StackRadar

CVE-2022-28948

High

Advisory

Published 20 May 2022In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.040
90th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
376
of 17,781 indexed, latest versions
Container images
407
deployed by those charts
Fix available
1 of 1
affected package

gopkg.in/yaml.v3 Denial of Service

Carried by container images the latest versions of 376 of 17,781 indexed charts deploy, on 407 images.

Affected packageAffected versionsFixed inImages
gopkg.in/yaml.v3golangv3.0.0, v3.0.0-20190924164351-c8b7dadae555, v3.0.0-20191026110619-0b21df46bc1d, v3.0.0-20191120175047-4206685974f2+9 more3.0.1407
OSV records
GHSA-hp87-p4gw-j4gq
Also known as
GO-2022-0603

Charts affected

376 by stars
ChartLatestAffected imagesRadar Score
aws-node-termination-handleraws0.21.01 of 1See more

aws-node-termination-handler aws 0.21.0

1 of the 1 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler:v1.19.0844478ebd5b8
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

1,445
vpafairwinds-stableVerified publisher5.0.11 of 4See more

vpa fairwinds-stable 5.0.1

1 of the 4 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20230312-helm-chart-4.5.2-28-g66a76079401d181618f27
gopkg.in/yaml.v3@v3.0.0
3.0.1

Open the chart page →

1,233
terraformhashicorpVerified publisher1.1.21 of 1See more

terraform hashicorp 1.1.2

1 of the 1 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
hashicorp/terraform-k8s:1.1.2b19857bab620
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

2,059
chaos-meshchaos-meshVerified publisher2.8.41 of 4See more

chaos-mesh chaos-mesh 2.8.4

1 of the 4 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-coredns:v0.2.838bfdf5e3774
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

6,342
ambassadordatawire6.9.51 of 2See more

ambassador datawire 6.9.5

1 of the 2 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1

Open the chart page →

4,086
oncallgrafana1.16.56 of 12See more

oncall grafana 1.16.5

6 of the 12 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.8.0e7b6203ccb37
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
quay.io/jetstack/cert-manager-controller:v1.8.0e1642bf8e933
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
quay.io/jetstack/cert-manager-ctl:v1.8.0595c548dee6f
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
quay.io/jetstack/cert-manager-webhook:v1.8.0fd798a5a773e
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
registry.k8s.io/ingress-nginx/controller:v1.2.15516d103a9c2
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.1.164d8c73dca98
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

16,251
emissary-ingressdatawire7.1.8-ea1 of 1See more

emissary-ingress datawire 7.1.8-ea

1 of the 1 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
datawire/emissary:2.0.2-ea9716efbdd24b
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1

Open the chart page →

4,918
scribebackube-helm-chartsVerified publisher0.2.01 of 2See more

scribe backube-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
quay.io/backube/scribe:0.2.0cdefc81c6b2e
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1

Open the chart page →

6,854
edge-stackdatawire7.1.8-ea1 of 2See more

edge-stack datawire 7.1.8-ea

1 of the 2 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
datawire/aes:2.0.3-ea07f8fe4f4f8e
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1

Open the chart page →

5,173
loki-simple-scalablegrafana1.8.111 of 3See more

loki-simple-scalable grafana 1.8.11

1 of the 3 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
grafana/agent-operator:v0.25.1a136c6208aa3
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

6,470
prometheus-operatorarldkaVerified publisher13.0.11 of 2See more

prometheus-operator arldka 13.0.1

1 of the 2 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20221220-controller-v1.5.1-58-g787ea74b64d99688e5573
gopkg.in/yaml.v3@v3.0.0
3.0.1

Open the chart page →

2,107
hivemq-operatorhivemqOfficialVerified publisher0.11.621 of 2See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.1.164d8c73dca98
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

7,857
kubeviewcowboysysopVerified publisher6.0.01 of 1See more

kubeview cowboysysop 6.0.0

1 of the 1 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
ghcr.io/benc-uk/kubeview:0.1.31f8e7cd7325a3
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

