StackRadar

CVE-2022-41722

Unscored

Advisory

Published 16 Feb 2023In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.017
76th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,473
of 17,787 indexed, latest versions
Container images
1,634
deployed by those charts
Fix available
1 of 1
affected package

Path traversal on Windows in path/filepath

Carried by container images the latest versions of 1,473 of 17,787 indexed charts deploy, on 1,634 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+90 more1.19.61,634
OSV records
GO-2023-1568
Also known as
BIT-golang-2022-41722

Charts affected

1,473 by stars
ChartLatestAffected imagesRadar Score
galoy-depsgaloymoney20.10.201 of 9See more

galoy-deps galoymoney2 0.10.20

1 of the 9 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
ayushsobti/kube-monkey:v0.5.24c94e8f8924e
stdlib@go1.18.9
1.19.6

Open the chart page →

11,961
alertmanager-discordgeek-cookbookVerified publisher1.3.21 of 1See more

alertmanager-discord geek-cookbook 1.3.2

1 of the 1 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
rogerrum/alertmanager-discord:1.0.3827593369625
stdlib@go1.17.4
1.19.6

Open the chart page →

1,045
anonaddygeek-cookbookVerified publisher6.0.01 of 1See more

anonaddy geek-cookbook 6.0.0

1 of the 1 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
anonaddy/anonaddy:0.12.3957a95565166
stdlib@go1.18.3
1.19.6

Open the chart page →

4,788
apache-musicindexgeek-cookbookVerified publisher2.4.21 of 1See more

apache-musicindex geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
stdlib@go1.18.4
1.19.6

Open the chart page →

14,698
autobrrgeek-cookbookVerified publisher1.1.31 of 1See more

autobrr geek-cookbook 1.1.3

1 of the 1 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
ghcr.io/autobrr/autobrr:v1.10.0d4022cd32df5
stdlib@go1.19.3
1.19.6

Open the chart page →

2,236
calibre-webgeek-cookbookVerified publisher8.4.21 of 1See more

calibre-web geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
linuxserver/calibre-web:version-0.6.12938810eca3d3
stdlib@go1.16.7
1.19.6

Open the chart page →

16,178
dendritegeek-cookbookVerified publisher6.4.01 of 1See more

dendrite geek-cookbook 6.4.0

1 of the 1 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
ghcr.io/matrix-org/dendrite-monolith:v0.9.43267d27d392f
stdlib@go1.18.5
1.19.6

Open the chart page →

2,143
embygeek-cookbookVerified publisher3.4.21 of 1See more

emby geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/emby:v4.6.1.05c6b8f91f1c4
stdlib@go1.15
1.19.6

Open the chart page →

8,584
gatusgeek-cookbookVerified publisher1.1.21 of 1See more

gatus geek-cookbook 1.1.2

1 of the 1 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
twinproduction/gatus:v3.8.049dc0d9b2e2c
stdlib@go1.18.1
1.19.6

Open the chart page →

1,881
gonicgeek-cookbookVerified publisher6.4.21 of 1See more

gonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
sentriz/gonic:v0.13.1a74012a6adf3
stdlib@go1.16.4
1.19.6

Open the chart page →

3,525
gotifygeek-cookbookVerified publisher1.2.21 of 1See more

gotify geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
gotify/server:2.1.409c79bc1e403
stdlib@go1.16
1.19.6

Open the chart page →

3,131
haste-servergeek-cookbookVerified publisher3.4.21 of 1See more

haste-server geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
stdlib@go1.15
1.19.6

Open the chart page →

11,042
jackettgeek-cookbookVerified publisher11.7.21 of 1See more

jackett geek-cookbook 11.7.2

1 of the 1 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/jackett:v0.20.13163a4715b46aa2
stdlib@go1.18.3
1.19.6

Open the chart page →

9,736
lidarrgeek-cookbookVerified publisher14.2.21 of 1See more

lidarr geek-cookbook 14.2.2

1 of the 1 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
stdlib@go1.16.7
1.19.6

Open the chart page →

14,328
maddygeek-cookbookVerified publisher3.2.01 of 1See more

maddy geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
foxcpp/maddy:v0.5.28fa2bd8f6830
stdlib@go1.17.2
1.19.6

Open the chart page →

2,630
minifluxgeek-cookbookVerified publisher5.2.01 of 2See more

miniflux geek-cookbook 5.2.0

1 of the 2 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
miniflux/miniflux:2.0.36e2fb990dae74
stdlib@go1.17.8
1.19.6

