CVE-2022-28391
HighAdvisory
Published 3 Apr 2022In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.8
- base score, highest
- EPSS
- 0.035
- 88th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 514
- of 17,781 indexed, latest versions
- Container images
- 535
- deployed by those charts
- Fix available
- 1 of 1
- affected package
The matching OSV records carry no description.
Carried by container images the latest versions of 514 of 17,781 indexed charts deploy, on 535 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| busyboxapk | 1.31.1-r16, 1.31.1-r19, 1.31.1-r20, 1.31.1-r21+11 more | 1.31.1-r22, 1.32.1-r8, 1.33.1-r7, 1.34.1-r5 | 535 |
- OSV records
- ALPINE-CVE-2022-28391
Charts affected
514 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| frpcwenerme | 1.0.1 | 1 of 1See more | 3,359 |
| longhornwenerme | 1.2.3 | 1 of 2See more | 15,230 |
| nats-account-serverwenerme | 0.8.1 | 1 of 1See more | 2,634 |
| sambawenerme | 1.0.0 | 1 of 1See more | 2,555 |
| temporalwenerme | 0.15.1 | 2 of 13See more | 22,665 |
| docker-hub-rate-limit-exporterwiremindVerified publisher | 0.3.0 | 1 of 1See more | 1,843 |
| mrtg-backendwitcom-gmbh | 0.7.0 | 1 of 2See more | 2,616 |
| powerdnsadminwitcom-gmbh | 0.3.4 | 1 of 1See more | 2,643 |
| default-backendwyrihaximusnetVerified publisher | 1.1.0 | 1 of 1See more | 2,534 |
| skoonerxdVerified publisher | 1.1.0 | 1 of 1See more | 1,752 |
| rcloneymrs | 0.1.4 | 1 of 2See more | 1,198 |
| version-checkerymrs | 0.2.3 | 1 of 1See more | 3,023 |
| posthogzeet | 0.23.2 | 1 of 9See more | 3,697 |
| alertmanager-matrix-forwarderzloi-space | 1.0.1 | 1 of 2See more | 3,118 |
Container images carrying it
535 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| slamdev/ | 3ca20c184c55 | busybox | 1.31.1-r22 | 1 |
| smailkoz/ | 7b52d15de8f0 | busybox | 1.34.1-r5 | 1 |
| socialmediamacroscope/ | c5095e94bc65 | busybox | 1.32.1-r8 | 1 |
| socialmediamacroscope/ | 1a528c794270 | busybox | 1.32.1-r8 | 1 |
| softonic/ | a64d6c0e0ae5 | busybox | 1.31.1-r22 | 1 |
| someblackmagic/ | 78bf43744ea5 | busybox | 1.33.1-r7 | 1 |
| someblackmagic/ | 88351d85c04c | busybox | 1.33.1-r7 | 1 |
| soulou2019/ | a3970f97c215 | busybox | 1.34.1-r5 | 1 |
| soulou2019/ | 5e6ecfcc109e | busybox | 1.34.1-r5 | 1 |
| sqlpad/ | d3d2f430dffd | busybox | 1.31.1-r22 | 1 |
| staranto/ | a1ceac18da03 | busybox | 1.31.1-r22 | 1 |
| superorbital/ | d59732f61d6e | busybox | 1.34.1-r5 | 1 |
| svenwal/ | ba2f285af432 | busybox | 1.34.1-r5 | 1 |
| syncthing/ | 966433161272 | busybox | 1.33.1-r7 | 1 |
| sysnet4admin/ | 16687ffd2cb3 | busybox | 1.32.1-r8 | 1 |
| t3nde/ | 329ce194393a | busybox | 1.33.1-r7 | 1 |
| t3nde/ | 7cc268408e1a | busybox | 1.31.1-r22 | 1 |
| taemon1337/ | 247bc1dc4f07 | busybox | 1.34.1-r5 | 1 |
| taemon1337/ | e8f5096c66bb | busybox | 1.34.1-r5 | 1 |
| taigaio/ | 4d367b1e1250 | busybox | 1.32.1-r8 | 1 |
| tempire/ | f3b148b3e6c8 | busybox | 1.33.1-r7 | 1 |
| temporalio/ | 35034611d981 | busybox | 1.32.1-r8 | 1 |
| temporalio/ | e26758f5a1bf | busybox | 1.32.1-r8 | 1 |
| thelounge/ | 0037aa258261 | busybox | 1.34.1-r5 | 1 |
| timescale/ | 7758704d4a14 | busybox | 1.32.1-r8 | 1 |
| tobiasbp/ | 14bee6e33a26 | busybox | 1.31.1-r22 | 1 |
| tomsquest/ | 4759cc353a1d | busybox | 1.33.1-r7 | 1 |
| trafex/ | 7282edfca2bf | busybox | 1.33.1-r7 | 1 |
| trafex/ | ee0b7c6cce07 | busybox | 1.33.1-r7 | 1 |
| treeverse/ | 478f37a6cffc | busybox | 1.34.1-r5 | 1 |
| turt2live/ | bfbd459f89a5 | busybox | 1.32.1-r8 | 1 |
| tvanro/ | 6909015f0328 | busybox | 1.33.1-r7 | 1 |
| tzahi12345/ | 3720b856bd2f | busybox | 1.31.1-r22 | 1 |
| untergeek/ | 468123bc0a7b | busybox | 1.32.1-r8 | 1 |
| vabene1111/ | ec4e9e2905b0 | busybox | 1.31.1-r22 | 1 |
| vectorim/ | 080e313abd37 | busybox | 1.31.1-r22 | 1 |
| vectorim/ | 234bed2ac92a | busybox | 1.31.1-r22 | 1 |
| vectorim/ | 84bb5af00b5d | busybox | 1.33.1-r7 | 1 |
| viadee/ | 2e27e3b3ee56 | busybox | 1.31.1-r22 | 1 |
| vikunja/ | 8cba0520bf8c | busybox | 1.31.1-r22 | 1 |
| vitorbari/ | fd3ccb820ada | busybox | 1.33.1-r7 | 1 |
| voidxmh/ | 93e42a569ca8 | busybox | 1.33.1-r7 | 1 |
| voidxmh/ | 1b7397412320 | busybox | 1.33.1-r7 | 1 |
| voidxmh/ | 2ff3f2146547 | busybox | 1.33.1-r7 | 1 |
| vrijbrp/ | 5225494315e2 | busybox | 1.32.1-r8 | 1 |
| vultr/ | 1806f17d620c | busybox | 1.33.1-r7 | 1 |
| vultr/ | 41d26735d437 | busybox | 1.33.1-r7 | 1 |
| wallabag/ | 5e4c26a7fb4a | busybox | 1.31.1-r22 | 1 |
| weetmuts/ | a79967400c61 | busybox | 1.33.1-r7 | 1 |
| wener/ | ef3bd19da190 | busybox | 1.31.1-r22 | 1 |