CVE-2022-31022

Medium

Advisory

Published 3 Jun 2022In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.003; 27th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 24; of 17,781 indexed, latest versions
Container images: 18; deployed by those charts
Fix available: 1 of 2; affected packages

Missing Role Based Access Control for the REST handlers in bleve/http package

Carried by container images the latest versions of 24 of 17,781 indexed charts deploy, on 18 images.

Affected package	Affected versions	Fixed in	Images
github.com/blevesearch/bleve/v2golang	v2.3.8, v2.3.10, v2.4.2, v2.4.3+2 more	2.5.0	14
github.com/blevesearch/blevegolang	v1.0.7, v1.0.9, v1.0.10, v1.0.13	no fix listed	4

OSV records: GHSA-9w9f-6mg8-jp7w
Also known as: GO-2022-0470

Charts affected

24 by stars

Chart

Latest

Affected images

Radar Score

dgraphdgraph

24.1.4

1 of 1 See more

dgraph dgraph 24.1.4

1 of the 1 container images this version deploys carry CVE-2022-31022.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v24.1.4	b57fa31f9b7f	github.com/blevesearch/bleve/v2@v2.4.4	2.5.0

Open the chart page →

2,993

ilumilum

6.7.3

1 of 19 See more

ilum ilum 6.7.3

1 of the 19 container images this version deploys carry CVE-2022-31022.

Container image	Digest	Package	Fixed in
gitea/gitea :1.22.3	76f516a1a8c2	github.com/blevesearch/bleve/v2@v2.4.2	2.5.0

Open the chart page →

23,228

mattermostphntom

3.24.0

1 of 2 See more

mattermost phntom 3.24.0

1 of the 2 container images this version deploys carry CVE-2022-31022.

Container image	Digest	Package	Fixed in
phntom/mattermost-team-edition :9.3.0	51cf9da4aa2e	github.com/blevesearch/bleve/v2@v2.3.8	2.5.0

Open the chart page →

8,722

dbrepodbrepo

1.13.3

1 of 25 See more

dbrepo dbrepo 1.13.3

1 of the 25 container images this version deploys carry CVE-2022-31022.

Container image	Digest	Package	Fixed in
bitnamilegacy/grafana :11.4.0-debian-12-r0	cb8ab5515676	github.com/blevesearch/bleve/v2@v2.4.2	2.5.0

Open the chart page →

52,635

giteakeyporttech

0.2.10

1 of 4 See more

gitea keyporttech 0.2.10

1 of the 4 container images this version deploys carry CVE-2022-31022.

Container image	Digest	Package	Fixed in
gitea/gitea :1.12.4	85416d6f65fe	github.com/blevesearch/bleve@v1.0.7	no fix listed

Open the chart page →

5,408

grafanabook-k8sinfra-v2

8.8.2

1 of 1 See more

grafana book-k8sinfra-v2 8.8.2

1 of the 1 container images this version deploys carry CVE-2022-31022.

Container image	Digest	Package	Fixed in
grafana/grafana :11.4.0	d8ea37798ccc	github.com/blevesearch/bleve/v2@v2.4.2	2.5.0

Open the chart page →

1,800

ociscosmicrocks

0.7.0

1 of 2 See more

ocis cosmicrocks 0.7.0

1 of the 2 container images this version deploys carry CVE-2022-31022.

Container image	Digest	Package	Fixed in
owncloud/ocis :7.1.3	88e7c854517d	github.com/blevesearch/bleve/v2@v2.4.3	2.5.0

Open the chart page →

1,925

dgraphdevtron

0.0.20

1 of 1 See more

dgraph devtron 0.0.20

1 of the 1 container images this version deploys carry CVE-2022-31022.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v21.12.0	3b55ea83fffe	github.com/blevesearch/bleve@v1.0.13	no fix listed

Open the chart page →

11,909

dgraphdevtron-labs

0.0.20

1 of 1 See more

dgraph devtron-labs 0.0.20

1 of the 1 container images this version deploys carry CVE-2022-31022.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v21.12.0	3b55ea83fffe	github.com/blevesearch/bleve@v1.0.13	no fix listed

