StackRadar

CVE-2022-40896

Medium

Advisory

Published 19 Jul 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.005
43rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
57
of 17,781 indexed, latest versions
Container images
56
deployed by those charts
Fix available
2 of 2
affected packages

Pygments vulnerable to ReDoS

Carried by container images the latest versions of 57 of 17,781 indexed charts deploy, on 56 images.

Affected packageAffected versionsFixed inImages
pygmentspypi2.2.0, 2.3.1, 2.4.2, 2.7.1+10 more2.15.0, 2.15.156
pygmentsdeb2.2.0+dfsg-1, 2.3.1+dfsg-1ubuntu2.2, 2.11.2+dfsg-2, 2.14.0+dfsg-12.11.2+dfsg-2ubuntu0.113
OSV records
DEBIAN-CVE-2022-40896GHSA-mrwq-x4v8-fh7pUBUNTU-CVE-2022-40896PYSEC-2023-117
Also known as
USN-7128-1

Charts affected

57 by stars
ChartLatestAffected imagesRadar Score
netboxbootcVerified publisher4.1.11 of 4See more

netbox bootc 4.1.1

1 of the 4 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.2.83d652dca5351
pygments@2.12.0
2.15.0

Open the chart page →

9,145
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
pygments@2.3.1+dfsg-1ubuntu2.2
pygments@2.3.1
no fix listed
2.15.0

Open the chart page →

32,259
home-assistantgeek-cookbookVerified publisher13.5.01 of 1See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
pygments@2.12.0
2.15.0

Open the chart page →

7,705
fadicetic0.3.11 of 25See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
pygments@2.7.1
2.15.0

Open the chart page →

52,919
taigarc-helm-charts0.1.01 of 7See more

taiga rc-helm-charts 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
taigaio/taiga-back:6.4.29f97323cc150
pygments@2.9.0
2.15.0

Open the chart page →

7,255
grafana-pdf-exporterwiremindVerified publisher2.1.11 of 1See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
pygments@2.14.0+dfsg-1
pygments@2.14.0
no fix listed
2.15.0

Open the chart page →

9,746
deconzgeek-cookbookVerified publisher6.5.21 of 1See more

deconz geek-cookbook 6.5.2

1 of the 1 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.12.066541bbb78952
pygments@2.3.1
2.15.0

Open the chart page →

3,555
flagsmithone-acre-fundVerified publisher0.1.51 of 6See more

flagsmith one-acre-fund 0.1.5

1 of the 6 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
blacktop/httpie:latestfc5e68e2f5ab
pygments@2.2.0
2.15.0

Open the chart page →

6,868
kobotoolboxone-acre-fundVerified publisher0.7.41 of 9See more

kobotoolbox one-acre-fund 0.7.4

1 of the 9 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
kobotoolbox/kpi:2.022.24dbcacc01bccd4
pygments@2.11.2
2.15.0

Open the chart page →

18,517
tensorflow-notebookcloudnativeapp0.1.21 of 1See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
tensorflow/tensorflow:1.6.0-devel1e3172090703
pygments@2.2.0
2.15.0

Open the chart page →

36,094
appdaemongeek-cookbookVerified publisher8.4.21 of 1See more

appdaemon geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
acockburn/appdaemon:4.0.83a93281d7e94
pygments@2.8.1
2.15.0

Open the chart page →

3,461
deepstackgeek-cookbookVerified publisher1.5.21 of 2See more

deepstack geek-cookbook 1.5.2

1 of the 2 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
robmarkcole/deepstack-ui:latest410275726459
pygments@2.10.0
2.15.0

Open the chart page →

5,305
harp-proxyharp0.8.11 of 1See more

harp-proxy harp 0.8.1

1 of the 1 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
makersquad/harp-proxy:0.8.1a40dd258c527
pygments@2.14.0+dfsg-1
pygments@2.14.0
no fix listed
2.15.0

Open the chart page →

6,374
helm-taigamvitale1989-helm-taigaVerified publisher0.2.51 of 2See more

helm-taiga mvitale1989-helm-taiga 0.2.5

1 of the 2 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
mvitale1989/docker-taiga:20191031-4.2.141504ccda06df
pygments@2.2.0
2.15.0

