StackRadar

CVE-2022-29526

Medium

Advisory

Published 24 Jun 2022In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.030
86th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,076
of 17,781 indexed, latest versions
Container images
1,173
deployed by those charts
Fix available
2 of 2
affected packages

golang.org/x/sys/unix has Incorrect privilege reporting in syscall

Carried by container images the latest versions of 1,076 of 17,781 indexed charts deploy, on 1,173 images.

Affected packageAffected versionsFixed inImages
golang.org/x/sysgolangv0.0.0-20180302081741-dd2ff4accc09, v0.0.0-20180810173357-98c5dad5d1a0, v0.0.0-20190209173611-3b5209105503, v0.0.0-20190215142949-d0b11bdaac8a+192 more0.0.0-20220412211240-33da011f77ad1,033
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+69 more1.17.101,019
OSV records
GHSA-p782-xgp4-8hr8GO-2022-0493
Also known as
BIT-golang-2022-29526

Charts affected

1,076 by stars
ChartLatestAffected imagesRadar Score
intel-gpu-plugingeek-cookbookVerified publisher4.4.21 of 1See more

intel-gpu-plugin geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
intel/intel-gpu-plugin:0.20.0143f0a45e174
golang.org/x/sys@v0.0.0-20201112073958-5cba982894dd
stdlib@go1.15.10
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

1,738
kamu-api-serverkamuVerified publisher0.89.01 of 1See more

kamu-api-server kamu 0.89.0

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
ghcr.io/kamu-data/kamu-api-server:0.89.04ed7a896dd2b
golang.org/x/sys@v0.0.0-20210809222454-d867a43fc93e
stdlib@go1.15.2
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

6,307
permission-managerkfirfer1.0.71 of 1See more

permission-manager kfirfer 1.0.7

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
quay.io/sighup/permission-manager:v1.7.1-rc1f5e6a5dcee33
golang.org/x/sys@v0.0.0-20201223074533-0d417f636930
stdlib@go1.16.8
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

