StackRadarChart IndexLive demo

CVE-2022-45688

High

Advisory

Published 13 Dec 2022In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.012; 66th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 59; of 17,781 indexed, latest versions
Container images: 61; deployed by those charts
Fix available: 1 of 1; affected package

json stack overflow vulnerability

Carried by container images the latest versions of 59 of 17,781 indexed charts deploy, on 61 images.

Affected package	Affected versions	Fixed in	Images
jsonmaven	20070829, 20140107, 20160212, 20160810+10 more	20230227	61

OSV records: GHSA-3vqj-43w4-2q58

Charts affected

59 by stars

Chart

Latest

Affected images

Radar Score

operatorrookout

1 of 2 See more

operator rookout 0.0.20

1 of the 2 container images this version deploys carry CVE-2022-45688.

Container image	Digest	Package	Fixed in
rookout/k8s-operator :latest	0d083f3ef1a7	json@20180813	20230227

Open the chart page →

2,209

digdagskyoo2003

1 of 4 See more

digdag skyoo2003 0.5.2

1 of the 4 container images this version deploys carry CVE-2022-45688.

Container image	Digest	Package	Fixed in
ghcr.io/skyoo2003/digdag :0.0.1	821fd6a6f2cd	json@20171018	20230227

Open the chart page →

6,949

atlassian-confluencesomeblackmagic

1 of 1 See more

atlassian-confluence someblackmagic 3.4.1

1 of the 1 container images this version deploys carry CVE-2022-45688.

Container image	Digest	Package	Fixed in
atlassian/confluence-server :7.10.0	3b9222ab32ef	json@20070829	20230227

Open the chart page →

13,605

atlassian-jirasomeblackmagic

1 of 1 See more

atlassian-jira someblackmagic 3.3.2

1 of the 1 container images this version deploys carry CVE-2022-45688.

Container image	Digest	Package	Fixed in
atlassian/jira-software :8.14.0	37bc46cbec1a	json@20070829	20230227

Open the chart page →

13,079

unifistartechnica

1 of 2 See more

unifi startechnica 0.1.3

1 of the 2 container images this version deploys carry CVE-2022-45688.

Container image	Digest	Package	Fixed in
jacobalberty/unifi :v7.1.66	4a3616625dda	json@20190722	20230227

Open the chart page →

14,493

trinostatcan

1 of 2 See more

13,767

1 of 3 See more

hermes touk 0.6.0

1 of the 3 container images this version deploys carry CVE-2022-45688.

Container image	Digest	Package	Fixed in
apicurio/apicurio-registry-kafkasql :2.1.0.Final	a97d67487532	json@20201115	20230227

Open the chart page →

12,455

apicurio-registry-sqlwitcom-gmbh

1 of 1 See more

apicurio-registry-sql witcom-gmbh 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-45688.

Container image	Digest	Package	Fixed in
apicurio/apicurio-registry-jpa :1.3.2.Final	44eeddd3562c	json@20190722	20230227

Open the chart page →

3,424

opendistro-eswitcom-gmbh

1 of 3 See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry CVE-2022-45688.

Container image	Digest	Package	Fixed in
amazon/opendistro-for-elasticsearch :1.13.3	2acfa1dcc5f8	json@20180813	20230227

Open the chart page →

5,806

Container images carrying it

61 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
reportportal/service-jobs :5.7.2	dc166c58485a	json@20220320	20230227	1
rookout/k8s-operator :latest	0d083f3ef1a7	json@20180813	20230227	1
tock/build_worker :25.10.7	080cb6b08d5b	json@20170516	20230227	1
tock/nlp_api :25.10.7	c04ffe67b977	json@20170516	20230227	1
trinodb/trino :405	ee80ab5eeab2	json@20200518	20230227	1
vromero/activemq-artemis :2.16.0	408d6a46b153	json@20171018	20230227	1
wistefan/mvf :latest	e0887302b2d8	json@20220924	20230227	1
xeotek/kadeck :4.2.9	4c6b04d9ce55	json@20220320	20230227	1
ghcr.io/punchplatform/punchline-java :8.1.1	d46ce7b96482	json@20180813	20230227	1
ghcr.io/skyoo2003/digdag :0.0.1	821fd6a6f2cd	json@20171018	20230227	1
quay.io/fiware/waltid :1.14.1-SNAPSHOT	93889c3d8a34	json@20220924	20230227	1