Open the chart page →

2,430
navidromegeek-cookbookVerified publisher6.4.21 of 1See more

navidrome geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
deluan/navidrome:0.43.04e9ae3bff6aa
stdlib@go1.16.4
1.19.6

Open the chart page →

3,597
nullservgeek-cookbookVerified publisher2.4.21 of 1See more

nullserv geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nullserv:v1.3.00792c7e6d814
stdlib@go1.16.5
1.19.6

Open the chart page →

1,118
nzbgetgeek-cookbookVerified publisher12.4.21 of 1See more

nzbget geek-cookbook 12.4.2

1 of the 1 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
stdlib@go1.18.4
1.19.6

Open the chart page →

12,124
nzbhydra2geek-cookbookVerified publisher10.4.21 of 1See more

nzbhydra2 geek-cookbook 10.4.2

1 of the 1 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
stdlib@go1.15
1.19.6

Open the chart page →

17,758
owncloud-ocisgeek-cookbookVerified publisher2.4.21 of 1See more

owncloud-ocis geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
owncloud/ocis:1.7.0d2efcae92c84
stdlib@go1.16.5
1.19.6

Open the chart page →

3,236
photoprismgeek-cookbookVerified publisher7.2.01 of 1See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
photoprism/photoprism:220629-jammy2954334adbda
stdlib@go1.18.3
1.19.6

Open the chart page →

19,560
pod-gatewaygeek-cookbookVerified publisher5.6.21 of 2See more

pod-gateway geek-cookbook 5.6.2

1 of the 2 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/gateway-admision-controller:v3.5.0175512bb3f61
stdlib@go1.18.3
1.19.6

Open the chart page →

2,355
pod-gateway-settergeek-cookbookVerified publisher1.0.01 of 1See more

pod-gateway-setter geek-cookbook 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/gateway-admision-controller:v2.0.00d6d0df98fe4
stdlib@go1.16.4
1.19.6

Open the chart page →

1,641
qbittorrentgeek-cookbookVerified publisher13.5.21 of 1See more

qbittorrent geek-cookbook 13.5.2

1 of the 1 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
stdlib@go1.16.8
1.19.6

Open the chart page →

11,855
radarrgeek-cookbookVerified publisher16.3.21 of 1See more

radarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
stdlib@go1.18.4
1.19.6

Open the chart page →

10,418
readarrgeek-cookbookVerified publisher6.4.21 of 1See more

readarr geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/readarr:v0.1.0.715ad943e9309e4
stdlib@go1.15
1.19.6

Open the chart page →

7,806
satisfactorygeek-cookbookVerified publisher1.2.21 of 1See more

satisfactory geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:lateste103700ae6ae
stdlib@go1.18.1
1.19.6

Open the chart page →

3,466
searxgeek-cookbookVerified publisher5.6.23 of 4See more

searx geek-cookbook 5.6.2

3 of the 4 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
dalf/filtron:latestb19cbf5b2f37
stdlib@go1.18.2
1.19.6
dalf/morty:latest248a4849c350
stdlib@go1.18.2
1.19.6
library/caddy:2.2.0-alpine7367adca165f
stdlib@go1.15.2
1.19.6

Open the chart page →

7,470
torrservergeek-cookbookVerified publisher1.2.21 of 1See more

torrserver geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
smailkoz/torrserver:1.0.1117b52d15de8f0
stdlib@go1.17.5
1.19.6

Open the chart page →

3,165
transmissiongeek-cookbookVerified publisher8.4.31 of 1See more

transmission geek-cookbook 8.4.3

1 of the 1 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
stdlib@go1.18.4
1.19.6

Open the chart page →

11,909
vikunjageek-cookbookVerified publisher6.2.02 of 4See more

vikunja geek-cookbook 6.2.0

2 of the 4 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
library/caddy:2.4.2-alpinefbc51bcf1ab0
stdlib@go1.16.5
1.19.6
vikunja/api:0.17.18cba0520bf8c
stdlib@go1.16.5
1.19.6

Open the chart page →

6,893
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
stdlib@go1.16.8
1.19.6

Open the chart page →

17,996
asynqmongeneral-helm-chartsVerified publisher0.0.11 of 1See more

asynqmon general-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
hibiken/asynqmon:latestac80bcffd2f9
stdlib@go1.18.10
1.19.6

Open the chart page →

751
kafkagengxiankun-charts0.2.01 of 1See more

kafka gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
stdlib@go1.17.10
1.19.6

