StackRadar

CVE-2022-42898

High

Advisory

Published 19 Nov 2022In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.064
93rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,009
of 17,787 indexed, latest versions
Container images
1,022
deployed by those charts
Fix available
5 of 5
affected packages

Red Hat Enhancement Advisory: krb5 bug fix update

Carried by container images the latest versions of 1,009 of 17,787 indexed charts deploy, on 1,022 images.

Affected packageAffected versionsFixed inImages
krb5deb1.12+dfsg-2ubuntu5, 1.12+dfsg-2ubuntu5.1, 1.12+dfsg-2ubuntu5.3, 1.12+dfsg-2ubuntu5.4+17 more1.12+dfsg-2ubuntu5.4+esm3, 1.13.2+dfsg-5ubuntu2.2+esm3, 1.16-2ubuntu0.3, 1.17-3+deb10u5+3 more768
heimdaldeb1.6~git20131207+dfsg-1ubuntu1, 1.6~git20131207+dfsg-1ubuntu1.2, 1.7~git20150920+dfsg-4ubuntu1.16.04.1, 7.5.0+dfsg-1+5 more1.6~git20131207+dfsg-1ubuntu1.2+esm3, 1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm3, 7.5.0+dfsg-1ubuntu0.3, 7.7.0+dfsg-1ubuntu1.3274
krb5rpm1.15.1-37.el7_6, 1.15.1-37.el7_7.2, 1.15.1-46.el7, 1.15.1-50.el7+19 more0:1.15.1-55.el7_9, 0:1.18.2-25.el8_8, 0:1.19.1-24.el9_1, 1.16.3-150100.3.27.1+1 more178
krb5apk1.19.2-r4, 1.19.3-r01.19.4-r056
sambadeb2:4.3.11+dfsg-0ubuntu0.16.04.18, 2:4.7.6+dfsg~ubuntu-0ubuntu2.15, 2:4.13.17~dfsg-0ubuntu1.20.04.12:4.3.11+dfsg-0ubuntu0.16.04.34+esm2, 2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm1, 2:4.15.13+dfsg-0ubuntu0.20.04.14
OSV records
ALPINE-CVE-2022-42898RHEA-2023:3850RHSA-2022:8637RHSA-2022:8640UBUNTU-CVE-2022-42898DLA-3213-1DSA-5286-1openSUSE-SU-2024:12524-1SUSE-SU-2022:4155-1
Also known as
RHSA-2022:8638, RHSA-2022:8639, RHSA-2022:8641, RHSA-2022:8648, RHSA-2022:8662, USN-5800-1, USN-5822-1, USN-5822-2, USN-5828-1, USN-5936-1, USN-7582-1

Charts affected

1,009 by stars
ChartLatestAffected imagesRadar Score
artifact-hubartifact-hubVerified publisher1.23.01 of 7See more

artifact-hub artifact-hub 1.23.0

1 of the 7 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.19804725facf91
krb5@1.17-3+deb10u3
1.17-3+deb10u5

Open the chart page →

10,755
keycloakcodecentricVerified publisher18.10.01 of 3See more

keycloak codecentric 18.10.0

1 of the 3 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
krb5@1.18.2-14.el8
0:1.18.2-25.el8_8

Open the chart page →

7,713
openldap-stack-hahelm-openldapVerified publisher4.3.31 of 5See more

openldap-stack-ha helm-openldap 4.3.3

1 of the 5 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
osixia/phpldapadmin:0.9.0d112b82be133
krb5@1.17-3
1.17-3+deb10u5

Open the chart page →

5,919
netboxbootcVerified publisher4.1.11 of 4See more

netbox bootc 4.1.1

1 of the 4 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.2.83d652dca5351
krb5@1.19.2-2
1.19.2-2ubuntu0.1

Open the chart page →

9,145
milvusmilvus4.0.313 of 5See more

milvus milvus 4.0.31

3 of the 5 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
heimdal@7.7.0+dfsg-1ubuntu1
krb5@1.17-6ubuntu4.1
7.7.0+dfsg-1ubuntu1.3
1.17-6ubuntu4.2
milvusdb/milvus:v2.2.13a3a55e1c1497
heimdal@7.7.0+dfsg-1ubuntu1.1
krb5@1.17-6ubuntu4.1
7.7.0+dfsg-1ubuntu1.3
1.17-6ubuntu4.2
minio/minio:RELEASE.2023-03-20T20-16-18Z6d770d7f255c
krb5@1.18.2-22.el8_7
0:1.18.2-25.el8_8

