CVE-2022-28948
HighAdvisory
Published 20 May 2022In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.040
- 90th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 376
- of 17,781 indexed, latest versions
- Container images
- 407
- deployed by those charts
- Fix available
- 1 of 1
- affected package
gopkg.in/yaml.v3 Denial of Service
Carried by container images the latest versions of 376 of 17,781 indexed charts deploy, on 407 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| gopkg.in/ | v3.0.0, v3.0.0-20190924164351-c8b7dadae555, v3.0.0-20191026110619-0b21df46bc1d, v3.0.0-20191120175047-4206685974f2+9 more | 3.0.1 | 407 |
- OSV records
- GHSA-hp87-p4gw-j4gq
- Also known as
- GO-2022-0603
Charts affected
376 by stars
Container images carrying it
407 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| hyperledger/ | f270dfeee91d | gopkg.in/ | 3.0.1 | 1 |
| hyperledgerk8s/ | 29a8af8be270 | gopkg.in/ | 3.0.1 | 1 |
| inseefrlab/ | 31f04ca7436b | gopkg.in/ | 3.0.1 | 1 |
| invisibl/ | 1a970f84178b | gopkg.in/ | 3.0.1 | 1 |
| invisibl/ | 1029f4fe20eb | gopkg.in/ | 3.0.1 | 1 |
| iomesh/ | 5d3f9bf9240b | gopkg.in/ | 3.0.1 | 1 |
| iomesh/ | 002c4b92fd34 | gopkg.in/ | 3.0.1 | 1 |
| iomesh/ | 292ad270082e | gopkg.in/ | 3.0.1 | 1 |
| iomesh/ | de4aa40684ad | gopkg.in/ | 3.0.1 | 1 |
| iomesh/ | f6c76380db34 | gopkg.in/ | 3.0.1 | 1 |
| iotaledger/ | b02a8f77474f | gopkg.in/ | 3.0.1 | 1 |
| istio/ | 2232f365aed6 | gopkg.in/ | 3.0.1 | 1 |
| istio/ | 655eefa11c84 | gopkg.in/ | 3.0.1 | 1 |
| istio/ | 6cfce8a071b9 | gopkg.in/ | 3.0.1 | 1 |
| istio/ | 294ca55bd1cc | gopkg.in/ | 3.0.1 | 1 |
| istio/ | e7e110a421c2 | gopkg.in/ | 3.0.1 | 1 |
| j0113/ | 696cb8ca9f4e | gopkg.in/ | 3.0.1 | 1 |
| jkremser/ | e35cf56ef183 | gopkg.in/ | 3.0.1 | 1 |
| juicedata/ | 43978fc60798 | gopkg.in/ | 3.0.1 | 1 |
| k8scloudprovider/ | a30c7a2a594a | gopkg.in/ | 3.0.1 | 1 |
| k8scloudprovider/ | 6ddf80b34265 | gopkg.in/ | 3.0.1 | 1 |
| keptn/ | 72e17527a4f9 | gopkg.in/ | 3.0.1 | 1 |
| keptnsandbox/ | 6e6d323dd7ae | gopkg.in/ | 3.0.1 | 1 |
| kfirfer/ | 81e5c4e5d70e | gopkg.in/ | 3.0.1 | 1 |
| kfserving/ | 63d79d04c2e3 | gopkg.in/ | 3.0.1 | 1 |
| kiosksh/ | 501725ba2025 | gopkg.in/ | 3.0.1 | 1 |
| kong/ | 5e66021b64a8 | gopkg.in/ | 3.0.1 | 1 |
| kong/ | 60e4102ab2da | gopkg.in/ | 3.0.1 | 1 |
| krontechnology/ | e078d54c1711 | gopkg.in/ | 3.0.1 | 1 |
| kserve/ | f0692a9ea09f | gopkg.in/ | 3.0.1 | 1 |
| kubebb/ | a3dba2a95cef | gopkg.in/ | 3.0.1 | 1 |
| kubebb/ | f83cd256229b | gopkg.in/ | 3.0.1 | 1 |
| kubebb/ | 20509de4b399 | gopkg.in/ | 3.0.1 | 1 |
| kubebb/ | 60d3cba0c267 | gopkg.in/ | 3.0.1 | 1 |
| kubebb/ | 8ffbfa2d67e9 | gopkg.in/ | 3.0.1 | 1 |
| kubebb/ | 0ba03fcee3a7 | gopkg.in/ | 3.0.1 | 1 |
| kubebb/ | 58d5efec568b | gopkg.in/ | 3.0.1 | 1 |
| kubebb/ | 2b5894ef1e2f | gopkg.in/ | 3.0.1 | 1 |
| kubebb/ | 65bb40b353db | gopkg.in/ | 3.0.1 | 1 |
| kubedb/ | 5829bcedcb0d | gopkg.in/ | 3.0.1 | 1 |
| kubedb/ | 7d27865514ee | gopkg.in/ | 3.0.1 | 1 |
| kubedb/ | 1a06ff0bda52 | gopkg.in/ | 3.0.1 | 1 |
| kubeedge/ | a437cf5ec0ae | gopkg.in/ | 3.0.1 | 1 |
| kubeflowkatib/ | 12a28c8a0b41 | gopkg.in/ | 3.0.1 | 1 |
| kubeflowkatib/ | 129f0aaba976 | gopkg.in/ | 3.0.1 | 1 |
| kubeflownotebookswg/ | 0f14bd28fdd5 | gopkg.in/ | 3.0.1 | 1 |
| kubeflownotebookswg/ | 85e2e685abd6 | gopkg.in/ | 3.0.1 | 1 |
| kubeflownotebookswg/ | 7d42600e1524 | gopkg.in/ | 3.0.1 | 1 |
| kubeflownotebookswg/ | 9f01767a460f | gopkg.in/ | 3.0.1 | 1 |
| kubeflownotebookswg/ | f05a5538ae7e | gopkg.in/ | 3.0.1 | 1 |