StackRadar

CVE-2022-32149

High

Advisory

Published 11 Oct 2022In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.015
74th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
958
of 17,787 indexed, latest versions
Container images
1,095
deployed by those charts
Fix available
1 of 1
affected package

golang.org/x/text/language Denial of service via crafted Accept-Language header

Carried by container images the latest versions of 958 of 17,787 indexed charts deploy, on 1,095 images.

Affected packageAffected versionsFixed inImages
golang.org/x/textgolangv0.3.0, v0.3.1-0.20180807135948-17ff2d5776d2, v0.3.1-0.20181227161524-e6919f6577db, v0.3.2+8 more0.3.81,095
OSV records
GHSA-69ch-w2m2-3vjp
Also known as
GO-2022-1059

Charts affected

958 by stars
ChartLatestAffected imagesRadar Score
dex-k8s-authenticatorwiremindVerified publisher1.7.01 of 1See more

dex-k8s-authenticator wiremind 1.7.0

1 of the 1 container images this version deploys carry CVE-2022-32149.

Container imageDigestPackageFixed in
mintel/dex-k8s-authenticator:1.4.0caf71cee7b9a
golang.org/x/text@v0.3.0
0.3.8

Open the chart page →

2,791
kafka-connect-uiwitcom-gmbh0.5.01 of 2See more

kafka-connect-ui witcom-gmbh 0.5.0

1 of the 2 container images this version deploys carry CVE-2022-32149.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.3.08c21390be87d
golang.org/x/text@v0.3.7
0.3.8

Open the chart page →

2,506
mrtg-backendwitcom-gmbh0.7.01 of 2See more

mrtg-backend witcom-gmbh 0.7.0

1 of the 2 container images this version deploys carry CVE-2022-32149.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.2.1febeebebe762
golang.org/x/text@v0.3.3
0.3.8

Open the chart page →

2,616
matrixdb-operatorymatrixOfficialVerified publisher0.13.01 of 2See more

matrixdb-operator ymatrix 0.13.0

1 of the 2 container images this version deploys carry CVE-2022-32149.

Container imageDigestPackageFixed in
matrixdb/kubebuilder_kube-rbac-proxy:v0.12.0ed3c7e6291e8
golang.org/x/text@v0.3.7
0.3.8

Open the chart page →

1,958
rawfile-csiymatrixVerified publisher0.2.14 of 4See more

rawfile-csi ymatrix 0.2.1

4 of the 4 container images this version deploys carry CVE-2022-32149.

Container imageDigestPackageFixed in
matrixdb/custom-external-provisioner:4622a07d7-202204247e9ffe249a51
golang.org/x/text@v0.3.7
0.3.8
matrixdb/rawfile-csi:v0.2.195b2e38e913d
golang.org/x/text@v0.3.7
0.3.8
matrixdb/sig-storage_csi-node-driver-registrar:v2.2.0ba763bb01ddc
golang.org/x/text@v0.3.5
0.3.8
matrixdb/sig-storage_livenessprobe:v2.3.07ab06fe3d8a7
golang.org/x/text@v0.3.5
0.3.8

Open the chart page →

7,972
version-checkerymrs0.2.31 of 1See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry CVE-2022-32149.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
golang.org/x/text@v0.3.3
0.3.8

Open the chart page →

3,023
zahori-consulzahoriVerified publisher1.0.11 of 2See more

zahori-consul zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2022-32149.

Container imageDigestPackageFixed in
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
golang.org/x/text@v0.3.2
0.3.8

Open the chart page →

5,033
posthogzeet0.23.21 of 9See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2022-32149.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.19.07a85f522c5bc
golang.org/x/text@v0.3.7
0.3.8

