StackRadar

CVE-2022-40023

High

Advisory

Published 7 Sept 2022In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.022
81st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
41
of 17,781 indexed, latest versions
Container images
40
deployed by those charts
Fix available
2 of 2
affected packages

mako is vulnerable to Regular Expression Denial of Service

Carried by container images the latest versions of 41 of 17,781 indexed charts deploy, on 40 images.

Affected packageAffected versionsFixed inImages
makopypi0.8.1, 1.0.2, 1.0.6.dev0, 1.0.7+11 more1.2.240
makodeb1.0.7+ds1-11.0.7+ds1-1ubuntu0.22
OSV records
GHSA-v973-fxgf-6xhpUBUNTU-CVE-2022-40023
Also known as
PYSEC-2022-260, USN-5625-1

Charts affected

41 by stars
ChartLatestAffected imagesRadar Score
supersetcloudposse1.2.01 of 1See more

superset cloudposse 1.2.0

1 of the 1 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
mako@1.0.14
1.2.2

Open the chart page →

5,851
fadicetic0.3.13 of 25See more

fadi cetic 0.3.1

3 of the 25 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
mako@1.0.14
1.2.2
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
mako@1.1.3
1.2.2
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
mako@1.1.3
1.2.2

Open the chart page →

52,919
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
mako@1.2.0
1.2.2

Open the chart page →

7,579
pgadmin4folio-org1.2.301 of 1See more

pgadmin4 folio-org 1.2.30

1 of the 1 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
dpage/pgadmin4:4.22b1f00b8163cf
mako@1.1.2
1.2.2

Open the chart page →

2,034
powerdnsadminhalkeye0.3.11 of 1See more

powerdnsadmin halkeye 0.3.1

1 of the 1 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:0.2.3099371dd9ba6
mako@1.1.3
1.2.2

Open the chart page →

3,345
supersetinseefrlab1.4.01 of 4See more

superset inseefrlab 1.4.0

1 of the 4 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
mako@1.1.4
1.2.2

Open the chart page →

7,129
delugerubxkubeVerified publisher1.2.11 of 1See more

deluge rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
linuxserver/deluge:18.04.10ac871624394
mako@1.0.7+ds1-1
mako@1.0.7
1.0.7+ds1-1ubuntu0.2
1.2.2

Open the chart page →

13,541
ckanstatcan0.0.351 of 8See more

ckan statcan 0.0.35

1 of the 8 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
statcan/ckan:2.93921305425b8
mako@1.1.0
1.2.2

Open the chart page →

24,930
radosgwananace-chartsVerified publisher0.3.41 of 1See more

radosgw ananace-charts 0.3.4

1 of the 1 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
ceph/daemon:latest-nautilus90f30824a96e
mako@0.8.1
1.2.2

Open the chart page →

1,650
pgadminarunalakmalVerified publisher0.1.01 of 1See more

pgadmin arunalakmal 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
dpage/pgadmin4:6.12781369df9994
mako@1.2.1
1.2.2

Open the chart page →

2,418
swdpgadminarunalakmalVerified publisher0.1.01 of 1See more

swdpgadmin arunalakmal 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
dpage/pgadmin4:6.12781369df9994
mako@1.2.1
1.2.2

Open the chart page →

2,418
keystonearzu0.2.292 of 4See more

keystone arzu 0.2.29

2 of the 4 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
mako@1.1.4
1.2.2
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
mako@1.1.4
1.2.2

Open the chart page →

22,568
locationprocessingassist-iot-location-processing1.0.01 of 3See more

locationprocessing assist-iot-location-processing 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
dpage/pgadmin4:6.12781369df9994
mako@1.2.1
1.2.2

Open the chart page →

10,061
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
mako@1.1.4
1.2.2

Open the chart page →

22,891
sickchillbryanalves0.3.01 of 1See more

sickchill bryanalves 0.3.0

1 of the 1 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
mako@1.1.3
1.2.2

Open the chart page →

2,504
syncserverchristianhuthVerified publisher1.3.01 of 1See more

syncserver christianhuth 1.3.0

1 of the 1 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
mozilla/syncserver:latest016162bf39d8
mako@1.0.9
1.2.2

Open the chart page →

1,382
daskcloudnativeapp2.2.11 of 2See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
daskdev/dask-notebook:1.1.0052630f5ca04
mako@1.0.7
1.2.2

Open the chart page →

29,901
supersetcloudnativeapp1.1.61 of 1See more

superset cloudnativeapp 1.1.6

1 of the 1 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
amancevice/superset:0.28.1c8c04bfe3d66
mako@1.0.7
1.2.2

