StackRadar

CVE-2022-45688

High

Advisory

Published 13 Dec 2022In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.012
66th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
59
of 17,781 indexed, latest versions
Container images
61
deployed by those charts
Fix available
1 of 1
affected package

json stack overflow vulnerability

Carried by container images the latest versions of 59 of 17,781 indexed charts deploy, on 61 images.

Affected packageAffected versionsFixed inImages
jsonmaven20070829, 20140107, 20160212, 20160810+10 more2023022761
OSV records
GHSA-3vqj-43w4-2q58

Charts affected

59 by stars
ChartLatestAffected imagesRadar Score
sonarqubesonarqubeVerified publisher10.0.0+5211 of 3See more

sonarqube sonarqube 10.0.0+521

1 of the 3 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
library/sonarqube:10.0.0-communityef9723cf4fe4
json@20220320
20230227

Open the chart page →

6,556
dependency-trackevryfs-ossVerified publisher1.5.51 of 3See more

dependency-track evryfs-oss 1.5.5

1 of the 3 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
dependencytrack/apiserver:4.6.3485ac0952c02
json@20220924
20230227

Open the chart page →

2,503
sonarqube-ltssonarqubeVerified publisher1.0.16+981 of 4See more

sonarqube-lts sonarqube 1.0.16+98

1 of the 4 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
library/sonarqube:8.9.2-community88cd63154d4b
json@20201115
20230227

Open the chart page →

4,099
jira-softwaremoxVerified publisher2.7.11 of 3See more

jira-software mox 2.7.1

1 of the 3 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
atlassian/jira-software:9.7.264a75aa4ec4e
json@20070829
20230227

Open the chart page →

8,636
unifi-controllerqonstruktVerified publisher2.6.11 of 1See more

unifi-controller qonstrukt 2.6.1

1 of the 1 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:8.0.240ae315a3a456
json@20190722
20230227

Open the chart page →

10,469
sonarqube-dcesonarqubeVerified publisher0.1.2+1212 of 5See more

sonarqube-dce sonarqube 0.1.2+121

2 of the 5 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
library/sonarqube:9.1.0-datacenter-search7e43ff493a47
json@20201115
20230227
library/sonarqube:9.1.0-datacenter-appa9bc5a3a1fc3
json@20201115
20230227

Open the chart page →

8,698
unifigeek-cookbookVerified publisher5.1.31 of 1See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.4.162b3edc809a3ff
json@20190722
20230227

Open the chart page →

11,839
activemq-artemisactivemq-artemis-helm0.3.61 of 1See more

activemq-artemis activemq-artemis-helm 0.3.6

1 of the 1 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
vromero/activemq-artemis:2.16.0408d6a46b153
json@20171018
20230227

Open the chart page →

4,419
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-elk:latestba1d85ec3739
json@20180813
20230227

Open the chart page →

10,730
pitchforkexpediagroup0.1.41 of 1See more

pitchfork expediagroup 0.1.4

1 of the 1 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
expediagroup/pitchfork:1.314f2cf61e7de9
json@20201115
20230227

Open the chart page →

3,309
omada-controllergeek-cookbookVerified publisher4.4.21 of 1See more

omada-controller geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
json@20180813
20230227

Open the chart page →

11,553
magentomagento3.2.31 of 12See more

magento magento 3.2.3

1 of the 12 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
magento/magento-cloud-docker-opensearch:2.5-1.4.059fb6f0f1461
json@20220924
20230227

Open the chart page →

13,479
tocktock0.6.32 of 9See more

tock tock 0.6.3

2 of the 9 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
tock/build_worker:25.10.7080cb6b08d5b
json@20170516
20230227
tock/nlp_api:25.10.7c04ffe67b977
json@20170516
20230227

Open the chart page →

12,907
omada-controllerandrelote-k8sVerified publisher4.5.01 of 1See more

omada-controller andrelote-k8s 4.5.0

1 of the 1 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
json@20180813
20230227

Open the chart page →

11,553
inbox-server-distributedappscodeVerified publisher2025.12.251 of 4See more

inbox-server-distributed appscode 2025.12.25

1 of the 4 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.1.04254021a8c71
json@20180813
20230227

Open the chart page →

15,573
james-komposeappscodeVerified publisher0.1.01 of 4See more

james-kompose appscode 0.1.0

1 of the 4 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.1.04254021a8c71
json@20180813
20230227

