StackRadar

CVE-2022-41881

Medium

Advisory

Published 12 Dec 2022In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.015
72nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
45
of 17,781 indexed, latest versions
Container images
39
deployed by those charts
Fix available
1 of 1
affected package

HAProxyMessageDecoder Stack Exhaustion DoS

Carried by container images the latest versions of 45 of 17,781 indexed charts deploy, on 39 images.

Affected packageAffected versionsFixed inImages
netty-codec-haproxymaven4.1.43.Final, 4.1.47.Final, 4.1.48.Final, 4.1.63.Final+9 more4.1.86.Final39
OSV records
GHSA-fx2c-96vj-985v

Charts affected

45 by stars
ChartLatestAffected imagesRadar Score
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
netty-codec-haproxy@4.1.72.Final
4.1.86.Final

Open the chart page →

32,259
rocketmqrocketmq12.6.01 of 2See more

rocketmq rocketmq 12.6.0

1 of the 2 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
apache/rocketmq:5.4.0319cd8a81ed1
netty-codec-haproxy@4.1.79.Final
4.1.86.Final

Open the chart page →

6,328
apicurio-registryapicurio-registry-helmVerified publisher3.8.01 of 2See more

apicurio-registry apicurio-registry-helm 3.8.0

1 of the 2 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
quay.io/apicurio/apicurio-registry-kube-sync:1.0.170ef31840269
netty-codec-haproxy@4.1.68.Final
4.1.86.Final

Open the chart page →

6,675
zipkincarlosjgp0.2.01 of 2See more

zipkin carlosjgp 0.2.0

1 of the 2 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
openzipkin/zipkin:2.21.060c3970df479
netty-codec-haproxy@4.1.48.Final
4.1.86.Final

Open the chart page →

3,229
hadoopbigdata-chartsVerified publisher1.0.11 of 2See more

hadoop bigdata-charts 1.0.1

1 of the 2 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
5200710/hadoop:3.2.3-java8092d3088a5fb
netty-codec-haproxy@4.1.77.Final
4.1.86.Final

Open the chart page →

12,111
keycloak-operatorkeycloak-operatorVerified publisher0.0.41 of 1See more

keycloak-operator keycloak-operator 0.0.4

1 of the 1 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
netty-codec-haproxy@4.1.82.Final
4.1.86.Final

Open the chart page →

4,652
rocketmq-clusterrocketmq12.6.01 of 2See more

rocketmq-cluster rocketmq 12.6.0

1 of the 2 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
apache/rocketmq:5.4.0319cd8a81ed1
netty-codec-haproxy@4.1.79.Final
4.1.86.Final

Open the chart page →

6,328
seata-serverheidaodageshiwoVerified publisher1.0.01 of 1See more

seata-server heidaodageshiwo 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
seataio/seata-server:1.5.1ee1ed55f4144
netty-codec-haproxy@4.1.70.Final
4.1.86.Final

Open the chart page →

5,624
sumo-besu-genesisconsensys0.1.751 of 1See more

sumo-besu-genesis consensys 0.1.75

1 of the 1 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
netty-codec-haproxy@4.1.74.Final
4.1.86.Final

Open the chart page →

7,963
sumo-besu-nodeconsensys0.1.751 of 4See more

sumo-besu-node consensys 0.1.75

1 of the 4 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
netty-codec-haproxy@4.1.74.Final
4.1.86.Final

Open the chart page →

7,963
cp-helm-chartscp-helm-charts0.6.14 of 8See more

cp-helm-charts cp-helm-charts 0.6.1

4 of the 8 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
netty-codec-haproxy@4.1.47.Final
4.1.86.Final
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
netty-codec-haproxy@4.1.47.Final
4.1.86.Final
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
netty-codec-haproxy@4.1.47.Final
4.1.86.Final
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
netty-codec-haproxy@4.1.47.Final
4.1.86.Final

Open the chart page →

58,857
eoloPlanteolo-plannerVerified publisher0.1.01 of 7See more

eoloPlant eolo-planner 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
netty-codec-haproxy@4.1.82.Final
4.1.86.Final

Open the chart page →

27,537
eoloplannereoloplannerVerified publisher0.1.01 of 7See more

eoloplanner eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
netty-codec-haproxy@4.1.82.Final
4.1.86.Final

