StackRadar

CVE-2022-30122

High

Advisory

Published 27 May 2022In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.021
80th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
17
of 17,781 indexed, latest versions
Container images
23
deployed by those charts
Fix available
1 of 1
affected package

Denial of Service Vulnerability in Rack Multipart Parsing

Carried by container images the latest versions of 17 of 17,781 indexed charts deploy, on 23 images.

Affected packageAffected versionsFixed inImages
rackgem1.5.5, 1.6.13, 2.0.5, 2.0.6+5 more2.0.9.1, 2.1.4.1, 2.2.3.123
OSV records
GHSA-hxqx-xwvh-44m2

Charts affected

17 by stars
ChartLatestAffected imagesRadar Score
uffizzi-appuffizzi-app1.3.01 of 14See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2022-30122.

Container imageDigestPackageFixed in
uffizzi/app:latest66e9e3937c60
rack@2.2.3
2.2.3.1

Open the chart page →

19,337
huginnutkuozdemirVerified publisher2.2.11 of 4See more

huginn utkuozdemir 2.2.1

1 of the 4 container images this version deploys carry CVE-2022-30122.

Container imageDigestPackageFixed in
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
rack@2.2.2
2.2.3.1

Open the chart page →

18,137
pact-brokeralmorgvVerified publisher0.1.01 of 1See more

pact-broker almorgv 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-30122.

Container imageDigestPackageFixed in
pactfoundation/pact-broker:2.79.1.112861b0bd4d9
rack@2.2.3
2.2.3.1

Open the chart page →

4,995
zammaddevplayer0Verified publisher4.0.51 of 4See more

zammad devplayer0 4.0.5

1 of the 4 container images this version deploys carry CVE-2022-30122.

Container imageDigestPackageFixed in
zammad/zammad-docker-compose:zammad-4.1.0-312808e2dfa810
rack@2.2.3
2.2.3.1

Open the chart page →

6,110
gollumgeek-cookbookVerified publisher3.4.21 of 3See more

gollum geek-cookbook 3.4.2

1 of the 3 container images this version deploys carry CVE-2022-30122.

Container imageDigestPackageFixed in
gollumorg/gollum:latest7cd5305a3cf7
rack@2.2.3
2.2.3.1

Open the chart page →

4,629
docker-registry-browsergmelilloVerified publisher0.1.21 of 1See more

docker-registry-browser gmelillo 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-30122.

Container imageDigestPackageFixed in
klausmeyer/docker-registry-browser:1.3.5430a440d95af
rack@2.2.3
2.2.3.1

Open the chart page →

4,108
openprojecthomeenterpriseinc0.5.01 of 1See more

openproject homeenterpriseinc 0.5.0

1 of the 1 container images this version deploys carry CVE-2022-30122.

Container imageDigestPackageFixed in
openproject/community:12.0.2734743d11094
rack@2.2.3
2.2.3.1

Open the chart page →

6,810
opennebulakvaps2.1.15 of 9See more

opennebula kvaps 2.1.1

5 of the 9 container images this version deploys carry CVE-2022-30122.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
rack@2.2.2
2.2.3.1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
rack@2.2.2
2.2.3.1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
rack@2.2.2
2.2.3.1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
rack@2.2.2
2.2.3.1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
rack@2.2.2
2.2.3.1

Open the chart page →

113,791
honeywell-exporterbryanalves0.1.11 of 1See more

honeywell-exporter bryanalves 0.1.1

1 of the 1 container images this version deploys carry CVE-2022-30122.

Container imageDigestPackageFixed in
bryanalves/honeywell_exporter:0.0.1195f73dce8b21
rack@2.0.5
2.0.9.1

Open the chart page →

5,437
smart-exporterbryanalves0.2.21 of 1See more

smart-exporter bryanalves 0.2.2

1 of the 1 container images this version deploys carry CVE-2022-30122.

Container imageDigestPackageFixed in
bryanalves/smart_exporter:0.2af47dfbb9413
rack@2.0.6
2.0.9.1

Open the chart page →

4,131
showoffcamptocamp31.0.01 of 1See more

showoff camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-30122.

Container imageDigestPackageFixed in
binford2k/showoff:0.20.2a64937052ce7
rack@1.6.13
2.0.9.1

Open the chart page →

1,584
puppet-forgecloudnativeapp0.1.81 of 2See more

puppet-forge cloudnativeapp 0.1.8

1 of the 2 container images this version deploys carry CVE-2022-30122.

