StackRadar

CVE-2022-28948

High

Advisory

Published 20 May 2022In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.040
90th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
376
of 17,781 indexed, latest versions
Container images
407
deployed by those charts
Fix available
1 of 1
affected package

gopkg.in/yaml.v3 Denial of Service

Carried by container images the latest versions of 376 of 17,781 indexed charts deploy, on 407 images.

Affected packageAffected versionsFixed inImages
gopkg.in/yaml.v3golangv3.0.0, v3.0.0-20190924164351-c8b7dadae555, v3.0.0-20191026110619-0b21df46bc1d, v3.0.0-20191120175047-4206685974f2+9 more3.0.1407
OSV records
GHSA-hp87-p4gw-j4gq
Also known as
GO-2022-0603

Charts affected

376 by stars
ChartLatestAffected imagesRadar Score
aws-node-termination-handleraws0.21.01 of 1See more

aws-node-termination-handler aws 0.21.0

1 of the 1 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler:v1.19.0844478ebd5b8
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

1,445
vpafairwinds-stableVerified publisher5.0.11 of 4See more

vpa fairwinds-stable 5.0.1

1 of the 4 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20230312-helm-chart-4.5.2-28-g66a76079401d181618f27
gopkg.in/yaml.v3@v3.0.0
3.0.1

Open the chart page →

1,233
terraformhashicorpVerified publisher1.1.21 of 1See more

terraform hashicorp 1.1.2

1 of the 1 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
hashicorp/terraform-k8s:1.1.2b19857bab620
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

2,059
chaos-meshchaos-meshVerified publisher2.8.41 of 4See more

chaos-mesh chaos-mesh 2.8.4

1 of the 4 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-coredns:v0.2.838bfdf5e3774
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

6,342
ambassadordatawire6.9.51 of 2See more

ambassador datawire 6.9.5

1 of the 2 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1

Open the chart page →

4,086
oncallgrafana1.16.56 of 12See more

oncall grafana 1.16.5

6 of the 12 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.8.0e7b6203ccb37
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
quay.io/jetstack/cert-manager-controller:v1.8.0e1642bf8e933
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
quay.io/jetstack/cert-manager-ctl:v1.8.0595c548dee6f
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
quay.io/jetstack/cert-manager-webhook:v1.8.0fd798a5a773e
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
registry.k8s.io/ingress-nginx/controller:v1.2.15516d103a9c2
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.1.164d8c73dca98
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

16,251
emissary-ingressdatawire7.1.8-ea1 of 1See more

emissary-ingress datawire 7.1.8-ea

1 of the 1 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
datawire/emissary:2.0.2-ea9716efbdd24b
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1

Open the chart page →

4,918
scribebackube-helm-chartsVerified publisher0.2.01 of 2See more

scribe backube-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
quay.io/backube/scribe:0.2.0cdefc81c6b2e
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1

Open the chart page →

6,854
edge-stackdatawire7.1.8-ea1 of 2See more

edge-stack datawire 7.1.8-ea

1 of the 2 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
datawire/aes:2.0.3-ea07f8fe4f4f8e
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1

Open the chart page →

5,173
loki-simple-scalablegrafana1.8.111 of 3See more

loki-simple-scalable grafana 1.8.11

1 of the 3 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
grafana/agent-operator:v0.25.1a136c6208aa3
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

6,470
prometheus-operatorarldkaVerified publisher13.0.11 of 2See more

prometheus-operator arldka 13.0.1

1 of the 2 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20221220-controller-v1.5.1-58-g787ea74b64d99688e5573
gopkg.in/yaml.v3@v3.0.0
3.0.1

Open the chart page →

2,107
hivemq-operatorhivemqOfficialVerified publisher0.11.621 of 2See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.1.164d8c73dca98
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

7,857
kubeviewcowboysysopVerified publisher6.0.01 of 1See more

kubeview cowboysysop 6.0.0

1 of the 1 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
ghcr.io/benc-uk/kubeview:0.1.31f8e7cd7325a3
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

1,513
devtron-operatordevtron0.23.33 of 11See more

devtron-operator devtron 0.23.3

3 of the 11 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
quay.io/devtron/dex:v2.30.22e4c14d1b444
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
quay.io/devtron/kubectl:latest2ad610626658
gopkg.in/yaml.v3@v3.0.0-20210107172259-749611fa9fcc
3.0.1

Open the chart page →

32,902
temporallemontechVerified publisher0.37.01 of 13See more

temporal lemontech 0.37.0

1 of the 13 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

14,893
netris-controllernetrisai2.8.21 of 14See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
netrisai/mongodb:4.4.4-debian-10-r095abfb776bb4
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1

