CVE-2022-28948
HighAdvisory
Published 20 May 2022In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.040
- 90th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 376
- of 17,781 indexed, latest versions
- Container images
- 407
- deployed by those charts
- Fix available
- 1 of 1
- affected package
gopkg.in/yaml.v3 Denial of Service
Carried by container images the latest versions of 376 of 17,781 indexed charts deploy, on 407 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| gopkg.in/ | v3.0.0, v3.0.0-20190924164351-c8b7dadae555, v3.0.0-20191026110619-0b21df46bc1d, v3.0.0-20191120175047-4206685974f2+9 more | 3.0.1 | 407 |
- OSV records
- GHSA-hp87-p4gw-j4gq
- Also known as
- GO-2022-0603
Charts affected
376 by stars
Container images carrying it
407 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | b15824464acb | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | a462d5797e14 | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | 18689773150d | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | c62c89ee706d | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | 67d18880448c | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | e341aefa9a90 | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | 1b530cf7c07f | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | a514736d2d4d | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | f8e7cd7325a3 | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | c852606428cf | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | 937eff91df1e | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | f299baf467b5 | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | bed6f4ec2e82 | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | 8723616a976a | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | e159ba41aede | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | 6b3215e37738 | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | 627e5e211766 | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | 073116e61007 | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | 56a1ea4490ba | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | 923a3f704b21 | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | da81246ccfc9 | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | b3a87f92a963 | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | 9c73f1841ebc | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | 185d2eebc60c | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | 23dc6274cc4b | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | ca5a98cbed32 | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | e949b0f733f0 | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | 04ae1fc698a5 | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | 09741c86aee7 | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | dfa5907170c4 | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | 3609a075c825 | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | 68d44646e8b2 | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | edc238a538a0 | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | e0c7cf2415f0 | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | b61c750ade19 | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | 0fae829caf29 | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | d06892218680 | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | 76a19ddc3626 | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | 52a0d8f6278c | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | f681e0343a31 | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | 3491a0f31c4a | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | 13e73da04ee4 | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | 7f21d50e69cb | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | a2523c532c0c | gopkg.in/ | 3.0.1 | 1 |
| ghcr.io/ | 31060be60bec | gopkg.in/ | 3.0.1 | 1 |
| mcr.microsoft.com/ | 7997e0f236bc | gopkg.in/ | 3.0.1 | 1 |
| public.ecr.aws/ | 844478ebd5b8 | gopkg.in/ | 3.0.1 | 1 |
| public.ecr.aws/ | 9637c80dd23f | gopkg.in/ | 3.0.1 | 1 |
| public.ecr.aws/ | 86b0f7243250 | gopkg.in/ | 3.0.1 | 1 |
| public.ecr.aws/ | 02aed3370fce | gopkg.in/ | 3.0.1 | 1 |