Open the chart page →

32,205
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.01 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
netty-codec-haproxy@4.1.82.Final
4.1.86.Final

Open the chart page →

27,537
eoloplannereoloplanner-molynx-gat0.1.01 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
netty-codec-haproxy@4.1.82.Final
4.1.86.Final

Open the chart page →

28,482
eoloplanteoloplant1.0.01 of 7See more

eoloplant eoloplant 1.0.0

1 of the 7 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
netty-codec-haproxy@4.1.82.Final
4.1.86.Final

Open the chart page →

27,537
eoloplantseoloplants-urjcVerified publisher0.1.01 of 7See more

eoloplants eoloplants-urjc 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
netty-codec-haproxy@4.1.82.Final
4.1.86.Final

Open the chart page →

27,721
servereoloserverVerified publisher0.1.01 of 7See more

server eoloserver 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
netty-codec-haproxy@4.1.82.Final
4.1.86.Final

Open the chart page →

32,205
rocketmqgengxiankun-charts0.3.01 of 1See more

rocketmq gengxiankun-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
apache/rocketmq:5.3.0434d8398f996
netty-codec-haproxy@4.1.79.Final
4.1.86.Final

Open the chart page →

4,921
hbasehbase0.1.71 of 4See more

hbase hbase 0.1.7

1 of the 4 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
ghcr.io/fleeksoft/hbase/hbase-base:2.4.13.2c144bdd688d7
netty-codec-haproxy@4.1.78.Final
4.1.86.Final

Open the chart page →

10,540
eoloplanthttpd-eoloplant0.1.01 of 7See more

eoloplant httpd-eoloplant 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
netty-codec-haproxy@4.1.82.Final
4.1.86.Final

Open the chart page →

32,205
prometheushuangchengwu-helm-chart0.1.01 of 3See more

prometheus huangchengwu-helm-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:9.2.0133d35d2c263
netty-codec-haproxy@4.1.77.Final
4.1.86.Final

Open the chart page →

16,401
skywalking-v1huangchengwu-helm-chart0.1.01 of 4See more

skywalking-v1 huangchengwu-helm-chart 0.1.0

1 of the 4 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.9.1b4ec8c18d079
netty-codec-haproxy@4.1.68.Final
4.1.86.Final

Open the chart page →

20,650
eoloserverihuertas2021-vmartinp2021-helm0.1.01 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
netty-codec-haproxy@4.1.82.Final
4.1.86.Final

Open the chart page →

27,721
delta-sharing-serverinseefrlab1.2.11 of 1See more

delta-sharing-server inseefrlab 1.2.1

1 of the 1 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
deltaio/delta-sharing-server:0.2.08b75118187c5
netty-codec-haproxy@4.1.63.Final
4.1.86.Final

Open the chart page →

6,174
pinotinseefrlab0.2.01 of 2See more

pinot inseefrlab 0.2.0

1 of the 2 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
apachepinot/pinot:latest-jdk110018bb04ced7
netty-codec-haproxy@4.1.74.Final
4.1.86.Final

Open the chart page →

10,777
itm-mqtt-brokerintelVerified publisher1.0.01 of 1See more

itm-mqtt-broker intel 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
hivemq/hivemq4:dns-4.5.144d194450d48e
netty-codec-haproxy@4.1.63.Final
4.1.86.Final

Open the chart page →

2,653
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
netty-codec-haproxy@4.1.68.Final
4.1.86.Final

Open the chart page →

25,933
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
netty-codec-haproxy@4.1.74.Final
4.1.86.Final

Open the chart page →

15,675
my-app-namemy-app-name0.0.21 of 1See more

my-app-name my-app-name 0.0.2

1 of the 1 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
viniciusfcf/gitops-quarkus-app-jvm:latestbba8ee1b5cd5
netty-codec-haproxy@4.1.79.Final
4.1.86.Final

Open the chart page →

9,149
Practica_4_helmmy-heml-appVerified publisher0.1.01 of 7See more

Practica_4_helm my-heml-app 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
netty-codec-haproxy@4.1.82.Final
4.1.86.Final

Open the chart page →

27,721
smsf-configurationopenshift1.0.41 of 1See more

smsf-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
gurolakman/smsf-configuration:1.0.49abb3882bcbd
netty-codec-haproxy@4.1.75.Final
4.1.86.Final