Open the chart page →

30,326
mysql-operatorbitpokeVerified publisher0.6.32 of 2See more

mysql-operator bitpoke 0.6.3

2 of the 2 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
bitpoke/mysql-operator:v0.6.3f44fa86ab27e
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
bitpoke/mysql-operator-orchestrator:v0.6.3d86560c75bed
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

3,354
fadicetic0.3.12 of 25See more

fadi cetic 0.3.1

2 of the 25 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
grafana/grafana:7.3.5511bc20bfcd1
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1
library/traefik:2.5.47d0228d19042
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

52,919
kubeflowkubeflow1.6.221 of 45See more

kubeflow kubeflow 1.6.2

21 of the 45 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
kserve/kserve-controller:v0.8.0f0692a9ea09f
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
kubeflow/training-operator:v1-e1434f6ff847e2b6af0
gopkg.in/yaml.v3@v3.0.0
3.0.1
kubeflownotebookswg/notebook-controller:v1.6.185e2e685abd6
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
kubeflownotebookswg/poddefaults-webhook:v1.6.17d42600e1524
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
kubeflownotebookswg/profile-controller:v1.6.19f01767a460f
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
kubeflownotebookswg/tensorboard-controller:v1.6.182ffdd2da285
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
metacontrollerio/metacontroller:v2.0.4897c9601d2cc
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
gcr.io/knative-releases/knative.dev/net-istio/cmd/controller:v1.2.0f253b82941c2
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhook:v1.2.0a705c1ea8e9e
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
gcr.io/knative-releases/knative.dev/serving/cmd/activator:v1.2.593ff6e693577
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler:v1.2.5007820fdb75b
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.2.575cfdcfa050a
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping:v1.2.523baa1932232
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhook:v1.2.5847bb97e3844
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook:v1.2.59084ea8498ea
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
gcr.io/ml-pipeline/api-server:2.0.0-alpha.5dc6ca05bb94f
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
gcr.io/ml-pipeline/cache-server:2.0.0-alpha.583e79c709df3
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
gcr.io/ml-pipeline/persistenceagent:2.0.0-alpha.500db9796a37b
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
gcr.io/ml-pipeline/scheduledworkflow:2.0.0-alpha.5795a0c8a0e13
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
gcr.io/ml-pipeline/viewer-crd-controller:2.0.0-alpha.534403f9f94be
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
gcr.io/ml-pipeline/workflow-controller:v3.3.8-license-compliance6c8e4e2a6443
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

96,941
openelbkubesphere-stable0.5.01 of 2See more

openelb kubesphere-stable 0.5.0

1 of the 2 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
kubespheredev/kube-webhook-certgen:v1.1.123a03c9c381f
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

4,329
open5gsopen5gsVerified publisher2.3.41 of 5See more

open5gs open5gs 2.3.4

1 of the 5 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:4.4.14fe2bd7b4036
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1

Open the chart page →

9,261
aperture-controlleraperture2.34.01 of 5See more

aperture-controller aperture 2.34.0

1 of the 5 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.33.591100b06e86d
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

4,663
openshift-consoleav1o-chartsVerified publisher0.3.61 of 1See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

9,052
aws-calicoaws0.3.111 of 1See more

aws-calico aws 0.3.11

1 of the 1 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
quay.io/tigera/operator:v1.20.1379efe0c2541
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1

Open the chart page →

2,250
cert-managerchoerodon1.8.24 of 4See more

cert-manager choerodon 1.8.2

4 of the 4 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.8.2c010246124c2
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
quay.io/jetstack/cert-manager-controller:v1.8.2a20c44021a5d
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
quay.io/jetstack/cert-manager-ctl:v1.8.281b2d775edad
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
quay.io/jetstack/cert-manager-webhook:v1.8.2ada7edd90bec
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

7,775
cluster-registrycluster-registry-controller0.2.121 of 1See more

cluster-registry cluster-registry-controller 0.2.12

1 of the 1 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
ghcr.io/cisco-open/cluster-registry-controller:v0.2.12937eff91df1e
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

1,707
core-dump-handlercore-dump-handler9.0.01 of 1See more

core-dump-handler core-dump-handler 9.0.0

1 of the 1 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
quay.io/icdh/core-dump-handler:v9.0.0cc79b9e2a1c8
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

3,080
blockygeek-cookbookVerified publisher10.5.21 of 1See more

blocky geek-cookbook 10.5.2

1 of the 1 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
ghcr.io/0xerr0r/blocky:v0.18b15824464acb
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

3,030
error-pagesgeek-cookbookVerified publisher1.2.21 of 1See more

error-pages geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
ghcr.io/tarampampam/error-pages:2.6.013e73da04ee4
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