Open the chart page →

32,259
istiocloudposse1.1.02 of 8See more

istio cloudposse 1.1.0

2 of the 8 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
heimdal@1.7~git20150920+dfsg-4ubuntu1.16.04.1
krb5@1.13.2+dfsg-5ubuntu2.1
1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm3
1.13.2+dfsg-5ubuntu2.2+esm3
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
heimdal@1.7~git20150920+dfsg-4ubuntu1.16.04.1
krb5@1.13.2+dfsg-5ubuntu2.1
1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm3
1.13.2+dfsg-5ubuntu2.2+esm3

Open the chart page →

23,964
zabbixcetic3.1.34 of 5See more

zabbix cetic 3.1.3

4 of the 5 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
zabbix/zabbix-agent2:ubuntu-6.0.8e5b594057c9c
krb5@1.19.2-2
1.19.2-2ubuntu0.1
zabbix/zabbix-server-pgsql:ubuntu-6.0.8d59ffa07f615
krb5@1.19.2-2
1.19.2-2ubuntu0.1
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
krb5@1.19.2-2
1.19.2-2ubuntu0.1
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
krb5@1.19.2-2
1.19.2-2ubuntu0.1

Open the chart page →

33,725
chatwootchatwootVerified publisher2.0.242 of 3See more

chatwoot chatwoot 2.0.24

2 of the 3 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
bitnamilegacy/redis:6.2.7-debian-11-r37788b908dd0d
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u3
ghcr.io/chatwoot/pgvector:14.4.0-debian-11-r0f759f1510d09
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u3

Open the chart page →

9,203
dependency-trackevryfs-ossVerified publisher1.5.51 of 3See more

dependency-track evryfs-oss 1.5.5

1 of the 3 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
dependencytrack/apiserver:4.6.3485ac0952c02
krb5@1.18.3-6+deb11u2
1.18.3-6+deb11u3

Open the chart page →

2,503
openldaphelm-openldapVerified publisher2.0.42 of 3See more

openldap helm-openldap 2.0.4

2 of the 3 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
osixia/openldap:1.4.0ccd95cc6e61e
krb5@1.17-3
1.17-3+deb10u5
osixia/phpldapadmin:0.9.0d112b82be133
krb5@1.17-3
1.17-3+deb10u5

Open the chart page →

6,219
openvpn-asstenicVerified publisher0.1.91 of 1See more

openvpn-as stenic 0.1.9

1 of the 1 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
heimdal@7.5.0+dfsg-1
krb5@1.16-2ubuntu0.2
7.5.0+dfsg-1ubuntu0.3
1.16-2ubuntu0.3

Open the chart page →

15,592
jellyfinutkuozdemirVerified publisher2.0.01 of 1See more

jellyfin utkuozdemir 2.0.0

1 of the 1 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
linuxserver/jellyfin:10.7.72427dde159a2
heimdal@7.7.0+dfsg-1ubuntu1
krb5@1.17-6ubuntu4.1
7.7.0+dfsg-1ubuntu1.3
1.17-6ubuntu4.2

Open the chart page →

7,880
scribebackube-helm-chartsVerified publisher0.2.01 of 2See more

scribe backube-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
quay.io/backube/scribe:0.2.0cdefc81c6b2e
krb5@1.18.2-8.el8
0:1.18.2-25.el8_8

Open the chart page →

6,854
docker-mailserverdocker-mailserver0.4.01 of 2See more

docker-mailserver docker-mailserver 0.4.0

1 of the 2 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
mailserver/docker-mailserver:11.0.0e0809756dc96
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u3

Open the chart page →

1,382
snipeitt3n3.4.11 of 2See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
snipe/snipe-it:v6.0.1455fb7636a98c
heimdal@7.7.0+dfsg-1ubuntu1.1
krb5@1.17-6ubuntu4.1
7.7.0+dfsg-1ubuntu1.3
1.17-6ubuntu4.2

Open the chart page →

18,509
supersetcloudposse1.2.01 of 1See more

superset cloudposse 1.2.0

1 of the 1 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
krb5@1.17-3
1.17-3+deb10u5

Open the chart page →

5,851
loki-simple-scalablegrafana1.8.111 of 3See more

loki-simple-scalable grafana 1.8.11

1 of the 3 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
grafana/agent-operator:v0.25.1a136c6208aa3
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u3

