StackRadar

CVE-2022-41409

High

Advisory

Published 18 Jul 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.011
64th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
690
of 17,787 indexed, latest versions
Container images
610
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 690 of 17,787 indexed charts deploy, on 610 images.

Affected packageAffected versionsFixed inImages
pcre2deb10.21-1, 10.34-7, 10.34-7ubuntu0.1, 10.39-3+ubuntu20.04.1+deb.sury.org+2+3 moreno fix listed546
pcre2apk10.39-r0, 10.40-r010.42-r064
OSV records
ALPINE-CVE-2022-41409UBUNTU-CVE-2022-41409

Charts affected

690 by stars
ChartLatestAffected imagesRadar Score
clickhousesinextraVerified publisher0.22.01 of 1See more

clickhouse sinextra 0.22.0

1 of the 1 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:26.3.1092098d3b31dd
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

2,013
gitlab-omnibusslamdev0.1.61 of 2See more

gitlab-omnibus slamdev 0.1.6

1 of the 2 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
daedalusproject/base_kubectl:latest6f72b5119eda
pcre2@10.34-7
no fix listed

Open the chart page →

2,849
smarter-demosmarterOfficialVerified publisher0.1.53 of 7See more

smarter-demo smarter 0.1.5

3 of the 7 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
pcre2@10.34-7ubuntu0.1
no fix listed
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
pcre2@10.34-7ubuntu0.1
no fix listed
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
pcre2@10.34-7ubuntu0.1
no fix listed

Open the chart page →

46,028
squidsquid-helmVerified publisher0.1.01 of 1See more

squid squid-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
ubuntu/squid:5.2-22.04_beta723891b5bc74
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

2,622
starwhalestarwhaleVerified publisher0.6.151 of 4See more

starwhale starwhale 0.6.15

1 of the 4 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
ghcr.io/star-whale/server:0.6.158368359c8dd0
pcre2@10.34-7ubuntu0.1
no fix listed

Open the chart page →

13,532
ckanstatcan0.0.351 of 8See more

ckan statcan 0.0.35

1 of the 8 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
statcan/ckan:2.93921305425b8
pcre2@10.34-7
no fix listed

Open the chart page →

24,984
hlf-k8ssubstraVerified publisher10.2.41 of 7See more

hlf-k8s substra 10.2.4

1 of the 7 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
ghcr.io/substra/fabric-tools:0.2.43491a0f31c4a
pcre2@10.40-r0
10.42-r0

Open the chart page →

12,006
supersonicsupersonicVerified publisher0.3.11 of 2See more

supersonic supersonic 0.3.1

1 of the 2 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.30.92956bd9de830
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

2,139
typesensetypesenseVerified publisher1.1.41 of 1See more

typesense typesense 1.1.4

1 of the 1 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
typesense/typesense:30.191604dc128e2
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

1,908
ueransim-gnbueransim-gnbVerified publisher0.2.61 of 1See more

ueransim-gnb ueransim-gnb 0.2.6

1 of the 1 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
gradiant/ueransim:3.2.6015b30d5fa0f
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

3,804
ueransim-uesueransim-uesVerified publisher0.1.21 of 1See more

ueransim-ues ueransim-ues 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
gradiant/ueransim:3.2.6015b30d5fa0f
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

3,804
user-componentuser-component1.2.01 of 4See more

user-component user-component 1.2.0

1 of the 4 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/user-component-php:latest198db44fabb5
pcre2@10.39-r0
10.42-r0

Open the chart page →

7,303
tdarrvhdirkVerified publisher5.0.52 of 2See more

tdarr vhdirk 5.0.5

2 of the 2 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
haveagitgat/tdarr_node:2.17.013ff0913202dd
pcre2@10.34-7ubuntu0.1
no fix listed
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
pcre2@10.34-7
no fix listed

Open the chart page →

26,843
phpipamvquieVerified publisher1.0.33 of 3See more

phpipam vquie 1.0.3

3 of the 3 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
library/mariadb:10.11.21c33370a599c
pcre2@10.39-3ubuntu0.1
no fix listed
phpipam/phpipam-cron:v1.5.2f770577cb946
pcre2@10.40-r0
10.42-r0
phpipam/phpipam-www:v1.5.23c6fd1332aeb
pcre2@10.40-r0
10.42-r0

Open the chart page →

7,069
wharf-ainowharf-helmVerified publisher0.1.52 of 7See more

wharf-aino wharf-helm 0.1.5

2 of the 7 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
quay.io/iver-wharf/wharf-cmd:v0.8.2e98d13459cdc
pcre2@10.39-r0
10.42-r0
quay.io/iver-wharf/wharf-web:v1.6.2dc5d1ed91c26
pcre2@10.39-r0
10.42-r0

Open the chart page →

13,461
wharf-cmdwharf-helmVerified publisher0.3.31 of 1See more

wharf-cmd wharf-helm 0.3.3

1 of the 1 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
quay.io/iver-wharf/wharf-cmd:v0.8.2e98d13459cdc
pcre2@10.39-r0
10.42-r0

