StackRadarChart IndexLive demo

CVE-2022-36364

High

Advisory

Published 29 Jul 2022In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 8.8; base score, highest
EPSS: 0.030; 87th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 12; of 17,781 indexed, latest versions
Container images: 9; deployed by those charts
Fix available: 1 of 1; affected package

Apache Calcite Avatica JDBC driver arbitrary code execution

Carried by container images the latest versions of 12 of 17,781 indexed charts deploy, on 9 images.

Affected package	Affected versions	Fixed in	Images
avatica-coremaven	1.10.0, 1.11.0, 1.12.0, 1.13.0+2 more	1.22.0	9

OSV records: GHSA-w7f5-jrpr-5c2m

Charts affected

12 by stars

Chart

Latest

Affected images

Radar Score

solrpreferred-ai

1 of 3 See more

solr preferred-ai 3.2.0

1 of the 3 container images this version deploys carry CVE-2022-36364.

Container image	Digest	Package	Fixed in
library/solr :8.7.0	d124efd81fbb	avatica-core@1.13.0	1.22.0

Open the chart page →

6,048

hivebigdata-charts

1 of 1 See more

hive bigdata-charts 0.1.8

1 of the 1 container images this version deploys carry CVE-2022-36364.

Container image	Digest	Package	Fixed in
5200710/hive :3.1.3-postgresql-metastore	e34ab066d2ed	avatica-core@1.11.0	1.22.0

Open the chart page →

7,166

hive-metastoreheva-helm-charts

1 of 2 See more

hive-metastore heva-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2022-36364.

Container image	Digest	Package	Fixed in
sslhep/hive-metastore :3.1.3	9e80af083079	avatica-core@1.11.0	1.22.0

Open the chart page →

7,335

stormgresearch

1 of 3 See more

storm gresearch 1.2.0

1 of the 3 container images this version deploys carry CVE-2022-36364.

Container image	Digest	Package	Fixed in
library/storm :2.4.0	bd5d420506d6	avatica-core@1.10.0	1.22.0

Open the chart page →

6,165

ckanstatcan

1 of 8 See more

ckan statcan 0.0.35

1 of the 8 container images this version deploys carry CVE-2022-36364.

Container image	Digest	Package	Fixed in
library/solr :8.11.1	8c5f7881cebb	avatica-core@1.18.0	1.22.0

Open the chart page →

24,930

1 of 2 See more

pulsar cnieg 1.0.8

1 of the 2 container images this version deploys carry CVE-2022-36364.

Container image	Digest	Package	Fixed in
apachepulsar/pulsar-manager :v0.1.0	b341ef76a852	avatica-core@1.13.0	1.22.0

Open the chart page →

16,860

ibm-business-automation-insights-devibm-charts

1 of 6 See more

ibm-business-automation-insights-dev ibm-charts 3.2.0

1 of the 6 container images this version deploys carry CVE-2022-36364.

Container image	Digest	Package	Fixed in
ibmcom/bai-flink-dev :19.0.2	e31ff09e8aad	avatica-core@1.12.0	1.22.0

Open the chart page →

39,349

pulsarv2milvus-helm

1 of 4 See more

pulsarv2 milvus-helm 2.7.8

1 of the 4 container images this version deploys carry CVE-2022-36364.

Container image	Digest	Package	Fixed in
apachepulsar/pulsar-manager :v0.1.0	b341ef76a852	avatica-core@1.13.0	1.22.0

Open the chart page →

15,855

rada-platformrada-platform

1 of 7 See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-36364.

Container image	Digest	Package	Fixed in
trinodb/trino :450	38c6f24ab1a4	avatica-core@1.20.0	1.22.0

Open the chart page →

21,211

fdi-dotstatsuite-sfs-solrstatcan

1 of 4 See more

fdi-dotstatsuite-sfs-solr statcan 1.0.2

1 of the 4 container images this version deploys carry CVE-2022-36364.

Container image	Digest	Package	Fixed in
library/solr :8.11.1	8c5f7881cebb	avatica-core@1.18.0	1.22.0

Open the chart page →

6,065

solrstatcan

1 of 3 See more

solr statcan 1.5.10

1 of the 3 container images this version deploys carry CVE-2022-36364.

Container image	Digest	Package	Fixed in
library/solr :8.11.1	8c5f7881cebb	avatica-core@1.18.0	1.22.0

Open the chart page →

8,806

trinostatcan

1 of 2 See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2022-36364.

Container image	Digest	Package	Fixed in
trinodb/trino :405	ee80ab5eeab2	avatica-core@1.20.0	1.22.0

Open the chart page →

13,767

Container images carrying it

9 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
library/solr :8.11.1	8c5f7881cebb	avatica-core@1.18.0	1.22.0	3
apachepulsar/pulsar-manager :v0.1.0	b341ef76a852	avatica-core@1.13.0	1.22.0	2
5200710/hive :3.1.3-postgresql-metastore	e34ab066d2ed	avatica-core@1.11.0	1.22.0	1
ibmcom/bai-flink-dev :19.0.2	e31ff09e8aad	avatica-core@1.12.0	1.22.0	1
library/solr :8.7.0	d124efd81fbb	avatica-core@1.13.0	1.22.0	1
library/storm :2.4.0	bd5d420506d6	avatica-core@1.10.0	1.22.0	1
sslhep/hive-metastore :3.1.3	9e80af083079	avatica-core@1.11.0	1.22.0	1
trinodb/trino :450	38c6f24ab1a4	avatica-core@1.20.0	1.22.0	1
trinodb/trino :405	ee80ab5eeab2	avatica-core@1.20.0	1.22.0	1