1,110
health-exporterhealth-exporterVerified publisher0.3.41 of 1See more

health-exporter health-exporter 0.3.4

1 of the 1 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
ghcr.io/snapp-incubator/health-exporter:0.3.252a0d8f6278c
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

1,558
coreinstill-aiOfficialVerified publisher0.1.751 of 15See more

core instill-ai 0.1.75

1 of the 15 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
library/influxdb:2.3.0-alpined7f5dd5f70e2
gopkg.in/yaml.v3@v3.0.0-20200313102051-9f266ea9e77c
3.0.1

Open the chart page →

30,816
jenkins-operatorjenkins0.8.11 of 1See more

jenkins-operator jenkins 0.8.1

1 of the 1 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
quay.io/jenkins-kubernetes-operator/operator:v0.8.171cb50263c3b
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1

Open the chart page →

2,211
pyroscopekubeblocksVerified publisher0.2.921 of 1See more

pyroscope kubeblocks 0.2.92

1 of the 1 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
apecloud/pyroscope:0.37.2dbca95a15bc1
gopkg.in/yaml.v3@v3.0.0
3.0.1

Open the chart page →

1,620
move2kubemove2kube0.3.151 of 1See more

move2kube move2kube 0.3.15

1 of the 1 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

3,793
oesopsmxVerified publisher4.0.322 of 25See more

oes opsmx 4.0.32

2 of the 25 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/awsgit:v2-openssh0d21ba756f44
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
quay.io/opsmxpublic/awsgit:v3-js15a6faada3d4
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

107,811
kube-prometheus-stackprometheus-worawutchan12.8.02 of 6See more

kube-prometheus-stack prometheus-worawutchan 12.8.0

2 of the 6 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
grafana/grafana:7.2.1733842cca5bd
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1
quay.io/prometheus-operator/prometheus-operator:v0.44.0983627001c89
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1

Open the chart page →

12,125
sn-platformstreamnative1.11.441 of 9See more

sn-platform streamnative 1.11.44

1 of the 9 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
streamnative/pulsar_vault_init:v1.0.731533fa9fab7
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

15,477
traefik-meshtraefikOfficialVerified publisher4.1.11 of 7See more

traefik-mesh traefik 4.1.1

1 of the 7 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
library/traefik:v2.57d5a6ae66572
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

9,257
minio-operatorwenerme4.3.71 of 2See more

minio-operator wenerme 4.3.7

1 of the 2 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
minio/operator:v4.3.754393e03f3b2
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

6,085
wharf-helmwharf-helmOfficialVerified publisher3.2.61 of 5See more

wharf-helm wharf-helm 3.2.6

1 of the 5 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
quay.io/iver-wharf/wharf-provider-gitlab:v2.0.1d7079e0890da
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

10,032
yataiyataiVerified publisher0.4.61 of 2See more

yatai yatai 0.4.6

1 of the 2 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai:0.4.614b482c1f1b8
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

4,039
smockerandrcunsVerified publisher0.0.41 of 1See more

smocker andrcuns 0.0.4

1 of the 1 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
andrcuns/smocker:0.18.5b4a8eb20581a
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

2,173
upcloud-csiankra-chartsVerified publisher0.4.05 of 8See more

upcloud-csi ankra-charts 0.4.0

5 of the 8 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v3.4.08b9c313c05f5
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
registry.k8s.io/sig-storage/csi-provisioner:v3.1.0122bfb8c1eda
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
registry.k8s.io/sig-storage/csi-resizer:v1.4.09ebbf9f023e7
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
registry.k8s.io/sig-storage/csi-snapshotter:v4.2.1818f35653f2e
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
registry.k8s.io/sig-storage/snapshot-controller:v4.2.195587f8777d7
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

14,917
argocd-backup-s3argocd-backup-s3Verified publisher0.9.51 of 1See more

argocd-backup-s3 argocd-backup-s3 0.9.5

1 of the 1 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

5,222
dltbrokerassist-iot-distributed-broker0.2.02 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
hyperledger/fabric-peer:2.46ff36af21eb1
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
hyperledger/fabric-tools:2.4b1194f509085
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

77,706
dltloggingassist-iot-logging-auditing0.2.02 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
hyperledger/fabric-peer:2.46ff36af21eb1
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
hyperledger/fabric-tools:2.4b1194f509085
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

77,687
dex-k8sav1o-chartsVerified publisher0.2.11 of 1See more

dex-k8s av1o-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.28.15e88f2205de1
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

3,391
kube-image-webhookav1o-chartsVerified publisher0.1.31 of 1See more

kube-image-webhook av1o-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
registry.gitlab.com/autokubeops/kube-image-webhook:v0.2.0fcf464708a21
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

3,723
livekit-serverbeeinventor1.0.01 of 2See more

livekit-server beeinventor 1.0.0

1 of the 2 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
livekit/livekit-server:v1.0.08391fd1b834f
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1

Open the chart page →

2,602
cloudbees-sidecar-injectorcloudbees2.3.32 of 2See more

cloudbees-sidecar-injector cloudbees 2.3.3

2 of the 2 container images this version deploys carry CVE-2022-28948.