Open the chart page →

16,975
automatedconfigurationassist-iot-automated-configuration1.0.01 of 5See more

automatedconfiguration assist-iot-automated-configuration 1.0.0

1 of the 5 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
assistiot/automated_configuration:latest23f195a7a26a
json@20201115.0.0
20230227

Open the chart page →

14,728
axelor-open-suiteaxelor-open-suiteVerified publisher7.2.581 of 2See more

axelor-open-suite axelor-open-suite 7.2.58

1 of the 2 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
pmoscode/axelor-open-suite:v7.2.57a58f4d762f5c
json@20210307
20230227

Open the chart page →

9,722
opendistro-esbeeinventor1.15.11 of 3See more

opendistro-es beeinventor 1.15.1

1 of the 3 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
json@20180813
20230227

Open the chart page →

5,806
unificloudnativeapp0.4.21 of 1See more

unifi cloudnativeapp 0.4.2

1 of the 1 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
jacobalberty/unifi:5.10.19c409924e2463
json@20180813
20230227

Open the chart page →

22,442
dependency-trackcnieg3.0.81 of 2See more

dependency-track cnieg 3.0.8

1 of the 2 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
dependencytrack/apiserver:4.6.3485ac0952c02
json@20220924
20230227

Open the chart page →

2,503
cp-helm-chartscp-helm-charts0.6.15 of 8See more

cp-helm-charts cp-helm-charts 0.6.1

5 of the 8 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
json@20190722
20230227
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
json@20190722
20230227
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
json@20190722
20230227
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
json@20190722
20230227
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
json@20190722
20230227

Open the chart page →

58,857
api-postsdniel0.9.11 of 1See more

api-posts dniel 0.9.1

1 of the 1 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
dniel/api-posts:master45a667852f2a
json@20171018
20230227

Open the chart page →

8,986
forwardauthdniel2.0.131 of 1See more

forwardauth dniel 2.0.13

1 of the 1 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
dniel/forwardauth:latestf67129ea1c64
json@20160212
20230227

Open the chart page →

4,592
mod-marccatfolio-org0.1.301 of 1See more

mod-marccat folio-org 0.1.30

1 of the 1 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
folioci/mod-marccat:latest1b57d690d568
json@20180813
20230227

Open the chart page →

6,988
komgageek-cookbookVerified publisher2.4.21 of 1See more

komga geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
gotson/komga:0.99.49b15ea6bfc30
json@20171018
20230227

Open the chart page →

12,581
promcordgeek-cookbookVerified publisher5.4.21 of 1See more

promcord geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
biospheere/promcord:latest16d4fd269e66
json@20170516
20230227

Open the chart page →

1,147
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.82 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

2 of the 5 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
json@20140107
20230227
jingking/geonetwork-hnap:4.2.843e74ab234e1
json@20180813
20230227

Open the chart page →

34,754
chart-bookhelm-deploy-book0.1.01 of 3See more

chart-book helm-deploy-book 0.1.0

1 of the 3 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
dannielkil/book-backend:lateste3b479a55a69
json@20180813
20230227

Open the chart page →

9,122
mvfi4trustVerified publisher1.1.21 of 1See more

mvf i4trust 1.1.2

1 of the 1 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
wistefan/mvf:lateste0887302b2d8
json@20220924
20230227

Open the chart page →

7,144
vcwaltidi4trustVerified publisher0.0.191 of 1See more

vcwaltid i4trust 0.0.19

1 of the 1 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
json@20220924
20230227

Open the chart page →

7,862
itm-mqtt-brokerintelVerified publisher1.0.01 of 1See more

itm-mqtt-broker intel 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
hivemq/hivemq4:dns-4.5.144d194450d48e
json@20201115
20230227

Open the chart page →

2,653
kadeck-webkadeck0.6.01 of 1See more

kadeck-web kadeck 0.6.0

1 of the 1 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
xeotek/kadeck:4.2.94c6b04d9ce55
json@20220320
20230227

Open the chart page →

7,254
sonarqubekubesphereVerified publisher6.7.01 of 3See more

sonarqube kubesphere 6.7.0

1 of the 3 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
library/sonarqube:8.9-communityeb2f0be32efd
json@20201115
20230227

