StackRadar

CVE-2022-36033

Medium

Advisory

Published 1 Sept 2022In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.015
73rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
65
of 17,781 indexed, latest versions
Container images
58
deployed by those charts
Fix available
1 of 1
affected package

jsoup may not sanitize code injection XSS attempts if SafeList.preserveRelativeLinks is enabled

Carried by container images the latest versions of 65 of 17,781 indexed charts deploy, on 58 images.

Affected packageAffected versionsFixed inImages
jsoupmaven1.6.1, 1.7.1, 1.7.2, 1.8.1+10 more1.15.358
OSV records
GHSA-gp7f-rwcx-9369

Charts affected

65 by stars
ChartLatestAffected imagesRadar Score
keycloakcodecentricVerified publisher18.10.01 of 3See more

keycloak codecentric 18.10.0

1 of the 3 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
jsoup@1.14.2
1.15.3

Open the chart page →

7,713
hivemq-operatorhivemqOfficialVerified publisher0.11.621 of 2See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
hivemq/hivemq-operator:4.7.10241d6a8e1963
jsoup@1.14.2
1.15.3

Open the chart page →

7,857
jira-softwaremoxVerified publisher2.7.11 of 3See more

jira-software mox 2.7.1

1 of the 3 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
atlassian/jira-software:9.7.264a75aa4ec4e
jsoup@1.12.1
1.15.3

Open the chart page →

8,636
kubernetes-loggingkubernetes-logging4.8.01 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
jsoup@1.7.2
1.15.3

Open the chart page →

10,530
nzbhydra2halkeye2.30.11 of 2See more

nzbhydra2 halkeye 2.30.1

1 of the 2 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
binhex/arch-nzbhydra2:3.1.0-1-01fb8952921ab6
jsoup@1.11.3
1.15.3

Open the chart page →

6,711
distributed-jmetercloudnativeapp1.0.11 of 1See more

distributed-jmeter cloudnativeapp 1.0.1

1 of the 1 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
pedrocesarti/jmeter-docker:3.314851f144f57
jsoup@1.10.3
1.15.3

Open the chart page →

4,532
spinnakerdwardu-helm-charts2.2.61 of 2See more

spinnaker dwardu-helm-charts 2.2.6

1 of the 2 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
jsoup@1.8.1
1.15.3

Open the chart page →

8,752
keycloakaccount-serviceVerified publisher18.4.51 of 2See more

keycloak account-service 18.4.5

1 of the 2 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
jsoup@1.14.2
1.15.3

Open the chart page →

7,713
akto-source-code-analyserakto0.1.51 of 3See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
hotavneesh/eclipse-jdtls:latesta4579b163414
jsoup@1.14.2
1.15.3

Open the chart page →

4,880
inbox-server-distributedappscodeVerified publisher2025.12.251 of 4See more

inbox-server-distributed appscode 2025.12.25

1 of the 4 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.1.04254021a8c71
jsoup@1.14.3
1.15.3

Open the chart page →

15,573
james-komposeappscodeVerified publisher0.1.01 of 4See more

james-kompose appscode 0.1.0

1 of the 4 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.1.04254021a8c71
jsoup@1.14.3
1.15.3

Open the chart page →

16,975
automatedconfigurationassist-iot-automated-configuration1.0.01 of 5See more

automatedconfiguration assist-iot-automated-configuration 1.0.0

1 of the 5 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
assistiot/automated_configuration:latest23f195a7a26a
jsoup@1.14.3
1.15.3

Open the chart page →

14,728
idmassist-iot-identity-manager0.1.01 of 2See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
assistiot/identity-manager_kc:latest0df4b4fa899a
jsoup@1.14.2
1.15.3

Open the chart page →

13,352
riemanncloudnativeapp0.1.21 of 1See more

riemann cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
raykrueger/riemann:0.2.14c8baf3de57bb
jsoup@1.6.1
1.15.3

Open the chart page →

6,497
apache-ranger-admindata-platform-stableVerified publisher0.2.01 of 2See more

apache-ranger-admin data-platform-stable 0.2.0

1 of the 2 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
jsoup@1.12.1
1.15.3

Open the chart page →

8,245
mintakaeclipse-aeriosVerified publisher1.0.01 of 2See more

mintaka eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
fiware/mintaka:0.7.092a3c5cf43c0
jsoup@1.12.1
1.15.3

