CVE-2022-35252

Low

Advisory

Published 31 Aug 2022In the index since 5 Sept 2026

Severity: Low; worst across findings
CVSS: 3.7; base score, highest
EPSS: 0.019; 79th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 463; of 17,787 indexed, latest versions
Container images: 374; deployed by those charts
Fix available: 3 of 3; affected packages

curl-7.85.0-1.1 on GA media

Carried by container images the latest versions of 463 of 17,787 indexed charts deploy, on 374 images.

Affected package	Affected versions	Fixed in	Images
curlrpm	7.60.0-lp151.5.6.1	7.85.0-1.1	2
curldeb	7.35.0-1ubuntu2.1, 7.35.0-1ubuntu2.3, 7.35.0-1ubuntu2.16, 7.35.0-1ubuntu2.19+37 more	7.35.0-1ubuntu2.20+esm12, 7.47.0-1ubuntu2.19+esm5, 7.58.0-2ubuntu3.20, 7.68.0-1ubuntu2.13+1 more	242
curlapk	7.74.0-r0, 7.74.0-r1, 7.76.1-r0, 7.77.0-r0+9 more	7.79.1-r3, 7.80.0-r3, 7.83.1-r3	130

OSV records: ALPINE-CVE-2022-35252 UBUNTU-CVE-2022-35252 openSUSE-SU-2024:12293-1
Also known as: USN-5587-1

Charts affected

463 by stars

Chart

Latest

Affected images

Radar Score

pageswalter

1.0.0

2 of 3 See more

pages walter 1.0.0

2 of the 3 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	curl@7.68.0-1ubuntu2.4	7.68.0-1ubuntu2.13
flyway/flyway :6.4.4	22d97ceb0c47	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.20

Open the chart page →

20,190

wazuh-manager-filebeatwazuh-manager-filebeat

0.1.0-gamma

1 of 1 See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.13

Open the chart page →

11,119

queryservice-uiwbstack

0.2.0

1 of 1 See more

queryservice-ui wbstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/queryservice-ui :1.4	bc79fbb50230	curl@7.80.0-r0	7.80.0-r3

Open the chart page →

1,996

uiwbstack

0.4.0

1 of 1 See more

ui wbstack 0.4.0

1 of the 1 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/ui :3.94	b01f67faadf1	curl@7.80.0-r1	7.80.0-r3

Open the chart page →

1,523

wbaas-backupwbstack

0.1.0

1 of 1 See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
ghcr.io/wmde/wbaas-backup :v0.1.7	8e6a9516eac0	curl@7.58.0-2ubuntu3.18	7.58.0-2ubuntu3.20

Open the chart page →

9,743

webresourcecataloguswebresourcecatalogus

1.1.0

1 of 4 See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/webresourcecatalogus-php :latest	8f1bbd5cda85	curl@7.80.0-r0	7.80.0-r3

Open the chart page →

7,552

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	curl@7.58.0-2ubuntu3.9	7.58.0-2ubuntu3.20

Open the chart page →

10,843

frpcwenerme

1.0.1

1 of 1 See more

frpc wenerme 1.0.1

1 of the 1 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
wener/frpc :v0.37.0	cc9fd4da44c0	curl@7.79.1-r0	7.79.1-r3

Open the chart page →

3,359

longhornwenerme

1.2.3

2 of 2 See more

longhorn wenerme 1.2.3

2 of the 2 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.13
longhornio/longhorn-ui :v1.2.3	148598de4b7d	curl@7.79.1-r0	7.79.1-r3

Open the chart page →

15,230

sambawenerme

1.0.0

1 of 1 See more

samba wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
wener/samba :4.13.3	9a42bae466d4	curl@7.74.0-r0	7.79.1-r3

Open the chart page →

2,555

temporalwenerme

0.15.1

2 of 13 See more

temporal wenerme 0.15.1

2 of the 13 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
temporalio/admin-tools :1.15.1	35034611d981	curl@7.79.1-r0	7.79.1-r3
temporalio/server :1.15.1	e26758f5a1bf	curl@7.79.1-r0	7.79.1-r3

Open the chart page →

22,665

workadventureworkadventure

1.1.0

1 of 9 See more

workadventure workadventure 1.1.0

1 of the 9 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
thecodingmachine/workadventure-chat :v1.17.7	da12f37e6795	curl@7.80.0-r1	7.80.0-r3

Open the chart page →

16,083

default-backendwyrihaximusnet

1.1.0

1 of 1 See more

default-backend wyrihaximusnet 1.1.0

1 of the 1 container images this version deploys carry CVE-2022-35252.

Container image	Digest	Package	Fixed in
ghcr.io/wyrihaximusnet/default-backend :random	b24e63efd841	curl@7.79.1-r0	7.79.1-r3