Open the chart page →

5,104
open-notificatiesopen-zaak0.7.01 of 4See more

open-notificaties open-zaak 0.7.0

1 of the 4 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
openzaak/open-notificaties:1.3.02e65313b9b10
pygments@2.4.2
2.15.0

Open the chart page →

2,850
fluent-bitromanow-helm-chartsVerified publisher1.7.31 of 1See more

fluent-bit romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
fluent/fluent-bit:4.0-debuge76397ef3983
pygments@2.14.0+dfsg-1
pygments@2.14.0
no fix listed
2.15.0

Open the chart page →

7,740
routehub-client-hubroutehub-helm1.0.01 of 3See more

routehub-client-hub routehub-helm 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg16d7db8f1085a3
pygments@2.11.2
2.15.0

Open the chart page →

12,930
iopsciencemeshVerified publisher0.4.01 of 2See more

iop sciencemesh 0.4.0

1 of the 2 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
cs3org/wopiserver:v9.4.202a9e78757b4
pygments@2.14.0
2.15.0

Open the chart page →

4,052
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
pygments@2.11.2+dfsg-2
pygments@2.11.2
2.11.2+dfsg-2ubuntu0.1
2.15.0

Open the chart page →

32,501
azure-advanced-backupazure-advanced-backup0.4.11 of 1See more

azure-advanced-backup azure-advanced-backup 0.4.1

1 of the 1 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
ghcr.io/dodevops/azure-advanced-backup:0.4.01041d4449e49
pygments@2.12.0
2.15.0

Open the chart page →

4,568
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
pygments@2.9.0
2.15.0

Open the chart page →

22,891
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
pygments@2.11.2
2.15.0

Open the chart page →

20,900
daskcloudnativeapp2.2.11 of 2See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
daskdev/dask-notebook:1.1.0052630f5ca04
pygments@2.3.1
2.15.0

Open the chart page →

29,901
distributed-tensorflowcloudnativeapp0.1.11 of 1See more

distributed-tensorflow cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
cheyang/distributed-tf:1.6.046cc34755493
pygments@2.2.0
2.15.0

Open the chart page →

36,094
ibm-toolkit-installcloud-native-toolkit0.3.01 of 1See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
pygments@2.11.2
2.15.0

Open the chart page →

6,695
iteration-zerocloud-native-toolkit0.2.01 of 1See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
pygments@2.12.0
2.15.0

Open the chart page →

6,921
galaxy-stablecloudve2.0.01 of 5See more

galaxy-stable cloudve 2.0.0

1 of the 5 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
pygments@2.2.0
2.15.0

Open the chart page →

70,895
pulsarcnieg1.0.81 of 2See more

pulsar cnieg 1.0.8

1 of the 2 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.6.14db6ff0b4045
pygments@2.3.1
2.15.0

Open the chart page →

16,860
wopiservercs3orgOfficialVerified publisher0.9.21 of 1See more

wopiserver cs3org 0.9.2

1 of the 1 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
cs3org/wopiserver:v9.4.202a9e78757b4
pygments@2.14.0
2.15.0

Open the chart page →

2,348
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
pygments@2.2.0+dfsg-1
pygments@2.2.0
no fix listed
2.15.0

Open the chart page →

27,728
kube-web-viewdecayofmind0.0.41 of 1See more

kube-web-view decayofmind 0.0.4

1 of the 1 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
hjacobs/kube-web-view:20.10.0b44a9cf81a2f
pygments@2.7.1
2.15.0

Open the chart page →

2,264
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
pygments@2.11.2+dfsg-2
pygments@2.11.2
2.11.2+dfsg-2ubuntu0.1
2.15.0

Open the chart page →

24,917
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
flyway/flyway:9.1545b5d7cdc75a
pygments@2.14.0
2.15.0

Open the chart page →

9,334
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
pygments@2.4.2
2.15.0

Open the chart page →

14,673
kodiakfikaworks1.1.41 of 2See more

kodiak fikaworks 1.1.4

1 of the 2 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
cdignam/kodiak:v0.54.05a6a55b39cee
pygments@2.10.0
2.15.0