Open the chart page →

4,547
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.81 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
postgis/postgis:11-2.5f479f6c3435e
stdlib@go1.16.7
1.19.6

Open the chart page →

34,879
istiogetindataVerified publisher1.11.12 of 2See more

istio getindata 1.11.1

2 of the 2 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:1.11.1c552478f8f11
stdlib@go1.16.7
1.19.6
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
stdlib@go1.16.7
1.19.6

Open the chart page →

16,834
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
library/ghost:5.79.083f7bf209844
stdlib@go1.18.2
1.19.6

Open the chart page →

9,036
gitanagitana1.4.01 of 1See more

gitana gitana 1.4.0

1 of the 1 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
ntakashi/gitana:1.4.04171ec641120
stdlib@go1.17.7
1.19.6

Open the chart page →

3,478
prometheus-container-resource-exportergkarthiks0.3.11 of 1See more

prometheus-container-resource-exporter gkarthiks 0.3.1

1 of the 1 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
gkarthics/container-resource-exporter:latest6799af333e8a
stdlib@go1.14.7
1.19.6

Open the chart page →

2,218
prometheus-couchdb-exportergkarthiks0.1.31 of 1See more

prometheus-couchdb-exporter gkarthiks 0.1.3

1 of the 1 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
gesellix/couchdb-prometheus-exporter:v27.2.05b891f1fc2b9
stdlib@go1.13.10
1.19.6

Open the chart page →

1,284
gotwaygotwayVerified publisher0.8.01 of 1See more

gotway gotway 0.8.0

1 of the 1 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
ghcr.io/gotway/gotway:v0.0.137ed73c1979ee
stdlib@go1.18.3
1.19.6

Open the chart page →

1,826
Governify-Bluejaygovernify0.1.01 of 12See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
governify/dashboard:lateste83a17ba5038
stdlib@go1.17
1.19.6

Open the chart page →

22,565
Governify-Falcongovernify0.1.01 of 10See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
governify/dashboard:lateste83a17ba5038
stdlib@go1.17
1.19.6

Open the chart page →

24,360
goweeklygoweekly2.0.01 of 1See more

goweekly goweekly 2.0.0

1 of the 1 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
zufardhiyaulhaq/goweekly:v2.0.008dcc130fbea
stdlib@go1.17.12
1.19.6

Open the chart page →

1,229
jaegergpg-dev3.3.31 of 5See more

jaeger gpg-dev 3.3.3

1 of the 5 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
stdlib@go1.18.2
1.19.6

Open the chart page →

19,291
prometheus-operator-admission-webhookgpg-dev0.18.11 of 2See more

prometheus-operator-admission-webhook gpg-dev 0.18.1

1 of the 2 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20221220-controller-v1.5.1-58-g787ea74b64d99688e5573
stdlib@go1.19.4
1.19.6

Open the chart page →

1,685
whoami-demogpg-dev0.1.01 of 1See more

whoami-demo gpg-dev 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
containous/whoami:latest7d6a3c8f9147
stdlib@go1.14
1.19.6

Open the chart page →

1,279
mimir-openshift-experimentalgrafana2.1.03 of 4See more

mimir-openshift-experimental grafana 2.1.0

3 of the 4 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
grafana/mimir:2.0.080c1a8eb24dd
stdlib@go1.17.8
1.19.6
minio/mc:RELEASE.2021-02-14T04-28-06Z2a374c124d44
stdlib@go1.15.7
1.19.6
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
stdlib@go1.15.7
1.19.6

Open the chart page →

17,759
grafregistratiecomponentgrafregistratiecomponent1.0.01 of 3See more

grafregistratiecomponent grafregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-41722.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/grafregistratiecomponent-php:latest35225eaa87ab
stdlib@go1.13.10
1.19.6

