StackRadar

CVE-2022-38013

High

Advisory

Published 15 Sept 2022In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.040
90th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
16
of 17,781 indexed, latest versions
Container images
41
deployed by those charts
Fix available
1 of 1
affected package

.NET Denial of Service Vulnerability

Carried by container images the latest versions of 16 of 17,781 indexed charts deploy, on 41 images.

Affected packageAffected versionsFixed inImages
Microsoft.AspNetCore.App.Runtime.linux-x64nuget3.1.3, 3.1.4, 3.1.5, 3.1.9+10 more3.1.29, 6.0.941
OSV records
GHSA-r8m2-4x37-6592
Also known as
BIT-dotnet-2022-38013, BIT-dotnet-sdk-2022-38013

Charts affected

16 by stars
ChartLatestAffected imagesRadar Score
eshoponabpabp-charts1.0.010 of 15See more

eshoponabp abp-charts 1.0.0

10 of the 15 container images this version deploys carry CVE-2022-38013.

Container imageDigestPackageFixed in
ghcr.io/volosoft/eshoponabp/app-authserver:1.0.022ce496c67d7
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.9
ghcr.io/volosoft/eshoponabp/app-publicweb:1.0.07e53010dda55
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.9
ghcr.io/volosoft/eshoponabp/gateway-web:1.0.026465a2bf671
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.9
ghcr.io/volosoft/eshoponabp/gateway-web-public:1.0.050cab15c80d9
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.9
ghcr.io/volosoft/eshoponabp/service-administration:1.0.0206a9bee17a8
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.9
ghcr.io/volosoft/eshoponabp/service-basket:1.0.0dd5ce454072e
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.9
ghcr.io/volosoft/eshoponabp/service-catalog:1.0.07ecb00f53d99
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.9
ghcr.io/volosoft/eshoponabp/service-identity:1.0.0e53bf47b62d0
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.9
ghcr.io/volosoft/eshoponabp/service-ordering:1.0.15e836b17337f
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.9
ghcr.io/volosoft/eshoponabp/service-payment:1.0.02ca91145099c
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.9

Open the chart page →

19,799
voice-biometricslumenvox2.0.112 of 26See more

voice-biometrics lumenvox 2.0.1

12 of the 26 container images this version deploys carry CVE-2022-38013.

Container imageDigestPackageFixed in
lumenvox/cloud-assure-api:2.0.0fcb9fb54a9fd
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.9
lumenvox/cloud-assure-identity:2.0.0147854a3c916
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.9
lumenvox/cloud-audit:2.0.079428add7f38
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.9
lumenvox/cloud-binary-storage:2.0.053decadc102d
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.9
lumenvox/cloud-configuration:2.0.017fbce1a8bc6
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.9
lumenvox/cloud-deployment:2.0.0ea8110886d38
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.9
lumenvox/cloud-engine-resource:2.0.0e2e5abe27abc
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.9
lumenvox/cloud-management-api:2.0.0b9a23345eabd
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.9
lumenvox/cloud-reporting:2.0.07a9ffdc2178a
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.9
lumenvox/cloud-reporting-api:2.0.0dbbaf5462ad6
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.9
lumenvox/cloud-transaction:2.0.08b74f9d3ba09
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.9
lumenvox/cloud-voice-verifier:2.0.014170ad34903
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.9

Open the chart page →

70,741
reservation-appreservation-app1.0.91 of 4See more

reservation-app reservation-app 1.0.9

1 of the 4 container images this version deploys carry CVE-2022-38013.

Container imageDigestPackageFixed in
zbalogh/reservation-dotnet-auth-server:1.0.909a51b809674
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.17
6.0.9

Open the chart page →

6,639
testhubteshubVerified publisher0.1.41 of 3See more

testhub teshub 0.1.4

1 of the 3 container images this version deploys carry CVE-2022-38013.

Container imageDigestPackageFixed in
testhubio/testhub-api:on-prem56badee134b9
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.3
3.1.29

Open the chart page →

7,517
ConvertServiceWeb-Helm-Buildconvertserviceweb-helm-build0.1.14 of 7See more

ConvertServiceWeb-Helm-Build convertserviceweb-helm-build 0.1.1

4 of the 7 container images this version deploys carry CVE-2022-38013.

