CVE-2022-28948
HighAdvisory
Published 20 May 2022In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.040
- 90th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 376
- of 17,781 indexed, latest versions
- Container images
- 407
- deployed by those charts
- Fix available
- 1 of 1
- affected package
gopkg.in/yaml.v3 Denial of Service
Carried by container images the latest versions of 376 of 17,781 indexed charts deploy, on 407 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| gopkg.in/ | v3.0.0, v3.0.0-20190924164351-c8b7dadae555, v3.0.0-20191026110619-0b21df46bc1d, v3.0.0-20191120175047-4206685974f2+9 more | 3.0.1 | 407 |
- OSV records
- GHSA-hp87-p4gw-j4gq
- Also known as
- GO-2022-0603
Charts affected
376 by stars
Container images carrying it
407 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| public.ecr.aws/ | ae59d222fd87 | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | 5b6701d8fb31 | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | cf8faa986789 | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | cdefc81c6b2e | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | 14b482c1f1b8 | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | d6fd2a9e3273 | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | 13aaae779248 | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | 5d1c2cf4c538 | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | a3b9a07648b6 | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | 9eabc3f3e1e2 | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | e6d7afb1a4bf | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | fce990dece01 | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | 3590af73f65a | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | 9663f06adcb1 | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | cc79b9e2a1c8 | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | 71cb50263c3b | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | c010246124c2 | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | e7b6203ccb37 | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | a20c44021a5d | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | e1642bf8e933 | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | 595c548dee6f | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | 81b2d775edad | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | ada7edd90bec | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | fd798a5a773e | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | ec6ab507c5da | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | 4fbd63194674 | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | 34de6387233b | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | c4635c95730e | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | 3e010e1188f1 | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | 0bbe8b451fa3 | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | 0d21ba756f44 | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | 15a6faada3d4 | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | fd8bb57ef3cf | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | 879b9bead838 | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | a2d502c204f9 | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | be2aef39a2f8 | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | 91100b06e86d | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | b37103e03399 | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | 7b4202c25b67 | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | 0290e7b2800a | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | 030ade9b9428 | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | 6ba82beff18e | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | b17a8c7d1f32 | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | 5b62aaade3c9 | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | 9a6c84560d44 | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | e362f02ed304 | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | 379efe0c2541 | gopkg.in/ | 3.0.1 | 1 |
| quay.io/ | c6591da87aa8 | gopkg.in/ | 3.0.1 | 1 |
| registry.gitlab.com/ | fcf464708a21 | gopkg.in/ | 3.0.1 | 1 |
| registry.gitlab.com/ | 36b19b72120e | gopkg.in/ | 3.0.1 | 1 |