StackRadar

CVE-2022-3294

Unscored

Advisory

Published 20 Aug 2024In the index since 6 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.016
75th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
29
of 17,781 indexed, latest versions
Container images
24
deployed by those charts
Fix available
1 of 1
affected package

Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

Carried by container images the latest versions of 29 of 17,781 indexed charts deploy, on 24 images.

Affected packageAffected versionsFixed inImages
k8s.io/kubernetesgolangv1.22.0, v1.22.2, v1.22.3, v1.22.6+9 more1.22.1624
OSV records
GO-2023-1629
Also known as
GHSA-jh36-q97c-9928

Charts affected

29 by stars
ChartLatestAffected imagesRadar Score
pulsarapache4.7.01 of 10See more

pulsar apache 4.7.0

1 of the 10 container images this version deploys carry CVE-2022-3294.

Container imageDigestPackageFixed in
rancher/kubectl:v1.25.085a0d1148784
k8s.io/kubernetes@v1.25.0
1.22.16

Open the chart page →

9,864
devtron-operatordevtron0.23.31 of 11See more

devtron-operator devtron 0.23.3

1 of the 11 container images this version deploys carry CVE-2022-3294.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
k8s.io/kubernetes@v1.25.2
1.22.16

Open the chart page →

32,902
vclustermainVerified publisher0.17.03 of 10See more

vcluster main 0.17.0

3 of the 10 container images this version deploys carry CVE-2022-3294.

Container imageDigestPackageFixed in
registry.k8s.io/kube-apiserver:v1.25.0f6902791fb9a
k8s.io/kubernetes@v1.25.0
1.22.16
registry.k8s.io/kube-controller-manager:v1.25.066ce7d460e53
k8s.io/kubernetes@v1.25.0
1.22.16
registry.k8s.io/kube-scheduler:v1.25.09330c53feca7
k8s.io/kubernetes@v1.25.0
1.22.16

Open the chart page →

11,552
core-dump-handlercore-dump-handler9.0.01 of 1See more

core-dump-handler core-dump-handler 9.0.0

1 of the 1 container images this version deploys carry CVE-2022-3294.

Container imageDigestPackageFixed in
quay.io/icdh/core-dump-handler:v9.0.0cc79b9e2a1c8
k8s.io/kubernetes@v1.22.0
1.22.16

Open the chart page →

3,080
move2kubemove2kube0.3.151 of 1See more

move2kube move2kube 0.3.15

1 of the 1 container images this version deploys carry CVE-2022-3294.

Container imageDigestPackageFixed in
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
k8s.io/kubernetes@v1.24.2
1.22.16

Open the chart page →

3,793
argocdtwomartensVerified publisher0.1.11 of 3See more

argocd twomartens 0.1.1

1 of the 3 container images this version deploys carry CVE-2022-3294.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.8.6acaf37352569
k8s.io/kubernetes@v1.24.2
1.22.16

Open the chart page →

10,315
argocd-backup-s3argocd-backup-s3Verified publisher0.9.51 of 1See more

argocd-backup-s3 argocd-backup-s3 0.9.5

1 of the 1 container images this version deploys carry CVE-2022-3294.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
k8s.io/kubernetes@v1.23.1
1.22.16

Open the chart page →

5,222
kube-fencingkvaps2.4.11 of 2See more

kube-fencing kvaps 2.4.1

1 of the 2 container images this version deploys carry CVE-2022-3294.

Container imageDigestPackageFixed in
ghcr.io/kvaps/kube-fencing-controller:v2.4.0313edfec2fca
k8s.io/kubernetes@v1.25.3
1.22.16

Open the chart page →

2,536
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry CVE-2022-3294.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
k8s.io/kubernetes@v1.25.2
1.22.16

Open the chart page →

68,240
devtron-in-clustercddevtron0.10.21 of 2See more

devtron-in-clustercd devtron 0.10.2

1 of the 2 container images this version deploys carry CVE-2022-3294.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
k8s.io/kubernetes@v1.24.2
1.22.16

Open the chart page →

5,039
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry CVE-2022-3294.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
k8s.io/kubernetes@v1.25.2
1.22.16

Open the chart page →

68,240
devtron-in-clustercddevtron-labs0.10.21 of 2See more

devtron-in-clustercd devtron-labs 0.10.2

1 of the 2 container images this version deploys carry CVE-2022-3294.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
k8s.io/kubernetes@v1.24.2
1.22.16

