CVE-2022-41727
MediumAdvisory
Published 16 Feb 2023In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.5
- base score, highest
- EPSS
- 0.003
- 23rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 32
- of 17,781 indexed, latest versions
- Container images
- 31
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Uncontrolled Resource Consumption in golang.org/x/image
Carried by container images the latest versions of 32 of 17,781 indexed charts deploy, on 31 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| golang.org/ | v0.0.0-20190802002840-cff245a6509b, v0.0.0-20191009234506-e7c1f5e7dbb8, v0.0.0-20201208152932-35266b937fa6, v0.0.0-20210216034530-4410531fe030+8 more | 0.5.0 | 31 |
- OSV records
- GHSA-qgc7-mgm3-q253
- Also known as
- GO-2023-1572
Charts affected
32 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| codercoderOfficialVerified publisher | 1.44.6 | 1 of 2See more | 6,849 |
| filebrowserutkuozdemirVerified publisher | 1.0.0 | 1 of 1See more | 3,073 |
| listmonkdeliveryheroVerified publisher | 0.1.12 | 1 of 1See more | 2,537 |
| filebrowsergeek-cookbookVerified publisher | 1.4.2 | 1 of 1See more | 3,474 |
| focalboardgeek-cookbookVerified publisher | 4.4.2 | 1 of 1See more | 3,631 |
| stashgeek-cookbookVerified publisher | 3.4.2 | 1 of 1See more | 15,856 |
| bitpokebitpokeVerified publisher | 1.8.19 | 1 of 1See more | 2,312 |
| cospacecospace | 0.0.34 | 1 of 3See more | 2,253 |
| commentoduyet | 0.2.0 | 1 of 2See more | 2,679 |
| Navidromeemmas-chartsVerified publisher | 0.0.4 | 1 of 1See more | 2,837 |
| testnet-homepageethereum-helm-chartsVerified publisher | 0.2.3 | 1 of 1See more | 2,681 |
| dendritegeek-cookbookVerified publisher | 6.4.0 | 1 of 1See more | 2,143 |
| gatusgeek-cookbookVerified publisher | 1.1.2 | 1 of 1See more | 1,881 |
| gonicgeek-cookbookVerified publisher | 6.4.2 | 1 of 1See more | 3,525 |
| navidromegeek-cookbookVerified publisher | 6.4.2 | 1 of 1See more | 3,597 |
| owncloud-ocisgeek-cookbookVerified publisher | 2.4.2 | 1 of 1See more | 3,236 |
| photoprismgeek-cookbookVerified publisher | 7.2.0 | 1 of 1See more | 19,503 |
| vikunjageek-cookbookVerified publisher | 6.2.0 | 1 of 4See more | 6,893 |
| matrix-media-repohalkeye | 1.0.5 | 1 of 1See more | 4,455 |
| listmonkhelm-charts-nr | 0.1.12 | 1 of 1See more | 2,537 |
| imageproxyhmphuVerified publisher | 0.1.1 | 1 of 1See more | 2,140 |
| casdoor-helm-chartskubeblocksVerified publisher | 1.753.0 | 1 of 1See more | 2,299 |
| metadockvalitetsitVerified publisher | 0.0.7 | 1 of 2See more | 4,026 |
| focalboardmattermostVerified publisher | 0.5.0 | 1 of 1See more | 4,014 |
| mattermost-chaos-enginemattermostVerified publisher | 0.2.0 | 1 of 1See more | 4,067 |
| mindavphntom | 0.1.6 | 1 of 2See more | 4,158 |
| unifi-protectschichtelVerified publisher | 0.10.1 | 1 of 1See more | 5,582 |
| prestashopstack-prestahop | 22.0.0 | 1 of 4See more | 3,073 |
| agentssynapse | 0.1.30 | 2 of 9See more | 7,244 |
| sinnersynapse | 0.1.0 | 1 of 6See more | 1,955 |
| filebrowserwenerme | 1.0.0 | 1 of 1See more | 3,174 |
| commentopluspluswyrihaximusnetVerified publisher | 0.4.0 | 1 of 1See more | 1,960 |
Container images carrying it
31 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| filebrowser/ | 86e8449ff8ff | golang.org/ | 0.5.0 | 2 |
| listmonk/ | d2eac77ddfad | golang.org/ | 0.5.0 | 2 |
| caroga/ | f3233882b3bd | golang.org/ | 0.5.0 | 1 |
| casbin/ | 770ad9ec3190 | golang.org/ | 0.5.0 | 1 |
| coderenvs/ | 1deffc4670e6 | golang.org/ | 0.5.0 | 1 |
| deluan/ | 11a24da08977 | golang.org/ | 0.5.0 | 1 |
| deluan/ | 4e9ae3bff6aa | golang.org/ | 0.5.0 | 1 |
| filebrowser/ | 4fcd47af573c | golang.org/ | 0.5.0 | 1 |
| filebrowser/ | c5d0a75a0041 | golang.org/ | 0.5.0 | 1 |
| kvalitetsit/ | f57e7553f5bd | golang.org/ | 0.5.0 | 1 |
| markdegroot/ | d8445f2a0de6 | golang.org/ | 0.5.0 | 1 |
| mattermost/ | 31078df7a3c8 | golang.org/ | 0.5.0 | 1 |
| mattermost/ | f2f987dada52 | golang.org/ | 0.5.0 | 1 |
| mattermost/ | 6268954edd67 | golang.org/ | 0.5.0 | 1 |
| owncloud/ | d2efcae92c84 | golang.org/ | 0.5.0 | 1 |
| phntom/ | 5695f546abbb | golang.org/ | 0.5.0 | 1 |
| photoprism/ | 2954334adbda | golang.org/ | 0.5.0 | 1 |
| sentriz/ | a74012a6adf3 | golang.org/ | 0.5.0 | 1 |
| skylenet/ | 8698903e379f | golang.org/ | 0.5.0 | 1 |
| stashapp/ | 24dbd7607174 | golang.org/ | 0.5.0 | 1 |
| turt2live/ | bfbd459f89a5 | golang.org/ | 0.5.0 | 1 |
| twinproduction/ | 49dc0d9b2e2c | golang.org/ | 0.5.0 | 1 |
| vikunja/ | 8cba0520bf8c | golang.org/ | 0.5.0 | 1 |
| willnorris/ | 21d0c90f4c31 | golang.org/ | 0.5.0 | 1 |
| gcr.io/ | b88f88070fb0 | golang.org/ | 0.5.0 | 1 |
| ghcr.io/ | 3267d27d392f | golang.org/ | 0.5.0 | 1 |
| ghcr.io/ | 81a9ebc899a4 | golang.org/ | 0.5.0 | 1 |
| ghcr.io/ | 5e0a3dfa9f96 | golang.org/ | 0.5.0 | 1 |
| ghcr.io/ | 3e98a98f6074 | golang.org/ | 0.5.0 | 1 |
| ghcr.io/ | e5ecfd607e42 | golang.org/ | 0.5.0 | 1 |
| registry.gitlab.com/ | e0ab1fc86761 | golang.org/ | 0.5.0 | 1 |