1,513
devtron-operatordevtron0.23.33 of 11See more

devtron-operator devtron 0.23.3

3 of the 11 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
quay.io/devtron/dex:v2.30.22e4c14d1b444
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
quay.io/devtron/kubectl:latest2ad610626658
gopkg.in/yaml.v3@v3.0.0-20210107172259-749611fa9fcc
3.0.1

Open the chart page →

32,902
temporallemontechVerified publisher0.37.01 of 13See more

temporal lemontech 0.37.0

1 of the 13 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

14,893
netris-controllernetrisai2.8.21 of 14See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
netrisai/mongodb:4.4.4-debian-10-r095abfb776bb4
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1

Open the chart page →

30,326
mysql-operatorbitpokeVerified publisher0.6.32 of 2See more

mysql-operator bitpoke 0.6.3

2 of the 2 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
bitpoke/mysql-operator:v0.6.3f44fa86ab27e
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
bitpoke/mysql-operator-orchestrator:v0.6.3d86560c75bed
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

3,354
fadicetic0.3.12 of 25See more

fadi cetic 0.3.1

2 of the 25 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
grafana/grafana:7.3.5511bc20bfcd1
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1
library/traefik:2.5.47d0228d19042
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

52,919
kubeflowkubeflow1.6.221 of 45See more

kubeflow kubeflow 1.6.2

21 of the 45 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
kserve/kserve-controller:v0.8.0f0692a9ea09f
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
kubeflow/training-operator:v1-e1434f6ff847e2b6af0
gopkg.in/yaml.v3@v3.0.0
3.0.1
kubeflownotebookswg/notebook-controller:v1.6.185e2e685abd6
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
kubeflownotebookswg/poddefaults-webhook:v1.6.17d42600e1524
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
kubeflownotebookswg/profile-controller:v1.6.19f01767a460f
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
kubeflownotebookswg/tensorboard-controller:v1.6.182ffdd2da285
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
metacontrollerio/metacontroller:v2.0.4897c9601d2cc
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
gcr.io/knative-releases/knative.dev/net-istio/cmd/controller:v1.2.0f253b82941c2
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhook:v1.2.0a705c1ea8e9e
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
gcr.io/knative-releases/knative.dev/serving/cmd/activator:v1.2.593ff6e693577
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler:v1.2.5007820fdb75b
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.2.575cfdcfa050a
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping:v1.2.523baa1932232
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhook:v1.2.5847bb97e3844
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook:v1.2.59084ea8498ea
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
gcr.io/ml-pipeline/api-server:2.0.0-alpha.5dc6ca05bb94f
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
gcr.io/ml-pipeline/cache-server:2.0.0-alpha.583e79c709df3
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
gcr.io/ml-pipeline/persistenceagent:2.0.0-alpha.500db9796a37b
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
gcr.io/ml-pipeline/scheduledworkflow:2.0.0-alpha.5795a0c8a0e13
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
gcr.io/ml-pipeline/viewer-crd-controller:2.0.0-alpha.534403f9f94be
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
gcr.io/ml-pipeline/workflow-controller:v3.3.8-license-compliance6c8e4e2a6443
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

96,941
openelbkubesphere-stable0.5.01 of 2See more

openelb kubesphere-stable 0.5.0

1 of the 2 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
kubespheredev/kube-webhook-certgen:v1.1.123a03c9c381f
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

4,329
open5gsopen5gsVerified publisher2.3.41 of 5See more

open5gs open5gs 2.3.4

1 of the 5 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:4.4.14fe2bd7b4036
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1

Open the chart page →

9,261
aperture-controlleraperture2.34.01 of 5See more

aperture-controller aperture 2.34.0

1 of the 5 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.33.591100b06e86d
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

4,663
openshift-consoleav1o-chartsVerified publisher0.3.61 of 1See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

9,052
aws-calicoaws0.3.111 of 1See more

aws-calico aws 0.3.11

1 of the 1 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
quay.io/tigera/operator:v1.20.1379efe0c2541
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1

