CVE-2022-40304

High

Advisory

Published 23 Nov 2022In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.8; base score, highest
EPSS: 0.068; 94th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 253; of 17,781 indexed, latest versions
Container images: 246; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 253 of 17,781 indexed charts deploy, on 246 images.

Affected package	Affected versions	Fixed in	Images
libxml2deb	2.9.1+dfsg1-3ubuntu4.3, 2.9.1+dfsg1-3ubuntu4.4, 2.9.1+dfsg1-3ubuntu4.12, 2.9.3+dfsg1-1ubuntu0.2+15 more	2.9.1+dfsg1-3ubuntu4.13+esm4, 2.9.3+dfsg1-1ubuntu0.7+esm4, 2.9.4+dfsg1-6.1ubuntu1.8, 2.9.10+dfsg-5ubuntu0.20.04.5+1 more	140
libxml2apk	2.9.10-r6, 2.9.10-r7, 2.9.12-r0, 2.9.12-r1+4 more	2.9.14-r2	106

OSV records: ALPINE-CVE-2022-40304 UBUNTU-CVE-2022-40304
Also known as: USN-5760-1, USN-5760-2

Charts affected

253 by stars

Chart

Latest

Affected images

Radar Score

powerdnsadminwitcom-gmbh

0.3.4

1 of 1 See more

powerdnsadmin witcom-gmbh 0.3.4

1 of the 1 container images this version deploys carry CVE-2022-40304.

Container image	Digest	Package	Fixed in
ngoduykhanh/powerdns-admin :v0.2.4	ba36ab196d3d	libxml2@2.9.12-r0	2.9.14-r2

Open the chart page →

2,643

workadventureworkadventure

1.1.0

1 of 9 See more

workadventure workadventure 1.1.0

1 of the 9 container images this version deploys carry CVE-2022-40304.

Container image	Digest	Package	Fixed in
thecodingmachine/workadventure-chat :v1.17.7	da12f37e6795	libxml2@2.9.14-r0	2.9.14-r2

Open the chart page →

16,083

default-backendwyrihaximusnet

1.1.0

1 of 1 See more

default-backend wyrihaximusnet 1.1.0

1 of the 1 container images this version deploys carry CVE-2022-40304.

Container image	Digest	Package	Fixed in
ghcr.io/wyrihaximusnet/default-backend :random	b24e63efd841	libxml2@2.9.12-r1	2.9.14-r2