Open the chart page →

5,039
devtron-operatordevtron-labs0.23.31 of 11See more

devtron-operator devtron-labs 0.23.3

1 of the 11 container images this version deploys carry CVE-2022-3294.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
k8s.io/kubernetes@v1.25.2
1.22.16

Open the chart page →

32,902
activityrelayfedihost0.1.41 of 2See more

activityrelay fedihost 0.1.4

1 of the 2 container images this version deploys carry CVE-2022-3294.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
k8s.io/kubernetes@v1.23.1
1.22.16

Open the chart page →

13,450
apid-helpergkarthiks0.1.41 of 1See more

apid-helper gkarthiks 0.1.4

1 of the 1 container images this version deploys carry CVE-2022-3294.

Container imageDigestPackageFixed in
quay.io/gkarthics/apid-helper:v0.2.3d7d93debf1f4
k8s.io/kubernetes@v1.24.2
1.22.16

Open the chart page →

2,607
kubeblocks-csi-driverkubeblocksVerified publisher0.1.31 of 6See more

kubeblocks-csi-driver kubeblocks 0.1.3

1 of the 6 container images this version deploys carry CVE-2022-3294.

Container imageDigestPackageFixed in
apecloud/kubeblocks-csi-driver:0.1.3c93655ccb2d7
k8s.io/kubernetes@v1.22.11
1.22.16

Open the chart page →

2,082
cranekubesphere-stable0.5.23 of 3See more

crane kubesphere-stable 0.5.2

3 of the 3 container images this version deploys carry CVE-2022-3294.

Container imageDigestPackageFixed in
gocrane/crane-scheduler:0.0.239ba6d11b2079
k8s.io/kubernetes@v1.23.3
1.22.16
gocrane/crane-scheduler-controller:0.1.23a2d7e60576f9
k8s.io/kubernetes@v1.23.3
1.22.16
gocrane/craned:v0.5.1a1400909118c
k8s.io/kubernetes@v1.22.3
1.22.16

Open the chart page →

8,883
edgemeshkubesphere-stable0.1.01 of 2See more

edgemesh kubesphere-stable 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-3294.

Container imageDigestPackageFixed in
kubeedge/edgemesh-agent:latest460c6061b608
k8s.io/kubernetes@v1.23.0
1.22.16

Open the chart page →

4,096
iomeshkubesphere-stable1.1.01 of 25See more

iomesh kubesphere-stable 1.1.0

1 of the 25 container images this version deploys carry CVE-2022-3294.

Container imageDigestPackageFixed in
iomesh/localpv-manager:v0.2.0f13deacac3f4
k8s.io/kubernetes@v1.24.4
1.22.16

Open the chart page →

48,665
IOMeshkubesphere-stable1.2.01 of 25See more

IOMesh kubesphere-stable 1.2.0

1 of the 25 container images this version deploys carry CVE-2022-3294.

Container imageDigestPackageFixed in
iomesh/localpv-manager:v0.2.0f13deacac3f4
k8s.io/kubernetes@v1.24.4
1.22.16

Open the chart page →

46,341
kuperatorkusionstackVerified publisher0.7.41 of 1See more

kuperator kusionstack 0.7.4

1 of the 1 container images this version deploys carry CVE-2022-3294.

Container imageDigestPackageFixed in
kusionstack/kuperator:v0.7.4d2f72ae1d2f2
k8s.io/kubernetes@v1.22.6
1.22.16

Open the chart page →

978
operatingkusionstackVerified publisher0.5.11 of 1See more

operating kusionstack 0.5.1

1 of the 1 container images this version deploys carry CVE-2022-3294.

Container imageDigestPackageFixed in
kusionstack/operating:v0.5.0c28bd96b986b
k8s.io/kubernetes@v1.22.6
1.22.16

Open the chart page →

1,879
nats-operatornatsVerified publisher0.8.31 of 1See more

nats-operator nats 0.8.3

1 of the 1 container images this version deploys carry CVE-2022-3294.

Container imageDigestPackageFixed in
natsio/nats-operator:0.8.31261dae38389
k8s.io/kubernetes@v1.22.2
1.22.16

Open the chart page →

2,352
external-dns-host-networkphntom0.0.121 of 1See more

external-dns-host-network phntom 0.0.12

1 of the 1 container images this version deploys carry CVE-2022-3294.