2,266
kubeflowkubeflow1.6.224 of 45See more

kubeflow kubeflow 1.6.2

24 of the 45 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
istio/proxyv2:1.9.687a9db561d2e
golang.org/x/sys@v0.0.0-20201214210602-f9fddec55a1e
stdlib@go1.15.13
0.0.0-20220412211240-33da011f77ad
1.17.10
kserve/kserve-controller:v0.8.0f0692a9ea09f
golang.org/x/sys@v0.0.0-20211124211545-fe61309f8881
stdlib@go1.17.7
0.0.0-20220412211240-33da011f77ad
1.17.10
kubeflownotebookswg/kfam:v1.6.1f226fb44db57
golang.org/x/sys@v0.0.0-20200323222414-85ca7c5b95cd
0.0.0-20220412211240-33da011f77ad
kubeflownotebookswg/notebook-controller:v1.6.185e2e685abd6
golang.org/x/sys@v0.0.0-20211029165221-6e7872819dc8
0.0.0-20220412211240-33da011f77ad
kubeflownotebookswg/poddefaults-webhook:v1.6.17d42600e1524
golang.org/x/sys@v0.0.0-20211029165221-6e7872819dc8
0.0.0-20220412211240-33da011f77ad
kubeflownotebookswg/profile-controller:v1.6.19f01767a460f
golang.org/x/sys@v0.0.0-20220209214540-3681064d5158
0.0.0-20220412211240-33da011f77ad
kubeflownotebookswg/tensorboard-controller:v1.6.182ffdd2da285
golang.org/x/sys@v0.0.0-20211029165221-6e7872819dc8
0.0.0-20220412211240-33da011f77ad
metacontrollerio/metacontroller:v2.0.4897c9601d2cc
golang.org/x/sys@v0.0.0-20210630005230-0f9fa26af87c
stdlib@go1.16.7
0.0.0-20220412211240-33da011f77ad
1.17.10
gcr.io/knative-releases/knative.dev/net-istio/cmd/controller:v1.2.0f253b82941c2
golang.org/x/sys@v0.0.0-20211124211545-fe61309f8881
stdlib@go1.17.6
0.0.0-20220412211240-33da011f77ad
1.17.10
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhook:v1.2.0a705c1ea8e9e
golang.org/x/sys@v0.0.0-20211124211545-fe61309f8881
stdlib@go1.17.6
0.0.0-20220412211240-33da011f77ad
1.17.10
gcr.io/knative-releases/knative.dev/serving/cmd/activator:v1.2.593ff6e693577
golang.org/x/sys@v0.0.0-20220227234510-4e6760a101f9
stdlib@go1.17.8
0.0.0-20220412211240-33da011f77ad
1.17.10
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler:v1.2.5007820fdb75b
golang.org/x/sys@v0.0.0-20220227234510-4e6760a101f9
stdlib@go1.17.8
0.0.0-20220412211240-33da011f77ad
1.17.10
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.2.575cfdcfa050a
golang.org/x/sys@v0.0.0-20220227234510-4e6760a101f9
stdlib@go1.17.8
0.0.0-20220412211240-33da011f77ad
1.17.10
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping:v1.2.523baa1932232
golang.org/x/sys@v0.0.0-20220227234510-4e6760a101f9
stdlib@go1.17.8
0.0.0-20220412211240-33da011f77ad
1.17.10
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhook:v1.2.5847bb97e3844
golang.org/x/sys@v0.0.0-20220227234510-4e6760a101f9
stdlib@go1.17.8
0.0.0-20220412211240-33da011f77ad
1.17.10
gcr.io/knative-releases/knative.dev/serving/cmd/webhook:v1.2.59084ea8498ea
golang.org/x/sys@v0.0.0-20220227234510-4e6760a101f9
stdlib@go1.17.8
0.0.0-20220412211240-33da011f77ad
1.17.10
gcr.io/ml-pipeline/api-server:2.0.0-alpha.5dc6ca05bb94f
golang.org/x/sys@v0.0.0-20220209214540-3681064d5158
stdlib@go1.17.6
0.0.0-20220412211240-33da011f77ad
1.17.10
gcr.io/ml-pipeline/cache-server:2.0.0-alpha.583e79c709df3
golang.org/x/sys@v0.0.0-20220209214540-3681064d5158
stdlib@go1.17.6
0.0.0-20220412211240-33da011f77ad
1.17.10
gcr.io/ml-pipeline/mysql:5.7-debiandf28187b5455
golang.org/x/sys@v0.0.0-20210817142637-7d9622a276b7
stdlib@go1.16.7
0.0.0-20220412211240-33da011f77ad
1.17.10
gcr.io/ml-pipeline/persistenceagent:2.0.0-alpha.500db9796a37b
golang.org/x/sys@v0.0.0-20220209214540-3681064d5158
stdlib@go1.17.6
0.0.0-20220412211240-33da011f77ad
1.17.10
gcr.io/ml-pipeline/scheduledworkflow:2.0.0-alpha.5795a0c8a0e13
golang.org/x/sys@v0.0.0-20220209214540-3681064d5158
stdlib@go1.17.6
0.0.0-20220412211240-33da011f77ad
1.17.10
gcr.io/ml-pipeline/viewer-crd-controller:2.0.0-alpha.534403f9f94be
golang.org/x/sys@v0.0.0-20220209214540-3681064d5158
stdlib@go1.17.6
0.0.0-20220412211240-33da011f77ad
1.17.10
gcr.io/ml-pipeline/workflow-controller:v3.3.8-license-compliance6c8e4e2a6443
golang.org/x/sys@v0.0.0-20220209214540-3681064d5158
0.0.0-20220412211240-33da011f77ad
quay.io/dexidp/dex:v2.24.0c9b7f6d0d953
golang.org/x/sys@v0.0.0-20200122134326-e047566fdf82
stdlib@go1.13.10
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

96,941
openelbkubesphere-stable0.5.02 of 2See more

openelb kubesphere-stable 0.5.0

2 of the 2 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
kubesphere/openelb:v0.5.0b5b665c4672c
golang.org/x/sys@v0.0.0-20210119212857-b64e53b001e4
stdlib@go1.15.15
0.0.0-20220412211240-33da011f77ad
1.17.10
kubespheredev/kube-webhook-certgen:v1.1.123a03c9c381f
golang.org/x/sys@v0.0.0-20210616094352-59db8d763f22
stdlib@go1.16.9
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

4,329
open5gsopen5gsVerified publisher2.3.41 of 5See more

open5gs open5gs 2.3.4

1 of the 5 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:4.4.14fe2bd7b4036
golang.org/x/sys@v0.0.0-20200905004654-be1d3432aa8f
stdlib@go1.15.1
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

9,261
rke2-multusrke2-charts3.7.1-build20210416012 of 2See more

rke2-multus rke2-charts 3.7.1-build2021041601

2 of the 2 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
rancher/hardened-cni-plugins:v0.9.1-build20210414be3c1d469bf7
golang.org/x/sys@v0.0.0-20201117170446-d9b008d0a637
0.0.0-20220412211240-33da011f77ad
rancher/hardened-multus-cni:v3.7.1-build202104168eb8092f0728
golang.org/x/sys@v0.0.0-20200930185726-fdedc70b468f
0.0.0-20220412211240-33da011f77ad