Open the chart page →

5,060
galaxy-stablecloudve2.0.01 of 5See more

galaxy-stable cloudve 2.0.0

1 of the 5 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
mako@1.0.2
1.2.2

Open the chart page →

70,895
mlflowdeliveryheroVerified publisher1.0.101 of 1See more

mlflow deliveryhero 1.0.10

1 of the 1 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
larribas/mlflow:1.9.105ccb0b46bfb
mako@1.1.3
1.2.2

Open the chart page →

4,422
forms-catalogueforms-catalogue0.1.01 of 2See more

forms-catalogue forms-catalogue 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
mako@1.1.5
1.2.2

Open the chart page →

2,188
delugegeek-cookbookVerified publisher5.4.21 of 1See more

deluge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
mako@1.0.7+ds1-1
mako@1.0.7
1.0.7+ds1-1ubuntu0.2
1.2.2

Open the chart page →

13,551
ihatemoneygeek-cookbookVerified publisher1.1.21 of 1See more

ihatemoney geek-cookbook 1.1.2

1 of the 1 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
ihatemoney/ihatemoney:5.2.0457fda1feb32
mako@1.2.0
1.2.2

Open the chart page →

1,526
mylargeek-cookbookVerified publisher4.4.21 of 1See more

mylar geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/mylar3:version-v0.5.3b96f0e97ab3f
mako@1.1.4
1.2.2

Open the chart page →

1,423
powerdns-admingeek-cookbookVerified publisher1.2.21 of 1See more

powerdns-admin geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
mako@1.1.5
1.2.2

Open the chart page →

2,643
pgadminhalkeye1.0.01 of 1See more

pgadmin halkeye 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
chorss/docker-pgadmin4:4.115c549cacb8ab
mako@1.1.0
1.2.2

Open the chart page →

2,555
mlflowhelm-charts-nr1.0.101 of 1See more

mlflow helm-charts-nr 1.0.10

1 of the 1 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
larribas/mlflow:1.9.105ccb0b46bfb
mako@1.1.3
1.2.2

Open the chart page →

4,422
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:1.2.0e4770285aaf7
mako@1.1.4
1.2.2

Open the chart page →

37,671
redashinseefrlab2.1.01 of 3See more

redash inseefrlab 2.1.0

1 of the 3 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
redash/redash:10.0.0.b503639392753c0376
mako@1.1.5
1.2.2

Open the chart page →

3,314
guestbookjakuboskera0.2.01 of 3See more

guestbook jakuboskera 0.2.0

1 of the 3 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
jakuboskera/guestbook:v0.3.04989afa06e74
mako@1.1.6
1.2.2

Open the chart page →

1,090
mlflowkelvins0.4.01 of 3See more

mlflow kelvins 0.4.0

1 of the 3 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
kelvinsp/mlflow:1.26.1cd33e6db2a59
mako@1.2.0
1.2.2

Open the chart page →

4,156
nubladolsst-sqre0.9.233 of 5See more

nublado lsst-sqre 0.9.23

3 of the 5 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
lsstsqre/prepuller:latest19c2dfc4e4ff
mako@1.1.4
1.2.2
lsstsqre/sciplat-hub:latest5e0ade6bed1c
mako@0.8.1
1.2.2
lsstsqre/wfdispatcher:lateste9feb99f524d
mako@1.1.4
1.2.2

Open the chart page →

5,786
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
mako@1.1.6
1.2.2

Open the chart page →

17,779
python-api-postgresmiltex0.0.11 of 2See more

python-api-postgres miltex 0.0.1

1 of the 2 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
miltex/python-api:1.0.0dab12a7748d5
mako@1.1.4
1.2.2

Open the chart page →

2,347
elasticsearch2ncsaVerified publisher0.2.21 of 2See more

elasticsearch2 ncsa 0.2.2

1 of the 2 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
elastichq/elasticsearch-hq:latestbb3bd22c2b87
mako@1.1.0
1.2.2

Open the chart page →

4,911
python-fastapi-postgrespython-fastapi-postgres0.1.01 of 1See more

python-fastapi-postgres python-fastapi-postgres 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
archish27/python-fastapi-postgres:latest6610071a2101
mako@1.2.1
1.2.2

Open the chart page →

2,983
request-registryrequest-registry0.1.01 of 2See more

request-registry request-registry 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
mako@1.1.5
1.2.2