Container imageDigestPackageFixed in
phntom/external-dns-host-network:0.0.123adadbac8443
k8s.io/kubernetes@v1.25.3
1.22.16

Open the chart page →

4,642
devtron-enterpriseromholdings48.0.01 of 28See more

devtron-enterprise romholdings 48.0.0

1 of the 28 container images this version deploys carry CVE-2022-3294.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
k8s.io/kubernetes@v1.25.2
1.22.16

Open the chart page →

68,240
devtron-in-clustercdromholdings0.10.21 of 2See more

devtron-in-clustercd romholdings 0.10.2

1 of the 2 container images this version deploys carry CVE-2022-3294.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
k8s.io/kubernetes@v1.24.2
1.22.16

Open the chart page →

5,039
devtron-operatorromholdings0.23.31 of 11See more

devtron-operator romholdings 0.23.3

1 of the 11 container images this version deploys carry CVE-2022-3294.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
k8s.io/kubernetes@v1.25.2
1.22.16

Open the chart page →

32,902
ceph-csi-cephfswikimedia0.1.81 of 5See more

ceph-csi-cephfs wikimedia 0.1.8

1 of the 5 container images this version deploys carry CVE-2022-3294.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
k8s.io/kubernetes@v1.24.4
1.22.16

Open the chart page →

10,285
ceph-csi-rbdwikimedia0.1.131 of 6See more

ceph-csi-rbd wikimedia 0.1.13

1 of the 6 container images this version deploys carry CVE-2022-3294.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
k8s.io/kubernetes@v1.24.4
1.22.16

Open the chart page →

11,784

Container images carrying it

24 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/devtron/kubectl:latest2ad610626658
k8s.io/kubernetes@v1.25.2
1.22.16
6
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
k8s.io/kubernetes@v1.24.2
1.22.16
3
iomesh/localpv-manager:v0.2.0f13deacac3f4
k8s.io/kubernetes@v1.24.4
1.22.16
2
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
k8s.io/kubernetes@v1.24.4
1.22.16
2
apecloud/kubeblocks-csi-driver:0.1.3c93655ccb2d7
k8s.io/kubernetes@v1.22.11
1.22.16
1
gocrane/craned:v0.5.1a1400909118c
k8s.io/kubernetes@v1.22.3
1.22.16
1
gocrane/crane-scheduler:0.0.239ba6d11b2079
k8s.io/kubernetes@v1.23.3
1.22.16
1
gocrane/crane-scheduler-controller:0.1.23a2d7e60576f9
k8s.io/kubernetes@v1.23.3
1.22.16
1
kubeedge/edgemesh-agent:latest460c6061b608
k8s.io/kubernetes@v1.23.0
1.22.16
1
kusionstack/kuperator:v0.7.4d2f72ae1d2f2
k8s.io/kubernetes@v1.22.6
1.22.16
1
kusionstack/operating:v0.5.0c28bd96b986b
k8s.io/kubernetes@v1.22.6
1.22.16
1
natsio/nats-operator:0.8.31261dae38389
k8s.io/kubernetes@v1.22.2
1.22.16
1
phntom/external-dns-host-network:0.0.123adadbac8443
k8s.io/kubernetes@v1.25.3
1.22.16
1
rancher/kubectl:v1.25.085a0d1148784
k8s.io/kubernetes@v1.25.0
1.22.16
1
ghcr.io/kvaps/kube-fencing-controller:v2.4.0313edfec2fca
k8s.io/kubernetes@v1.25.3
1.22.16
1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
k8s.io/kubernetes@v1.23.1
1.22.16
1
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
k8s.io/kubernetes@v1.23.1
1.22.16
1
quay.io/argoproj/argocd:v2.8.6acaf37352569
k8s.io/kubernetes@v1.24.2
1.22.16
1
quay.io/gkarthics/apid-helper:v0.2.3d7d93debf1f4
k8s.io/kubernetes@v1.24.2
1.22.16
1
quay.io/icdh/core-dump-handler:v9.0.0cc79b9e2a1c8
k8s.io/kubernetes@v1.22.0
1.22.16
1
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
k8s.io/kubernetes@v1.24.2
1.22.16
1
registry.k8s.io/kube-apiserver:v1.25.0f6902791fb9a
k8s.io/kubernetes@v1.25.0
1.22.16
1
registry.k8s.io/kube-controller-manager:v1.25.066ce7d460e53
k8s.io/kubernetes@v1.25.0
1.22.16
1
registry.k8s.io/kube-scheduler:v1.25.09330c53feca7
k8s.io/kubernetes@v1.25.0
1.22.16
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.