Open the chart page →

4,519
dexwiremindVerified publisher2.15.71 of 2See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
quay.io/dexidp/dex:v2.24.0c9b7f6d0d953
golang.org/x/sys@v0.0.0-20200122134326-e047566fdf82
stdlib@go1.13.10
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

13,562
eshoponabpabp-charts1.0.01 of 15See more

eshoponabp abp-charts 1.0.0

1 of the 15 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
library/postgres:14.13162a6ead070
golang.org/x/sys@v0.0.0-20210817142637-7d9622a276b7
stdlib@go1.16.7
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

19,799
ansible-semaphoreansible-semaphore0.1.01 of 1See more

ansible-semaphore ansible-semaphore 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
ansiblesemaphore/semaphore:v2.8.5303d1f8684027
golang.org/x/sys@v0.0.0-20210510120138-977fb7262007
stdlib@go1.16.3
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

4,019
aperture-controlleraperture2.34.02 of 5See more

aperture-controller aperture 2.34.0

2 of the 5 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
jimmidyson/configmap-reload:v0.5.0904d08e9f701
golang.org/x/sys@v0.0.0-20200620081246-981b61492c35
stdlib@go1.15.7
0.0.0-20220412211240-33da011f77ad
1.17.10
quay.io/prometheus/prometheus:v2.33.591100b06e86d
golang.org/x/sys@v0.0.0-20220114195835-da31bd327af9
stdlib@go1.17.8
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

4,663
k8upappuio2.0.51 of 1See more

k8up appuio 2.0.5

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
ghcr.io/k8up-io/k8up:v2.3.257419b6d3830
golang.org/x/sys@v0.0.0-20220209214540-3681064d5158
stdlib@go1.18
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

3,300
openshift-consoleav1o-chartsVerified publisher0.3.61 of 1See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
golang.org/x/sys@v0.0.0-20210630005230-0f9fa26af87c
stdlib@go1.16.9
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

9,052
aws-calicoaws0.3.111 of 1See more

aws-calico aws 0.3.11

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
quay.io/tigera/operator:v1.20.1379efe0c2541
golang.org/x/sys@v0.0.0-20201112073958-5cba982894dd
stdlib@go1.15.2
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

2,250
cert-managerchoerodon1.8.24 of 4See more

cert-manager choerodon 1.8.2

4 of the 4 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.8.2c010246124c2
golang.org/x/sys@v0.0.0-20211216021012-1d35b9e2eb4e
0.0.0-20220412211240-33da011f77ad
quay.io/jetstack/cert-manager-controller:v1.8.2a20c44021a5d
golang.org/x/sys@v0.0.0-20211216021012-1d35b9e2eb4e
0.0.0-20220412211240-33da011f77ad
quay.io/jetstack/cert-manager-ctl:v1.8.281b2d775edad
golang.org/x/sys@v0.0.0-20211216021012-1d35b9e2eb4e
0.0.0-20220412211240-33da011f77ad
quay.io/jetstack/cert-manager-webhook:v1.8.2ada7edd90bec
golang.org/x/sys@v0.0.0-20211216021012-1d35b9e2eb4e
0.0.0-20220412211240-33da011f77ad

Open the chart page →

7,775
hellocloudechoVerified publisher0.1.21 of 1See more

hello cloudecho 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
cloudecho/hello:0.1.0f76ede067ab9
stdlib@go1.16.6
1.17.10

Open the chart page →

1,817
cluster-registrycluster-registry-controller0.2.121 of 1See more

cluster-registry cluster-registry-controller 0.2.12

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
ghcr.io/cisco-open/cluster-registry-controller:v0.2.12937eff91df1e
stdlib@go1.18
1.17.10

Open the chart page →

1,707
core-dump-handlercore-dump-handler9.0.01 of 1See more

core-dump-handler core-dump-handler 9.0.0

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
quay.io/icdh/core-dump-handler:v9.0.0cc79b9e2a1c8
golang.org/x/sys@v0.0.0-20210616094352-59db8d763f22
stdlib@go1.16.6
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

3,080
listmonkdeliveryheroVerified publisher0.1.121 of 1See more

listmonk deliveryhero 0.1.12

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
listmonk/listmonk:v2.1.0d2eac77ddfad
golang.org/x/sys@v0.0.0-20211205182925-97ca703d548d
stdlib@go1.17.6
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

