StackRadarChart IndexLive demo

CVE-2022-45047

Critical

Advisory

Published 16 Nov 2022In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.8; base score, highest
EPSS: 0.036; 89th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 20; of 17,781 indexed, latest versions
Container images: 18; deployed by those charts
Fix available: 2 of 2; affected packages

Unsafe deserialization in Apache MINA SSHD

Carried by container images the latest versions of 20 of 17,781 indexed charts deploy, on 18 images.

Affected package	Affected versions	Fixed in	Images
sshd-coremaven	0.14.0, 1.7.0, 2.4.0, 2.6.0+2 more	2.9.2	14
sshd-commonmaven	2.3.0, 2.4.0, 2.6.0, 2.7.0+1 more	2.9.2	11

OSV records: GHSA-fhw8-8j55-vwgq

Charts affected

20 by stars

Chart

Latest

Affected images

Radar Score

sonarqubesonarqube

1 of 3 See more

sonarqube sonarqube 10.0.0+521

1 of the 3 container images this version deploys carry CVE-2022-45047.

Container image	Digest	Package	Fixed in
library/sonarqube :10.0.0-community	ef9723cf4fe4	sshd-common@2.8.0 sshd-core@2.8.0	2.9.2 2.9.2

Open the chart page →

6,556

keycloakcodecentric

1 of 3 See more

keycloak codecentric 18.10.0

1 of the 3 container images this version deploys carry CVE-2022-45047.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :17.0.1-legacy	68f9f38c8f30	sshd-common@2.7.0 sshd-core@2.7.0	2.9.2 2.9.2

Open the chart page →

7,713

nifi-registrydysnix

1 of 2 See more

nifi-registry dysnix 1.1.5

1 of the 2 container images this version deploys carry CVE-2022-45047.

Container image	Digest	Package	Fixed in
apache/nifi-registry :0.8.0	974efa2f21da	sshd-common@2.4.0 sshd-core@2.4.0	2.9.2 2.9.2

Open the chart page →

6,531

1 of 12 See more

clowder2 ncsa 1.9.7

1 of the 12 container images this version deploys carry CVE-2022-45047.

Container image	Digest	Package	Fixed in
bitnamilegacy/keycloak :20.0.5	cb04e49e6eb1	sshd-common@2.7.0	2.9.2

Open the chart page →

37,373

nifi-registryprofyu

1 of 1 See more

nifi-registry profyu 1.14.0-r001

1 of the 1 container images this version deploys carry CVE-2022-45047.

Container image	Digest	Package	Fixed in
apache/nifi-registry :1.14.0	090b7f87ec7f	sshd-common@2.6.0 sshd-core@2.6.0	2.9.2 2.9.2

Open the chart page →

4,621

keycloakaccount-service

1 of 2 See more

keycloak account-service 18.4.5

1 of the 2 container images this version deploys carry CVE-2022-45047.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :17.0.1-legacy	68f9f38c8f30	sshd-common@2.7.0 sshd-core@2.7.0	2.9.2 2.9.2

Open the chart page →

7,713

idmassist-iot-identity-manager

1 of 2 See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-45047.

Container image	Digest	Package	Fixed in
assistiot/identity-manager_kc :latest	0df4b4fa899a	sshd-common@2.7.0 sshd-core@2.7.0	2.9.2 2.9.2

Open the chart page →

13,352

sdn-controllerassist-iot-sdn-controller

1 of 1 See more

sdn-controller assist-iot-sdn-controller 2.4.0

1 of the 1 container images this version deploys carry CVE-2022-45047.

Container image	Digest	Package	Fixed in
assistiot/sdn_controller :2.4.0	ea254b6d8a31	sshd-core@1.7.0	2.9.2

Open the chart page →

7,936

drogue-cloud-coredrogue-iot

1 of 22 See more

drogue-cloud-core drogue-iot 0.7.11

1 of the 22 container images this version deploys carry CVE-2022-45047.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0	054ef67eb7da	sshd-common@2.7.0	2.9.2

Open the chart page →

55,666

drogue-cloud-twindrogue-iot

1 of 8 See more

drogue-cloud-twin drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2022-45047.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0	054ef67eb7da	sshd-common@2.7.0	2.9.2

Open the chart page →

6,915

jenkinsjenkins-x

1 of 2 See more

jenkins jenkins-x 0.10.38

1 of the 2 container images this version deploys carry CVE-2022-45047.

Container image	Digest	Package	Fixed in
jenkinsci/jenkins :2.67	a1f33f004659	sshd-core@0.14.0	2.9.2

Open the chart page →

10,682

nexusjenkins-x

1 of 1 See more

nexus jenkins-x 0.1.37

1 of the 1 container images this version deploys carry CVE-2022-45047.