Container imageDigestPackageFixed in
aidasi/swpapi:v1-1-net6-k8s-test-beta838b5e2080bc
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.7
6.0.9
aidasi/swpbom:v1-1-net6-k8s-test-betafee6857b9bc9
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.7
6.0.9
aidasi/swpgateway:v1-1-net6-k8s-test-beta5ce8dbff7fdc
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.7
6.0.9
aidasi/swpidentity:v1-1-net6-k8s-test-betad433285c7d5a
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.7
6.0.9

Open the chart page →

10,091
kafkamagicdysnixVerified publisher0.2.31 of 1See more

kafkamagic dysnix 0.2.3

1 of the 1 container images this version deploys carry CVE-2022-38013.

Container imageDigestPackageFixed in
digitsy/kafka-magic:2.0.3.4f91d7f56b55d
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.3
3.1.29

Open the chart page →

1,906
faasnetfaasnet0.0.42 of 5See more

faasnet faasnet 0.0.4

2 of the 5 container images this version deploys carry CVE-2022-38013.

Container imageDigestPackageFixed in
simpleidserver/faasgateway:0.0.453c159ea49ca
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.13
6.0.9
simpleidserver/faaskubernetes:0.0.49007e742dd48
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.13
6.0.9

Open the chart page →

7,617
archisteamfarmg0dscookie0.3.01 of 2See more

archisteamfarm g0dscookie 0.3.0

1 of the 2 container images this version deploys carry CVE-2022-38013.

Container imageDigestPackageFixed in
ghcr.io/justarchinet/archisteamfarm:5.2.5.4c7c0a52303cb
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.4
6.0.9

Open the chart page →

966
helm-chart-samplehelm-chart-sampleVerified publisher0.1.01 of 2See more

helm-chart-sample helm-chart-sample 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-38013.

Container imageDigestPackageFixed in
karatejb/demo-k8s:latestf11ac24b23b9
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.7
6.0.9

Open the chart page →

964
external-scaler-azure-cosmos-dbkedacore0.1.01 of 1See more

external-scaler-azure-cosmos-db kedacore 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-38013.

Container imageDigestPackageFixed in
ghcr.io/kedacore/external-scaler-azure-cosmos-db:0.1.04985d164ead9
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.21
3.1.29

Open the chart page →

1,186
nbxplorerkronkltdVerified publisher0.1.51 of 2See more

nbxplorer kronkltd 0.1.5

1 of the 2 container images this version deploys carry CVE-2022-38013.

Container imageDigestPackageFixed in
nicolasdorier/nbxplorer:2.1.52ee70dba03ec2
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.4
3.1.29

Open the chart page →

1,669
myfirstdockerkubermyrepo0.1.01 of 1See more

myfirstdockerkuber myrepo 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-38013.

Container imageDigestPackageFixed in
kodalisri/cherrys:testapp202268d66e1a
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.11
3.1.29

Open the chart page →

1,455
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2022-38013.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.9
3.1.29

Open the chart page →

55,726
cyclonedxopenshift-bootstrapsVerified publisher1.0.121 of 1See more

cyclonedx openshift-bootstraps 1.0.12

1 of the 1 container images this version deploys carry CVE-2022-38013.

Container imageDigestPackageFixed in
cyclonedx/cyclonedx-bom-repo-server:latest9e0c4db6e688
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.9

Open the chart page →

726
bagetsimcube1.0.51 of 1See more

baget simcube 1.0.5

1 of the 1 container images this version deploys carry CVE-2022-38013.

Container imageDigestPackageFixed in
loicsharma/baget:0b46f0ec87216e1dc6839277712ee07c1c2b611aa880c78ae80b
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.10
3.1.29

Open the chart page →

1,687
dotstatsuitestatcan0.2.82 of 6See more

dotstatsuite statcan 0.2.8

2 of the 6 container images this version deploys carry CVE-2022-38013.