Open the chart page →

2,250
cert-managerchoerodon1.8.24 of 4See more

cert-manager choerodon 1.8.2

4 of the 4 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.8.2c010246124c2
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
quay.io/jetstack/cert-manager-controller:v1.8.2a20c44021a5d
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
quay.io/jetstack/cert-manager-ctl:v1.8.281b2d775edad
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
quay.io/jetstack/cert-manager-webhook:v1.8.2ada7edd90bec
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

7,775
cluster-registrycluster-registry-controller0.2.121 of 1See more

cluster-registry cluster-registry-controller 0.2.12

1 of the 1 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
ghcr.io/cisco-open/cluster-registry-controller:v0.2.12937eff91df1e
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

1,707
core-dump-handlercore-dump-handler9.0.01 of 1See more

core-dump-handler core-dump-handler 9.0.0

1 of the 1 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
quay.io/icdh/core-dump-handler:v9.0.0cc79b9e2a1c8
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

3,080
blockygeek-cookbookVerified publisher10.5.21 of 1See more

blocky geek-cookbook 10.5.2

1 of the 1 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
ghcr.io/0xerr0r/blocky:v0.18b15824464acb
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

3,030
error-pagesgeek-cookbookVerified publisher1.2.21 of 1See more

error-pages geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
ghcr.io/tarampampam/error-pages:2.6.013e73da04ee4
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

1,110
health-exporterhealth-exporterVerified publisher0.3.41 of 1See more

health-exporter health-exporter 0.3.4

1 of the 1 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
ghcr.io/snapp-incubator/health-exporter:0.3.252a0d8f6278c
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

1,558
coreinstill-aiOfficialVerified publisher0.1.751 of 15See more

core instill-ai 0.1.75

1 of the 15 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
library/influxdb:2.3.0-alpined7f5dd5f70e2
gopkg.in/yaml.v3@v3.0.0-20200313102051-9f266ea9e77c
3.0.1

Open the chart page →

30,816
jenkins-operatorjenkins0.8.11 of 1See more

jenkins-operator jenkins 0.8.1

1 of the 1 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
quay.io/jenkins-kubernetes-operator/operator:v0.8.171cb50263c3b
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1

Open the chart page →

2,211
pyroscopekubeblocksVerified publisher0.2.921 of 1See more

pyroscope kubeblocks 0.2.92

1 of the 1 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
apecloud/pyroscope:0.37.2dbca95a15bc1
gopkg.in/yaml.v3@v3.0.0
3.0.1

Open the chart page →

1,620
move2kubemove2kube0.3.151 of 1See more

move2kube move2kube 0.3.15

1 of the 1 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

3,793
oesopsmxVerified publisher4.0.322 of 25See more

oes opsmx 4.0.32

2 of the 25 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/awsgit:v2-openssh0d21ba756f44
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
quay.io/opsmxpublic/awsgit:v3-js15a6faada3d4
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

107,811
kube-prometheus-stackprometheus-worawutchan12.8.02 of 6See more

kube-prometheus-stack prometheus-worawutchan 12.8.0

2 of the 6 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
grafana/grafana:7.2.1733842cca5bd
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1
quay.io/prometheus-operator/prometheus-operator:v0.44.0983627001c89
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1

Open the chart page →

12,125
sn-platformstreamnative1.11.441 of 9See more

sn-platform streamnative 1.11.44

1 of the 9 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
streamnative/pulsar_vault_init:v1.0.731533fa9fab7
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

15,477
traefik-meshtraefikOfficialVerified publisher4.1.11 of 7See more

traefik-mesh traefik 4.1.1

1 of the 7 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
library/traefik:v2.57d5a6ae66572
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

9,257
minio-operatorwenerme4.3.71 of 2See more

minio-operator wenerme 4.3.7

1 of the 2 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
minio/operator:v4.3.754393e03f3b2
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