Open the chart page →

2,201
pgadminstakaterVerified publisher0.1.141 of 1See more

pgadmin stakater 0.1.14

1 of the 1 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
dpage/pgadmin4:4.5a5a656e1d5fd
mako@1.0.8
1.2.2

Open the chart page →

2,060
ceph-csi-cephfswikimedia0.1.81 of 5See more

ceph-csi-cephfs wikimedia 0.1.8

1 of the 5 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
mako@1.0.6.dev0
1.2.2

Open the chart page →

10,285
ceph-csi-rbdwikimedia0.1.131 of 6See more

ceph-csi-rbd wikimedia 0.1.13

1 of the 6 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
mako@1.0.6.dev0
1.2.2

Open the chart page →

11,784
powerdnsadminwitcom-gmbh0.3.41 of 1See more

powerdnsadmin witcom-gmbh 0.3.4

1 of the 1 container images this version deploys carry CVE-2022-40023.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
mako@1.1.5
1.2.2

Open the chart page →

2,643

Container images carrying it

40 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
dpage/pgadmin4:6.12781369df9994
mako@1.2.1
1.2.2
3
amancevice/superset:0.35.212a0a9e66550
mako@1.0.14
1.2.2
2
larribas/mlflow:1.9.105ccb0b46bfb
mako@1.1.3
1.2.2
2
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
mako@1.1.5
1.2.2
2
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
mako@1.0.6.dev0
1.2.2
2
amancevice/superset:0.28.1c8c04bfe3d66
mako@1.0.7
1.2.2
1
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
mako@1.1.4
1.2.2
1
archish27/python-fastapi-postgres:latest6610071a2101
mako@1.2.1
1.2.2
1
ceph/daemon:latest-nautilus90f30824a96e
mako@0.8.1
1.2.2
1
chorss/docker-pgadmin4:4.115c549cacb8ab
mako@1.1.0
1.2.2
1
daskdev/dask-notebook:1.1.0052630f5ca04
mako@1.0.7
1.2.2
1
dpage/pgadmin4:4.5a5a656e1d5fd
mako@1.0.8
1.2.2
1
dpage/pgadmin4:4.22b1f00b8163cf
mako@1.1.2
1.2.2
1
elastichq/elasticsearch-hq:latestbb3bd22c2b87
mako@1.1.0
1.2.2
1
galaxy/galaxy-init:v18.010267bad550e6
mako@1.0.2
1.2.2
1
gethue/hue:4.10.05702b2c37ff9
mako@1.1.4
1.2.2
1
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
mako@1.2.0
1.2.2
1
ihatemoney/ihatemoney:5.2.0457fda1feb32
mako@1.2.0
1.2.2
1
jakuboskera/guestbook:v0.3.04989afa06e74
mako@1.1.6
1.2.2
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
mako@1.1.3
1.2.2
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
mako@1.1.4
1.2.2
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
mako@1.1.3
1.2.2
1
kelvinsp/mlflow:1.26.1cd33e6db2a59
mako@1.2.0
1.2.2
1
linuxserver/deluge:18.04.10ac871624394
mako@1.0.7+ds1-1
mako@1.0.7
1.0.7+ds1-1ubuntu0.2
1.2.2
1
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
mako@1.0.7+ds1-1
mako@1.0.7
1.0.7+ds1-1ubuntu0.2
1.2.2
1
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
mako@1.1.3
1.2.2
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
mako@1.1.6
1.2.2
1
lsstsqre/prepuller:latest19c2dfc4e4ff
mako@1.1.4
1.2.2
1
lsstsqre/sciplat-hub:latest5e0ade6bed1c
mako@0.8.1
1.2.2
1
lsstsqre/wfdispatcher:lateste9feb99f524d
mako@1.1.4
1.2.2
1
miltex/python-api:1.0.0dab12a7748d5
mako@1.1.4
1.2.2
1
mozilla/syncserver:latest016162bf39d8
mako@1.0.9
1.2.2
1
ngoduykhanh/powerdns-admin:0.2.3099371dd9ba6
mako@1.1.3
1.2.2
1
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
mako@1.1.4
1.2.2
1
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
mako@1.1.4
1.2.2
1
redash/redash:10.0.0.b503639392753c0376
mako@1.1.5
1.2.2
1
statcan/ckan:2.93921305425b8
mako@1.1.0
1.2.2
1
ghcr.io/linuxserver/mylar3:version-v0.5.3b96f0e97ab3f
mako@1.1.4
1.2.2
1
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
mako@1.1.5
1.2.2
1
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
mako@1.1.5
1.2.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.