Open the chart page →

6,470
bitcoindfold0.3.21 of 2See more

bitcoind fold 0.3.2

1 of the 2 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
thesisrobot/bitcoind:v23.016b368e4d52c
krb5@1.19.2-2
1.19.2-2ubuntu0.1

Open the chart page →

3,454
neo4jneo4j-helm4.3.2-11 of 1See more

neo4j neo4j-helm 4.3.2-1

1 of the 1 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
library/neo4j:4.3.2-enterprise56a9453c4064
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u3

Open the chart page →

2,640
purelbpurelb0.0.0-106-ipv6-lbip-052cedab1 of 2See more

purelb purelb 0.0.0-106-ipv6-lbip-052cedab

1 of the 2 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
registry.gitlab.com/purelb/purelb/allocator:v0.0.0-106-ipv6-lbip-052cedab9d1fcb78f529
krb5@1.18.2-14.el8
0:1.18.2-25.el8_8

Open the chart page →

4,413
transmission-openvpnutkuozdemirVerified publisher2.5.01 of 1See more

transmission-openvpn utkuozdemir 2.5.0

1 of the 1 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
haugene/transmission-openvpn:4.0059216cfae4b
heimdal@7.7.0+dfsg-1ubuntu1
krb5@1.17-6ubuntu4.1
7.7.0+dfsg-1ubuntu1.3
1.17-6ubuntu4.2

Open the chart page →

11,405
code-serverdeploy-code-server1.0.31 of 2See more

code-server deploy-code-server 1.0.3

1 of the 2 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
codercom/code-server:3.10.247605610ad8d
krb5@1.17-3+deb10u1
1.17-3+deb10u5

Open the chart page →

4,577
netris-controllernetrisai2.8.23 of 14See more

netris-controller netrisai 2.8.2

3 of the 14 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
namshi/smtp:latestaa63b8de68ce
krb5@1.17-3
1.17-3+deb10u5
netrisai/mongodb:4.4.4-debian-10-r095abfb776bb4
krb5@1.17-3+deb10u1
1.17-3+deb10u5
netrisai/redis:6.0.12-debian-10-r3a4c0140d1696
krb5@1.17-3+deb10u1
1.17-3+deb10u5

Open the chart page →

30,326
solrpreferred-aiVerified publisher3.2.01 of 3See more

solr preferred-ai 3.2.0

1 of the 3 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
library/solr:8.7.0d124efd81fbb
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u3

Open the chart page →

6,048
selenium3selenium31.2.41 of 1See more

selenium3 selenium3 1.2.4

1 of the 1 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
heimdal@7.7.0+dfsg-1ubuntu1
krb5@1.17-6ubuntu4.1
7.7.0+dfsg-1ubuntu1.3
1.17-6ubuntu4.2

Open the chart page →

11,782
plexutkuozdemirVerified publisher2.1.11 of 1See more

plex utkuozdemir 2.1.1

1 of the 1 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
linuxserver/plex:1.25.24a13ced2326c
heimdal@7.7.0+dfsg-1ubuntu1
krb5@1.17-6ubuntu4.1
7.7.0+dfsg-1ubuntu1.3
1.17-6ubuntu4.2

Open the chart page →

6,348
barmanadfinisVerified publisher0.10.01 of 1See more

barman adfinis 0.10.0

1 of the 1 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
ubcctlt/barman:v2.19cbbbbc8ae16b
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u3

Open the chart page →

1,552
zabbix-serveraekondratievVerified publisher1.0.63 of 4See more

zabbix-server aekondratiev 1.0.6

3 of the 4 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
zabbix/zabbix-agent:ubuntu-5.4.62127168cab03
heimdal@7.7.0+dfsg-1ubuntu1
krb5@1.17-6ubuntu4.1
7.7.0+dfsg-1ubuntu1.3
1.17-6ubuntu4.2
zabbix/zabbix-server-pgsql:ubuntu-5.4.66c946b1f45cd
heimdal@7.7.0+dfsg-1ubuntu1
krb5@1.17-6ubuntu4.1
7.7.0+dfsg-1ubuntu1.3
1.17-6ubuntu4.2
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
heimdal@7.7.0+dfsg-1ubuntu1
krb5@1.17-6ubuntu4.1
7.7.0+dfsg-1ubuntu1.3
1.17-6ubuntu4.2