Open the chart page →

3,428
spark-operatorwikimedia2.2.71 of 1See more

spark-operator wikimedia 2.2.7

1 of the 1 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
pcre2@10.34-7ubuntu0.1
no fix listed

Open the chart page →

7,883
wraftwraft0.1.121 of 9See more

wraft wraft 0.1.12

1 of the 9 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
typesense/typesense:28.0.rc35dea1b62b7b6e
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

10,131
youtubedl-materialyoutubedl-materialVerified publisher0.0.11 of 1See more

youtubedl-material youtubedl-material 0.0.1

1 of the 1 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:latest2f943d584711
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

9,832
backendzymtraceOfficialVerified publisher26.9.12 of 6See more

backend zymtrace 26.9.1

2 of the 6 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:25.3.14.14b627d7a9bc0e
pcre2@10.39-3ubuntu0.1
no fix listed
ghcr.io/zystem-io/zymtrace-pub-gateway:26.9.1da0b5eb7721a
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

10,408
open5gsadaptivenetlabVerified publisher1.0.31 of 3See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
pcre2@10.34-7
no fix listed

Open the chart page →

25,507
admin-portaladmin-web-portal1.2.11 of 2See more

admin-portal admin-web-portal 1.2.1

1 of the 2 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
soulou2019/angular-nginx:latesta3970f97c215
pcre2@10.39-r0
10.42-r0

Open the chart page →

3,419
bootaerokube1.0.12 of 4See more

boot aerokube 1.0.1

2 of the 4 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
quay.io/aerokube/jumphost:1.0.170fd7c00418d
pcre2@10.39-3ubuntu0.1
no fix listed
quay.io/aerokube/keygen:1.0.1578934444f04
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

7,915
kourierahhhhVerified publisher0.18.11 of 1See more

kourier ahhhh 0.18.1

1 of the 1 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.34-latestcfc0678bc03c
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

1,809
akto-ai-guardrails-v2akto0.3.01 of 6See more

akto-ai-guardrails-v2 akto 0.3.0

1 of the 6 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
redis/redis-stack-server:7.4.0-v172035434f455
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

9,400
akto-regional-setupakto1.3.11 of 9See more

akto-regional-setup akto 1.3.1

1 of the 9 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
redis/redis-stack-server:7.4.072035434f455
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

7,786
pagesalstom-pages-app1.0.01 of 3See more

pages alstom-pages-app 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
pcre2@10.34-7
no fix listed

Open the chart page →

20,233
amorphieamorphie0.1.22 of 18See more

amorphie amorphie 0.1.2

2 of the 18 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
camunda/zeebe:8.4.5ab5abc09e407
pcre2@10.39-3ubuntu0.1
no fix listed
ghcr.io/camunda-community-hub/zeebe-simple-monitor:2.6.2d9d796a1b846
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

28,212
pagesandrei-pages1.0.01 of 3See more

pages andrei-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
pcre2@10.34-7
no fix listed

Open the chart page →

20,233
games-on-whalesangelnu2.0.04 of 7See more

games-on-whales angelnu 2.0.0

4 of the 7 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
pcre2@10.39-3ubuntu0.1
no fix listed
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
pcre2@10.34-7
no fix listed
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
pcre2@10.34-7
no fix listed
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
pcre2@10.34-7
no fix listed

Open the chart page →

42,345
apispringbootHelmapispringboot0.1.01 of 1See more

apispringbootHelm apispringboot 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
rabeh/apibootspring:1.0941007b6946e
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

6,227
d.vazquezm.2021_helmapphelmVerified publisher1.0.01 of 6See more

d.vazquezm.2021_helm apphelm 1.0.0

1 of the 6 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
library/mongo:5.0.6-focal8e70544b6c76
pcre2@10.34-7
no fix listed

Open the chart page →

19,784
test-chartapplication-chart0.2.01 of 1See more

test-chart application-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
ahmedinfraplus/simple-app:STAGINGc50e6e81a637
pcre2@10.40-r0
10.42-r0

Open the chart page →

1,197
inbox-serverappscodeVerified publisher2025.12.251 of 1See more

inbox-server appscode 2025.12.25

1 of the 1 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
ghcr.io/appscode/inbox-server:postgres-latest536358d7b17e
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

4,002
inbox-server-distributedappscodeVerified publisher2025.12.253 of 4See more

inbox-server-distributed appscode 2025.12.25

3 of the 4 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
library/cassandra:4.1.37cbcec0086ac
pcre2@10.39-3ubuntu0.1
no fix listed
library/rabbitmq:3.12.1-managementf020c06da226
pcre2@10.39-3ubuntu0.1
no fix listed
ghcr.io/appscode/inbox-server:latest536358d7b17e
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

15,707
james-komposeappscodeVerified publisher0.1.03 of 4See more

james-kompose appscode 0.1.0

3 of the 4 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
library/cassandra:4.1.37cbcec0086ac
pcre2@10.39-3ubuntu0.1
no fix listed
library/rabbitmq:3.12.1-managementf020c06da226
pcre2@10.39-3ubuntu0.1
no fix listed
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