Open the chart page →

2,534

Container images carrying it

374 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
dellcloud/pages :monitor	6ba7b22caacd	curl@7.68.0-1ubuntu2.4	7.68.0-1ubuntu2.13	79
flyway/flyway :6.4.4	22d97ceb0c47	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.20	79
oomk8s/readiness-check :2.0.2	875814cc853d	curl@7.47.0-1ubuntu2.12	7.47.0-1ubuntu2.19+esm5	11
library/mongo :5.0.6-focal	8e70544b6c76	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.13	10
oomk8s/readiness-check :2.0.0	7daa08b81954	curl@7.47.0-1ubuntu2.7	7.47.0-1ubuntu2.19+esm5	6
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	curl@7.47.0-1ubuntu2.8	7.47.0-1ubuntu2.19+esm5	4
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	curl@7.47.0-1ubuntu2.12	7.47.0-1ubuntu2.19+esm5	4
library/mongo :4.2.12-bionic	628741415fc9	curl@7.58.0-2ubuntu3.12	7.58.0-2ubuntu3.20	4
library/mongo :4.4.6	6efa05203990	curl@7.58.0-2ubuntu3.13	7.58.0-2ubuntu3.20	4
oscarsotosanchez/weatherservice :v1.0	911ec961d10b	curl@7.58.0-2ubuntu3.12	7.58.0-2ubuntu3.20	4
cloudve/cloudlaunch-server :latest	4a3d7fae90bb	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.13	3
dgraph/dgraph :v21.12.0	3b55ea83fffe	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.13	3
lachlanevenson/k8s-kubectl :v1.23.2	e4d83478963b	curl@7.80.0-r0	7.80.0-r3	3
nginxinc/nginx-unprivileged :1.19-alpine	084242d8028c	curl@7.76.1-r0	7.79.1-r3	3
selenium/hub :3.141.59	02f251d48d5f	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.13	3
xenondb/percona :5.7.33	0e26872a2b67	curl@7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.13	3
xenondb/xenon :1.1.5-alpha	0241a1112566	curl@7.76.1-r0	7.79.1-r3	3
quay.io/devtron/inception :7beef376-948-31378	4c3b91bebd3d	curl@7.47.0-1ubuntu2.19	7.47.0-1ubuntu2.19+esm5	3
quay.io/devtron/svn-git-sync :v7	8e54bc2d261f	curl@7.83.1-r1	7.83.1-r3	3
apteno/alpine-jq :2021-01-19	74035b864eed	curl@7.74.0-r0	7.79.1-r3	2
devopsjourney1/mywebapp :latest	bd1ec6838570	curl@7.83.1-r2	7.83.1-r3	2
freeradius/freeradius-server :3.0.21	21c8bfa904d8	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.20	2
geoservercloud/geoserver-cloud-gateway :1.0-RC3	756559ee788a	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.13	2
geoservercloud/geoserver-cloud-rest :1.0-RC3	99540eef78ad	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.13	2
geoservercloud/geoserver-cloud-wcs :1.0-RC3	5c254c53a357	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.13	2
geoservercloud/geoserver-cloud-webui :1.0-RC3	c687b1cbc891	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.13	2
geoservercloud/geoserver-cloud-wfs :1.0-RC3	5288f320cf36	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.13	2
geoservercloud/geoserver-cloud-wms :1.0-RC3	a30a60ac6cd0	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.13	2
istio/kubectl :1.5.10	dbb7726d1bf0	curl@7.58.0-2ubuntu3.9	7.58.0-2ubuntu3.20	2
istio/proxyv2 :1.10.3	a78b7a165744	curl@7.58.0-2ubuntu3.13	7.58.0-2ubuntu3.20	2
library/cassandra :3.11.6	5aa8400b4b3b	curl@7.58.0-2ubuntu3.9	7.58.0-2ubuntu3.20	2
library/elasticsearch :7.17.3	5e6ac15bf6a5	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.13	2
library/mongo :4.2.3	58b25d51baa1	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.20	2
library/nginx :1.19-alpine	07ab71a2c8e4	curl@7.76.1-r0	7.79.1-r3	2
lightstep/collector :2021-01-26_23-02-36Z	11c5569aaf3b	curl@7.47.0-1ubuntu2.12	7.47.0-1ubuntu2.19+esm5	2
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	curl@7.68.0-1ubuntu2.2	7.68.0-1ubuntu2.13	2
obsidiandynamics/kafdrop :3.30.0	5337c9e0e2de	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.13	2
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	curl@7.47.0-1ubuntu2.12	7.47.0-1ubuntu2.19+esm5	2
svtechnmaa/svtech_debuger :v1.0.0	b2987abe57d3	curl@7.81.0-1ubuntu1.2	7.81.0-1ubuntu1.4	2
wurstmeister/zookeeper :latest	7a7fd44a7210	curl@7.35.0-1ubuntu2.1	7.35.0-1ubuntu2.20+esm12	2
gcr.io/google_containers/kubernetes-dashboard-init-amd64 :v1.0.0	fbe12aa24de6	curl@7.47.0-1ubuntu2.2	7.47.0-1ubuntu2.19+esm5	2
ghcr.io/danbooru/danbooru :9cab67c0ac72a8c52289302c519715ceec2372d9	5f545698e907	curl@7.81.0-1ubuntu1.3	7.81.0-1ubuntu1.4	2
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.13	2
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	curl@7.58.0-2ubuntu3.10	7.58.0-2ubuntu3.20	2
ghcr.io/salaboy/fmtok8s-frontend :v0.1.1	03fd01b4f56e	curl@7.81.0-1ubuntu1.2	7.81.0-1ubuntu1.4	2
quay.io/iver-wharf/wharf-cmd :v0.8.2	e98d13459cdc	curl@7.80.0-r1	7.80.0-r3	2
quay.io/iver-wharf/wharf-web :v1.6.2	dc5d1ed91c26	curl@7.80.0-r1	7.80.0-r3	2
acockburn/appdaemon :4.0.8	3a93281d7e94	curl@7.74.0-r1	7.79.1-r3	1
adwerx/github-actions-runner :2.276.1-20.04-1	840d2b078682	curl@7.68.0-1ubuntu2.4	7.68.0-1ubuntu2.13	1
ahmedinfraplus/simple-app :STAGING	c50e6e81a637	curl@7.83.1-r2	7.83.1-r3	1