Container image	Digest	Package	Fixed in
ghcr.io/jenkins-x/nexus :0.1.37	8caf5289fe73	sshd-core@1.7.0	2.9.2

Open the chart page →

12,856

comacopencord

1 of 9 See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2022-45047.

Container image	Digest	Package	Fixed in
omecproject/onos-progran :1.0.0	5715e5648aa0	sshd-core@0.14.0	2.9.2

Open the chart page →

88,546

onosopencord

1 of 1 See more

onos opencord 3.0.2

1 of the 1 container images this version deploys carry CVE-2022-45047.

Container image	Digest	Package	Fixed in
onosproject/onos :2.2.1	44914a8d4b3f	sshd-core@1.7.0	2.9.2

Open the chart page →

12,927

onos-progranopencord

1 of 2 See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2022-45047.

Container image	Digest	Package	Fixed in
muluder/prograncontrollermcord :0.1.8	43b597a93da7	sshd-core@0.14.0	2.9.2

Open the chart page →

38,865

voltha-infraopencord

1 of 10 See more

voltha-infra opencord 2.14.0

1 of the 10 container images this version deploys carry CVE-2022-45047.

Container image	Digest	Package	Fixed in
voltha/voltha-onos :5.1.8	e038acb950d3	sshd-core@1.7.0	2.9.2

Open the chart page →

41,044

simple-keycloaksikalabs

1 of 1 See more

simple-keycloak sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-45047.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.1	8830f76112b6	sshd-common@2.7.0	2.9.2

Open the chart page →

6,443

sistas-chatbotsistas-chatbot

1 of 6 See more

sistas-chatbot sistas-chatbot 5.0.2

1 of the 6 container images this version deploys carry CVE-2022-45047.

Container image	Digest	Package	Fixed in
jhipster/jhipster-registry :latest	7184525acd4d	sshd-common@2.7.0 sshd-core@2.7.0	2.9.2 2.9.2

Open the chart page →

5,856

webhookie-allwebhookie

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2022-45047.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	sshd-common@2.3.0 sshd-core@2.4.0	2.9.2 2.9.2

Open the chart page →

28,605

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2022-45047.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	sshd-common@2.7.0	2.9.2

Open the chart page →

6,016

Container images carrying it

18 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/keycloak/keycloak :20.0	054ef67eb7da	sshd-common@2.7.0	2.9.2	2
quay.io/keycloak/keycloak :17.0.1-legacy	68f9f38c8f30	sshd-common@2.7.0 sshd-core@2.7.0	2.9.2 2.9.2	2
apache/nifi-registry :1.14.0	090b7f87ec7f	sshd-common@2.6.0 sshd-core@2.6.0	2.9.2 2.9.2	1
apache/nifi-registry :0.8.0	974efa2f21da	sshd-common@2.4.0 sshd-core@2.4.0	2.9.2 2.9.2	1
assistiot/identity-manager_kc :latest	0df4b4fa899a	sshd-common@2.7.0 sshd-core@2.7.0	2.9.2 2.9.2	1
assistiot/sdn_controller :2.4.0	ea254b6d8a31	sshd-core@1.7.0	2.9.2	1
bitnamilegacy/keycloak :20.0.5	cb04e49e6eb1	sshd-common@2.7.0	2.9.2	1
jenkinsci/jenkins :2.67	a1f33f004659	sshd-core@0.14.0	2.9.2	1
jhipster/jhipster-registry :latest	7184525acd4d	sshd-common@2.7.0 sshd-core@2.7.0	2.9.2 2.9.2	1
library/sonarqube :10.0.0-community	ef9723cf4fe4	sshd-common@2.8.0 sshd-core@2.8.0	2.9.2 2.9.2	1
muluder/prograncontrollermcord :0.1.8	43b597a93da7	sshd-core@0.14.0	2.9.2	1
omecproject/onos-progran :1.0.0	5715e5648aa0	sshd-core@0.14.0	2.9.2	1
onosproject/onos :2.2.1	44914a8d4b3f	sshd-core@1.7.0	2.9.2	1
voltha/voltha-onos :5.1.8	e038acb950d3	sshd-core@1.7.0	2.9.2	1
ghcr.io/jenkins-x/nexus :0.1.37	8caf5289fe73	sshd-core@1.7.0	2.9.2	1
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	sshd-common@2.3.0 sshd-core@2.4.0	2.9.2 2.9.2	1
quay.io/keycloak/keycloak :20.0.1	8830f76112b6	sshd-common@2.7.0	2.9.2	1
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	sshd-common@2.7.0	2.9.2	1