Container imageDigestPackageFixed in
hickey/puppet_forge:1.10.0c1148a09ef20
rack@1.5.5
2.0.9.1

Open the chart page →

4,086
docker-registry-browsergtaylor0.4.41 of 1See more

docker-registry-browser gtaylor 0.4.4

1 of the 1 container images this version deploys carry CVE-2022-30122.

Container imageDigestPackageFixed in
klausmeyer/docker-registry-browser:1.4.0bdc4c6b8595b
rack@2.2.3
2.2.3.1

Open the chart page →

3,564
gitlabkubesphereVerified publisher4.2.34 of 17See more

gitlab kubesphere 4.2.3

4 of the 17 container images this version deploys carry CVE-2022-30122.

Container imageDigestPackageFixed in
mirrorgitlabcontainers/gitaly:v13.2.283599461ef8b
rack@2.1.2
2.1.4.1
mirrorgitlabcontainers/gitlab-sidekiq-ce:v13.2.294d1431683fa
rack@2.0.9
2.0.9.1
mirrorgitlabcontainers/gitlab-task-runner-ce:v13.2.29efd73993c34
rack@2.0.9
2.0.9.1
mirrorgitlabcontainers/gitlab-webservice-ce:v13.2.230393f990f5c
rack@2.0.9
2.0.9.1

Open the chart page →

38,133
betydbncsaVerified publisher0.6.11 of 4See more

betydb ncsa 0.6.1

1 of the 4 container images this version deploys carry CVE-2022-30122.

Container imageDigestPackageFixed in
pecan/bety:5.4.1f825d480cd62
rack@2.2.3
2.2.3.1

Open the chart page →

9,542
pecanncsaVerified publisher0.6.21 of 15See more

pecan ncsa 0.6.2

1 of the 15 container images this version deploys carry CVE-2022-30122.

Container imageDigestPackageFixed in
pecan/bety:5.4.1f825d480cd62
rack@2.2.3
2.2.3.1

Open the chart page →

14,154
pact-brokerqamatic0.1.01 of 2See more

pact-broker qamatic 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-30122.

Container imageDigestPackageFixed in
pactfoundation/pact-broker:2.32.0-2062d6c710099
rack@2.0.7
2.0.9.1

Open the chart page →

3,533

Container images carrying it

23 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
pecan/bety:5.4.1f825d480cd62
rack@2.2.3
2.2.3.1
2
binford2k/showoff:0.20.2a64937052ce7
rack@1.6.13
2.0.9.1
1
bryanalves/honeywell_exporter:0.0.1195f73dce8b21
rack@2.0.5
2.0.9.1
1
bryanalves/smart_exporter:0.2af47dfbb9413
rack@2.0.6
2.0.9.1
1
gollumorg/gollum:latest7cd5305a3cf7
rack@2.2.3
2.2.3.1
1
hickey/puppet_forge:1.10.0c1148a09ef20
rack@1.5.5
2.0.9.1
1
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
rack@2.2.2
2.2.3.1
1
klausmeyer/docker-registry-browser:1.3.5430a440d95af
rack@2.2.3
2.2.3.1
1
klausmeyer/docker-registry-browser:1.4.0bdc4c6b8595b
rack@2.2.3
2.2.3.1
1
mirrorgitlabcontainers/gitaly:v13.2.283599461ef8b
rack@2.1.2
2.1.4.1
1
mirrorgitlabcontainers/gitlab-sidekiq-ce:v13.2.294d1431683fa
rack@2.0.9
2.0.9.1
1
mirrorgitlabcontainers/gitlab-task-runner-ce:v13.2.29efd73993c34
rack@2.0.9
2.0.9.1
1
mirrorgitlabcontainers/gitlab-webservice-ce:v13.2.230393f990f5c
rack@2.0.9
2.0.9.1
1
openproject/community:12.0.2734743d11094
rack@2.2.3
2.2.3.1
1
pactfoundation/pact-broker:2.32.0-2062d6c710099
rack@2.0.7
2.0.9.1
1
pactfoundation/pact-broker:2.79.1.112861b0bd4d9
rack@2.2.3
2.2.3.1
1
uffizzi/app:latest66e9e3937c60
rack@2.2.3
2.2.3.1
1
zammad/zammad-docker-compose:zammad-4.1.0-312808e2dfa810
rack@2.2.3
2.2.3.1
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
rack@2.2.2
2.2.3.1
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
rack@2.2.2
2.2.3.1
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
rack@2.2.2
2.2.3.1
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
rack@2.2.2
2.2.3.1
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
rack@2.2.2
2.2.3.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.