Open the chart page →

11,909

monitoringgaloymoney

0.12.21

1 of 6 See more

monitoring galoymoney 0.12.21

1 of the 6 container images this version deploys carry CVE-2022-31022.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.0	a0f881232a6f	github.com/blevesearch/bleve/v2@v2.4.2	2.5.0

Open the chart page →

5,295

monitoringgaloymoney2

0.12.21

1 of 6 See more

monitoring galoymoney2 0.12.21

1 of the 6 container images this version deploys carry CVE-2022-31022.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.0	a0f881232a6f	github.com/blevesearch/bleve/v2@v2.4.2	2.5.0

Open the chart page →

5,295

owncloud-ocisgeek-cookbook

2.4.2

1 of 1 See more

owncloud-ocis geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2022-31022.

Container image	Digest	Package	Fixed in
owncloud/ocis :1.7.0	d2efcae92c84	github.com/blevesearch/bleve@v1.0.9	no fix listed

Open the chart page →

3,236

opentelemetry-demogpg-dev

0.33.8

1 of 27 See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2022-31022.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.1	fa801ab6e1ae	github.com/blevesearch/bleve/v2@v2.4.2	2.5.0

Open the chart page →

49,025

routergroundcover

1.12.357

1 of 7 See more

router groundcover 1.12.357

1 of the 7 container images this version deploys carry CVE-2022-31022.

Container image	Digest	Package	Fixed in
public.ecr.aws/groundcovercom/grafana-groundcover :v0.0.54-grafana11.3.7	ee9d973e3952	github.com/blevesearch/bleve/v2@v2.4.2	2.5.0

Open the chart page →

6,009

monitoring-stackhelm-charts-alexis-carbillet

0.1.0

1 of 11 See more

monitoring-stack helm-charts-alexis-carbillet 0.1.0

1 of the 11 container images this version deploys carry CVE-2022-31022.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.0	a0f881232a6f	github.com/blevesearch/bleve/v2@v2.4.2	2.5.0

Open the chart page →

9,460

opencloudjacobcolvin

0.2.3

1 of 13 See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2022-31022.

Container image	Digest	Package	Fixed in
opencloudeu/opencloud-rolling :2.1.0	f9634bb04905	github.com/blevesearch/bleve/v2@v2.4.4	2.5.0

Open the chart page →

45,239

giteamya

23.12.5

1 of 1 See more

gitea mya 23.12.5

1 of the 1 container images this version deploys carry CVE-2022-31022.

Container image	Digest	Package	Fixed in
gitea/gitea :1.21.6	ac73e0da341f	github.com/blevesearch/bleve/v2@v2.3.10	2.5.0

Open the chart page →

3,430

giteanovum-rgi-charts

2.1.3

1 of 3 See more

gitea novum-rgi-charts 2.1.3

1 of the 3 container images this version deploys carry CVE-2022-31022.

Container image	Digest	Package	Fixed in
gitea/gitea :1.13.0	d5ab14cd29af	github.com/blevesearch/bleve@v1.0.10	no fix listed

Open the chart page →

4,861

kubecostradar-base

1.0.0

1 of 7 See more

kubecost radar-base 1.0.0

1 of the 7 container images this version deploys carry CVE-2022-31022.

Container image	Digest	Package	Fixed in
grafana/grafana :11.4.0	d8ea37798ccc	github.com/blevesearch/bleve/v2@v2.4.2	2.5.0

Open the chart page →

9,355

radar-grafanaradar-base

0.1.4

1 of 2 See more

radar-grafana radar-base 0.1.4

1 of the 2 container images this version deploys carry CVE-2022-31022.