Open the chart page →

11,482
eoloPlanteolo-plannerVerified publisher0.1.01 of 7See more

eoloPlant eolo-planner 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
jsoup@1.12.1
1.15.3

Open the chart page →

27,537
eoloplannereoloplannerVerified publisher0.1.01 of 7See more

eoloplanner eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
jsoup@1.12.1
1.15.3

Open the chart page →

32,205
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.01 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
jsoup@1.12.1
1.15.3

Open the chart page →

27,537
eoloplannereoloplanner-molynx-gat0.1.01 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
molynx/planner:v1441c9f52f092
jsoup@1.12.1
1.15.3

Open the chart page →

28,482
eolo-plannereolo-planner-repo0.1.01 of 7See more

eolo-planner eolo-planner-repo 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
arturisimo/planner:v1.0fff9de644941
jsoup@1.12.1
1.15.3

Open the chart page →

27,096
eoloplanteoloplant1.0.01 of 7See more

eoloplant eoloplant 1.0.0

1 of the 7 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
jsoup@1.12.1
1.15.3

Open the chart page →

27,537
eoloplantseoloplants-urjcVerified publisher0.1.01 of 7See more

eoloplants eoloplants-urjc 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
lourdesmorente/new-planner:1.0.0608745878cdb
jsoup@1.12.1
1.15.3

Open the chart page →

27,721
servereoloserverVerified publisher0.1.01 of 7See more

server eoloserver 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
jsoup@1.12.1
1.15.3

Open the chart page →

32,205
gerrit-operatorepmdedpVerified publisher2.25.01 of 2See more

gerrit-operator epmdedp 2.25.0

1 of the 2 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
epamedp/edp-gerrit:3.14.249e8fe9c4855
jsoup@1.14.3
1.15.3

Open the chart page →

1,159
apollofiware0.1.41 of 1See more

apollo fiware 0.1.4

1 of the 1 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
quay.io/fiware/apollo:0.0.1055330b1b60c1
jsoup@1.12.1
1.15.3

Open the chart page →

6,936
canis-majorfiware0.2.31 of 1See more

canis-major fiware 0.2.3

1 of the 1 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
quay.io/fiware/canis-major:1.5.15bb40472e4ff5
jsoup@1.12.1
1.15.3

Open the chart page →

8,528
dss-validation-servicefiware0.0.191 of 1See more

dss-validation-service fiware 0.0.19

1 of the 1 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
quay.io/wi_stefan/dss-validation-service:0.0.18e928db29ee1
jsoup@1.12.1
1.15.3

Open the chart page →

4,536
endpoint-auth-servicefiware0.1.41 of 4See more

endpoint-auth-service fiware 0.1.4

1 of the 4 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
quay.io/fiware/endpoint-configuration-service:0.4.30dc38a87b844
jsoup@1.12.1
1.15.3

Open the chart page →

11,835
mintakafiware0.4.71 of 1See more

mintaka fiware 0.4.7

1 of the 1 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
fiware/mintaka:latestefc6793388cc
jsoup@1.12.1
1.15.3

Open the chart page →

7,019
trusted-issuers-registryfiware0.13.01 of 1See more

trusted-issuers-registry fiware 0.13.0

1 of the 1 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
quay.io/fiware/trusted-issuers-registry:0.11.1a8a9ec461034
jsoup@1.12.1
1.15.3

Open the chart page →

7,087
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
jsoup@1.11.3
1.15.3

Open the chart page →

18,230
komgageek-cookbookVerified publisher2.4.21 of 1See more

komga geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
gotson/komga:0.99.49b15ea6bfc30
jsoup@1.13.1
1.15.3

Open the chart page →

12,581
nzbhydra2geek-cookbookVerified publisher10.4.21 of 1See more

nzbhydra2 geek-cookbook 10.4.2

1 of the 1 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
jsoup@1.11.3
1.15.3

Open the chart page →

17,702
pretend-youre-xyzzygeek-cookbookVerified publisher3.4.21 of 1See more

pretend-youre-xyzzy geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
emcniece/dockeryourxyzzy:404eccbccc15c
jsoup@1.11.2
1.15.3

Open the chart page →

581
teedygeek-cookbookVerified publisher6.2.01 of 1See more

teedy geek-cookbook 6.2.0

1 of the 1 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
sismics/docs:v1.10f4b0ef019cf1
jsoup@1.13.1
1.15.3

