CVE-2022-35252

Low

Advisory

Published 31 Aug 2022In the index since 5 Sept 2026

Severity: Low; worst across findings
CVSS: 3.7; base score, highest
EPSS: 0.019; 79th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 465; of 17,787 indexed, latest versions
Container images: 376; deployed by those charts
Fix available: 3 of 3; affected packages

curl-7.85.0-1.1 on GA media

Carried by container images the latest versions of 465 of 17,787 indexed charts deploy, on 376 images.

Affected package	Affected versions	Fixed in	Images
curlrpm	7.60.0-lp151.5.6.1	7.85.0-1.1	2
curldeb	7.35.0-1ubuntu2.1, 7.35.0-1ubuntu2.3, 7.35.0-1ubuntu2.16, 7.35.0-1ubuntu2.19+37 more	7.35.0-1ubuntu2.20+esm12, 7.47.0-1ubuntu2.19+esm5, 7.58.0-2ubuntu3.20, 7.68.0-1ubuntu2.13+1 more	242
curlapk	7.74.0-r0, 7.74.0-r1, 7.76.1-r0, 7.77.0-r0+9 more	7.79.1-r3, 7.80.0-r3, 7.83.1-r3	132

OSV records: ALPINE-CVE-2022-35252 UBUNTU-CVE-2022-35252 openSUSE-SU-2024:12293-1
Also known as: USN-5587-1

Charts affected

465 by stars

Chart

Latest

Affected images

Radar Score

lightstepupdater-lightstep-satellite

1.2.2

1 of 1 See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
lightstep/collector :2021-01-26_23-02-36Z	11c5569aaf3b	curl@7.47.0-1ubuntu2.12	7.47.0-1ubuntu2.19+esm5

Open the chart page →

15,345

pagesvictor-pages

1.0.0

2 of 3 See more

pages victor-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	curl@7.68.0-1ubuntu2.4	7.68.0-1ubuntu2.13
flyway/flyway :6.4.4	22d97ceb0c47	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.20

Open the chart page →

20,233

pageswalter

1.0.0

2 of 3 See more

pages walter 1.0.0

2 of the 3 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	curl@7.68.0-1ubuntu2.4	7.68.0-1ubuntu2.13
flyway/flyway :6.4.4	22d97ceb0c47	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.20

Open the chart page →

20,233

wazuh-manager-filebeatwazuh-manager-filebeat

0.1.0-gamma

1 of 1 See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.13

Open the chart page →

11,167

queryservice-uiwbstack

0.2.0

1 of 1 See more

queryservice-ui wbstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/queryservice-ui :1.4	bc79fbb50230	curl@7.80.0-r0	7.80.0-r3

Open the chart page →

1,996

uiwbstack

0.4.0

1 of 1 See more

ui wbstack 0.4.0

1 of the 1 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/ui :3.94	b01f67faadf1	curl@7.80.0-r1	7.80.0-r3

Open the chart page →

1,523

wbaas-backupwbstack

0.1.0

1 of 1 See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
ghcr.io/wmde/wbaas-backup :v0.1.7	8e6a9516eac0	curl@7.58.0-2ubuntu3.18	7.58.0-2ubuntu3.20

Open the chart page →

9,748

webresourcecataloguswebresourcecatalogus

1.1.0

1 of 4 See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/webresourcecatalogus-php :latest	8f1bbd5cda85	curl@7.80.0-r0	7.80.0-r3

Open the chart page →

7,552

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	curl@7.58.0-2ubuntu3.9	7.58.0-2ubuntu3.20

Open the chart page →

10,857

frpcwenerme

1.0.1

1 of 1 See more

frpc wenerme 1.0.1

1 of the 1 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
wener/frpc :v0.37.0	cc9fd4da44c0	curl@7.79.1-r0	7.79.1-r3

Open the chart page →

3,359

longhornwenerme

1.2.3

2 of 2 See more

longhorn wenerme 1.2.3

2 of the 2 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.13
longhornio/longhorn-ui :v1.2.3	148598de4b7d	curl@7.79.1-r0	7.79.1-r3

Open the chart page →

15,287

sambawenerme

1.0.0

1 of 1 See more

samba wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
wener/samba :4.13.3	9a42bae466d4	curl@7.74.0-r0	7.79.1-r3

Open the chart page →

2,555

temporalwenerme

0.15.1

2 of 13 See more

temporal wenerme 0.15.1

2 of the 13 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
temporalio/admin-tools :1.15.1	35034611d981	curl@7.79.1-r0	7.79.1-r3
temporalio/server :1.15.1	e26758f5a1bf	curl@7.79.1-r0	7.79.1-r3

