StackRadar

CVE-2022-36083

Medium

Advisory

Published 16 Sept 2022In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.015
73rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
19
of 17,781 indexed, latest versions
Container images
20
deployed by those charts
Fix available
1 of 1
affected package

JOSE vulnerable to resource exhaustion via specifically crafted JWE

Carried by container images the latest versions of 19 of 17,781 indexed charts deploy, on 20 images.

Affected packageAffected versionsFixed inImages
josenpm1.26.1, 1.27.1, 2.0.4, 2.0.5+2 more1.28.2, 2.0.6, 4.9.220
OSV records
GHSA-jv3g-j58f-9mq9

Charts affected

19 by stars
ChartLatestAffected imagesRadar Score
backstagedeliveryheroVerified publisher0.1.151 of 2See more

backstage deliveryhero 0.1.15

1 of the 2 container images this version deploys carry CVE-2022-36083.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
jose@1.27.1
1.28.2

Open the chart page →

8,213
data-fairdata354-helmVerified publisher1.1.22 of 12See more

data-fair data354-helm 1.1.2

2 of the 12 container images this version deploys carry CVE-2022-36083.

Container imageDigestPackageFixed in
ghcr.io/data-fair/metrics:0a8d40779eeae
jose@2.0.5
2.0.6
ghcr.io/data-fair/simple-directory:438a4f32fad82
jose@2.0.5
2.0.6

Open the chart page →

38,346
flamerlex0.3.01 of 1See more

flame rlex 0.3.0

1 of the 1 container images this version deploys carry CVE-2022-36083.

Container imageDigestPackageFixed in
pawelmalak/flame:2.1.193e7b0abb603
jose@2.0.5
2.0.6

Open the chart page →

2,449
smartorchestratorassist-iot-smart-orchestrator4.0.03 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

3 of the 14 container images this version deploys carry CVE-2022-36083.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_cluster:latest4f41e1defe99
jose@2.0.5
2.0.6
assistiot/smart-orchestrator_enabler:latest89f37e88c871
jose@2.0.5
2.0.6
assistiot/smart-orchestrator_repository:latesta8b8dbed04a4
jose@2.0.5
2.0.6

Open the chart page →

45,363
db-operatordb-operatorVerified publisher0.1.01 of 1See more

db-operator db-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-36083.

Container imageDigestPackageFixed in
plumdog/db-operator:latest0c2fa2db0357
jose@2.0.5
2.0.6

Open the chart page →

3,042
smeejasfanzynoodle0.0.11 of 1See more

smeejas fanzynoodle 0.0.1

1 of the 1 container images this version deploys carry CVE-2022-36083.

Container imageDigestPackageFixed in
fanzynoodle/smeejas:0.0.15f9916c1a287
jose@2.0.5
2.0.6

Open the chart page →

4,127
flamegabe565Verified publisher0.6.01 of 1See more

flame gabe565 0.6.0

1 of the 1 container images this version deploys carry CVE-2022-36083.

Container imageDigestPackageFixed in
pawelmalak/flame:multiarch2.3.19f88b17692a0
jose@2.0.5
2.0.6

Open the chart page →

2,172
backstagehelm-charts-nr0.1.151 of 2See more

backstage helm-charts-nr 0.1.15

1 of the 2 container images this version deploys carry CVE-2022-36083.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
jose@1.27.1
1.28.2

Open the chart page →

8,213
backstageirembo-backstage-helmVerified publisher1.0.51 of 3See more

backstage irembo-backstage-helm 1.0.5

1 of the 3 container images this version deploys carry CVE-2022-36083.

Container imageDigestPackageFixed in
roadiehq/community-backstage-image:latestef355bf5b639
jose@2.0.5
2.0.6

Open the chart page →

7,232
sqlpadkronkltdVerified publisher0.1.01 of 1See more

sqlpad kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-36083.

Container imageDigestPackageFixed in
sqlpad/sqlpad:6.7d3d2f430dffd
jose@2.0.5
2.0.6

Open the chart page →

3,397
u4a-componentkubebb0.2.101 of 8See more

u4a-component kubebb 0.2.10

1 of the 8 container images this version deploys carry CVE-2022-36083.

Container imageDigestPackageFixed in
kubebb/bff-server:v0.2.0-202312040fbb732379bc
jose@2.0.5
2.0.6

Open the chart page →

13,819
kommandermesosphere-stable0.39.21 of 29See more

kommander mesosphere-stable 0.39.2

1 of the 29 container images this version deploys carry CVE-2022-36083.

