CVE-2022-38900
HighAdvisory
Published 28 Nov 2022In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.238
- 98th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 225
- of 17,787 indexed, latest versions
- Container images
- 225
- deployed by those charts
- Fix available
- 1 of 1
- affected package
decode-uri-component vulnerable to Denial of Service (DoS)
Carried by container images the latest versions of 225 of 17,787 indexed charts deploy, on 225 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| decode-uri-componentnpm | 0.2.0 | 0.2.1 | 225 |
- OSV records
- GHSA-w573-4hg7-7wgq
Charts affected
225 by stars
Container images carrying it
225 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 8ba040e79ca0 | decode-uri-component | 0.2.1 | 1 |
| ghcr.io/ | a8d40779eeae | decode-uri-component | 0.2.1 | 1 |
| ghcr.io/ | 38a4f32fad82 | decode-uri-component | 0.2.1 | 1 |
| ghcr.io/ | eab9bd0b6986 | decode-uri-component | 0.2.1 | 1 |
| ghcr.io/ | 827aa2f2389d | decode-uri-component | 0.2.1 | 1 |
| ghcr.io/ | 451706815103 | decode-uri-component | 0.2.1 | 1 |
| ghcr.io/ | 58d377933678 | decode-uri-component | 0.2.1 | 1 |
| ghcr.io/ | 763daf9caf8e | decode-uri-component | 0.2.1 | 1 |
| ghcr.io/ | 96683c54ae65 | decode-uri-component | 0.2.1 | 1 |
| ghcr.io/ | 33f7976b26a8 | decode-uri-component | 0.2.1 | 1 |
| ghcr.io/ | 542e91e8499c | decode-uri-component | 0.2.1 | 1 |
| ghcr.io/ | 491bb243f555 | decode-uri-component | 0.2.1 | 1 |
| ghcr.io/ | 254d16af8f71 | decode-uri-component | 0.2.1 | 1 |
| quay.io/ | 10df27bc5560 | decode-uri-component | 0.2.1 | 1 |
| quay.io/ | ce6938ff6709 | decode-uri-component | 0.2.1 | 1 |
| quay.io/ | 7a4b9fedc724 | decode-uri-component | 0.2.1 | 1 |
| quay.io/ | 01c3b7acb301 | decode-uri-component | 0.2.1 | 1 |
| quay.io/ | 041df93e2bac | decode-uri-component | 0.2.1 | 1 |
| quay.io/ | 99ccdfd543e1 | decode-uri-component | 0.2.1 | 1 |
| quay.io/ | cad83090c58f | decode-uri-component | 0.2.1 | 1 |
| quay.io/ | 6ba82beff18e | decode-uri-component | 0.2.1 | 1 |
| quay.io/ | 4cd9ea9434c4 | decode-uri-component | 0.2.1 | 1 |
| quay.io/ | 399d2e6b10ef | decode-uri-component | 0.2.1 | 1 |
| quay.io/ | c973e166a5dc | decode-uri-component | 0.2.1 | 1 |
| registry.gitlab.com/ | fda21b0a0344 | decode-uri-component | 0.2.1 | 1 |