StackRadar

CVE-2022-33068

Medium

Advisory

Published 23 Jun 2022In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.012
66th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
30
of 17,781 indexed, latest versions
Container images
31
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 30 of 17,781 indexed charts deploy, on 31 images.

Affected packageAffected versionsFixed inImages
harfbuzzdeb2.6.4-1ubuntu4, 2.7.4-1ubuntu32.6.4-1ubuntu4.2, 2.7.4-1ubuntu3.130
qt6-basedeb6.4.2+dfsg-21.1build5no fix listed1
OSV records
UBUNTU-CVE-2022-33068
Also known as
USN-5524-1

Charts affected

30 by stars
ChartLatestAffected imagesRadar Score
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2022-33068.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2

Open the chart page →

32,259
jellyfinutkuozdemirVerified publisher2.0.01 of 1See more

jellyfin utkuozdemir 2.0.0

1 of the 1 container images this version deploys carry CVE-2022-33068.

Container imageDigestPackageFixed in
linuxserver/jellyfin:10.7.72427dde159a2
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2

Open the chart page →

7,880
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2022-33068.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2

Open the chart page →

24,488
bazarrgeek-cookbookVerified publisher10.6.21 of 1See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2022-33068.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2

Open the chart page →

17,377
games-on-whalesgeek-cookbookVerified publisher1.8.22 of 7See more

games-on-whales geek-cookbook 1.8.2

2 of the 7 container images this version deploys carry CVE-2022-33068.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2

Open the chart page →

35,305
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2022-33068.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2

Open the chart page →

15,653
stashgeek-cookbookVerified publisher3.4.21 of 1See more

stash geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2022-33068.

Container imageDigestPackageFixed in
stashapp/stash:latest24dbd7607174
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2

Open the chart page →

15,856
tdarrgeek-cookbookVerified publisher4.6.21 of 2See more

tdarr geek-cookbook 4.6.2

1 of the 2 container images this version deploys carry CVE-2022-33068.

Container imageDigestPackageFixed in
haveagitgat/tdarr:2.00.181256348872ce
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2

Open the chart page →

31,000
opennebulakvaps2.1.15 of 9See more

opennebula kvaps 2.1.1

5 of the 9 container images this version deploys carry CVE-2022-33068.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2

Open the chart page →

113,791
mumblesyntaxerror404Verified publisher1.0.41 of 1See more

mumble syntaxerror404 1.0.4

1 of the 1 container images this version deploys carry CVE-2022-33068.

Container imageDigestPackageFixed in
ghcr.io/mumble-voip/mumble-server:v1.6.87002fd613b6a35
qt6-base@6.4.2+dfsg-21.1build5
no fix listed

Open the chart page →

2,099
tdarrvhdirkVerified publisher5.0.51 of 2See more

tdarr vhdirk 5.0.5

1 of the 2 container images this version deploys carry CVE-2022-33068.

Container imageDigestPackageFixed in
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2

Open the chart page →

26,657
games-on-whalesangelnu2.0.02 of 7See more

games-on-whales angelnu 2.0.0

2 of the 7 container images this version deploys carry CVE-2022-33068.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2

Open the chart page →

42,126
sumo-besu-genesisconsensys0.1.751 of 1See more

sumo-besu-genesis consensys 0.1.75

1 of the 1 container images this version deploys carry CVE-2022-33068.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2

Open the chart page →

7,963
sumo-besu-nodeconsensys0.1.751 of 4See more

sumo-besu-node consensys 0.1.75

1 of the 4 container images this version deploys carry CVE-2022-33068.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2

Open the chart page →

7,963
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2022-33068.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2

Open the chart page →

18,230
calibre-webgeek-cookbookVerified publisher8.4.21 of 1See more

calibre-web geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2022-33068.

Container imageDigestPackageFixed in
linuxserver/calibre-web:version-0.6.12938810eca3d3
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2

Open the chart page →

16,123
double-takegeek-cookbookVerified publisher2.3.21 of 1See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2022-33068.

Container imageDigestPackageFixed in
jakowenko/double-take:1.6.0b858bac9e32a
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2

Open the chart page →

12,222
lidarrgeek-cookbookVerified publisher14.2.21 of 1See more

lidarr geek-cookbook 14.2.2

1 of the 1 container images this version deploys carry CVE-2022-33068.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2

Open the chart page →

14,283
nzbhydra2geek-cookbookVerified publisher10.4.21 of 1See more

nzbhydra2 geek-cookbook 10.4.2

1 of the 1 container images this version deploys carry CVE-2022-33068.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2

Open the chart page →

17,702
photoprismgeek-cookbookVerified publisher7.2.01 of 1See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2022-33068.

Container imageDigestPackageFixed in
photoprism/photoprism:220629-jammy2954334adbda
harfbuzz@2.7.4-1ubuntu3
2.7.4-1ubuntu3.1

Open the chart page →

19,503
puppeteergeek-cookbookVerified publisher1.2.21 of 1See more

puppeteer geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-33068.

Container imageDigestPackageFixed in
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2

Open the chart page →

15,730
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2022-33068.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2

Open the chart page →

17,929
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2022-33068.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2

Open the chart page →

18,066
mumble-serverjuniorjpdj0.1.411 of 1See more

mumble-server juniorjpdj 0.1.41

1 of the 1 container images this version deploys carry CVE-2022-33068.

Container imageDigestPackageFixed in
ghcr.io/mumble-voip/mumble-server:v1.6.87002fd613b6a35
qt6-base@6.4.2+dfsg-21.1build5
no fix listed

Open the chart page →

2,099
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2022-33068.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2

Open the chart page →

25,933
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-33068.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2

Open the chart page →

15,675
javareact-java0.1.01 of 1See more

java react-java 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-33068.

Container imageDigestPackageFixed in
project2team4/react:latest3ff031a08887
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2

Open the chart page →

15,520
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-33068.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2

Open the chart page →

30,687
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-33068.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2

Open the chart page →

14,364
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2022-33068.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2

Open the chart page →

28,605

Container images carrying it

31 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
hookiesolutions/webhookie:latest0629694246ba
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2
2
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2
2
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2
2
ghcr.io/mumble-voip/mumble-server:v1.6.87002fd613b6a35
qt6-base@6.4.2+dfsg-21.1build5
no fix listed
2
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2
1
apachepulsar/pulsar:2.10.03b262ab7a7d9
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2
1
apachepulsar/pulsar:2.9.0d056c89b7131
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2
1
apachepulsar/pulsar:2.8.2d538416d5afe
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2
1
haveagitgat/tdarr:2.00.181256348872ce
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2
1
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2
1
jakowenko/double-take:1.6.0b858bac9e32a
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2
1
linuxserver/calibre-web:version-0.6.12938810eca3d3
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2
1
linuxserver/jellyfin:10.7.72427dde159a2
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2
1
photoprism/photoprism:220629-jammy2954334adbda
harfbuzz@2.7.4-1ubuntu3
2.7.4-1ubuntu3.1
1
project2team4/react:latest3ff031a08887
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2
1
stashapp/stash:latest24dbd7607174
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2
1
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2
1
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2
1
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2
1
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.