CVE-2022-40735
HighAdvisory
Published 14 Nov 2022In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.024
- 83rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 301
- of 17,781 indexed, latest versions
- Container images
- 269
- deployed by those charts
- Fix available
- 1 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 301 of 17,781 indexed charts deploy, on 269 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| openssldeb | 3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+18 more | 3.0.2-0ubuntu1.16 | 269 |
| nodejsdeb | 16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 more | no fix listed | 5 |
- OSV records
- UBUNTU-CVE-2022-40735
- Also known as
- USN-6854-1
Charts affected
301 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| zoo-project-druzoo-projectOfficialVerified publisher | 0.10.4 | 1 of 6See more | 7,849 |
Container images carrying it
269 by charts deploying them
A fixed version is listed for 1 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| twentycrm/ | 2f78405a78be | openssl | 3.0.2-0ubuntu1.16 | 1 |
| typesense/ | 035ccfbc3fd8 | openssl | 3.0.2-0ubuntu1.16 | 1 |
| typesense/ | 91604dc128e2 | openssl | no fix listed | 1 |
| typesense/ | dea1b62b7b6e | openssl | no fix listed | 1 |
| ubuntu/ | 723891b5bc74 | openssl | no fix listed | 1 |
| velero/ | 11459094b1b2 | openssl | no fix listed | 1 |
| velero/ | 37396519f399 | openssl | no fix listed | 1 |
| velero/ | e4d1e79be2ee | openssl | no fix listed | 1 |
| wateim/ | 2520149ee574 | openssl | no fix listed | 1 |
| wistefan/ | e0887302b2d8 | openssl | 3.0.2-0ubuntu1.16 | 1 |
| wolveix/ | 199be1064b18 | openssl | no fix listed | 1 |
| wolveix/ | 464d11e36e10 | openssl | no fix listed | 1 |
| workadventure/ | 92b664c2a06f | nodejs openssl | no fix listed no fix listed | 1 |
| xeladock/ | 4baf531453f1 | openssl | 3.0.2-0ubuntu1.16 | 1 |
| xeladock/ | c259a67b1dff | openssl | 3.0.2-0ubuntu1.16 | 1 |
| xeotek/ | 39a3b37a17c5 | openssl | no fix listed | 1 |
| zabbix/ | e5b594057c9c | openssl | 3.0.2-0ubuntu1.16 | 1 |
| zabbix/ | d59ffa07f615 | openssl | 3.0.2-0ubuntu1.16 | 1 |
| zabbix/ | 99e9a090b516 | openssl | 3.0.2-0ubuntu1.16 | 1 |
| zabbix/ | ee4baa872280 | openssl | 3.0.2-0ubuntu1.16 | 1 |
| zooproject/ | 9a507cb7e2dd | openssl | no fix listed | 1 |
| gcr.io/ | f33e88324a40 | openssl | 3.0.2-0ubuntu1.16 | 1 |
| gcr.io/ | 852f7923fad3 | openssl | 3.0.2-0ubuntu1.16 | 1 |
| ghcr.io/ | 89c4a2e74863 | openssl | no fix listed | 1 |
| ghcr.io/ | e9c2ce635b89 | openssl | no fix listed | 1 |
| ghcr.io/ | 4a2824296412 | openssl | 3.0.2-0ubuntu1.16 | 1 |
| ghcr.io/ | 20518335f9f9 | openssl | 3.0.2-0ubuntu1.16 | 1 |
| ghcr.io/ | 1aba0ffe55ea | openssl | no fix listed | 1 |
| ghcr.io/ | 68f52b993a7f | openssl | 3.0.2-0ubuntu1.16 | 1 |
| ghcr.io/ | d9d796a1b846 | openssl | 3.0.2-0ubuntu1.16 | 1 |
| ghcr.io/ | 13f121613edd | openssl | 3.0.2-0ubuntu1.16 | 1 |
| ghcr.io/ | f53bde3acd4f | openssl | 3.0.2-0ubuntu1.16 | 1 |
| ghcr.io/ | e589db0d0a2c | openssl | no fix listed | 1 |
| ghcr.io/ | 03c1ddbda33b | openssl | 3.0.2-0ubuntu1.16 | 1 |
| ghcr.io/ | 24a0113d5fb0 | openssl | no fix listed | 1 |
| ghcr.io/ | 0e05a7b49c33 | openssl | no fix listed | 1 |
| ghcr.io/ | 10006bc0f309 | openssl | no fix listed | 1 |
| ghcr.io/ | e5571acd10ce | openssl | 3.0.2-0ubuntu1.16 | 1 |
| ghcr.io/ | 4273dfaf0295 | openssl | 3.0.2-0ubuntu1.16 | 1 |
| ghcr.io/ | 0eb230e2381a | openssl | 3.0.2-0ubuntu1.16 | 1 |
| ghcr.io/ | 4c1b67cf39af | openssl | 3.0.2-0ubuntu1.16 | 1 |
| ghcr.io/ | b065ec5a5239 | openssl | no fix listed | 1 |
| ghcr.io/ | 6f65e53e252d | openssl | no fix listed | 1 |
| ghcr.io/ | c7ede1bab641 | openssl | no fix listed | 1 |
| ghcr.io/ | c379e66246be | openssl | 3.0.2-0ubuntu1.16 | 1 |
| ghcr.io/ | 1c53bfb59697 | openssl | no fix listed | 1 |
| ghcr.io/ | 9fdec1be03e4 | openssl | no fix listed | 1 |
| ghcr.io/ | afb3e9282952 | openssl | no fix listed | 1 |
| ghcr.io/ | 1e5290e8b743 | openssl | no fix listed | 1 |
| ghcr.io/ | bfedf47bb5e0 | openssl | 3.0.2-0ubuntu1.16 | 1 |