2,537
prometheus-locust-exporterdeliveryheroVerified publisher1.2.31 of 1See more

prometheus-locust-exporter deliveryhero 1.2.3

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
containersol/locust_exporter:v0.4.1a914972d19ad
golang.org/x/sys@v0.0.0-20201214210602-f9fddec55a1e
stdlib@go1.15.8
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

1,276
imagepullsecret-patcherempathyco1.0.01 of 1See more

imagepullsecret-patcher empathyco 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
quay.io/titansoft/imagepullsecret-patcher:v0.1421e6d6a155dc
golang.org/x/sys@v0.0.0-20190826190057-c7b8b68b1456
stdlib@go1.13.15
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

2,271
keydbfinkinfridomVerified publisher0.48.31 of 1See more

keydb finkinfridom 0.48.3

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
eqalpha/keydb:x86_64_v6.3.4eceb1806730c
golang.org/x/sys@v0.0.0-20210817142637-7d9622a276b7
stdlib@go1.16.7
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

5,264
blockygeek-cookbookVerified publisher10.5.21 of 1See more

blocky geek-cookbook 10.5.2

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
ghcr.io/0xerr0r/blocky:v0.18b15824464acb
golang.org/x/sys@v0.0.0-20220114195835-da31bd327af9
stdlib@go1.17.7
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

3,030
error-pagesgeek-cookbookVerified publisher1.2.21 of 1See more

error-pages geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
ghcr.io/tarampampam/error-pages:2.6.013e73da04ee4
golang.org/x/sys@v0.0.0-20220114195835-da31bd327af9
stdlib@go1.17.6
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

1,110
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
hkotel/mealie:frontend-v1.0.0beta-23c04c0e85039
golang.org/x/sys@v0.0.0-20210915083310-ed5796bab164
0.0.0-20220412211240-33da011f77ad

Open the chart page →

7,579
multusgeek-cookbookVerified publisher3.5.22 of 3See more

multus geek-cookbook 3.5.2

2 of the 3 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/cni-plugins:v0.9.1241592d93640
golang.org/x/sys@v0.0.0-20201117170446-d9b008d0a637
stdlib@go1.15.8
0.0.0-20220412211240-33da011f77ad
1.17.10
ghcr.io/k8snetworkplumbingwg/multus-cni:v3.7.1e72aa733faf2
golang.org/x/sys@v0.0.0-20200930185726-fdedc70b468f
stdlib@go1.13.10
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

4,906
network-ups-toolsgeek-cookbookVerified publisher6.4.21 of 1See more

network-ups-tools geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/network-ups-tools:v2.7.4-2479-g86a32237cbd5d4cc1245
golang.org/x/sys@v0.0.0-20191026070338-33540a1f6037
stdlib@go1.15
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

13,950
signal-cli-rest-apigeek-cookbookVerified publisher1.2.21 of 1See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
golang.org/x/sys@v0.0.0-20200323222414-85ca7c5b95cd
stdlib@go1.17.8
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

10,154
smarter-device-managergeek-cookbookVerified publisher6.5.21 of 1See more

smarter-device-manager geek-cookbook 6.5.2

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
registry.gitlab.com/arm-research/smarter/smarter-device-manager:v1.20.7864fc338571e
golang.org/x/sys@v0.0.0-20210423082822-04245dca01da
stdlib@go1.16.4
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

2,330
statpinggeek-cookbookVerified publisher6.2.01 of 2See more

statping geek-cookbook 6.2.0

1 of the 2 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
statping/statping:v0.90.74e874da513a5c
golang.org/x/sys@v0.0.0-20200724161237-0e2f3a69832c
stdlib@go1.14.13
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

3,371
syncthinggeek-cookbookVerified publisher3.5.21 of 1See more

syncthing geek-cookbook 3.5.2

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
syncthing/syncthing:1.18.2966433161272
golang.org/x/sys@v0.0.0-20210819135213-f52c844e1c1c
stdlib@go1.17
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

2,610
tautulligeek-cookbookVerified publisher11.4.21 of 1See more

tautulli geek-cookbook 11.4.2

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/tautulli:v2.7.74ea617c30397
golang.org/x/sys@v0.0.0-20191026070338-33540a1f6037
stdlib@go1.16.7
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

10,628
traefik-forward-authgeek-cookbookVerified publisher2.2.21 of 1See more

traefik-forward-auth geek-cookbook 2.2.2

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
thomseddon/traefik-forward-auth:2.2.0e875194d67e2
golang.org/x/sys@v0.0.0-20190813064441-fde4db37ae7a
stdlib@go1.13.12
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

