StackRadarChart IndexLive demo

CVE-2022-36033

Medium

Advisory

Published 1 Sept 2022In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.1; base score, highest
EPSS: 0.015; 73rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 65; of 17,781 indexed, latest versions
Container images: 58; deployed by those charts
Fix available: 1 of 1; affected package

jsoup may not sanitize code injection XSS attempts if SafeList.preserveRelativeLinks is enabled

Carried by container images the latest versions of 65 of 17,781 indexed charts deploy, on 58 images.

Affected package	Affected versions	Fixed in	Images
jsoupmaven	1.6.1, 1.7.1, 1.7.2, 1.8.1+10 more	1.15.3	58

OSV records: GHSA-gp7f-rwcx-9369

Charts affected

65 by stars

Chart

Latest

Affected images

Radar Score

dependency-tracknovum-rgi-charts

1 of 2 See more

dependency-track novum-rgi-charts 0.1.8

1 of the 2 container images this version deploys carry CVE-2022-36033.

Container image	Digest	Package	Fixed in
owasp/dependency-track :3.8.0	efc65e702ee1	jsoup@1.11.3	1.15.3

Open the chart page →

3,633

p4p4

1 of 7 See more

27,537

Practica_4_helmpr04helm

1 of 7 See more

Practica_4_helm pr04helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-36033.

Container image	Digest	Package	Fixed in
pcarrascoponce/planner :v1.0	981fc482442c	jsoup@1.12.1	1.15.3

Open the chart page →

27,558

stackrox-chartredhat-cop

1 of 1 See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2022-36033.

Container image	Digest	Package	Fixed in
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	jsoup@1.12.1	1.15.3

Open the chart page →

29,227

archivaslamdev

1 of 2 See more

archiva slamdev 0.0.7

1 of the 2 container images this version deploys carry CVE-2022-36033.

Container image	Digest	Package	Fixed in
xetusoss/archiva :v2.2.5	88f25242b9ee	jsoup@1.7.2	1.15.3

Open the chart page →

6,907

atlassian-confluencesomeblackmagic

1 of 1 See more

atlassian-confluence someblackmagic 3.4.1

1 of the 1 container images this version deploys carry CVE-2022-36033.

Container image	Digest	Package	Fixed in
atlassian/confluence-server :7.10.0	3b9222ab32ef	jsoup@1.9.2	1.15.3

Open the chart page →

13,605

atlassian-jirasomeblackmagic

1 of 1 See more

atlassian-jira someblackmagic 3.3.2

1 of the 1 container images this version deploys carry CVE-2022-36033.

Container image	Digest	Package	Fixed in
atlassian/jira-software :8.14.0	37bc46cbec1a	jsoup@1.8.3	1.15.3

Open the chart page →

13,079

allurestakater

1 of 1 See more

allure stakater 1.0.1

1 of the 1 container images this version deploys carry CVE-2022-36033.

Container image	Digest	Package	Fixed in
quay.io/eformat/jenkins-agent-graalvm :latest	a3b9a07648b6	jsoup@1.12.1	1.15.3

Open the chart page →

28,165

nordmart-reviewstakater

1 of 3 See more

nordmart-review stakater 0.0.6

1 of the 3 container images this version deploys carry CVE-2022-36033.

Container image	Digest	Package	Fixed in
stakater/stakater-nordmart-review :1.0.35	954d2be66e95	jsoup@1.12.1	1.15.3

Open the chart page →

11,554

nordmart-review-instancestakater

1 of 3 See more

nordmart-review-instance stakater 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-36033.

Container image	Digest	Package	Fixed in
stakater/stakater-nordmart-review :1.0.35	954d2be66e95	jsoup@1.12.1	1.15.3

Open the chart page →

11,554

1 of 3 See more

hermes touk 0.6.0

1 of the 3 container images this version deploys carry CVE-2022-36033.

Container image	Digest	Package	Fixed in
apicurio/apicurio-registry-kafkasql :2.1.0.Final	a97d67487532	jsoup@1.12.1	1.15.3

Open the chart page →

12,455

ubooquityvhdirk

1 of 1 See more

ubooquity vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2022-36033.

Container image	Digest	Package	Fixed in
linuxserver/ubooquity :2.1.2-ls36	9932d6759112	jsoup@1.8.3	1.15.3

Open the chart page →

4,303

webhookie-allwebhookie

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2022-36033.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	jsoup@1.8.3	1.15.3

Open the chart page →

28,605

workshop-pipelinesworkshop-pipelines

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2022-36033.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	jsoup@1.12.1	1.15.3

Open the chart page →

11,577

is-pattern-1wso2is-pattern1

1 of 2 See more

is-pattern-1 wso2is-pattern1 5.11.0

1 of the 2 container images this version deploys carry CVE-2022-36033.

Container image	Digest	Package	Fixed in
massimolauri/wso2is :5.11.0-centos	e08abf0ce767	jsoup@1.10.3	1.15.3

Open the chart page →

6,213

Container images carrying it

58 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
quay.io/fiware/apollo :0.0.10	55330b1b60c1	jsoup@1.12.1	1.15.3	1
quay.io/fiware/canis-major :1.5.15	bb40472e4ff5	jsoup@1.12.1	1.15.3	1
quay.io/fiware/endpoint-configuration-service :0.4.3	0dc38a87b844	jsoup@1.12.1	1.15.3	1
quay.io/fiware/trusted-issuers-registry :0.11.1	a8a9ec461034	jsoup@1.12.1	1.15.3	1
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	jsoup@1.8.3	1.15.3	1
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	jsoup@1.12.1	1.15.3	1
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	jsoup@1.12.1	1.15.3	1
quay.io/wi_stefan/dss-validation-service :0.0.1	8e928db29ee1	jsoup@1.12.1	1.15.3	1