OSV records carry no description.
Carried by container images the latest versions of 514 of 17,781 indexed charts deploy, on 535 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| busyboxapk | 1.31.1-r16, 1.31.1-r19, 1.31.1-r20, 1.31.1-r21+11 more | 1.31.1-r22, 1.32.1-r8, 1.33.1-r7, 1.34.1-r5 | 535 |
- OSV records
- ALPINE-CVE-2022-28391
Charts affected
514 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| frpcwenerme | 1.0.1 | 1 of 1See more | 3,359 |
| longhornwenerme | 1.2.3 | 1 of 2See more | 15,230 |
| nats-account-serverwenerme | 0.8.1 | 1 of 1See more | 2,634 |
| sambawenerme | 1.0.0 | 1 of 1See more | 2,555 |
| temporalwenerme | 0.15.1 | 2 of 13See more | 22,665 |
| docker-hub-rate-limit-exporterwiremindVerified publisher | 0.3.0 | 1 of 1See more | 1,843 |
| mrtg-backendwitcom-gmbh | 0.7.0 | 1 of 2See more | 2,616 |
| powerdnsadminwitcom-gmbh | 0.3.4 | 1 of 1See more | 2,643 |
| default-backendwyrihaximusnetVerified publisher | 1.1.0 | 1 of 1See more | 2,534 |
| skoonerxdVerified publisher | 1.1.0 | 1 of 1See more | 1,752 |
| rcloneymrs | 0.1.4 | 1 of 2See more | 1,198 |
| version-checkerymrs | 0.2.3 | 1 of 1See more | 3,023 |
| posthogzeet | 0.23.2 | 1 of 9See more | 3,697 |
| alertmanager-matrix-forwarderzloi-space | 1.0.1 | 1 of 2See more | 3,118 |
Container images carrying it
535 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| nocodb/ | f9b799933aa8 | busybox | 1.31.1-r22 | 1 |
| nodered/ | e131dcadfe92 | busybox | 1.31.1-r22 | 1 |
| nonkronk/ | 0a3694d70647 | busybox | 1.34.1-r5 | 1 |
| nyurik/ | e0553236e3eb | busybox | 1.33.1-r7 | 1 |
| ohif/ | b4bfecdc7cc6 | busybox | 1.33.1-r7 | 1 |
| ohmyform/ | afe53f4acdb1 | busybox | 1.34.1-r5 | 1 |
| olliai/ | a470d96525e4 | busybox | 1.32.1-r8 | 1 |
| olliai/ | 5716f2a8bd4c | busybox | 1.33.1-r7 | 1 |
| opencord/ | 0d693ba85fd6 | busybox | 1.31.1-r22 | 1 |
| openebs/ | 4f41dd782761 | busybox | 1.31.1-r22 | 1 |
| openemr/ | 89eaa6d9a4e3 | busybox | 1.34.1-r5 | 1 |
| openwhisk/ | f5831ec85525 | busybox | 1.31.1-r22 | 1 |
| openzipkin/ | 5ff2fa849a82 | busybox | 1.31.1-r22 | 1 |
| ovhplatform/ | 6d4d455e9aba | busybox | 1.34.1-r5 | 1 |
| owncloud/ | d2efcae92c84 | busybox | 1.32.1-r8 | 1 |
| oxheadalpha/ | d9faed45bf1c | busybox | 1.33.1-r7 | 1 |
| pactfoundation/ | 12861b0bd4d9 | busybox | 1.32.1-r8 | 1 |
| pawelmalak/ | 93e7b0abb603 | busybox | 1.33.1-r7 | 1 |
| pecan/ | 57b399ea7422 | busybox | 1.33.1-r7 | 1 |
| phntom/ | 0c75ed6dd606 | busybox | 1.32.1-r8 | 1 |
| phntom/ | 5695f546abbb | busybox | 1.32.1-r8 | 1 |
| phntom/ | d2b844700b57 | busybox | 1.31.1-r22 | 1 |
| pnnlmiscscripts/ | 03b3fed5bdbc | busybox | 1.32.1-r8 | 1 |
| pozetroninc/ | 79fd6b9d93e6 | busybox | 1.31.1-r22 | 1 |
| prompve/ | ff6749eb03b0 | busybox | 1.31.1-r22 | 1 |
| pryorda/ | e0f5ba8b7856 | busybox | 1.34.1-r5 | 1 |
| pypiserver/ | c9250d3c418d | busybox | 1.31.1-r22 | 1 |
| ralexstokes/ | c0d4bbefd31f | busybox | 1.33.1-r7 | 1 |
| rancher/ | f18efbe9776e | busybox | 1.33.1-r7 | 1 |
| rancher/ | 40cb8c984c17 | busybox | 1.31.1-r22 | 1 |
| rancher/ | d5999b20a1b1 | busybox | 1.33.1-r7 | 1 |
| rancher/ | e34c88ae0aff | busybox | 1.34.1-r5 | 1 |
| rancher/ | a41cd716c412 | busybox | 1.32.1-r8 | 1 |
| rancher/ | 3126395b966c | busybox | 1.32.1-r8 | 1 |
| rasooll/ | e731e21c3f67 | busybox | 1.31.1-r22 | 1 |
| rasooll/ | 8c8ca63cb92e | busybox | 1.31.1-r22 | 1 |
| rclone/ | 1e6eeabddc01 | busybox | 1.33.1-r7 | 1 |
| rclone/ | f2fc45c8bc57 | busybox | 1.33.1-r7 | 1 |
| redestroyder/ | 740364a619fd | busybox | 1.34.1-r5 | 1 |
| redestroyder/ | db03499a0726 | busybox | 1.34.1-r5 | 1 |
| reportportal/ | da5d8e1395fe | busybox | 1.34.1-r5 | 1 |
| rpardini/ | 83d5f6a96682 | busybox | 1.31.1-r22 | 1 |
| runatlantis/ | 45fbaf7e207c | busybox | 1.31.1-r22 | 1 |
| saiakhil46/ | dc39ce11e5d0 | busybox | 1.32.1-r8 | 1 |
| saiyato/ | 5d2dc80a84a1 | busybox | 1.34.1-r5 | 1 |
| scottcrossen/ | 2e9aaf85b961 | busybox | 1.33.1-r7 | 1 |
| searx/ | 3dbb3a6d9419 | busybox | 1.31.1-r22 | 1 |
| sentriz/ | a74012a6adf3 | busybox | 1.32.1-r8 | 1 |
| shlinkio/ | c6729db1d3a8 | busybox | 1.32.1-r8 | 1 |
| slamdev/ | b4b029c9b15f | busybox | 1.33.1-r7 | 1 |