Open the chart page →

13,607
smsf-dispatcheropenshift1.0.41 of 1See more

smsf-dispatcher openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
netty-codec-haproxy@4.1.75.Final
4.1.86.Final

Open the chart page →

11,738
smsf-momtopenshift1.0.41 of 1See more

smsf-momt openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
gurolakman/smsf-momt:1.0.4ce23b20a8a17
netty-codec-haproxy@4.1.75.Final
4.1.86.Final

Open the chart page →

13,568
smsf-registrationopenshift1.0.41 of 1See more

smsf-registration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
gurolakman/smsf-registration:1.0.4b22e746edd5d
netty-codec-haproxy@4.1.75.Final
4.1.86.Final

Open the chart page →

13,551
ussigw-configurationopenshift1.0.41 of 1See more

ussigw-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
netty-codec-haproxy@4.1.75.Final
4.1.86.Final

Open the chart page →

13,455
ussigw-coreopenshift1.0.41 of 1See more

ussigw-core openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
gurolakman/ussigw-core:1.0.48739565c3ea2
netty-codec-haproxy@4.1.75.Final
4.1.86.Final

Open the chart page →

13,100
p4p40.1.01 of 7See more

p4 p4 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
netty-codec-haproxy@4.1.82.Final
4.1.86.Final

Open the chart page →

27,537
Practica_4_helmpr04helm0.1.01 of 7See more

Practica_4_helm pr04helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
netty-codec-haproxy@4.1.82.Final
4.1.86.Final

Open the chart page →

27,558
punchline-javapunchplatform8.1.11 of 1See more

punchline-java punchplatform 8.1.1

1 of the 1 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
ghcr.io/punchplatform/punchline-java:8.1.1d46ce7b96482
netty-codec-haproxy@4.1.82.Final
4.1.86.Final

Open the chart page →

1,995
shenyushenyu0.6.31 of 2See more

shenyu shenyu 0.6.3

1 of the 2 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
apache/shenyu-bootstrap:2.5.11bd5756f6273
netty-codec-haproxy@4.1.77.Final
4.1.86.Final

Open the chart page →

8,804
simple-keycloaksikalabs0.1.01 of 1See more

simple-keycloak sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.18830f76112b6
netty-codec-haproxy@4.1.82.Final
4.1.86.Final

Open the chart page →

6,443
zipkin-gcpt3n1.0.01 of 1See more

zipkin-gcp t3n 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
openzipkin/zipkin-gcp:0.15.2b5d51d1144e2
netty-codec-haproxy@4.1.43.Final
4.1.86.Final

Open the chart page →

4,538
thingsboardthingsboardVerified publisher0.1.34 of 12See more

thingsboard thingsboard 0.1.3

4 of the 12 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
thingsboard/tb-coap-transport:3.4.1bd45a09d85d9
netty-codec-haproxy@4.1.75.Final
4.1.86.Final
thingsboard/tb-http-transport:3.4.1a06f53c5e2da
netty-codec-haproxy@4.1.75.Final
4.1.86.Final
thingsboard/tb-mqtt-transport:3.4.1030f316ce301
netty-codec-haproxy@4.1.75.Final
4.1.86.Final
thingsboard/tb-node:3.4.1645f43b688f7
netty-codec-haproxy@4.1.75.Final
4.1.86.Final

Open the chart page →

25,394
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2022-41881.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
netty-codec-haproxy@4.1.82.Final
4.1.86.Final

