CVE-2022-35252

Low

Advisory

Published 31 Aug 2022In the index since 5 Sept 2026

Severity: Low; worst across findings
CVSS: 3.7; base score, highest
EPSS: 0.019; 79th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 463; of 17,787 indexed, latest versions
Container images: 374; deployed by those charts
Fix available: 3 of 3; affected packages

curl-7.85.0-1.1 on GA media

Carried by container images the latest versions of 463 of 17,787 indexed charts deploy, on 374 images.

Affected package	Affected versions	Fixed in	Images
curlrpm	7.60.0-lp151.5.6.1	7.85.0-1.1	2
curldeb	7.35.0-1ubuntu2.1, 7.35.0-1ubuntu2.3, 7.35.0-1ubuntu2.16, 7.35.0-1ubuntu2.19+37 more	7.35.0-1ubuntu2.20+esm12, 7.47.0-1ubuntu2.19+esm5, 7.58.0-2ubuntu3.20, 7.68.0-1ubuntu2.13+1 more	242
curlapk	7.74.0-r0, 7.74.0-r1, 7.76.1-r0, 7.77.0-r0+9 more	7.79.1-r3, 7.80.0-r3, 7.83.1-r3	130

OSV records: ALPINE-CVE-2022-35252 UBUNTU-CVE-2022-35252 openSUSE-SU-2024:12293-1
Also known as: USN-5587-1

Charts affected

463 by stars

Chart

Latest

Affected images

Radar Score

pageswalter

1.0.0

2 of 3 See more

pages walter 1.0.0

2 of the 3 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	curl@7.68.0-1ubuntu2.4	7.68.0-1ubuntu2.13
flyway/flyway :6.4.4	22d97ceb0c47	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.20

Open the chart page →

20,190

wazuh-manager-filebeatwazuh-manager-filebeat

0.1.0-gamma

1 of 1 See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.13

Open the chart page →

11,119

queryservice-uiwbstack

0.2.0

1 of 1 See more

queryservice-ui wbstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/queryservice-ui :1.4	bc79fbb50230	curl@7.80.0-r0	7.80.0-r3

Open the chart page →

1,996

uiwbstack

0.4.0

1 of 1 See more

ui wbstack 0.4.0

1 of the 1 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/ui :3.94	b01f67faadf1	curl@7.80.0-r1	7.80.0-r3

Open the chart page →

1,523

wbaas-backupwbstack

0.1.0

1 of 1 See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
ghcr.io/wmde/wbaas-backup :v0.1.7	8e6a9516eac0	curl@7.58.0-2ubuntu3.18	7.58.0-2ubuntu3.20

Open the chart page →

9,743

webresourcecataloguswebresourcecatalogus

1.1.0

1 of 4 See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/webresourcecatalogus-php :latest	8f1bbd5cda85	curl@7.80.0-r0	7.80.0-r3

Open the chart page →

7,552

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	curl@7.58.0-2ubuntu3.9	7.58.0-2ubuntu3.20

Open the chart page →

10,843

frpcwenerme

1.0.1

1 of 1 See more

frpc wenerme 1.0.1

1 of the 1 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
wener/frpc :v0.37.0	cc9fd4da44c0	curl@7.79.1-r0	7.79.1-r3

Open the chart page →

3,359

longhornwenerme

1.2.3

2 of 2 See more

longhorn wenerme 1.2.3

2 of the 2 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.13
longhornio/longhorn-ui :v1.2.3	148598de4b7d	curl@7.79.1-r0	7.79.1-r3

Open the chart page →

15,230

sambawenerme

1.0.0

1 of 1 See more

samba wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
wener/samba :4.13.3	9a42bae466d4	curl@7.74.0-r0	7.79.1-r3

Open the chart page →

2,555

temporalwenerme

0.15.1

2 of 13 See more

temporal wenerme 0.15.1

2 of the 13 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
temporalio/admin-tools :1.15.1	35034611d981	curl@7.79.1-r0	7.79.1-r3
temporalio/server :1.15.1	e26758f5a1bf	curl@7.79.1-r0	7.79.1-r3

Open the chart page →

22,665

workadventureworkadventure

1.1.0

1 of 9 See more

workadventure workadventure 1.1.0

1 of the 9 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
thecodingmachine/workadventure-chat :v1.17.7	da12f37e6795	curl@7.80.0-r1	7.80.0-r3

Open the chart page →

16,083

default-backendwyrihaximusnet

1.1.0

1 of 1 See more

default-backend wyrihaximusnet 1.1.0

1 of the 1 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
ghcr.io/wyrihaximusnet/default-backend :random	b24e63efd841	curl@7.79.1-r0	7.79.1-r3