Open the chart page →

2,534

Container images carrying it

246 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/k8s-at-home/jackett :v0.20.1316	3a4715b46aa2	libxml2@2.9.10+dfsg-5ubuntu0.20.04.3	2.9.10+dfsg-5ubuntu0.20.04.5	1
ghcr.io/k8s-at-home/lidarr :v1.0.0.2255	54ebc1f90963	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.5	1
ghcr.io/k8s-at-home/network-ups-tools :v2.7.4-2479-g86a32237	cbd5d4cc1245	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.5	1
ghcr.io/k8s-at-home/nzbget :v21.1	e5571acd10ce	libxml2@2.9.13+dfsg-1ubuntu0.1	2.9.13+dfsg-1ubuntu0.2	1
ghcr.io/k8s-at-home/plex :v1.28.0.5999-97678ded3	ef756c7d784b	libxml2@2.9.10+dfsg-5ubuntu0.20.04.3	2.9.10+dfsg-5ubuntu0.20.04.5	1
ghcr.io/k8s-at-home/pod-gateway :v1.6.1	dcb2d814a4f7	libxml2@2.9.14-r0	2.9.14-r2	1
ghcr.io/k8s-at-home/prowlarr :v0.3.0.1710	c863aa9875fa	libxml2@2.9.10+dfsg-5ubuntu0.20.04.2	2.9.10+dfsg-5ubuntu0.20.04.5	1
ghcr.io/k8s-at-home/qbittorrent :v4.4.2	61deadd1ec78	libxml2@2.9.10+dfsg-5ubuntu0.20.04.2	2.9.10+dfsg-5ubuntu0.20.04.5	1
ghcr.io/k8s-at-home/radarr :v4.1.0.6175	4273dfaf0295	libxml2@2.9.13+dfsg-1ubuntu0.1	2.9.13+dfsg-1ubuntu0.2	1
ghcr.io/k8s-at-home/sonarr :v3.0.8.1507	0eb230e2381a	libxml2@2.9.13+dfsg-1ubuntu0.1	2.9.13+dfsg-1ubuntu0.2	1
ghcr.io/k8s-at-home/tautulli :v2.7.7	4ea617c30397	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.5	1
ghcr.io/k8s-at-home/transmission :v3.00	6011182e3946	libxml2@2.9.10+dfsg-5ubuntu0.20.04.3	2.9.10+dfsg-5ubuntu0.20.04.5	1
ghcr.io/k8s-at-home/xteve :v2.2.0.200	292b3614670f	libxml2@2.9.10+dfsg-5ubuntu0.20.04.2	2.9.10+dfsg-5ubuntu0.20.04.5	1
ghcr.io/kore3lab/kore-board.frontend :v0.5.5	84ece8ee5d35	libxml2@2.9.10-r6	2.9.14-r2	1
ghcr.io/kvaps/kubefarm-ltsp :v0.13.4	24efef013a53	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.5	1
ghcr.io/kvaps/opennebula :v5.12.0.4-1	e28e0e7de11b	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.5	1
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4	01563adc95fd	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.5	1
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4-1	2b92df1143b9	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.5	1
ghcr.io/kvaps/opennebula-flow :v5.12.0.4-1	600221f0f43f	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.5	1
ghcr.io/kvaps/opennebula-gate :v5.12.0.4-1	a85e03d8bc1d	libxml2@2.9.10+dfsg-5ubuntu0.20.04.1	2.9.10+dfsg-5ubuntu0.20.04.5	1
ghcr.io/linuxserver/booksonic-air :version-v2009.1.0	baa4fa9549dc	libxml2@2.9.4+dfsg1-6.1ubuntu1.4	2.9.4+dfsg1-6.1ubuntu1.8	1
ghcr.io/netsoc/docs :latest	48890a52b327	libxml2@2.9.12-r1	2.9.14-r2	1
ghcr.io/netsoc/website :latest	a9618107fa50	libxml2@2.9.13-r0	2.9.14-r2	1
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	libxml2@2.9.10+dfsg-5ubuntu0.20.04.3	2.9.10+dfsg-5ubuntu0.20.04.5	1
ghcr.io/saiakhil46/burger-app :latest	68b76520c0a9	libxml2@2.9.10-r6	2.9.14-r2	1
ghcr.io/smarter-project/audio-client :v3.1.2	3c8375dc5487	libxml2@2.9.10+dfsg-5ubuntu0.20.04.4	2.9.10+dfsg-5ubuntu0.20.04.5	1
ghcr.io/smarter-project/gstreamer :v1.0.2	5ecb16015aa8	libxml2@2.9.10+dfsg-5ubuntu0.20.04.4	2.9.10+dfsg-5ubuntu0.20.04.5	1
ghcr.io/smarter-project/image-detector :v2.5.3	1dcca70c6446	libxml2@2.9.10+dfsg-5ubuntu0.20.04.4	2.9.10+dfsg-5ubuntu0.20.04.5	1
ghcr.io/star-whale/server :0.6.15	8368359c8dd0	libxml2@2.9.10+dfsg-5ubuntu0.20.04.4	2.9.10+dfsg-5ubuntu0.20.04.5	1
ghcr.io/tauffer-consulting/domino-frontend :latest	a923b86a0903	libxml2@2.9.10-r6	2.9.14-r2	1
ghcr.io/volosoft/eshoponabp/app-web :1.0.0	056bb4271626	libxml2@2.9.14-r0	2.9.14-r2	1
ghcr.io/wbstack/queryservice-ui :1.4	bc79fbb50230	libxml2@2.9.12-r2	2.9.14-r2	1
ghcr.io/wbstack/ui :3.94	b01f67faadf1	libxml2@2.9.14-r0	2.9.14-r2	1
ghcr.io/wyrihaximusnet/default-backend :random	b24e63efd841	libxml2@2.9.12-r1	2.9.14-r2	1
mcr.microsoft.com/mssql/server :2019-CU16-ubuntu-20.04	49a57dc220b1	libxml2@2.9.10+dfsg-5ubuntu0.20.04.2	2.9.10+dfsg-5ubuntu0.20.04.5	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	libxml2@2.9.10+dfsg-5	2.9.10+dfsg-5ubuntu0.20.04.5	1
quay.io/cloudnativetoolkit/cli-tools :v1.1-v1.8.2	d6fd2a9e3273	libxml2@2.9.14-r0	2.9.14-r2	1
quay.io/eclipse/che-plugin-registry :nightly	a88add0f8c93	libxml2@2.9.10-r6	2.9.14-r2	1
quay.io/ibmgaragecloud/cli-tools :v0.15	9663f06adcb1	libxml2@2.9.13-r0	2.9.14-r2	1
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	libxml2@2.9.3+dfsg1-1ubuntu0.6	2.9.3+dfsg1-1ubuntu0.7+esm4	1
quay.io/renokico/laravel-helm-demo :0.6.0	3207f957e80c	libxml2@2.9.12-r1	2.9.14-r2	1
quay.io/renokico/laravel-helm-demo :worker-0.6.0	4b188259267e	libxml2@2.9.12-r1	2.9.14-r2	1
registry.gitlab.com/infinitydon/registry/open5gs-aio :v2.2.2	f6385712935f	libxml2@2.9.10+dfsg-5	2.9.10+dfsg-5ubuntu0.20.04.5	1
registry.k8s.io/ingress-nginx/controller :v1.3.1	54f7fe2c6c5a	libxml2@2.9.14-r1	2.9.14-r2	1
registry.k8s.io/ingress-nginx/controller :v1.2.1	5516d103a9c2	libxml2@2.9.14-r0	2.9.14-r2	1
registry.k8s.io/ingress-nginx/controller :v1.3.0	d1707ca76d3b	libxml2@2.9.14-r0	2.9.14-r2	1