Open the chart page →

2,273
kafka-connect-wrapperlsmhun0.1.01 of 1See more

kafka-connect-wrapper lsmhun 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
lsmaster/kafka-connect-wrapper:6.1.0-0.1061eb5fbfa00
json@20201115
20230227

Open the chart page →

2,391
opendistro-eslsst-sqre1.4.11 of 3See more

opendistro-es lsst-sqre 1.4.1

1 of the 3 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.4.06df71eb04639
json@20180813
20230227

Open the chart page →

7,929
filebot-botluiscajl0.0.111 of 1See more

filebot-bot luiscajl 0.0.11

1 of the 1 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
lavandadelpatio/filebot-bot:0.0.1-SNAPSHOTd2cba20aa4d8
json@20180813
20230227

Open the chart page →

3,679
unifimidokura-communityVerified publisher0.0.61 of 1See more

unifi midokura-community 0.0.6

1 of the 1 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:7.3.83ab105cc50322
json@20190722
20230227

Open the chart page →

11,188
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
opensearchproject/opensearch:1.1.0967d7f57f72f
json@20180813
20230227

Open the chart page →

10,603
standard-application-stackmintel11.4.01 of 12See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
opensearchproject/opensearch:1.1.0967d7f57f72f
json@20180813
20230227

Open the chart page →

10,603
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
json@20190722
20230227

Open the chart page →

55,726
ma1sdnetsocVerified publisher0.2.11 of 1See more

ma1sd netsoc 0.2.1

1 of the 1 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
ma1uta/ma1sd:2.5.0ee2a56d8b8ca
json@20160810
20230227

Open the chart page →

3,582
dependency-tracknovum-rgi-charts0.1.81 of 2See more

dependency-track novum-rgi-charts 0.1.8

1 of the 2 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
owasp/dependency-track:3.8.0efc65e702ee1
json@20190722
20230227

Open the chart page →

3,633
smsf-configurationopenshift1.0.41 of 1See more

smsf-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
gurolakman/smsf-configuration:1.0.49abb3882bcbd
json@20140107
20230227

Open the chart page →

13,607
smsf-dispatcheropenshift1.0.41 of 1See more

smsf-dispatcher openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
json@20140107
20230227

Open the chart page →

11,738
smsf-momtopenshift1.0.41 of 1See more

smsf-momt openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
gurolakman/smsf-momt:1.0.4ce23b20a8a17
json@20140107
20230227

Open the chart page →

13,568
smsf-registrationopenshift1.0.41 of 1See more

smsf-registration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
gurolakman/smsf-registration:1.0.4b22e746edd5d
json@20140107
20230227

Open the chart page →

13,551
ussigw-configurationopenshift1.0.41 of 1See more

ussigw-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
json@20220320
20230227

Open the chart page →

13,455
punchline-javapunchplatform8.1.11 of 1See more

punchline-java punchplatform 8.1.1

1 of the 1 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
ghcr.io/punchplatform/punchline-java:8.1.1d46ce7b96482
json@20180813
20230227

Open the chart page →

1,995
reportportalreportportal5.7.21 of 8See more

reportportal reportportal 5.7.2

1 of the 8 container images this version deploys carry CVE-2022-45688.

Container imageDigestPackageFixed in
reportportal/service-jobs:5.7.2dc166c58485a
json@20220320
20230227

Open the chart page →

25,737

Container images carrying it

61 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
reportportal/service-jobs:5.7.2dc166c58485a
json@20220320
20230227
1
rookout/k8s-operator:latest0d083f3ef1a7
json@20180813
20230227
1
tock/build_worker:25.10.7080cb6b08d5b
json@20170516
20230227
1
tock/nlp_api:25.10.7c04ffe67b977
json@20170516
20230227
1
trinodb/trino:405ee80ab5eeab2
json@20200518
20230227
1
vromero/activemq-artemis:2.16.0408d6a46b153
json@20171018
20230227
1
wistefan/mvf:lateste0887302b2d8
json@20220924
20230227
1
xeotek/kadeck:4.2.94c6b04d9ce55
json@20220320
20230227
1
ghcr.io/punchplatform/punchline-java:8.1.1d46ce7b96482
json@20180813
20230227
1
ghcr.io/skyoo2003/digdag:0.0.1821fd6a6f2cd
json@20171018
20230227
1
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
json@20220924
20230227
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.