StackRadar

CVE-2022-29718

Medium

Advisory

Published 3 Jun 2022In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.010
62nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
12
of 17,781 indexed, latest versions
Container images
9
deployed by those charts
Fix available
2 of 2
affected packages

Open redirect in caddy

Carried by container images the latest versions of 12 of 17,781 indexed charts deploy, on 9 images.

Affected packageAffected versionsFixed inImages
github.com/caddyserver/caddygolangv1.0.3, v1.0.52.5.05
github.com/caddyserver/caddy/v2golangv2.2.0, v2.4.0, v2.4.2, v2.4.52.5.04
OSV records
GHSA-2927-hv3p-f3vp

Charts affected

12 by stars
ChartLatestAffected imagesRadar Score
chaos-meshchaos-meshVerified publisher2.8.41 of 4See more

chaos-mesh chaos-mesh 2.8.4

1 of the 4 container images this version deploys carry CVE-2022-29718.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-coredns:v0.2.838bfdf5e3774
github.com/caddyserver/caddy@v1.0.5
2.5.0

Open the chart page →

6,342
filebrowsergeek-cookbookVerified publisher1.4.21 of 1See more

filebrowser geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2022-29718.

Container imageDigestPackageFixed in
filebrowser/filebrowser:v2.18.04fcd47af573c
github.com/caddyserver/caddy@v1.0.3
2.5.0

Open the chart page →

3,474
catalyst-agentscatalyst-agents0.1.301 of 18See more

catalyst-agents catalyst-agents 0.1.30

1 of the 18 container images this version deploys carry CVE-2022-29718.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-coredns:v0.2.838bfdf5e3774
github.com/caddyserver/caddy@v1.0.5
2.5.0

Open the chart page →

15,027
chaos-meshethereum-helm-chartsVerified publisher0.0.31 of 4See more

chaos-mesh ethereum-helm-charts 0.0.3

1 of the 4 container images this version deploys carry CVE-2022-29718.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-coredns:v0.2.678dc63bc5b89
github.com/caddyserver/caddy@v1.0.5
2.5.0

Open the chart page →

12,127
searxgeek-cookbookVerified publisher5.6.21 of 4See more

searx geek-cookbook 5.6.2

1 of the 4 container images this version deploys carry CVE-2022-29718.

Container imageDigestPackageFixed in
library/caddy:2.2.0-alpine7367adca165f
github.com/caddyserver/caddy/v2@v2.2.0
2.5.0

Open the chart page →

7,470
vikunjageek-cookbookVerified publisher6.2.01 of 4See more

vikunja geek-cookbook 6.2.0

1 of the 4 container images this version deploys carry CVE-2022-29718.

Container imageDigestPackageFixed in
library/caddy:2.4.2-alpinefbc51bcf1ab0
github.com/caddyserver/caddy/v2@v2.4.2
2.5.0

Open the chart page →

6,893
chaos-meshkubeblocksVerified publisher2.7.21 of 4See more

chaos-mesh kubeblocks 2.7.2

1 of the 4 container images this version deploys carry CVE-2022-29718.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-coredns:v0.2.678dc63bc5b89
github.com/caddyserver/caddy@v1.0.5
2.5.0

Open the chart page →

13,497
op-scim-bridgelifen1.0.31 of 2See more

op-scim-bridge lifen 1.0.3

1 of the 2 container images this version deploys carry CVE-2022-29718.

Container imageDigestPackageFixed in
1password/scim:v2.3.129d0c6cb67eb
github.com/caddyserver/caddy/v2@v2.4.0
2.5.0

Open the chart page →

2,777
op-scim-bridgelifen-chartsVerified publisher1.0.31 of 2See more

op-scim-bridge lifen-charts 1.0.3

1 of the 2 container images this version deploys carry CVE-2022-29718.

Container imageDigestPackageFixed in
1password/scim:v2.3.129d0c6cb67eb
github.com/caddyserver/caddy/v2@v2.4.0
2.5.0

Open the chart page →

2,777
corednsmoikot1.13.31 of 1See more

coredns moikot 1.13.3

1 of the 1 container images this version deploys carry CVE-2022-29718.

Container imageDigestPackageFixed in
coredns/coredns:1.7.073ca82b4ce82
github.com/caddyserver/caddy@v1.0.5
2.5.0

Open the chart page →

2,547
caddysagikazarmarkVerified publisher0.0.141 of 1See more

caddy sagikazarmark 0.0.14

1 of the 1 container images this version deploys carry CVE-2022-29718.

Container imageDigestPackageFixed in
library/caddy:2.4.5874405536b3e
github.com/caddyserver/caddy/v2@v2.4.5
2.5.0

Open the chart page →

2,960
filebrowserwenerme1.0.01 of 1See more

filebrowser wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-29718.

Container imageDigestPackageFixed in
filebrowser/filebrowser:v2.13.0c5d0a75a0041
github.com/caddyserver/caddy@v1.0.3
2.5.0

Open the chart page →

3,174

Container images carrying it

9 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
1password/scim:v2.3.129d0c6cb67eb
github.com/caddyserver/caddy/v2@v2.4.0
2.5.0
2
ghcr.io/chaos-mesh/chaos-coredns:v0.2.838bfdf5e3774
github.com/caddyserver/caddy@v1.0.5
2.5.0
2
ghcr.io/chaos-mesh/chaos-coredns:v0.2.678dc63bc5b89
github.com/caddyserver/caddy@v1.0.5
2.5.0
2
coredns/coredns:1.7.073ca82b4ce82
github.com/caddyserver/caddy@v1.0.5
2.5.0
1
filebrowser/filebrowser:v2.18.04fcd47af573c
github.com/caddyserver/caddy@v1.0.3
2.5.0
1
filebrowser/filebrowser:v2.13.0c5d0a75a0041
github.com/caddyserver/caddy@v1.0.3
2.5.0
1
library/caddy:2.2.0-alpine7367adca165f
github.com/caddyserver/caddy/v2@v2.2.0
2.5.0
1
library/caddy:2.4.5874405536b3e
github.com/caddyserver/caddy/v2@v2.4.5
2.5.0
1
library/caddy:2.4.2-alpinefbc51bcf1ab0
github.com/caddyserver/caddy/v2@v2.4.2
2.5.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.