Open the chart page →

26,944
ubooquityhalkeye0.1.11 of 1See more

ubooquity halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
linuxserver/ubooquity:2.1.2-ls369932d6759112
jsoup@1.8.3
1.15.3

Open the chart page →

4,303
eoloplanthttpd-eoloplant0.1.01 of 7See more

eoloplant httpd-eoloplant 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
jsoup@1.12.1
1.15.3

Open the chart page →

32,205
ibm-microclimateibm-charts0.1.03 of 8See more

ibm-microclimate ibm-charts 0.1.0

3 of the 8 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
jsoup@1.7.2
1.15.3
ibmcom/microclimate-portal:latested5505e5c7ec
jsoup@1.10.3
1.15.3
ibmcom/microclimate-theia:lateste17bdccc5030
jsoup@1.9.2
1.15.3

Open the chart page →

57,669
eoloserverihuertas2021-vmartinp2021-helm0.1.01 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
huertaslopez/i.huertas.2021-v.martinp.2021-planner:2.0.0e2c18bd65472
jsoup@1.12.1
1.15.3

Open the chart page →

27,721
itm-mqtt-brokerintelVerified publisher1.0.01 of 1See more

itm-mqtt-broker intel 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
hivemq/hivemq4:dns-4.5.144d194450d48e
jsoup@1.14.3
1.15.3

Open the chart page →

2,653
jenkinsjenkins-x0.10.381 of 2See more

jenkins jenkins-x 0.10.38

1 of the 2 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
jenkinsci/jenkins:2.67a1f33f004659
jsoup@1.7.1
1.15.3

Open the chart page →

10,682
nexusjenkins-x0.1.371 of 1See more

nexus jenkins-x 0.1.37

1 of the 1 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
jsoup@1.9.1
1.15.3

Open the chart page →

12,856
penpotkubitodevVerified publisher1.2.11 of 5See more

penpot kubitodev 1.2.1

1 of the 5 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
penpotapp/exporter:2.2.15c835ffd87ab
jsoup@1.7.2
1.15.3

Open the chart page →

16,877
filebot-botluiscajl0.0.111 of 1See more

filebot-bot luiscajl 0.0.11

1 of the 1 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
lavandadelpatio/filebot-bot:0.0.1-SNAPSHOTd2cba20aa4d8
jsoup@1.14.2
1.15.3

Open the chart page →

3,679
lavandaluiscajl0.0.1341 of 5See more

lavanda luiscajl 0.0.134

1 of the 5 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
lavandadelpatio/filebot:0.0.671f2ccec8c0d
jsoup@1.13.1
1.15.3

Open the chart page →

18,248
eoloplantmca-eoloplaner0.1.01 of 7See more

eoloplant mca-eoloplaner 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
hugohg34/planner:0.0.2171f61e8d7e2
jsoup@1.12.1
1.15.3

Open the chart page →

29,588
my-app-namemy-app-name0.0.21 of 1See more

my-app-name my-app-name 0.0.2

1 of the 1 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
viniciusfcf/gitops-quarkus-app-jvm:latestbba8ee1b5cd5
jsoup@1.12.1
1.15.3

Open the chart page →

9,149
Practica_4_helmmy-heml-appVerified publisher0.1.01 of 7See more

Practica_4_helm my-heml-app 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
adagber/planner:v1.0e5c1ed097752
jsoup@1.12.1
1.15.3

Open the chart page →

27,721
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2022-36033.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
jsoup@1.7.2
1.15.3

