CVE-2022-28948
HighAdvisory
Published 20 May 2022In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.040
- 90th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 376
- of 17,781 indexed, latest versions
- Container images
- 407
- deployed by those charts
- Fix available
- 1 of 1
- affected package
gopkg.in/yaml.v3 Denial of Service
Carried by container images the latest versions of 376 of 17,781 indexed charts deploy, on 407 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| gopkg.in/ | v3.0.0, v3.0.0-20190924164351-c8b7dadae555, v3.0.0-20191026110619-0b21df46bc1d, v3.0.0-20191120175047-4206685974f2+9 more | 3.0.1 | 407 |
- OSV records
- GHSA-hp87-p4gw-j4gq
- Also known as
- GO-2022-0603
Charts affected
376 by stars
Container images carrying it
407 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| deepflowce/ | bc1882f75c18 | gopkg.in/ | 3.0.1 | 1 |
| dellemc/ | 148ada9060a9 | gopkg.in/ | 3.0.1 | 1 |
| dellemc/ | 660cabd6d929 | gopkg.in/ | 3.0.1 | 1 |
| dirathea/ | 8d4c9f773ae1 | gopkg.in/ | 3.0.1 | 1 |
| dollarshaveclub/ | 663cbf25fcfe | gopkg.in/ | 3.0.1 | 1 |
| ecadlabs/ | 4bcbe5d1cdd2 | gopkg.in/ | 3.0.1 | 1 |
| epamedp/ | 90f9921d8d58 | gopkg.in/ | 3.0.1 | 1 |
| epamedp/ | 96028c86f0dd | gopkg.in/ | 3.0.1 | 1 |
| epamedp/ | 616c678ba3e7 | gopkg.in/ | 3.0.1 | 1 |
| epamedp/ | b71fb39e0c9e | gopkg.in/ | 3.0.1 | 1 |
| epamedp/ | 28ef56bc0ca3 | gopkg.in/ | 3.0.1 | 1 |
| epamedp/ | ff25e9fe4419 | gopkg.in/ | 3.0.1 | 1 |
| epamedp/ | 5d352199e12e | gopkg.in/ | 3.0.1 | 1 |
| epamedp/ | 449a53804699 | gopkg.in/ | 3.0.1 | 1 |
| epamedp/ | d33e938b6d59 | gopkg.in/ | 3.0.1 | 1 |
| expediagroup/ | 193a00ec8dd4 | gopkg.in/ | 3.0.1 | 1 |
| flanksource/ | bd3294c20a60 | gopkg.in/ | 3.0.1 | 1 |
| fluxcd/ | 92b891e495d8 | gopkg.in/ | 3.0.1 | 1 |
| fluxcd/ | 31a8c79a6803 | gopkg.in/ | 3.0.1 | 1 |
| gitea/ | d5ab14cd29af | gopkg.in/ | 3.0.1 | 1 |
| gitlab/ | 860d4a3fec7a | gopkg.in/ | 3.0.1 | 1 |
| gocrane/ | a1400909118c | gopkg.in/ | 3.0.1 | 1 |
| gocrane/ | 9ba6d11b2079 | gopkg.in/ | 3.0.1 | 1 |
| gocrane/ | a2d7e60576f9 | gopkg.in/ | 3.0.1 | 1 |
| goharbor/ | 6ab3ca28e9e5 | gopkg.in/ | 3.0.1 | 1 |
| goharbor/ | 86bf3031f4a7 | gopkg.in/ | 3.0.1 | 1 |
| goharbor/ | 8d5339ff2d74 | gopkg.in/ | 3.0.1 | 1 |
| goharbor/ | b9522c3f5056 | gopkg.in/ | 3.0.1 | 1 |
| grafana/ | 825c09373d27 | gopkg.in/ | 3.0.1 | 1 |
| grafana/ | 09bb407e26ab | gopkg.in/ | 3.0.1 | 1 |
| grafana/ | 15b977f5207d | gopkg.in/ | 3.0.1 | 1 |
| grafana/ | 696823fbc561 | gopkg.in/ | 3.0.1 | 1 |
| grafana/ | 6d42886b3ebe | gopkg.in/ | 3.0.1 | 1 |
| grafana/ | 733842cca5bd | gopkg.in/ | 3.0.1 | 1 |
| grafana/ | cd7cb4345aa7 | gopkg.in/ | 3.0.1 | 1 |
| grafana/ | cf81d2c753c8 | gopkg.in/ | 3.0.1 | 1 |
| grafana/ | d322192ed2fa | gopkg.in/ | 3.0.1 | 1 |
| grafana/ | ecc1b80b8ca2 | gopkg.in/ | 3.0.1 | 1 |
| grafana/ | 98f6d1cd1e25 | gopkg.in/ | 3.0.1 | 1 |
| grafana/ | 3d85bb66e39b | gopkg.in/ | 3.0.1 | 1 |
| grafana/ | 77e138f81a8e | gopkg.in/ | 3.0.1 | 1 |
| grafana/ | b3af8ead67d7 | gopkg.in/ | 3.0.1 | 1 |
| grafana/ | 80c1a8eb24dd | gopkg.in/ | 3.0.1 | 1 |
| grafana/ | 5fd12edcc694 | gopkg.in/ | 3.0.1 | 1 |
| hashicorp/ | fb70bd9210ff | gopkg.in/ | 3.0.1 | 1 |
| hashicorp/ | b19857bab620 | gopkg.in/ | 3.0.1 | 1 |
| hashicorp/ | dfc3500beb0e | gopkg.in/ | 3.0.1 | 1 |
| hashicorp/ | aff47b5ba39c | gopkg.in/ | 3.0.1 | 1 |
| huseyinbabal/ | ae8eb4053c60 | gopkg.in/ | 3.0.1 | 1 |
| hyperledger/ | c7f3422ec1d5 | gopkg.in/ | 3.0.1 | 1 |