Open the chart page →

30,668
passboltcnieg1.1.171 of 2See more

passbolt cnieg 1.1.17

1 of the 2 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
passbolt/passbolt:3.4.0-ce-non-root655547e17263
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u3

Open the chart page →

3,543
fadicetic0.3.14 of 25See more

fadi cetic 0.3.1

4 of the 25 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
krb5@1.17-3
1.17-3+deb10u5
ceticasbl/pg-ldap-sync:latest6c0aa7567145
krb5@1.17-3
1.17-3+deb10u5
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
heimdal@7.7.0+dfsg-1ubuntu1
krb5@1.17-6ubuntu4.1
7.7.0+dfsg-1ubuntu1.3
1.17-6ubuntu4.2
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
heimdal@7.7.0+dfsg-1ubuntu1
krb5@1.17-6ubuntu4.1
7.7.0+dfsg-1ubuntu1.3
1.17-6ubuntu4.2

Open the chart page →

52,919
backstagedeliveryheroVerified publisher0.1.152 of 2See more

backstage deliveryhero 0.1.15

2 of the 2 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
krb5@1.17-3
1.17-3+deb10u5
martinaif/backstage-k8s-demo-frontend:test1f07fbe15e5b5
krb5@1.17-3
1.17-3+deb10u5

Open the chart page →

8,213
guacamolehalkeye0.2.11 of 3See more

guacamole halkeye 0.2.1

1 of the 3 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
guacamole/guacd:1.1.02288530a4d1c
krb5@1.17-3
1.17-3+deb10u5

Open the chart page →

4,839
keycloak-operatorkeycloak-operatorVerified publisher0.0.41 of 1See more

keycloak-operator keycloak-operator 0.0.4

1 of the 1 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
krb5@1.18.2-22.el8_7
0:1.18.2-25.el8_8

Open the chart page →

4,652
percona-xtradb-clusterkfirfer1.5.101 of 3See more

percona-xtradb-cluster kfirfer 1.5.10

1 of the 3 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
percona/percona-xtradb-cluster:8.0.32-24.21f978ab8912e
krb5@1.18.2-22.0.1.el8_7
0:1.18.2-25.el8_8

Open the chart page →

4,957
kubeflowkubeflow1.6.24 of 45See more

kubeflow kubeflow 1.6.2

4 of the 45 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
istio/proxyv2:1.9.687a9db561d2e
heimdal@7.5.0+dfsg-1
krb5@1.16-2ubuntu0.2
7.5.0+dfsg-1ubuntu0.3
1.16-2ubuntu0.3
istio/proxyv2:1.14.1df69c1a7af7c
heimdal@7.7.0+dfsg-1ubuntu1
krb5@1.17-6ubuntu4.1
7.7.0+dfsg-1ubuntu1.3
1.17-6ubuntu4.2
gcr.io/ml-pipeline/api-server:2.0.0-alpha.5dc6ca05bb94f
krb5@1.18.3-6+deb11u2
1.18.3-6+deb11u3
gcr.io/ml-pipeline/metadata-writer:2.0.0-alpha.5ec3ae9f6df47
krb5@1.18.3-6+deb11u2
1.18.3-6+deb11u3

Open the chart page →

96,941
geonodeone-acre-fundVerified publisher0.1.161 of 7See more

geonode one-acre-fund 0.1.16

1 of the 7 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
library/nginx:1.19df13abe416e3
krb5@1.17-3+deb10u1
1.17-3+deb10u5

Open the chart page →

1,746
open5gsopen5gsVerified publisher2.3.41 of 5See more

open5gs open5gs 2.3.4

1 of the 5 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:4.4.14fe2bd7b4036
krb5@1.17-3
1.17-3+deb10u5

Open the chart page →

9,261
clustersecretpatrungel0.2.01 of 1See more

clustersecret patrungel 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
flag5/clustersecret:0.0.94ad5748bfcc6
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u3

Open the chart page →

1,841
taigarc-helm-charts0.1.01 of 7See more

taiga rc-helm-charts 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
taigaio/taiga-back:6.4.29f97323cc150
krb5@1.18.3-6
1.18.3-6+deb11u3

Open the chart page →

7,255
flinkriskfocus0.2.01 of 1See more

flink riskfocus 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
library/flink:1.11.2-scala_2.121fe4fb22a2a5
krb5@1.17-3
1.17-3+deb10u5