Open the chart page →

2,534

Container images carrying it

374 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
muluder/prograncontrollermcord :0.1.8	43b597a93da7	curl@7.47.0-1ubuntu2.5	7.47.0-1ubuntu2.19+esm5	1
neilpang/acme.sh :3.0.2	595809ad43a2	curl@7.80.0-r0	7.80.0-r3	1
netboxcommunity/netbox :v3.2.8	3d652dca5351	curl@7.81.0-1ubuntu1.3	7.81.0-1ubuntu1.4	1
nginxinc/nginx-unprivileged :1.20-alpine	38d9dc79cc1d	curl@7.79.1-r1	7.79.1-r3	1
nvidia/k8s-device-plugin :v0.9.0	964847cc3fd8	curl@7.47.0-1ubuntu2.18	7.47.0-1ubuntu2.19+esm5	1
ohif/viewer :latest	b4bfecdc7cc6	curl@7.78.0-r0	7.79.1-r3	1
omecproject/c3po-hssdb :master-latest	28a90cc26716	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.13	1
omecproject/cdn-antmedia :1.0.0	b4ae7d0d6b74	curl@7.58.0-2ubuntu3.6	7.58.0-2ubuntu3.20	1
omecproject/onos-progran :1.0.0	5715e5648aa0	curl@7.47.0-1ubuntu2.5	7.47.0-1ubuntu2.19+esm5	1
omecproject/progran-synchronizer :comac-1.0.0	d109a8e57e71	curl@7.47.0-1ubuntu2.12	7.47.0-1ubuntu2.19+esm5	1
onosproject/onos :2.2.1	44914a8d4b3f	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.20	1
opendatacube/pipelines :wofs-1.22	5d810e8504b8	curl@7.58.0-2ubuntu3.6	7.58.0-2ubuntu3.20	1
opendatacube/restcube :latest	91870111837c	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.20	1
opendatacube/wms :latest	1b90cdf68831	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.20	1
openelevation/open-elevation :latest	82fb21612e86	curl@7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.13	1
openemr/openemr :6.1.0	89eaa6d9a4e3	curl@7.80.0-r0	7.80.0-r3	1
openwhisk/ow-utils :1.0.0	c80dba0de3aa	curl@7.58.0-2ubuntu3.9	7.58.0-2ubuntu3.20	1
opsmx11/issuegen :v2.1.0	5c50ca123d88	curl@7.35.0-1ubuntu2.16	7.35.0-1ubuntu2.20+esm12	1
oxfordsemantic/rdfox :5.6	db17910eb855	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.13	1
oxfordsemantic/rdfox-init :5.6	baf570ff968d	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.13	1
oxheadalpha/tezos-k8s-utils :5.3.4	d9faed45bf1c	curl@7.79.1-r0	7.79.1-r3	1
pecan/data :1.7.2	57b399ea7422	curl@7.79.1-r0	7.79.1-r3	1
phntom/keeweb :1.17.4-kix1	0c75ed6dd606	curl@7.74.0-r1	7.79.1-r3	1
photoprism/photoprism :220629-jammy	2954334adbda	curl@7.81.0-1ubuntu1.3	7.81.0-1ubuntu1.4	1
plexinc/pms-docker :1.25.4.5487-648a8f9f9	46ea59b96f2b	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.13	1
plexinc/pms-docker :1.19.5.3112-b23ab3896	b598abb134ad	curl@7.47.0-1ubuntu2.15	7.47.0-1ubuntu2.19+esm5	1
pnnlmiscscripts/k8s-node-image :1.16.15-nginx-9	03b3fed5bdbc	curl@7.76.1-r0	7.79.1-r3	1
pnnlmiscscripts/k8s-node-image :1.18.20-nginx-32	3bfca2cfaaaf	curl@7.79.1-r1	7.79.1-r3	1
pnnlmiscscripts/k8s-node-image :1.17.17-nginx-36	85debe11edc4	curl@7.79.1-r1	7.79.1-r3	1
pnnlmiscscripts/k8s-node-image :1.20.15-nginx-18	bbc7a777f9f7	curl@7.83.1-r1	7.83.1-r3	1
pnnlmiscscripts/k8s-node-image :1.19.16-nginx-20	c5c2b19e53a2	curl@7.79.1-r1	7.79.1-r3	1
pozetroninc/keydb :v6.0.16	53ae64f29da8	curl@7.58.0-2ubuntu3.10	7.58.0-2ubuntu3.20	1
project2team4/react :latest	3ff031a08887	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.13	1
rancher/local-path-provisioner :v0.0.5	e66f32d19eb9	curl@7.47.0-1ubuntu2.9	7.47.0-1ubuntu2.19+esm5	1
reportportal/migrations :5.7.0	da5d8e1395fe	curl@7.80.0-r0	7.80.0-r3	1
reportportal/service-ui :5.7.2	0a08784eb901	curl@7.83.1-r1	7.83.1-r3	1
resouer/redis-slave :v2	e2f198b49ba7	curl@7.35.0-1ubuntu2.3	7.35.0-1ubuntu2.20+esm12	1
rm3l/service-names-port-numbers :0.12.1	62d1cc4223e5	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.13	1
robotshop/rs-mongodb :latest	119b545823cd	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.13	1
rundeck/rundeck :3.2.7	4d64fe56f767	curl@7.47.0-1ubuntu2.14	7.47.0-1ubuntu2.19+esm5	1
rundeck/rundeck :3.0.16	b13e8059ad72	curl@7.47.0-1ubuntu2.11	7.47.0-1ubuntu2.19+esm5	1
saiakhil46/pizza-app :main-1ffbdf3	dc39ce11e5d0	curl@7.76.1-r0	7.79.1-r3	1
scrapinghub/splash :3.4.1	a5f89bc84606	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.20	1
seafileltd/seafile-mc :8.0.7	ed0fcda5e6a9	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.13	1
seldonio/locust-core :0.8	1d0da98a2d76	curl@7.47.0-1ubuntu2.13	7.47.0-1ubuntu2.19+esm5	1
shlinkio/shlink :2.7.1	c6729db1d3a8	curl@7.76.1-r0	7.79.1-r3	1
sismics/docs :v1.10	f4b0ef019cf1	curl@7.58.0-2ubuntu3.3	7.58.0-2ubuntu3.20	1
slagattollas/weatherservice-practica :latest	68e7f56393fc	curl@7.58.0-2ubuntu3.12	7.58.0-2ubuntu3.20	1
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	curl@7.68.0-1ubuntu2.11	7.68.0-1ubuntu2.13	1
soulou2019/angular-nginx :latest	a3970f97c215	curl@7.80.0-r0	7.80.0-r3	1