2,234
nzbhydra2halkeye2.30.11 of 2See more

nzbhydra2 halkeye 2.30.1

1 of the 2 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
binhex/arch-nzbhydra2:3.1.0-1-01fb8952921ab6
stdlib@go1.14
1.17.10

Open the chart page →

6,711
unifi-pollerhalkeye0.1.21 of 1See more

unifi-poller halkeye 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
golift/unifi-poller:2.0.0cafac968b540
stdlib@go1.13.7
1.17.10

Open the chart page →

1,654
health-exporterhealth-exporterVerified publisher0.3.41 of 1See more

health-exporter health-exporter 0.3.4

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
ghcr.io/snapp-incubator/health-exporter:0.3.252a0d8f6278c
golang.org/x/sys@v0.0.0-20210910150752-751e447fb3d0
stdlib@go1.17.2
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

1,558
frpc-ingressinfinity-server0.4.11 of 1See more

frpc-ingress infinity-server 0.4.1

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
springhack/frpc_ingress:latest4aceb821da88
golang.org/x/sys@v0.0.0-20210616094352-59db8d763f22
stdlib@go1.17.2
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

2,622
coreinstill-aiOfficialVerified publisher0.1.751 of 15See more

core instill-ai 0.1.75

1 of the 15 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
library/influxdb:2.3.0-alpined7f5dd5f70e2
golang.org/x/sys@v0.0.0-20220319134239-a9b59b0215f8
stdlib@go1.17.2
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

30,816
jenkins-operatorjenkins0.8.11 of 1See more

jenkins-operator jenkins 0.8.1

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
quay.io/jenkins-kubernetes-operator/operator:v0.8.171cb50263c3b
golang.org/x/sys@v0.0.0-20201112073958-5cba982894dd
stdlib@go1.15.6
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

2,211
calibre-webk8s-home-lab-repo9.1.11 of 1See more

calibre-web k8s-home-lab-repo 9.1.1

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/calibre-web:0.6.267c0464228f2f
stdlib@go1.17.8
1.17.10

Open the chart page →

4,477
kraken-cikraken-ciVerified publisher1.7.361 of 10See more

kraken-ci kraken-ci 1.7.36

1 of the 10 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
library/postgres:115d2aa4a7b5f9
golang.org/x/sys@v0.0.0-20210817142637-7d9622a276b7
stdlib@go1.16.7
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

7,273
skywalkingkubesphere-testVerified publisher3.1.02 of 4See more

skywalking kubesphere-test 3.1.0

2 of the 4 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.1.0-es7641237e0299b
golang.org/x/sys@v0.0.0-20200116001909-b77594299b42
stdlib@go1.13.3
0.0.0-20220412211240-33da011f77ad
1.17.10
apache/skywalking-ui:8.1.067d50e4deff4
golang.org/x/sys@v0.0.0-20200116001909-b77594299b42
stdlib@go1.13.3
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

18,042
kubeviouskubevious1.2.22 of 7See more

kubevious kubevious 1.2.2

2 of the 7 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
library/mysql:8.0.303c1aab708f6e
golang.org/x/sys@v0.0.0-20210817142637-7d9622a276b7
stdlib@go1.16.7
0.0.0-20220412211240-33da011f77ad
1.17.10
redislabs/redisearch:2.4.1433561794c5c8
golang.org/x/sys@v0.0.0-20210817142637-7d9622a276b7
stdlib@go1.16.7
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

14,204
vcluster-k8sloftVerified publisher0.0.0-ci.31 of 4See more

vcluster-k8s loft 0.0.0-ci.3

1 of the 4 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
registry.k8s.io/etcd:3.5.6-0dd75ec974b0a
golang.org/x/sys@v0.0.0-20210615035016-665e8c7367d1
stdlib@go1.16.15
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

5,570
rclonemglants2.3.41 of 1See more

rclone mglants 2.3.4

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
rclone/rclone:1.57.01e6eeabddc01
golang.org/x/sys@v0.0.0-20210820121016-41cdb8703e55
stdlib@go1.17.2
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

2,743
move2kubemove2kube0.3.151 of 1See more

move2kube move2kube 0.3.15

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
golang.org/x/sys@v0.0.0-20211216021012-1d35b9e2eb4e
0.0.0-20220412211240-33da011f77ad