6,085
wharf-helmwharf-helmOfficialVerified publisher3.2.61 of 5See more

wharf-helm wharf-helm 3.2.6

1 of the 5 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
quay.io/iver-wharf/wharf-provider-gitlab:v2.0.1d7079e0890da
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

10,032
yataiyataiVerified publisher0.4.61 of 2See more

yatai yatai 0.4.6

1 of the 2 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai:0.4.614b482c1f1b8
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

4,039
smockerandrcunsVerified publisher0.0.41 of 1See more

smocker andrcuns 0.0.4

1 of the 1 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
andrcuns/smocker:0.18.5b4a8eb20581a
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

2,173
upcloud-csiankra-chartsVerified publisher0.4.05 of 8See more

upcloud-csi ankra-charts 0.4.0

5 of the 8 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v3.4.08b9c313c05f5
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
registry.k8s.io/sig-storage/csi-provisioner:v3.1.0122bfb8c1eda
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
registry.k8s.io/sig-storage/csi-resizer:v1.4.09ebbf9f023e7
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
registry.k8s.io/sig-storage/csi-snapshotter:v4.2.1818f35653f2e
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
registry.k8s.io/sig-storage/snapshot-controller:v4.2.195587f8777d7
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

14,917
argocd-backup-s3argocd-backup-s3Verified publisher0.9.51 of 1See more

argocd-backup-s3 argocd-backup-s3 0.9.5

1 of the 1 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

5,222
dltbrokerassist-iot-distributed-broker0.2.02 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
hyperledger/fabric-peer:2.46ff36af21eb1
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
hyperledger/fabric-tools:2.4b1194f509085
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

77,706
dltloggingassist-iot-logging-auditing0.2.02 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
hyperledger/fabric-peer:2.46ff36af21eb1
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
hyperledger/fabric-tools:2.4b1194f509085
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

77,687
dex-k8sav1o-chartsVerified publisher0.2.11 of 1See more

dex-k8s av1o-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.28.15e88f2205de1
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

3,391
kube-image-webhookav1o-chartsVerified publisher0.1.31 of 1See more

kube-image-webhook av1o-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
registry.gitlab.com/autokubeops/kube-image-webhook:v0.2.0fcf464708a21
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

3,723
livekit-serverbeeinventor1.0.01 of 2See more

livekit-server beeinventor 1.0.0

1 of the 2 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
livekit/livekit-server:v1.0.08391fd1b834f
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

2,602
cloudbees-sidecar-injectorcloudbees2.3.32 of 2See more

cloudbees-sidecar-injector cloudbees 2.3.3

2 of the 2 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
cloudbees/cert-requester:2.3.31d44fb4f799b
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1
cloudbees/sidecar-injector:2.3.38f102ef0383a
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1