Open the chart page →

3,235
rke2-multusrke2-charts3.7.1-build20210416012 of 2See more

rke2-multus rke2-charts 3.7.1-build2021041601

2 of the 2 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
rancher/hardened-cni-plugins:v0.9.1-build20210414be3c1d469bf7
krb5@1.15.1-50.el7
0:1.15.1-55.el7_9
rancher/hardened-multus-cni:v3.7.1-build202104168eb8092f0728
krb5@1.15.1-50.el7
0:1.15.1-55.el7_9

Open the chart page →

4,519
k8s-telegram-sendertelegram-senderVerified publisher0.0.11 of 1See more

k8s-telegram-sender telegram-sender 0.0.1

1 of the 1 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
danuk/telegram-sender:0.0.1026560388070
krb5@1.18.3-6+deb11u2
1.18.3-6+deb11u3

Open the chart page →

3,048
uffizzi-appuffizzi-app1.3.01 of 14See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
uffizzi/app:latest66e9e3937c60
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u3

Open the chart page →

19,337
dexwiremindVerified publisher2.15.71 of 2See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
gcr.io/google_containers/kubernetes-dashboard-init-amd64:v1.0.0fbe12aa24de6
heimdal@1.7~git20150920+dfsg-4ubuntu1.16.04.1
krb5@1.13.2+dfsg-5ubuntu2
1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm3
1.13.2+dfsg-5ubuntu2.2+esm3

Open the chart page →

13,562
eshoponabpabp-charts1.0.011 of 15See more

eshoponabp abp-charts 1.0.0

11 of the 15 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
library/postgres:14.13162a6ead070
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u3
ghcr.io/volosoft/eshoponabp/app-authserver:1.0.022ce496c67d7
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u3
ghcr.io/volosoft/eshoponabp/app-publicweb:1.0.07e53010dda55
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u3
ghcr.io/volosoft/eshoponabp/gateway-web:1.0.026465a2bf671
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u3
ghcr.io/volosoft/eshoponabp/gateway-web-public:1.0.050cab15c80d9
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u3
ghcr.io/volosoft/eshoponabp/service-administration:1.0.0206a9bee17a8
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u3
ghcr.io/volosoft/eshoponabp/service-basket:1.0.0dd5ce454072e
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u3
ghcr.io/volosoft/eshoponabp/service-catalog:1.0.07ecb00f53d99
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u3
ghcr.io/volosoft/eshoponabp/service-identity:1.0.0e53bf47b62d0
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u3
ghcr.io/volosoft/eshoponabp/service-ordering:1.0.15e836b17337f
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u3
ghcr.io/volosoft/eshoponabp/service-payment:1.0.02ca91145099c
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u3

Open the chart page →

19,799
auto-deploy-appav1o-chartsVerified publisher0.15.41 of 1See more

auto-deploy-app av1o-charts 0.15.4

1 of the 1 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
gcr.io/google-containers/echoserver:1.910f4dbc8eeeb
heimdal@1.7~git20150920+dfsg-4ubuntu1.16.04.1
krb5@1.13.2+dfsg-5ubuntu2
1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm3
1.13.2+dfsg-5ubuntu2.2+esm3

Open the chart page →

11,007
openshift-consoleav1o-chartsVerified publisher0.3.61 of 1See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
krb5@1.17-19.el8_2
0:1.18.2-25.el8_8

Open the chart page →

9,052
hivebigdata-chartsVerified publisher0.1.81 of 1See more

hive bigdata-charts 0.1.8

1 of the 1 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
krb5@1.17-3+deb10u3
1.17-3+deb10u5

Open the chart page →

7,166
cardano-kstackcardano-kstackVerified publisher1.0.41 of 3See more

cardano-kstack cardano-kstack 1.0.4

1 of the 3 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
library/postgres:14.1-alpine578ca5c8452c
krb5@1.19.2-r4
1.19.4-r0

Open the chart page →

1,118
clowardenclowarden0.2.31 of 4See more

clowarden clowarden 0.2.3

1 of the 4 container images this version deploys carry CVE-2022-42898.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.19804725facf91
krb5@1.17-3+deb10u3
1.17-3+deb10u5