Open the chart page →

3,793
keycloak-operatornewsaktuell0.1.71 of 1See more

keycloak-operator newsaktuell 0.1.7

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:19.0.3-legacy09d52508fee9
golang.org/x/sys@v0.0.0-20201112073958-5cba982894dd
stdlib@go1.13.8
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

5,067
kobotoolboxone-acre-fundVerified publisher0.7.41 of 9See more

kobotoolbox one-acre-fund 0.7.4

1 of the 9 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
enketo/enketo-express:3.0.4dcad9c2273f6
golang.org/x/sys@v0.0.0-20210908233432-aa78b53d3365
stdlib@go1.17.1
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

18,517
oesopsmxVerified publisher4.0.325 of 25See more

oes opsmx 4.0.32

5 of the 25 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2020-11-25T23-04-07Zbf85c57cdfcc
golang.org/x/sys@v0.0.0-20201013132646-2da7054afaeb
stdlib@go1.15.5
0.0.0-20220412211240-33da011f77ad
1.17.10
minio/minio:RELEASE.2020-12-03T05-49-24Z053f103f4894
golang.org/x/sys@v0.0.0-20200915084602-288bc346aa39
stdlib@go1.15.5
0.0.0-20220412211240-33da011f77ad
1.17.10
quay.io/opsmxpublic/awsgit:v2-openssh0d21ba756f44
golang.org/x/sys@v0.0.0-20210809222454-d867a43fc93e
stdlib@go1.17.2
0.0.0-20220412211240-33da011f77ad
1.17.10
quay.io/opsmxpublic/awsgit:v3-js15a6faada3d4
golang.org/x/sys@v0.0.0-20210317225723-c4fcb01b228e
stdlib@go1.16.15
0.0.0-20220412211240-33da011f77ad
1.17.10
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
golang.org/x/sys@v0.0.0-20190910064555-bbd175535a8b
stdlib@go1.13.1
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

107,811
ipmi-exporterpnnl-miscscripts0.1.151 of 1See more

ipmi-exporter pnnl-miscscripts 0.1.15

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
pnnlmiscscripts/ipmi-exporter:1.2.0-181e18992d8e3
golang.org/x/sys@v0.0.0-20200420163511-1957bb5e6d1f
stdlib@go1.13.10
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