Open the chart page →

22,665

workadventureworkadventure

1.1.0

1 of 9 See more

workadventure workadventure 1.1.0

1 of the 9 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
thecodingmachine/workadventure-chat :v1.17.7	da12f37e6795	curl@7.80.0-r1	7.80.0-r3

Open the chart page →

16,083

default-backendwyrihaximusnet

1.1.0

1 of 1 See more

default-backend wyrihaximusnet 1.1.0

1 of the 1 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
ghcr.io/wyrihaximusnet/default-backend :random	b24e63efd841	curl@7.79.1-r0	7.79.1-r3

Open the chart page →

2,535

Container images carrying it

376 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/skyoo2003/digdag :0.0.1	821fd6a6f2cd	curl@7.74.0-r0	7.79.1-r3	1
ghcr.io/stefanprodan/podinfo :6.1.3	f25ebb9c6788	curl@7.80.0-r0	7.80.0-r3	1
ghcr.io/tauffer-consulting/domino-frontend :latest	a923b86a0903	curl@7.76.1-r0	7.79.1-r3	1
ghcr.io/volosoft/eshoponabp/app-web :1.0.0	056bb4271626	curl@7.83.1-r2	7.83.1-r3	1
ghcr.io/wbstack/queryservice-ui :1.4	bc79fbb50230	curl@7.80.0-r0	7.80.0-r3	1
ghcr.io/wbstack/ui :3.94	b01f67faadf1	curl@7.80.0-r1	7.80.0-r3	1
ghcr.io/wmde/wbaas-backup :v0.1.7	8e6a9516eac0	curl@7.58.0-2ubuntu3.18	7.58.0-2ubuntu3.20	1
ghcr.io/wyrihaximusnet/default-backend :random	b24e63efd841	curl@7.79.1-r0	7.79.1-r3	1
public.ecr.aws/spotinst/spot-network-client :1.0.0-8-lb_endpoint-d0ec127	efcecf98b912	curl@7.58.0-2ubuntu3.19	7.58.0-2ubuntu3.20	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	curl@7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.13	1
quay.io/argoproj/argocd :v2.4.11	5b6701d8fb31	curl@7.81.0-1ubuntu1.3	7.81.0-1ubuntu1.4	1
quay.io/cloudnativetoolkit/cli-tools :v1.1-v1.8.2	d6fd2a9e3273	curl@7.83.1-r1	7.83.1-r3	1
quay.io/eclipse/che-plugin-registry :nightly	a88add0f8c93	curl@7.76.1-r0	7.79.1-r3	1
quay.io/ibmgaragecloud/cli-tools :v0.15	9663f06adcb1	curl@7.79.1-r0	7.79.1-r3	1
quay.io/mongodb/mongodb-enterprise-operator :1.8.2	a1c3843b03bc	curl@7.47.0-1ubuntu2.16	7.47.0-1ubuntu2.19+esm5	1
quay.io/netwarps/blockscout	becd3e39360a	curl@7.80.0-r0	7.80.0-r3	1
quay.io/opsmxpublic/awsgit :v2-openssh	0d21ba756f44	curl@7.80.0-r0	7.80.0-r3	1
quay.io/opsmxpublic/awsgit :v3-js	15a6faada3d4	curl@7.79.1-r1	7.79.1-r3	1
quay.io/opsmxpublic/k8s-decoder :hal	fec086394aa9	curl@7.74.0-r0	7.79.1-r3	1
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	curl@7.47.0-1ubuntu2.18	7.47.0-1ubuntu2.19+esm5	1
quay.io/renokico/laravel-helm-demo :0.6.0	3207f957e80c	curl@7.78.0-r0	7.79.1-r3	1
quay.io/renokico/laravel-helm-demo :worker-0.6.0	4b188259267e	curl@7.78.0-r0	7.79.1-r3	1
quay.io/soketi/pws :0.8-16-alpine	399d2e6b10ef	curl@7.79.1-r0	7.79.1-r3	1
registry.gitlab.com/infinitydon/registry/open5gs-aio :v2.2.2	f6385712935f	curl@7.68.0-1ubuntu2.4	7.68.0-1ubuntu2.13	1
registry.k8s.io/ingress-nginx/controller :v1.2.1	5516d103a9c2	curl@7.79.1-r1	7.79.1-r3	1
registry.k8s.io/ingress-nginx/controller :v1.3.0	d1707ca76d3b	curl@7.83.1-r2	7.83.1-r3	1