Open the chart page →

3,892
searxgeek-cookbookVerified publisher5.6.21 of 4See more

searx geek-cookbook 5.6.2

1 of the 4 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
searx/searx:1.0.0-211-968b28993dbb3a6d9419
pygments@2.8.0
2.15.0

Open the chart page →

7,470
nominatimheywood8-helm-chartsVerified publisher3.10.81 of 3See more

nominatim heywood8-helm-charts 3.10.8

1 of the 3 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
mediagis/nominatim:4.2d0eae7b51374
pygments@2.11.2+dfsg-2
pygments@2.11.2
2.11.2+dfsg-2ubuntu0.1
2.15.0

Open the chart page →

14,290
erpnextimprowisedVerified publisher3.3.01 of 3See more

erpnext improwised 3.3.0

1 of the 3 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
improwised/erpnext-worker:v13.4.197280b55cbd4
pygments@2.9.0
2.15.0

Open the chart page →

6,501
backstageirembo-backstage-helmVerified publisher1.0.51 of 3See more

backstage irembo-backstage-helm 1.0.5

1 of the 3 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
roadiehq/community-backstage-image:latestef355bf5b639
pygments@2.7.4
2.15.0

Open the chart page →

7,232
deconzjanip81-helm-chartsVerified publisher0.1.11 of 1See more

deconz janip81-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.29.2062de2362641
pygments@2.14.0+dfsg-1
pygments@2.14.0
no fix listed
2.15.0

Open the chart page →

10,780
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
pygments@2.14.0
2.15.0

Open the chart page →

16,417
kyso-nbdimekyso1.0.01 of 1See more

kyso-nbdime kyso 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
kyso/kyso-nbdime:latest4aa9d38ee81d
pygments@2.13.0
2.15.0

Open the chart page →

2,765
nubladolsst-sqre0.9.231 of 5See more

nublado lsst-sqre 0.9.23

1 of the 5 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
lsstsqre/sciplat-hub:latest5e0ade6bed1c
pygments@2.8.1
2.15.0

Open the chart page →

5,786
errbotmidokura-communityVerified publisher0.0.51 of 1See more

errbot midokura-community 0.0.5

1 of the 1 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
errbotio/errbot:6.1.900ee4e0953ab
pygments@2.11.2
2.15.0

Open the chart page →

2,233
fossologymidokura-communityVerified publisher0.2.21 of 2See more

fossology midokura-community 0.2.2

1 of the 2 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
fossology/fossology:4.2.18bd1f22ba7bb
pygments@2.13.0
2.15.0

Open the chart page →

3,294
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
pygments@2.3.1+dfsg-1ubuntu2.2
pygments@2.3.1
no fix listed
2.15.0

Open the chart page →

25,933
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
pygments@2.3.1+dfsg-1ubuntu2.2
pygments@2.3.1
no fix listed
2.15.0

Open the chart page →

15,675
mlflowncsaVerified publisher1.2.11 of 4See more

mlflow ncsa 1.2.1

1 of the 4 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
evk02/mlflow:2.2.1ef6ff257ef35
pygments@2.14.0
2.15.0

Open the chart page →

5,456
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
ncsapolyglot/converters-ebook-convert:latest438d82cdbdb5
pygments@2.2.0
2.15.0

Open the chart page →

55,726
nominatimnominatim-chart1.3.01 of 3See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry CVE-2022-40896.

Container imageDigestPackageFixed in
mediagis/nominatim:3.7c15e941485ef
pygments@2.3.1+dfsg-1ubuntu2.2
pygments@2.3.1
no fix listed
2.15.0

Open the chart page →

22,658

Container images carrying it

56 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/dodevops/azure-advanced-backup:0.4.01041d4449e49
pygments@2.12.0
2.15.0
1
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
pygments@2.12.0
2.15.0
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
pygments@2.14.0+dfsg-1
pygments@2.14.0
no fix listed
2.15.0
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
pygments@2.12.0
2.15.0
1
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
pygments@2.11.2
2.15.0
1
registry.gitlab.com/radiology/infrastructure/study-governor:8.0.04e7faf6f8d5f
pygments@2.13.0
2.15.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.