Open the chart page →

3,697

Container images carrying it

1,095 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
envoyproxy/ratelimit:6f5de117b6cb6e16f8c9
golang.org/x/text@v0.3.3-0.20191122225017-cbf43d21aaeb
0.3.8
1
envoyproxy/ratelimit:4d2efd61ede09a75a84c
golang.org/x/text@v0.3.3-0.20191122225017-cbf43d21aaeb
0.3.8
1
epamedp/admin-console-operator:2.14.090f9921d8d58
golang.org/x/text@v0.3.6
0.3.8
1
epamedp/codebase-operator:2.12.0-MDTU-DDM-SNAPSHOT.1096028c86f0dd
golang.org/x/text@v0.3.6
0.3.8
1
epamedp/edp-admin-console:2.14.0616c678ba3e7
golang.org/x/text@v0.3.6
0.3.8
1
epamedp/edp-argocd-operator:0.2.0976a662a5e72
golang.org/x/text@v0.3.7
0.3.8
1
epamedp/gerrit-operator:2.11.0-MDTU-DDM-SNAPSHOT.2b71fb39e0c9e
golang.org/x/text@v0.3.6
0.3.8
1
epamedp/jenkins-operator:2.11.0-MDTU-DDM-SNAPSHOT.1ff25e9fe4419
golang.org/x/text@v0.3.6
0.3.8
1
epamedp/keycloak-operator:1.11.0-MDTU-DDM-SNAPSHOT.105d352199e12e
golang.org/x/text@v0.3.6
0.3.8
1
epamedp/nexus-operator:2.11.0-MDTU-DDM-SNAPSHOT.1449a53804699
golang.org/x/text@v0.3.4
0.3.8
1
epamedp/reconciler:2.12.0d33e938b6d59
golang.org/x/text@v0.3.6
0.3.8
1
ethereum/client-go:v1.10.186d6d12a40465
golang.org/x/text@v0.3.7
0.3.8
1
ethereum/client-go:v1.10.23cce21b423165
golang.org/x/text@v0.3.7
0.3.8
1
ethereum/client-go:v1.10.15d99fbb9585c7
golang.org/x/text@v0.3.6
0.3.8
1
ethereumoptimism/l2geth:0.5.315577036dc36d
golang.org/x/text@v0.3.7
0.3.8
1
expediagroup/kubernetes-sidecar-injector:1.0.1193a00ec8dd4
golang.org/x/text@v0.3.7
0.3.8
1
factly/dega-api:0.15.166fafc7b0a17
golang.org/x/text@v0.3.5
0.3.8
1
factly/dega-server:0.15.194d21479382e
golang.org/x/text@v0.3.5
0.3.8
1
factly/kavach-server:0.22.3be85ff1b9bd3
golang.org/x/text@v0.3.5
0.3.8
1
factly/vidcheck-server:0.12.087064eb0463c
golang.org/x/text@v0.3.5
0.3.8
1
filebrowser/filebrowser:v2.18.04fcd47af573c
golang.org/x/text@v0.3.2
0.3.8
1
filebrowser/filebrowser:v2.13.0c5d0a75a0041
golang.org/x/text@v0.3.2
0.3.8
1
fission/fission-bundle:1.14.13fcfd8a0fa5d
golang.org/x/text@v0.3.6
0.3.8
1
fission/pre-upgrade-checks:1.14.1fa0f24cdb9cd
golang.org/x/text@v0.3.6
0.3.8
1
fluxcd/helm-controller:v0.9.092b891e495d8
golang.org/x/text@v0.3.4
0.3.8
1
fluxcd/source-controller:v0.10.031a8c79a6803
golang.org/x/text@v0.3.4
0.3.8
1
foxcpp/maddy:v0.5.28fa2bd8f6830
golang.org/x/text@v0.3.7
0.3.8
1
galaxy/cloudman-server:lateste5c265fe9fcd
golang.org/x/text@v0.3.7
0.3.8
1
garugaru/presto-exporter:cb666560e9e82d5ae36aef1e663c3d7f51cca9fc5201314c28f3
golang.org/x/text@v0.3.3
0.3.8
1
garugaru/presto-loadbalancer:v0.1.589d66d117029
golang.org/x/text@v0.3.2
0.3.8
1
gboxproxy/gbox:v1.0.63a9f4a711d5c
golang.org/x/text@v0.3.8-0.20211004125949-5bd84dd9b33b
0.3.8
1
gitea/gitea:1.12.485416d6f65fe
golang.org/x/text@v0.3.2
0.3.8
1
gitea/gitea:1.16.8b0bdf102b485
golang.org/x/text@v0.3.7
0.3.8
1
gitea/gitea:1.13.0d5ab14cd29af
golang.org/x/text@v0.3.3
0.3.8
1
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
golang.org/x/text@v0.3.3
0.3.8
1
gitlab/gitlab-runner:alpine-v13.2.1fd7e5dfb9f30
golang.org/x/text@v0.3.2
0.3.8
1
gkarthics/container-resource-exporter:latest6799af333e8a
golang.org/x/text@v0.3.2
0.3.8
1
gocrane/craned:v0.5.1a1400909118c
golang.org/x/text@v0.3.7
0.3.8
1
gocrane/crane-scheduler:0.0.239ba6d11b2079
golang.org/x/text@v0.3.7
0.3.8
1
gocrane/crane-scheduler-controller:0.1.23a2d7e60576f9
golang.org/x/text@v0.3.7
0.3.8
1
gogs/gogs:0.12.30195b095d0b2
golang.org/x/text@v0.3.3
0.3.8
1
gogs/gogs:0.12.1420d53bb7277
golang.org/x/text@v0.3.3
0.3.8
1
goharbor/chartmuseum-photon:v2.5.36ab3ca28e9e5
golang.org/x/text@v0.3.7
0.3.8
1
goharbor/harbor-core:v2.5.386bf3031f4a7
golang.org/x/text@v0.3.7
0.3.8
1
goharbor/harbor-jobservice:v2.5.38d5339ff2d74
golang.org/x/text@v0.3.7
0.3.8
1
goharbor/harbor-registryctl:v2.5.37f82ed1e2635
golang.org/x/text@v0.3.7
0.3.8
1
goharbor/notary-server-photon:v2.5.3fd91a4a1273f
golang.org/x/text@v0.3.2
0.3.8
1
goharbor/notary-signer-photon:v2.5.3a92b51aa7d6e
golang.org/x/text@v0.3.7
0.3.8
1
goharbor/trivy-adapter-photon:v2.5.3b9522c3f5056
golang.org/x/text@v0.3.7
0.3.8
1
gomods/athens:v0.8.1d714c7ff0231
golang.org/x/text@v0.3.2
0.3.8
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.