2,995

Container images carrying it

1,173 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
hashicorp/consul-k8s-control-plane:1.0.2538a3436398d
golang.org/x/sys@v0.0.0-20191022100944-742c48ecaeb7
0.0.0-20220412211240-33da011f77ad
2
hashicorp/vault:1.8.34db614d40d0e
golang.org/x/sys@v0.0.0-20210514084401-e8d321eab015
stdlib@go1.16.7
0.0.0-20220412211240-33da011f77ad
1.17.10
2
hashicorp/vault-k8s:0.13.1bebb03e8e800
golang.org/x/sys@v0.0.0-20210603081109-ebe580a85c40
stdlib@go1.16.3
0.0.0-20220412211240-33da011f77ad
1.17.10
2
honestica/kube-iptables-tailer:master-91a393242fb939
golang.org/x/sys@v0.0.0-20200930185726-fdedc70b468f
stdlib@go1.13.8
0.0.0-20220412211240-33da011f77ad
1.17.10
2
iomesh/csi-node-driver-registrar:v2.5.086f58b0a2106
golang.org/x/sys@v0.0.0-20210831042530-f4d43177bf5e
stdlib@go1.17.3
0.0.0-20220412211240-33da011f77ad
1.17.10
2
iomesh/csi-provisioner:v3.0.0f9508460b273
golang.org/x/sys@v0.0.0-20210616094352-59db8d763f22
stdlib@go1.16.2
0.0.0-20220412211240-33da011f77ad
1.17.10
2
iomesh/hostpath-provisioner:v0.5.1f4878c8ae53a
golang.org/x/sys@v0.0.0-20200122134326-e047566fdf82
stdlib@go1.13.1
0.0.0-20220412211240-33da011f77ad
1.17.10
2
iomesh/livenessprobe:v2.8.0560f01510f99
stdlib@go1.18
1.17.10
2
iomesh/node-disk-exporter:1.8.0f03148764f38
golang.org/x/sys@v0.0.0-20201112073958-5cba982894dd
stdlib@go1.14.7
0.0.0-20220412211240-33da011f77ad
1.17.10
2
istio/proxyv2:1.10.3a78b7a165744
golang.org/x/sys@v0.0.0-20210320140829-1e4c9ba3b0c4
stdlib@go1.16.6
0.0.0-20220412211240-33da011f77ad
1.17.10
2
jaegertracing/all-in-one:1.3104d224a9999b
golang.org/x/sys@v0.0.0-20220114195835-da31bd327af9
stdlib@go1.17.6
0.0.0-20220412211240-33da011f77ad
1.17.10
2
jettech/kube-webhook-certgen:v1.2.1c42098c8d855
golang.org/x/sys@v0.0.0-20190422165155-953cdadca894
stdlib@go1.13.11
0.0.0-20220412211240-33da011f77ad
1.17.10
2
jettech/kube-webhook-certgen:v1.5.0fb7c2cd46ccf
golang.org/x/sys@v0.0.0-20200622214017-ed371f2e16b4
stdlib@go1.15.3
0.0.0-20220412211240-33da011f77ad
1.17.10
2
jmalloc/echo-server:0.3.1e4eaee2c7998
stdlib@go1.17
1.17.10
2
kubernetesui/dashboard:v2.2.0148991563e37
golang.org/x/sys@v0.0.0-20201214210602-f9fddec55a1e
stdlib@go1.15.1
0.0.0-20220412211240-33da011f77ad
1.17.10
2
kubespheredev/kube-webhook-certgen:v1.1.123a03c9c381f
golang.org/x/sys@v0.0.0-20210616094352-59db8d763f22
stdlib@go1.16.9
0.0.0-20220412211240-33da011f77ad
1.17.10
2
library/mariadb:10.8.30abf60f81588
golang.org/x/sys@v0.0.0-20210817142637-7d9622a276b7
stdlib@go1.16.7
0.0.0-20220412211240-33da011f77ad
1.17.10
2
library/nats:2.8.4-alpine988010f74b61
golang.org/x/sys@v0.0.0-20220111092808-5a964db01320
0.0.0-20220412211240-33da011f77ad
2
library/postgres:9.6caddd35b05cd
golang.org/x/sys@v0.0.0-20210817142637-7d9622a276b7
stdlib@go1.16.7
0.0.0-20220412211240-33da011f77ad
1.17.10
2
library/traefik:v2.57d5a6ae66572
golang.org/x/sys@v0.0.0-20210817190340-bfb29a6856f2
stdlib@go1.17.6
0.0.0-20220412211240-33da011f77ad
1.17.10
2
library/zookeeper:3.9.5f258365d4882
stdlib@go1.18.1
1.17.10
2
listmonk/listmonk:v2.1.0d2eac77ddfad
golang.org/x/sys@v0.0.0-20211205182925-97ca703d548d
stdlib@go1.17.6
0.0.0-20220412211240-33da011f77ad
1.17.10
2
maxrocketinternet/soti-mobicontrol-exporter:0.61a281b76efa3
golang.org/x/sys@v0.0.0-20200420163511-1957bb5e6d1f
stdlib@go1.14
0.0.0-20220412211240-33da011f77ad
1.17.10
2
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
golang.org/x/sys@v0.0.0-20200808120158-1030fc2bf1d9
stdlib@go1.15.2
0.0.0-20220412211240-33da011f77ad
1.17.10
2
minio/mc:RELEASE.2020-11-25T23-04-07Zbf85c57cdfcc
golang.org/x/sys@v0.0.0-20201013132646-2da7054afaeb
stdlib@go1.15.5