Open the chart page →

5,606

Container images carrying it

1,022 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/drogue-iot/device-state-service:0.11.0fbf0738cfc7e
krb5@1.19.1-23.el9_1
0:1.19.1-24.el9_1
1
ghcr.io/drogue-iot/drogue-event-source:0.2.1e2e812a4cf8e
krb5@1.18.2-14.el8
0:1.18.2-25.el8_8
1
ghcr.io/drogue-iot/http-endpoint:0.11.0b612c18479e0
krb5@1.19.1-23.el9_1
0:1.19.1-24.el9_1
1
ghcr.io/drogue-iot/knative-operator:0.11.0e2d927639f6e
krb5@1.19.1-23.el9_1
0:1.19.1-24.el9_1
1
ghcr.io/drogue-iot/mqtt-endpoint:0.11.032c6d2f5eab9
krb5@1.19.1-23.el9_1
0:1.19.1-24.el9_1
1
ghcr.io/drogue-iot/mqtt-integration:0.11.07ac2adb6ca49
krb5@1.19.1-23.el9_1
0:1.19.1-24.el9_1
1
ghcr.io/drogue-iot/outbox-controller:0.11.01a958edafdb1
krb5@1.19.1-23.el9_1
0:1.19.1-24.el9_1
1
ghcr.io/drogue-iot/postgresql-pusher:0.2.1c6bb121ced90
krb5@1.18.2-14.el8
0:1.18.2-25.el8_8
1
ghcr.io/drogue-iot/test-cert-generator:0.11.06ba7e1608286
krb5@1.18.2-21.el8
0:1.18.2-25.el8_8
1
ghcr.io/drogue-iot/topic-strimzi-operator:0.11.05253fbf8d04c
krb5@1.19.1-23.el9_1
0:1.19.1-24.el9_1
1
ghcr.io/drogue-iot/ttn-operator:0.11.07dd5ac80c8f1
krb5@1.19.1-23.el9_1
0:1.19.1-24.el9_1
1
ghcr.io/drogue-iot/user-auth-service:0.11.0adebc40ddf98
krb5@1.19.1-23.el9_1
0:1.19.1-24.el9_1
1
ghcr.io/drogue-iot/websocket-integration:0.11.0372dcd370945
krb5@1.19.1-23.el9_1
0:1.19.1-24.el9_1
1
ghcr.io/ducksify/pgdump-to-s3:latestc42c0946bd0f
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u3
1
ghcr.io/duyet/glossary:0.1.0ae6309fa237d
krb5@1.17-3+deb10u3
1.17-3+deb10u5
1
ghcr.io/dysnix/bitnami/mongodb:4.4.11-debian-10-r5073116e61007
krb5@1.17-3+deb10u3
1.17-3+deb10u5
1
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
heimdal@7.5.0+dfsg-1
krb5@1.16-2ubuntu0.2
7.5.0+dfsg-1ubuntu0.3
1.16-2ubuntu0.3
1
ghcr.io/edgelesssys/edgelessdb-sgx-1gb:v0.3.27e1d7a11a11a
heimdal@7.7.0+dfsg-1ubuntu1.2
krb5@1.17-6ubuntu4.1
7.7.0+dfsg-1ubuntu1.3
1.17-6ubuntu4.2
1
ghcr.io/eshepelyuk/dckr/cmak-3.0.0.6:1.2.090a34412c6b5
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u3
1
ghcr.io/ferama/vipien:v0.5.3923a3f704b21
heimdal@7.7.0+dfsg-1ubuntu1
krb5@1.17-6ubuntu4.1
7.7.0+dfsg-1ubuntu1.3
1.17-6ubuntu4.2
1
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u3
1
ghcr.io/g0dscookie/aptly:latestedd095d3c0ee
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u3
1
ghcr.io/g0dscookie/icinga2:2.13.5da81246ccfc9
krb5@1.18.3-6+deb11u2
1.18.3-6+deb11u3
1
ghcr.io/grofers/legend:0.1d6e901ad0ebd
krb5@1.17-3
1.17-3+deb10u5
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
heimdal@7.7.0+dfsg-1ubuntu1
krb5@1.17-6ubuntu4.1
7.7.0+dfsg-1ubuntu1.3
1.17-6ubuntu4.2
1
ghcr.io/helm/chartmuseum:v0.15.0c298183a5208
krb5@1.19.3-r0
1.19.4-r0
1
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
krb5@1.17-18.el8
0:1.18.2-25.el8_8
1
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
heimdal@7.7.0+dfsg-1ubuntu1
krb5@1.17-6ubuntu4.1