Container imageDigestPackageFixed in
cloudbees/cert-requester:2.3.31d44fb4f799b
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1
cloudbees/sidecar-injector:2.3.38f102ef0383a
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1

Open the chart page →

3,268

Container images carrying it

407 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
public.ecr.aws/j1r0q0g6/training/training-operator:760ac1171dd30039a7363ffa03c77454bd714da5ae59d222fd87
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1
1
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1
1
quay.io/argoprojlabs/argocd-operator:v0.4.0cf8faa986789
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
quay.io/backube/scribe:0.2.0cdefc81c6b2e
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1
1
quay.io/bentoml/yatai:0.4.614b482c1f1b8
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
gopkg.in/yaml.v3@v3.0.0-20200313102051-9f266ea9e77c
3.0.1
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
gopkg.in/yaml.v3@v3.0.0-20200313102051-9f266ea9e77c
3.0.1
1
quay.io/cortexproject/cortex:v1.9.05d1c2cf4c538
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
quay.io/fiware/envoy-configmap-updater:0.4.39eabc3f3e1e2
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
quay.io/flomesh/fsm-bootstrap-ubi8:0.1.8-ubi.6e6d7afb1a4bf
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
quay.io/flomesh/fsm-ingress-pipy-ubi8:0.1.8-ubi.6fce990dece01
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
quay.io/flomesh/fsm-manager-ubi8:0.1.8-ubi.63590af73f65a
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1
1
quay.io/icdh/core-dump-handler:v9.0.0cc79b9e2a1c8
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
quay.io/jenkins-kubernetes-operator/operator:v0.8.171cb50263c3b
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1
1
quay.io/jetstack/cert-manager-cainjector:v1.8.2c010246124c2
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
quay.io/jetstack/cert-manager-cainjector:v1.8.0e7b6203ccb37
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
quay.io/jetstack/cert-manager-controller:v1.8.2a20c44021a5d
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
quay.io/jetstack/cert-manager-controller:v1.8.0e1642bf8e933
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
quay.io/jetstack/cert-manager-ctl:v1.8.0595c548dee6f
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
quay.io/jetstack/cert-manager-ctl:v1.8.281b2d775edad
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
quay.io/jetstack/cert-manager-webhook:v1.8.2ada7edd90bec
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
quay.io/jetstack/cert-manager-webhook:v1.8.0fd798a5a773e
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
quay.io/kube-ops/loki:2.2.14fbd63194674
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1
1
quay.io/kube-ops/promtail:2.2.134de6387233b
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1
1
quay.io/kubernetes-multicluster/kubefed:v0.10.0c4635c95730e
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
quay.io/open-cluster-management/multicluster-mesh-addon:latest3e010e1188f1
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
quay.io/opsmxpublic/awsgit:v2-openssh0d21ba756f44
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
quay.io/opsmxpublic/awsgit:v3-js15a6faada3d4
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
quay.io/opstree/logging-operator:v0.4.0fd8bb57ef3cf
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
quay.io/opstree/mongodb-operator:v0.3.0879b9bead838
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
quay.io/prometheus-operator/prometheus-operator:v0.57.0a2d502c204f9
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
quay.io/prometheus-operator/prometheus-operator:v0.54.0be2aef39a2f8
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
quay.io/prometheus/prometheus:v2.33.591100b06e86d
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
quay.io/prometheus/prometheus:v2.34.0b37103e03399
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
quay.io/redhat-cop/cert-utils-operator:v1.3.120290e7b2800a
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1
1
quay.io/redhat-cop/patch-operator:v0.1.11030ade9b9428
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
quay.io/solo-io/certgen:0.0.0-forkb17a8c7d1f32
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
quay.io/solo-io/discovery:0.0.0-fork5b62aaade3c9
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
quay.io/solo-io/gloo:0.0.0-fork9a6c84560d44
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
quay.io/thanos/thanos:v0.17.1e362f02ed304
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1
1
quay.io/tigera/operator:v1.20.1379efe0c2541
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1
1
quay.io/tigera/operator:v1.15.1c6591da87aa8
gopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe776
3.0.1
1
registry.gitlab.com/autokubeops/kube-image-webhook:v0.2.0fcf464708a21
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b
3.0.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.