Open the chart page →

7,510

Container images carrying it

1,634 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/mysql:8.0.40d58ac93387f6
stdlib@go1.18.2
1.19.6
1
library/nats:2.9.11-alpineccbe811b8575
stdlib@go1.19.4
1.19.6
1
library/nats:2.9.6-alpine3.16f576cdc17cc3
stdlib@go1.19.3
1.19.6
1
library/postgres:13.703652c675ae1
stdlib@go1.16.7
1.19.6
1
library/postgres:14.32d1e636f0778
stdlib@go1.16.7
1.19.6
1
library/postgres:17.4304ab8135187
stdlib@go1.18.2
1.19.6
1
library/postgres:16.6557fea37a744
stdlib@go1.18.2
1.19.6
1
library/postgres:16.4-alpine5660c2cbfea5
stdlib@go1.18.2
1.19.6
1
library/postgres:13.11-bullseye5c265bf1fd30
stdlib@go1.18.2
1.19.6
1
library/postgres:17.5-alpine6567bca8d7bc
stdlib@go1.18.2
1.19.6
1
library/postgres:17.4-alpine7062a2109c4b
stdlib@go1.18.2
1.19.6
1
library/postgres:12-alpine7c8f48705831
stdlib@go1.18.2
1.19.6
1
library/postgres:17.2-alpine7e5df973a748
stdlib@go1.18.2
1.19.6
1
library/postgres:15.38775adb39f0d
stdlib@go1.18.2
1.19.6
1
library/postgres:17.5aadf2c0696f5
stdlib@go1.18.2
1.19.6
1
library/postgres:13.12ced3ba927f4c
stdlib@go1.18.2
1.19.6
1
library/postgres:14.6f565573d74ae
stdlib@go1.18.2
1.19.6
1
library/postgres:17.5-bookwormfbcea1bd13b6
stdlib@go1.18.2
1.19.6
1
library/redis:7.0.4091a7b5de688
stdlib@go1.16.7
1.19.6
1
library/redis:7-bullseye6a5130174e14
stdlib@go1.18.2
1.19.6
1
library/redis:7.2.5-alpine6aaf3f5e6bc8
stdlib@go1.18.2
1.19.6
1
library/redis:6.2.20-alpine77697a75da9f
stdlib@go1.18.2
1.19.6
1
library/redis83edc2b8e9ff
stdlib@go1.18.2
1.19.6
1
library/redis:7.0.1092b8b307ee28
stdlib@go1.18.2
1.19.6
1
library/redis:7.4.1bb142a9c18ac
stdlib@go1.18.2
1.19.6
1
library/redis:7.4.1-alpinec1e88455c852
stdlib@go1.18.2
1.19.6
1
library/redis:7.0-alpinec9d92d840fd0
stdlib@go1.18.2
1.19.6
1
library/telegraf:1.20.428e98eece020
stdlib@go1.17.3
1.19.6
1
library/telegraf:1.19.0-alpine794079a7f241
stdlib@go1.16.5
1.19.6
1
library/telegraf:1.19-alpineaddb86c0c520
stdlib@go1.16.6
1.19.6
1
library/traefik:2.5.62f603f8d3abe
stdlib@go1.17.5
1.19.6
1
library/traefik:v1.7.345d47b7bb2546
stdlib@go1.16.12
1.19.6
1
library/traefik:2.5.47d0228d19042
stdlib@go1.17.3
1.19.6
1
library/traefik:2.4.8eda951fd29a8
stdlib@go1.16.2
1.19.6
1
library/traefik:2.2.8f5af5a5ce17f
stdlib@go1.14.6
1.19.6
1
library/zookeeper:3.9.5cab8944a33a1
stdlib@go1.18.1
1.19.6
1
library/zookeeper:3.9.4dfa9ba46d14b
stdlib@go1.18.1
1.19.6
1
librenms/librenms:22.4.14f1f3d667cc7
stdlib@go1.16.12
1.19.6
1
linuxserver/calibre-web:0.6.24241009026e6f
stdlib@go1.17.8
1.19.6
1
linuxserver/calibre-web:version-0.6.12938810eca3d3
stdlib@go1.16.7
1.19.6
1
linuxserver/cloud9:latest45c5fe102ff3
stdlib@go1.17.11
1.19.6
1
livekit/livekit-recorder:v0.3.13ecf1409c75e0
stdlib@go1.16.2
1.19.6
1
livekit/livekit-server:v1.0.08391fd1b834f
stdlib@go1.17.10
1.19.6
1
lmierzwa/karma:v0.503751e5eed656
stdlib@go1.13.4
1.19.6
1
lmierzwa/karma:v0.70d417abe7ddb5
stdlib@go1.15.2
1.19.6
1
localstack/localstack:3.19d278167f2b7
stdlib@go1.18.10
1.19.6
1
loftsh/directclusterendpoint:1.14.0310cc7d690f5
stdlib@go1.16.6
1.19.6
1
loftsh/jspolicy:0.2.225deb9bd2683
stdlib@go1.17.13
1.19.6
1
loftsh/virtual-cluster:0.0.28023b13bf5898
stdlib@go1.15.11
1.19.6
1
logiqai/flash-discovery:v2.0.3f5b551bca98e
stdlib@go1.18.9
1.19.6
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.