Container imageDigestPackageFixed in
mesosphere/kommander:6.100.13917e82333a9
jose@2.0.4
2.0.6

Open the chart page →

68,284
opsportalmesosphere-stable0.9.51 of 3See more

opsportal mesosphere-stable 0.9.5

1 of the 3 container images this version deploys carry CVE-2022-36083.

Container imageDigestPackageFixed in
mesosphere/kommander:6.100.13917e82333a9
jose@2.0.4
2.0.6

Open the chart page →

7,027
middleware-odigosmiddleware-labsVerified publisher0.2.411 of 6See more

middleware-odigos middleware-labs 0.2.41

1 of the 6 container images this version deploys carry CVE-2022-36083.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/odigos-ui:middleware-test-0.0.787120a4561a9
jose@2.0.5
2.0.6

Open the chart page →

8,370
middleware-visionmiddleware-labsVerified publisher0.2.651 of 6See more

middleware-vision middleware-labs 0.2.65

1 of the 6 container images this version deploys carry CVE-2022-36083.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/vision-ui:middleware-test-0.0.853772b7b42c7
jose@2.0.5
2.0.6

Open the chart page →

8,361
flomesh-consoleopenshift0.70.0-30-ubi81 of 2See more

flomesh-console openshift 0.70.0-30-ubi8

1 of the 2 container images this version deploys carry CVE-2022-36083.

Container imageDigestPackageFixed in
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
jose@4.8.1
4.9.2

Open the chart page →

9,968
kubernetes-external-secretstrozz6.3.01 of 1See more

kubernetes-external-secrets trozz 6.3.0

1 of the 1 container images this version deploys carry CVE-2022-36083.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/kubernetes-external-secrets:6.3.0eab9bd0b6986
jose@1.26.1
1.28.2

Open the chart page →

2,838
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2022-36083.

Container imageDigestPackageFixed in
temporalio/web:1.14.033cfa863d8ce
jose@2.0.5
2.0.6

Open the chart page →

22,665
skoonerxdVerified publisher1.1.01 of 1See more

skooner xd 1.1.0

1 of the 1 container images this version deploys carry CVE-2022-36083.

Container imageDigestPackageFixed in
ymuski/skooner:latest67819ca511b5
jose@4.5.1
4.9.2

Open the chart page →

1,752

Container images carrying it

20 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
jose@1.27.1
1.28.2
2
mesosphere/kommander:6.100.13917e82333a9
jose@2.0.4
2.0.6
2
assistiot/smart-orchestrator_cluster:latest4f41e1defe99
jose@2.0.5
2.0.6
1
assistiot/smart-orchestrator_enabler:latest89f37e88c871
jose@2.0.5
2.0.6
1
assistiot/smart-orchestrator_repository:latesta8b8dbed04a4
jose@2.0.5
2.0.6
1
fanzynoodle/smeejas:0.0.15f9916c1a287
jose@2.0.5
2.0.6
1
kubebb/bff-server:v0.2.0-202312040fbb732379bc
jose@2.0.5
2.0.6
1
pawelmalak/flame:2.1.193e7b0abb603
jose@2.0.5
2.0.6
1
pawelmalak/flame:multiarch2.3.19f88b17692a0
jose@2.0.5
2.0.6
1
plumdog/db-operator:latest0c2fa2db0357
jose@2.0.5
2.0.6
1
roadiehq/community-backstage-image:latestef355bf5b639
jose@2.0.5
2.0.6
1
sqlpad/sqlpad:6.7d3d2f430dffd
jose@2.0.5
2.0.6
1
temporalio/web:1.14.033cfa863d8ce
jose@2.0.5
2.0.6
1
ymuski/skooner:latest67819ca511b5
jose@4.5.1
4.9.2
1
ghcr.io/data-fair/metrics:0a8d40779eeae
jose@2.0.5
2.0.6
1
ghcr.io/data-fair/simple-directory:438a4f32fad82
jose@2.0.5
2.0.6
1
ghcr.io/external-secrets/kubernetes-external-secrets:6.3.0eab9bd0b6986
jose@1.26.1
1.28.2
1
ghcr.io/middleware-labs/odigos-ui:middleware-test-0.0.787120a4561a9
jose@2.0.5
2.0.6
1
ghcr.io/middleware-labs/vision-ui:middleware-test-0.0.853772b7b42c7
jose@2.0.5
2.0.6
1
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
jose@4.8.1
4.9.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.