17,110
s3proxyappscodeVerified publisher2026.9.111 of 1See more

s3proxy appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
ghcr.io/appscode/s3proxy:sha-a82ca6820518335f9f9
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

3,310
arma-reforgerarma-reforger0.5.31 of 8See more

arma-reforger arma-reforger 0.5.3

1 of the 8 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
pcre2@10.34-7ubuntu0.1
no fix listed

Open the chart page →

23,407
bind9artem-shestakov1.0.11 of 1See more

bind9 artem-shestakov 1.0.1

1 of the 1 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
ubuntu/bind9:9.16-20.04_beta5ee73f44e5d0
pcre2@10.34-7ubuntu0.1
no fix listed

Open the chart page →

3,568
keystonearzu0.2.292 of 4See more

keystone arzu 0.2.29

2 of the 4 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
pcre2@10.34-7ubuntu0.1
no fix listed
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
pcre2@10.34-7ubuntu0.1
no fix listed

Open the chart page →

22,677
dltkvassist-iot-data-integrity-verification0.2.02 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

2 of the 9 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
hyperledger/fabric-ca:latesta70b6ba64a08
pcre2@10.39-3ubuntu0.1
no fix listed
hyperledger/fabric-tools:2.4b1194f509085
pcre2@10.40-r0
10.42-r0

Open the chart page →

77,821
dltflassist-iot-dlt-based-fl0.2.02 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

2 of the 9 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
hyperledger/fabric-ca:latesta70b6ba64a08
pcre2@10.39-3ubuntu0.1
no fix listed
hyperledger/fabric-tools:2.4b1194f509085
pcre2@10.40-r0
10.42-r0

Open the chart page →

77,821
fl-orchestrator-guiassist-iot-fl-orchestrator0.1.02 of 3See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

2 of the 3 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
assistiot/fl_orchestrator:ui-latest20338b353aaf
pcre2@10.40-r0
10.42-r0
assistiot/fl_orchestrator:dbmongo4-latestd157fbe150e3
pcre2@10.34-7
no fix listed

Open the chart page →

9,407
locationprocessingassist-iot-location-processing1.0.01 of 3See more

locationprocessing assist-iot-location-processing 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
assistiot/location_processing:lateste9bae124095f
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

10,101
openapiassist-iot-open-api-management0.2.22 of 6See more

openapi assist-iot-open-api-management 0.2.2

2 of the 6 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
assistiot/open_api_backend:1.1.230812ba93555
pcre2@10.39-3ubuntu0.1
no fix listed
assistiot/open_api_kong:1.0.03fe850384689
pcre2@10.40-r0
10.42-r0

Open the chart page →

18,331
sdn-controllerassist-iot-sdn-controller2.4.01 of 1See more

sdn-controller assist-iot-sdn-controller 2.4.0

1 of the 1 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
assistiot/sdn_controller:2.4.0ea254b6d8a31
pcre2@10.34-7
no fix listed

Open the chart page →

7,982
dashboard-pui9assist-iot-tactile-dashboard0.2.01 of 3See more

dashboard-pui9 assist-iot-tactile-dashboard 0.2.0

1 of the 3 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
assistiot/tacticle_dashboard:web-latest25fc9f373524
pcre2@10.40-r0
10.42-r0

Open the chart page →

4,145
videoaugmentationassist-iot-video-augmentation0.1.01 of 3See more

videoaugmentation assist-iot-video-augmentation 0.1.0

1 of the 3 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
pcre2@10.34-7ubuntu0.1
no fix listed

Open the chart page →

13,986
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

31,807
hyperlane-agentsastria0.1.41 of 2See more

hyperlane-agents astria 0.1.4

1 of the 2 container images this version deploys carry CVE-2022-41409.

Container imageDigestPackageFixed in
gcr.io/abacus-labs-dev/hyperlane-agent:10c0ab1-20231215-220639f33e88324a40
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

2,537

Container images carrying it

610 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
pcre2@10.39-3build1
no fix listed
1
quay.io/argoproj/argocd:v2.8.6acaf37352569
pcre2@10.39-3ubuntu0.1
no fix listed
1
quay.io/cilium/cilium:v1.15.1351d6685dc6f
pcre2@10.39-3ubuntu0.1
no fix listed
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
pcre2@10.39-r0
10.42-r0
1
quay.io/enix/topomatik:1.3.1d9f0bec83ef0
pcre2@10.39-3ubuntu0.1
no fix listed
1
quay.io/evryfs/spring-boot-admin:2.7.1060950ef63764
pcre2@10.39-3ubuntu0.1
no fix listed
1
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
pcre2@10.39-3ubuntu0.1
no fix listed
1
quay.io/netwarps/blockscoutbecd3e39360a
pcre2@10.39-r0
10.42-r0
1
quay.io/opsmxpublic/awsgit:v2-openssh0d21ba756f44
pcre2@10.39-r0
10.42-r0
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
pcre2@10.34-7
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.