Open the chart page →

6,016

Container images carrying it

39 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
codeurjc/server:v1.0310bea5b1ee7
netty-codec-haproxy@4.1.82.Final
4.1.86.Final
8
mastercloudapps/server:v2.23f3d24dfe2686
netty-codec-haproxy@4.1.82.Final
4.1.86.Final
4
apache/rocketmq:5.4.0319cd8a81ed1
netty-codec-haproxy@4.1.79.Final
4.1.86.Final
2
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
netty-codec-haproxy@4.1.74.Final
4.1.86.Final
2
5200710/hadoop:3.2.3-java8092d3088a5fb
netty-codec-haproxy@4.1.77.Final
4.1.86.Final
1
apachepinot/pinot:latest-jdk110018bb04ced7
netty-codec-haproxy@4.1.74.Final
4.1.86.Final
1
apachepulsar/pulsar:2.10.03b262ab7a7d9
netty-codec-haproxy@4.1.74.Final
4.1.86.Final
1
apachepulsar/pulsar:2.9.0d056c89b7131
netty-codec-haproxy@4.1.68.Final
4.1.86.Final
1
apachepulsar/pulsar:2.8.2d538416d5afe
netty-codec-haproxy@4.1.72.Final
4.1.86.Final
1
apache/rocketmq:5.3.0434d8398f996
netty-codec-haproxy@4.1.79.Final
4.1.86.Final
1
apache/shenyu-bootstrap:2.5.11bd5756f6273
netty-codec-haproxy@4.1.77.Final
4.1.86.Final
1
apache/skywalking-oap-server:9.2.0133d35d2c263
netty-codec-haproxy@4.1.77.Final
4.1.86.Final
1
apache/skywalking-oap-server:8.9.1b4ec8c18d079
netty-codec-haproxy@4.1.68.Final
4.1.86.Final
1
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
netty-codec-haproxy@4.1.47.Final
4.1.86.Final
1
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
netty-codec-haproxy@4.1.47.Final
4.1.86.Final
1
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
netty-codec-haproxy@4.1.47.Final
4.1.86.Final
1
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
netty-codec-haproxy@4.1.47.Final
4.1.86.Final
1
deltaio/delta-sharing-server:0.2.08b75118187c5
netty-codec-haproxy@4.1.63.Final
4.1.86.Final
1
gurolakman/smsf-configuration:1.0.49abb3882bcbd
netty-codec-haproxy@4.1.75.Final
4.1.86.Final
1
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
netty-codec-haproxy@4.1.75.Final
4.1.86.Final
1
gurolakman/smsf-momt:1.0.4ce23b20a8a17
netty-codec-haproxy@4.1.75.Final
4.1.86.Final
1
gurolakman/smsf-registration:1.0.4b22e746edd5d
netty-codec-haproxy@4.1.75.Final
4.1.86.Final
1
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
netty-codec-haproxy@4.1.75.Final
4.1.86.Final
1
gurolakman/ussigw-core:1.0.48739565c3ea2
netty-codec-haproxy@4.1.75.Final
4.1.86.Final
1
hivemq/hivemq4:dns-4.5.144d194450d48e
netty-codec-haproxy@4.1.63.Final
4.1.86.Final
1
openzipkin/zipkin:2.21.060c3970df479
netty-codec-haproxy@4.1.48.Final
4.1.86.Final
1
openzipkin/zipkin-gcp:0.15.2b5d51d1144e2
netty-codec-haproxy@4.1.43.Final
4.1.86.Final
1
seataio/seata-server:1.5.1ee1ed55f4144
netty-codec-haproxy@4.1.70.Final
4.1.86.Final
1
thingsboard/tb-coap-transport:3.4.1bd45a09d85d9
netty-codec-haproxy@4.1.75.Final
4.1.86.Final
1
thingsboard/tb-http-transport:3.4.1a06f53c5e2da
netty-codec-haproxy@4.1.75.Final
4.1.86.Final
1
thingsboard/tb-mqtt-transport:3.4.1030f316ce301
netty-codec-haproxy@4.1.75.Final
4.1.86.Final
1
thingsboard/tb-node:3.4.1645f43b688f7
netty-codec-haproxy@4.1.75.Final
4.1.86.Final
1
viniciusfcf/gitops-quarkus-app-jvm:latestbba8ee1b5cd5
netty-codec-haproxy@4.1.79.Final
4.1.86.Final
1
ghcr.io/fleeksoft/hbase/hbase-base:2.4.13.2c144bdd688d7
netty-codec-haproxy@4.1.78.Final
4.1.86.Final
1
ghcr.io/punchplatform/punchline-java:8.1.1d46ce7b96482
netty-codec-haproxy@4.1.82.Final
4.1.86.Final
1
quay.io/apicurio/apicurio-registry-kube-sync:1.0.170ef31840269
netty-codec-haproxy@4.1.68.Final
4.1.86.Final
1
quay.io/keycloak/keycloak:20.0.18830f76112b6
netty-codec-haproxy@4.1.82.Final
4.1.86.Final
1
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
netty-codec-haproxy@4.1.82.Final
4.1.86.Final
1
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
netty-codec-haproxy@4.1.82.Final
4.1.86.Final
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.