Open the chart page →

3,268

Container images carrying it

407 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/0xerr0r/blocky:v0.18b15824464acb
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
ghcr.io/alekc/kpubber:v0.0.2a462d5797e14
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
ghcr.io/analogj/scrutiny:master-omnibus18689773150d
gopkg.in/yaml.v3@v3.0.0-20200313102051-9f266ea9e77c
3.0.1
1
ghcr.io/appscode/auditor:v0.0.1c62c89ee706d
gopkg.in/yaml.v3@v3.0.0
3.0.1
1
ghcr.io/appscode/grafana:v2025.2.367d18880448c
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
ghcr.io/banzaicloud/kafka-operator:v0.20.2e341aefa9a90
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
ghcr.io/banzaicloud/logging-operator:3.17.101b530cf7c07f
gopkg.in/yaml.v3@v3.0.0
3.0.1
1
ghcr.io/banzaicloud/log-socket:latesta514736d2d4d
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
ghcr.io/benc-uk/kubeview:0.1.31f8e7cd7325a3
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
ghcr.io/caarlos0/domain_exporter:v1.18.0-arm64c852606428cf
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
ghcr.io/cisco-open/cluster-registry-controller:v0.2.12937eff91df1e
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
ghcr.io/ckotzbauer/chekrf299baf467b5
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
ghcr.io/crazy-max/samba:4.15.5bed6f4ec2e82
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
ghcr.io/cubefs/cfs-csi-driver:3.2.0.150.08723616a976a
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
ghcr.io/devplayer0/lxd8s:0.3.1e159ba41aede
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
ghcr.io/doodlescheduling/k8s-pause:v0.1.16b3215e37738
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
ghcr.io/doodlescheduling/k8svault-controller:v0.2.0627e5e211766
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
ghcr.io/dysnix/bitnami/mongodb:4.4.11-debian-10-r5073116e61007
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
ghcr.io/external-secrets/external-secrets:v0.3.1156a1ea4490ba
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
ghcr.io/ferama/vipien:v0.5.3923a3f704b21
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
ghcr.io/g0dscookie/icinga2:2.13.5da81246ccfc9
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
ghcr.io/jlclx/runtimeclass-controller:latestb3a87f92a963
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
ghcr.io/kyverno/kyverno:v1.7.19c73f1841ebc
gopkg.in/yaml.v3@v3.0.0
3.0.1
1
ghcr.io/kyverno/kyvernopre:v1.7.1185d2eebc60c
gopkg.in/yaml.v3@v3.0.0
3.0.1
1
ghcr.io/liangyuanpeng/chirpstack-event-forward:v0.1.223dc6274cc4b
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
ghcr.io/liangyuanpeng/waitfor:v1.0.0ca5a98cbed32
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
gopkg.in/yaml.v3@v3.0.0-20190924164351-c8b7dadae555
3.0.1
1
ghcr.io/middleware-labs/odigos-instrumentor:middleware-test-0.0.104ae1fc698a5
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
ghcr.io/middleware-labs/odigos-scheduler:middleware-test-0.0.109741c86aee7
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
ghcr.io/middleware-labs/vision-instrumentor:middleware-test-0.0.4dfa5907170c4
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
ghcr.io/middleware-labs/vision-scheduler:middleware-test-0.0.33609a075c825
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
ghcr.io/nabokihms/events_exporter:latest68d44646e8b2
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
ghcr.io/netsoc/webspaced:0.5.1edc238a538a0
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
ghcr.io/nimbolus/k8s-openstack-node-upgrade-agent:0.1.0e0c7cf2415f0
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
gopkg.in/yaml.v3@v3.0.0-20191026110619-0b21df46bc1d
3.0.1
1
ghcr.io/prymitive/karma:v0.85d06892218680
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
ghcr.io/sergelogvinov/keydb:6.3.376a19ddc3626
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
ghcr.io/snapp-incubator/health-exporter:0.3.252a0d8f6278c
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
ghcr.io/substra/fabric-peer:0.2.4f681e0343a31
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
ghcr.io/substra/fabric-tools:0.2.43491a0f31c4a
gopkg.in/yaml.v3@v3.0.0-20200313102051-9f266ea9e77c
3.0.1
1
ghcr.io/tarampampam/error-pages:2.6.013e73da04ee4
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
ghcr.io/tikalk/resource-manager:latest7f21d50e69cb
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
ghcr.io/v6d-io/v6d/kube-rbac-proxy:v0.13.0a2523c532c0c
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
ghcr.io/wyrihaximusnet/kubernetes-redis-db-assignment-operator:v1.0.831060be60bec
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
mcr.microsoft.com/oss/kubernetes-csi/csi-resizer:v1.1.07997e0f236bc
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1
1
public.ecr.aws/aws-ec2/aws-node-termination-handler:v1.19.0844478ebd5b8
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
public.ecr.aws/aws-ec2/aws-node-termination-handler-2/controller:v2.0.0-beta9637c80dd23f
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
public.ecr.aws/aws-ec2/aws-node-termination-handler-2/webhook:v2.0.0-beta86b0f7243250
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws:1.0.r2-2021.08.13.20.34-linux-amd6402aed3370fce
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.