7.7.0+dfsg-1ubuntu1.3
1.17-6ubuntu4.2
1
ghcr.io/justarchinet/archisteamfarm:5.2.5.4c7c0a52303cb
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u3
1
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
heimdal@7.7.0+dfsg-1ubuntu1
krb5@1.17-6ubuntu4.1
7.7.0+dfsg-1ubuntu1.3
1.17-6ubuntu4.2
1
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
heimdal@7.7.0+dfsg-1ubuntu1
krb5@1.17-6ubuntu4.1
7.7.0+dfsg-1ubuntu1.3
1.17-6ubuntu4.2
1
ghcr.io/k8s-at-home/emby:v4.6.1.05c6b8f91f1c4
heimdal@7.7.0+dfsg-1ubuntu1
krb5@1.17-6ubuntu4.1
7.7.0+dfsg-1ubuntu1.3
1.17-6ubuntu4.2
1
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
heimdal@7.7.0+dfsg-1ubuntu1
krb5@1.17-6ubuntu4.1
7.7.0+dfsg-1ubuntu1.3
1.17-6ubuntu4.2
1
ghcr.io/k8s-at-home/jackett:v0.20.13163a4715b46aa2
heimdal@7.7.0+dfsg-1ubuntu1
krb5@1.17-6ubuntu4.1
7.7.0+dfsg-1ubuntu1.3
1.17-6ubuntu4.2
1
ghcr.io/k8s-at-home/leaf2mqtt:v0.1fc9f5aca6cf4
krb5@1.17-3+deb10u1
1.17-3+deb10u5
1
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
heimdal@7.7.0+dfsg-1ubuntu1
krb5@1.17-6ubuntu4.1
7.7.0+dfsg-1ubuntu1.3
1.17-6ubuntu4.2
1
ghcr.io/k8s-at-home/network-ups-tools:v2.7.4-2479-g86a32237cbd5d4cc1245
heimdal@7.7.0+dfsg-1ubuntu1
krb5@1.17-6ubuntu4.1
7.7.0+dfsg-1ubuntu1.3
1.17-6ubuntu4.2
1
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
krb5@1.19.2-2
1.19.2-2ubuntu0.1
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
heimdal@7.7.0+dfsg-1ubuntu1
krb5@1.17-6ubuntu4.1
7.7.0+dfsg-1ubuntu1.3
1.17-6ubuntu4.2
1
ghcr.io/k8s-at-home/plex:v1.28.0.5999-97678ded3ef756c7d784b
heimdal@7.7.0+dfsg-1ubuntu1
krb5@1.17-6ubuntu4.1
7.7.0+dfsg-1ubuntu1.3
1.17-6ubuntu4.2
1
ghcr.io/k8s-at-home/pod-gateway:v1.6.1dcb2d814a4f7
krb5@1.19.3-r0
1.19.4-r0
1
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
heimdal@7.7.0+dfsg-1ubuntu1
krb5@1.17-6ubuntu4.1
7.7.0+dfsg-1ubuntu1.3
1.17-6ubuntu4.2
1
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
heimdal@7.7.0+dfsg-1ubuntu1
krb5@1.17-6ubuntu4.1
7.7.0+dfsg-1ubuntu1.3
1.17-6ubuntu4.2
1
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
krb5@1.19.2-2
1.19.2-2ubuntu0.1
1
ghcr.io/k8s-at-home/readarr:v0.1.0.715ad943e9309e4
heimdal@7.7.0+dfsg-1ubuntu1
krb5@1.17-6ubuntu4.1
7.7.0+dfsg-1ubuntu1.3
1.17-6ubuntu4.2
1
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
heimdal@7.7.0+dfsg-1ubuntu1
krb5@1.17-6ubuntu4.1
7.7.0+dfsg-1ubuntu1.3
1.17-6ubuntu4.2
1
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
krb5@1.19.2-2
1.19.2-2ubuntu0.1
1
ghcr.io/k8s-at-home/tautulli:v2.7.74ea617c30397
heimdal@7.7.0+dfsg-1ubuntu1
krb5@1.17-6ubuntu4.1
7.7.0+dfsg-1ubuntu1.3
1.17-6ubuntu4.2
1
ghcr.io/k8s-at-home/theme-park:v1.7.3f8a5ec8f4669
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u3
1
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
heimdal@7.7.0+dfsg-1ubuntu1
krb5@1.17-6ubuntu4.1
7.7.0+dfsg-1ubuntu1.3
1.17-6ubuntu4.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.