CVE-2022-28948
HighAdvisory
Published 20 May 2022In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.040
- 90th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 376
- of 17,781 indexed, latest versions
- Container images
- 407
- deployed by those charts
- Fix available
- 1 of 1
- affected package
gopkg.in/yaml.v3 Denial of Service
Carried by container images the latest versions of 376 of 17,781 indexed charts deploy, on 407 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| gopkg.in/ | v3.0.0, v3.0.0-20190924164351-c8b7dadae555, v3.0.0-20191026110619-0b21df46bc1d, v3.0.0-20191120175047-4206685974f2+9 more | 3.0.1 | 407 |
- OSV records
- GHSA-hp87-p4gw-j4gq
- Also known as
- GO-2022-0603
Charts affected
376 by stars
Container images carrying it
407 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| kubeflownotebookswg/ | 6536a9f61193 | gopkg.in/ | 3.0.1 | 1 |
| kubeflownotebookswg/ | 82ffdd2da285 | gopkg.in/ | 3.0.1 | 1 |
| kubeflow/ | ff847e2b6af0 | gopkg.in/ | 3.0.1 | 1 |
| kubernetesui/ | 76049887f07a | gopkg.in/ | 3.0.1 | 1 |
| kubeshop/ | 0ad97f07a78b | gopkg.in/ | 3.0.1 | 1 |
| kubesphere/ | 702df77228c6 | gopkg.in/ | 3.0.1 | 1 |
| kubesphere/ | 9a18a16c7b87 | gopkg.in/ | 3.0.1 | 1 |
| kubesphere/ | eac8f273a9b6 | gopkg.in/ | 3.0.1 | 1 |
| kvalitetsit/ | e89e351733ad | gopkg.in/ | 3.0.1 | 1 |
| library/ | ba10ac9ba17a | gopkg.in/ | 3.0.1 | 1 |
| library/ | d7f5dd5f70e2 | gopkg.in/ | 3.0.1 | 1 |
| library/ | 28e98eece020 | gopkg.in/ | 3.0.1 | 1 |
| library/ | 794079a7f241 | gopkg.in/ | 3.0.1 | 1 |
| library/ | addb86c0c520 | gopkg.in/ | 3.0.1 | 1 |
| library/ | 2f603f8d3abe | gopkg.in/ | 3.0.1 | 1 |
| library/ | 5d47b7bb2546 | gopkg.in/ | 3.0.1 | 1 |
| library/ | 7d0228d19042 | gopkg.in/ | 3.0.1 | 1 |
| library/ | eda951fd29a8 | gopkg.in/ | 3.0.1 | 1 |
| linuxserver/ | 45c5fe102ff3 | gopkg.in/ | 3.0.1 | 1 |
| livekit/ | ecf1409c75e0 | gopkg.in/ | 3.0.1 | 1 |
| livekit/ | 8391fd1b834f | gopkg.in/ | 3.0.1 | 1 |
| loftsh/ | 25deb9bd2683 | gopkg.in/ | 3.0.1 | 1 |
| louislam/ | a4eab252e5a2 | gopkg.in/ | 3.0.1 | 1 |
| matrixdb/ | 7e9ffe249a51 | gopkg.in/ | 3.0.1 | 1 |
| matrixdb/ | ed3c7e6291e8 | gopkg.in/ | 3.0.1 | 1 |
| matrixdb/ | 95b2e38e913d | gopkg.in/ | 3.0.1 | 1 |
| mattermost/ | 31078df7a3c8 | gopkg.in/ | 3.0.1 | 1 |
| mattermost/ | f2f987dada52 | gopkg.in/ | 3.0.1 | 1 |
| mattermost/ | 6268954edd67 | gopkg.in/ | 3.0.1 | 1 |
| metacontrollerio/ | 0336993b88e4 | gopkg.in/ | 3.0.1 | 1 |
| metacontrollerio/ | 897c9601d2cc | gopkg.in/ | 3.0.1 | 1 |
| minio/ | 1484c87239ea | gopkg.in/ | 3.0.1 | 1 |
| minio/ | 2adc5be088f5 | gopkg.in/ | 3.0.1 | 1 |
| mpioperator/ | 3ccfa8d8b7bf | gopkg.in/ | 3.0.1 | 1 |
| mzinc/ | eebbcbf2d1f7 | gopkg.in/ | 3.0.1 | 1 |
| natsio/ | 1261dae38389 | gopkg.in/ | 3.0.1 | 1 |
| netapp/ | 49cfe552d9c2 | gopkg.in/ | 3.0.1 | 1 |
| netrisai/ | 95abfb776bb4 | gopkg.in/ | 3.0.1 | 1 |
| ntakashi/ | 4171ec641120 | gopkg.in/ | 3.0.1 | 1 |
| oamdev/ | 1bcae00bd7b0 | gopkg.in/ | 3.0.1 | 1 |
| ofekmeister/ | 30d70fa9211b | gopkg.in/ | 3.0.1 | 1 |
| opencord/ | 0d693ba85fd6 | gopkg.in/ | 3.0.1 | 1 |
| otel/ | ba173aa85f3f | gopkg.in/ | 3.0.1 | 1 |
| oxynozeta/ | a153c386f5af | gopkg.in/ | 3.0.1 | 1 |
| prom/ | 5880ec936055 | gopkg.in/ | 3.0.1 | 1 |
| prom/ | cd134bd4fca0 | gopkg.in/ | 3.0.1 | 1 |
| prom/ | e4ca62c0d62f | gopkg.in/ | 3.0.1 | 1 |
| prom/ | f7ffebdd428b | gopkg.in/ | 3.0.1 | 1 |
| rabbitmqoperator/ | 231e7ce0e905 | gopkg.in/ | 3.0.1 | 1 |
| rancher/ | eaa270df79cc | gopkg.in/ | 3.0.1 | 1 |