Open the chart page →

55,726

Container images carrying it

58 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
mastercloudapps/planner:v1.2340a950b311b2
jsoup@1.12.1
1.15.3
4
codeurjc/planner:v1.0800cf520c245
jsoup@1.12.1
1.15.3
3
linuxserver/ubooquity:2.1.2-ls369932d6759112
jsoup@1.8.3
1.15.3
2
opensearchproject/opensearch:2.1.04254021a8c71
jsoup@1.14.3
1.15.3
2
stakater/stakater-nordmart-review:1.0.35954d2be66e95
jsoup@1.12.1
1.15.3
2
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
jsoup@1.14.2
1.15.3
2
adagber/planner:v1.0e5c1ed097752
jsoup@1.12.1
1.15.3
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
jsoup@1.11.3
1.15.3
1
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
jsoup@1.12.1
1.15.3
1
arturisimo/planner:v1.0fff9de644941
jsoup@1.12.1
1.15.3
1
assistiot/automated_configuration:latest23f195a7a26a
jsoup@1.14.3
1.15.3
1
assistiot/identity-manager_kc:latest0df4b4fa899a
jsoup@1.14.2
1.15.3
1
atlassian/confluence-server:7.10.03b9222ab32ef
jsoup@1.9.2
1.15.3
1
atlassian/jira-software:8.14.037bc46cbec1a
jsoup@1.8.3
1.15.3
1
atlassian/jira-software:9.7.264a75aa4ec4e
jsoup@1.12.1
1.15.3
1
binhex/arch-nzbhydra2:3.1.0-1-01fb8952921ab6
jsoup@1.11.3
1.15.3
1
craigwillis/c2metadata-bd:latestae317d7e4724
jsoup@1.7.2
1.15.3
1
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
jsoup@1.12.1
1.15.3
1
emcniece/dockeryourxyzzy:404eccbccc15c
jsoup@1.11.2
1.15.3
1
epamedp/edp-gerrit:3.14.249e8fe9c4855
jsoup@1.14.3
1.15.3
1
fiware/mintaka:0.7.092a3c5cf43c0
jsoup@1.12.1
1.15.3
1
fiware/mintaka:latestefc6793388cc
jsoup@1.12.1
1.15.3
1
gotson/komga:0.99.49b15ea6bfc30
jsoup@1.13.1
1.15.3
1
hivemq/hivemq4:dns-4.5.144d194450d48e
jsoup@1.14.3
1.15.3
1
hivemq/hivemq-operator:4.7.10241d6a8e1963
jsoup@1.14.2
1.15.3
1
hotavneesh/eclipse-jdtls:latesta4579b163414
jsoup@1.14.2
1.15.3
1
huertaslopez/i.huertas.2021-v.martinp.2021-planner:2.0.0e2c18bd65472
jsoup@1.12.1
1.15.3
1
hugohg34/planner:0.0.2171f61e8d7e2
jsoup@1.12.1
1.15.3
1
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
jsoup@1.7.2
1.15.3
1
ibmcom/microclimate-portal:latested5505e5c7ec
jsoup@1.10.3
1.15.3
1
ibmcom/microclimate-theia:lateste17bdccc5030
jsoup@1.9.2
1.15.3
1
jenkinsci/jenkins:2.67a1f33f004659
jsoup@1.7.1
1.15.3
1
lavandadelpatio/filebot:0.0.671f2ccec8c0d
jsoup@1.13.1
1.15.3
1
lavandadelpatio/filebot-bot:0.0.1-SNAPSHOTd2cba20aa4d8
jsoup@1.14.2
1.15.3
1
lourdesmorente/new-planner:1.0.0608745878cdb
jsoup@1.12.1
1.15.3
1
massimolauri/wso2is:5.11.0-centose08abf0ce767
jsoup@1.10.3
1.15.3
1
molynx/planner:v1441c9f52f092
jsoup@1.12.1
1.15.3
1
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
jsoup@1.7.2
1.15.3
1
owasp/dependency-track:3.8.0efc65e702ee1
jsoup@1.11.3
1.15.3
1
pcarrascoponce/planner:v1.0981fc482442c
jsoup@1.12.1
1.15.3
1
pedrocesarti/jmeter-docker:3.314851f144f57
jsoup@1.10.3
1.15.3
1
penpotapp/exporter:2.2.15c835ffd87ab
jsoup@1.7.2
1.15.3
1
raykrueger/riemann:0.2.14c8baf3de57bb
jsoup@1.6.1
1.15.3
1
sismics/docs:v1.10f4b0ef019cf1
jsoup@1.13.1
1.15.3
1
viniciusfcf/gitops-quarkus-app-jvm:latestbba8ee1b5cd5
jsoup@1.12.1
1.15.3
1
xetusoss/archiva:v2.2.588f25242b9ee
jsoup@1.7.2
1.15.3
1
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
jsoup@1.8.1
1.15.3
1
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
jsoup@1.9.1
1.15.3
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
jsoup@1.11.3
1.15.3
1
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
jsoup@1.12.1
1.15.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.