Container image	Digest	Package	Fixed in
grafana/grafana :11.6.0	62d2b9d20a19	github.com/blevesearch/bleve/v2@v2.4.4-0.20250319135056-b82baf10b205	2.5.0

Open the chart page →

1,667

dgraphromholdings

0.0.20

1 of 1 See more

dgraph romholdings 0.0.20

1 of the 1 container images this version deploys carry CVE-2022-31022.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v21.12.0	3b55ea83fffe	github.com/blevesearch/bleve@v1.0.13	no fix listed

Open the chart page →

11,909

cost-analyzersoftonic

2.5.5

1 of 6 See more

cost-analyzer softonic 2.5.5

1 of the 6 container images this version deploys carry CVE-2022-31022.

Container image	Digest	Package	Fixed in
grafana/grafana :11.5.2	8b37a2f028f1	github.com/blevesearch/bleve/v2@v2.4.3	2.5.0

Open the chart page →

7,901

opencloudunxwares

0.2.3

1 of 13 See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2022-31022.

Container image	Digest	Package	Fixed in
opencloudeu/opencloud-rolling :2.1.0	f9634bb04905	github.com/blevesearch/bleve/v2@v2.4.4	2.5.0

Open the chart page →

45,239

ygdrassil-monitoringygdrassil

0.4.0

1 of 10 See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2022-31022.

Container image	Digest	Package	Fixed in
grafana/grafana :11.5.1	5781759b3d27	github.com/blevesearch/bleve/v2@v2.4.3	2.5.0

Open the chart page →

9,381

Container images carrying it

18 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
dgraph/dgraph :v21.12.0	3b55ea83fffe	github.com/blevesearch/bleve@v1.0.13	no fix listed	3
grafana/grafana :11.3.0	a0f881232a6f	github.com/blevesearch/bleve/v2@v2.4.2	2.5.0	3
grafana/grafana :11.4.0	d8ea37798ccc	github.com/blevesearch/bleve/v2@v2.4.2	2.5.0	2
opencloudeu/opencloud-rolling :2.1.0	f9634bb04905	github.com/blevesearch/bleve/v2@v2.4.4	2.5.0	2
bitnamilegacy/grafana :11.4.0-debian-12-r0	cb8ab5515676	github.com/blevesearch/bleve/v2@v2.4.2	2.5.0	1
dgraph/dgraph :v24.1.4	b57fa31f9b7f	github.com/blevesearch/bleve/v2@v2.4.4	2.5.0	1
gitea/gitea :1.22.3	76f516a1a8c2	github.com/blevesearch/bleve/v2@v2.4.2	2.5.0	1
gitea/gitea :1.12.4	85416d6f65fe	github.com/blevesearch/bleve@v1.0.7	no fix listed	1
gitea/gitea :1.21.6	ac73e0da341f	github.com/blevesearch/bleve/v2@v2.3.10	2.5.0	1
gitea/gitea :1.13.0	d5ab14cd29af	github.com/blevesearch/bleve@v1.0.10	no fix listed	1
grafana/grafana :11.5.1	5781759b3d27	github.com/blevesearch/bleve/v2@v2.4.3	2.5.0	1
grafana/grafana :11.6.0	62d2b9d20a19	github.com/blevesearch/bleve/v2@v2.4.4-0.20250319135056-b82baf10b205	2.5.0	1
grafana/grafana :11.5.2	8b37a2f028f1	github.com/blevesearch/bleve/v2@v2.4.3	2.5.0	1
grafana/grafana :11.3.1	fa801ab6e1ae	github.com/blevesearch/bleve/v2@v2.4.2	2.5.0	1
owncloud/ocis :7.1.3	88e7c854517d	github.com/blevesearch/bleve/v2@v2.4.3	2.5.0	1
owncloud/ocis :1.7.0	d2efcae92c84	github.com/blevesearch/bleve@v1.0.9	no fix listed	1
phntom/mattermost-team-edition :9.3.0	51cf9da4aa2e	github.com/blevesearch/bleve/v2@v2.3.8	2.5.0	1
public.ecr.aws/groundcovercom/grafana-groundcover :v0.0.54-grafana11.3.7	ee9d973e3952	github.com/blevesearch/bleve/v2@v2.4.2	2.5.0	1