Container imageDigestPackageFixed in
siscc/dotstatsuite-core-auth-management:9a653e82bb1e9a45b6fa
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.5
3.1.29
siscc/dotstatsuite-core-sdmxri-nsi:master00d73f06edcf
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.9
3.1.29

Open the chart page →

3,841

Container images carrying it

41 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
aidasi/swpapi:v1-1-net6-k8s-test-beta838b5e2080bc
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.7
6.0.9
1
aidasi/swpbom:v1-1-net6-k8s-test-betafee6857b9bc9
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.7
6.0.9
1
aidasi/swpgateway:v1-1-net6-k8s-test-beta5ce8dbff7fdc
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.7
6.0.9
1
aidasi/swpidentity:v1-1-net6-k8s-test-betad433285c7d5a
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.7
6.0.9
1
craigwillis/c2metadata-bd:latestae317d7e4724
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.9
3.1.29
1
cyclonedx/cyclonedx-bom-repo-server:latest9e0c4db6e688
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.9
1
digitsy/kafka-magic:2.0.3.4f91d7f56b55d
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.3
3.1.29
1
karatejb/demo-k8s:latestf11ac24b23b9
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.7
6.0.9
1
kodalisri/cherrys:testapp202268d66e1a
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.11
3.1.29
1
loicsharma/baget:0b46f0ec87216e1dc6839277712ee07c1c2b611aa880c78ae80b
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.10
3.1.29
1
lumenvox/cloud-assure-api:2.0.0fcb9fb54a9fd
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.9
1
lumenvox/cloud-assure-identity:2.0.0147854a3c916
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.9
1
lumenvox/cloud-audit:2.0.079428add7f38
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.9
1
lumenvox/cloud-binary-storage:2.0.053decadc102d
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.9
1
lumenvox/cloud-configuration:2.0.017fbce1a8bc6
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.9
1
lumenvox/cloud-deployment:2.0.0ea8110886d38
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.9
1
lumenvox/cloud-engine-resource:2.0.0e2e5abe27abc
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.9
1
lumenvox/cloud-management-api:2.0.0b9a23345eabd
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.9
1
lumenvox/cloud-reporting:2.0.07a9ffdc2178a
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.9
1
lumenvox/cloud-reporting-api:2.0.0dbbaf5462ad6
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.9
1
lumenvox/cloud-transaction:2.0.08b74f9d3ba09
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.9
1
lumenvox/cloud-voice-verifier:2.0.014170ad34903
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.9
1
nicolasdorier/nbxplorer:2.1.52ee70dba03ec2
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.4
3.1.29
1
simpleidserver/faasgateway:0.0.453c159ea49ca
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.13
6.0.9
1
simpleidserver/faaskubernetes:0.0.49007e742dd48
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.13
6.0.9
1
siscc/dotstatsuite-core-auth-management:9a653e82bb1e9a45b6fa
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.5
3.1.29
1
siscc/dotstatsuite-core-sdmxri-nsi:master00d73f06edcf
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.9
3.1.29
1
testhubio/testhub-api:on-prem56badee134b9
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.3
3.1.29
1
zbalogh/reservation-dotnet-auth-server:1.0.909a51b809674
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.17
6.0.9
1
ghcr.io/justarchinet/archisteamfarm:5.2.5.4c7c0a52303cb
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.4
6.0.9
1
ghcr.io/kedacore/external-scaler-azure-cosmos-db:0.1.04985d164ead9
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.21
3.1.29
1
ghcr.io/volosoft/eshoponabp/app-authserver:1.0.022ce496c67d7
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.9
1
ghcr.io/volosoft/eshoponabp/app-publicweb:1.0.07e53010dda55
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.9
1
ghcr.io/volosoft/eshoponabp/gateway-web:1.0.026465a2bf671
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.9
1
ghcr.io/volosoft/eshoponabp/gateway-web-public:1.0.050cab15c80d9
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.9
1
ghcr.io/volosoft/eshoponabp/service-administration:1.0.0206a9bee17a8
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.9
1
ghcr.io/volosoft/eshoponabp/service-basket:1.0.0dd5ce454072e
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.9
1
ghcr.io/volosoft/eshoponabp/service-catalog:1.0.07ecb00f53d99
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.9
1
ghcr.io/volosoft/eshoponabp/service-identity:1.0.0e53bf47b62d0
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.9
1
ghcr.io/volosoft/eshoponabp/service-ordering:1.0.15e836b17337f
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.9
1
ghcr.io/volosoft/eshoponabp/service-payment:1.0.02ca91145099c
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.9
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.