0.0.0-20220412211240-33da011f77ad
1.17.10
2
minio/operator:v4.3.754393e03f3b2
golang.org/x/sys@v0.0.0-20210510120138-977fb7262007
stdlib@go1.17.4
0.0.0-20220412211240-33da011f77ad
1.17.10
2
natsio/nats-account-server:1.0.0a3381560aab6
golang.org/x/sys@v0.0.0-20210630005230-0f9fa26af87c
stdlib@go1.16.6
0.0.0-20220412211240-33da011f77ad
1.17.10
2
natsio/nats-box:0.11.09fbf7bf684e4
golang.org/x/sys@v0.0.0-20220111092808-5a964db01320
stdlib@go1.18.1
0.0.0-20220412211240-33da011f77ad
1.17.10
2
oliver006/redis_exporter:v1.9.04af75e9f16f6
golang.org/x/sys@v0.0.0-20200615200032-f1bc736245b1
stdlib@go1.14.4
0.0.0-20220412211240-33da011f77ad
1.17.10
2
openpolicyagent/gatekeeper:v3.4.0-rc.1825370bdb3c3
golang.org/x/sys@v0.0.0-20201119102817-f84b799fce68
stdlib@go1.16.2
0.0.0-20220412211240-33da011f77ad
1.17.10
2
osixia/openldap:1.4.0ccd95cc6e61e
stdlib@go1.13.4
1.17.10
2
passbolt/passbolt:3.4.0-ce-non-root655547e17263
golang.org/x/sys@v0.0.0-20200413165638-669c56c373c4
stdlib@go1.14.4
0.0.0-20220412211240-33da011f77ad
1.17.10
2
phntom/kochi:1.1.33b82358bd56e
golang.org/x/sys@v0.0.0-20200930185726-fdedc70b468f
stdlib@go1.15.5
0.0.0-20220412211240-33da011f77ad
1.17.10
2
place1/wg-access-server:v0.4.62b2f3ea80ed6
golang.org/x/sys@v0.0.0-20200625212154-ddb9806d33ae
stdlib@go1.13.8
0.0.0-20220412211240-33da011f77ad
1.17.10
2
pottava/s3-proxy:2.020a0bcb15f76
stdlib@go1.13.7
1.17.10
2
prom/blackbox-exporter:v0.18.01ffc3f109eb3
golang.org/x/sys@v0.0.0-20200420163511-1957bb5e6d1f
stdlib@go1.15.2
0.0.0-20220412211240-33da011f77ad
1.17.10
2
prom/prometheus:v2.17.242d2395cd719
golang.org/x/sys@v0.0.0-20200302150141-5c8b2ff67527
stdlib@go1.13.10
0.0.0-20220412211240-33da011f77ad
1.17.10
2
prom/prometheus:v2.21.0d43417c260e5
golang.org/x/sys@v0.0.0-20200821140526-fda516888d29
stdlib@go1.15.2
0.0.0-20220412211240-33da011f77ad
1.17.10
2
prom/pushgateway:v1.0.1a5df60347882
stdlib@go1.13.5
1.17.10
2
prom/pushgateway:v1.3.0c0d39b8d4cfe
golang.org/x/sys@v0.0.0-20200625212154-ddb9806d33ae
stdlib@go1.15.2
0.0.0-20220412211240-33da011f77ad
1.17.10
2
qingcloud/hostnic-plus:v1.0.34cd5366a9f51
golang.org/x/sys@v0.0.0-20210603081109-ebe580a85c40
stdlib@go1.16.3
0.0.0-20220412211240-33da011f77ad
1.17.10
2
rancher/k3s:v1.26.0-k3s19380f5dbae9a
golang.org/x/sys@v0.0.0-20211116061358-0a5406a5449c
0.0.0-20220412211240-33da011f77ad
2
scaleway/cert-manager-webhook-scaleway:v0.0.1dcc14608d000
golang.org/x/sys@v0.0.0-20200622214017-ed371f2e16b4
stdlib@go1.15.2
0.0.0-20220412211240-33da011f77ad
1.17.10
2
squareup/ghostunnel:v1.5.270f4cf270425
golang.org/x/sys@v0.0.0-20191010194322-b09406accb47
stdlib@go1.13.4
0.0.0-20220412211240-33da011f77ad
1.17.10
2
statping/statping:v0.90.74e874da513a5c
golang.org/x/sys@v0.0.0-20200724161237-0e2f3a69832c
stdlib@go1.14.13
0.0.0-20220412211240-33da011f77ad
1.17.10
2
thesisrobot/loop:v0.11.1-beta89ae07e787ca
golang.org/x/sys@v0.0.0-20200202164722-d101bd2416d5
stdlib@go1.13.12
0.0.0-20220412211240-33da011f77ad
1.17.10
2
thesisrobot/pool:v0.3.3-alpha2d1c388a4bda
golang.org/x/sys@v0.0.0-20200202164722-d101bd2416d5
stdlib@go1.14.12
0.0.0-20220412211240-33da011f77ad
1.17.10
2
thomasnyambati/aws-service-events-exporter:1.0.01e18a0944ceb
golang.org/x/sys@v0.0.0-20201214210602-f9fddec55a1e
stdlib@go1.15.6
0.0.0-20220412211240-33da011f77ad
1.17.10
2
thomasnyambati/labelsmanager-controller:1.0.0148ae3f99fea
golang.org/x/sys@v0.0.0-20190826190057-c7b8b68b1456
stdlib@go1.13.15
0.0.0-20220412211240-33da011f77ad
1.17.10
2
tkpd/gripmock:1.10.174441dadcfbd
golang.org/x/sys@v0.0.0-20210510120138-977fb7262007
stdlib@go1.14.6
0.0.0-20220412211240-33da011f77ad
1.17.10
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.