StackRadarChart IndexLive demo

CVE-2022-45868

High

Advisory

Published 23 Nov 2022In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.8; base score, highest
EPSS: 0.003; 24th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 134; of 17,781 indexed, latest versions
Container images: 62; deployed by those charts
Fix available: 1 of 1; affected package

Password exposure in H2 Database

Carried by container images the latest versions of 134 of 17,781 indexed charts deploy, on 62 images.

Affected package	Affected versions	Fixed in	Images
h2maven	1.4.198, 1.4.199, 1.4.200, 2.1.210+2 more	2.2.220	62

OSV records: GHSA-22wj-vf5f-wrvj

Charts affected

134 by stars

Chart

Latest

Affected images

Radar Score

pagesprasanthi

1 of 3 See more

20,190

pagesranjinigogga

1 of 3 See more

pages ranjinigogga 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-45868.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.2.220

Open the chart page →

20,190

pagesrebecca-pages

1 of 3 See more

pages rebecca-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-45868.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.2.220

Open the chart page →

20,190

pagesroccohiggins-pages

1 of 3 See more

pages roccohiggins-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-45868.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.2.220

Open the chart page →

20,190

bastillion-upstreamrock8s

1 of 1 See more

bastillion-upstream rock8s 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-45868.

Container image	Digest	Package	Fixed in
iamdorsah/bastillion :v0.1	db83a0254d81	h2@2.1.210	2.2.220

Open the chart page →

3,051

pagesronan-pages

1 of 3 See more

pages ronan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-45868.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.2.220

Open the chart page →

20,190

helm-chart-examplesalaboy

1 of 1 See more

helm-chart-example salaboy 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-45868.

Container image	Digest	Package	Fixed in
salaboy/fmtok8s-monolith :v0.1.0	f225568e6d03	h2@1.4.200	2.2.220

Open the chart page →

2,847

pagessamanvithkaranth

1 of 3 See more

pages samanvithkaranth 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-45868.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.2.220

Open the chart page →

20,190

pagessarubits-pages

1 of 3 See more

pages sarubits-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-45868.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.2.220

Open the chart page →

20,190

seataseata

1 of 1 See more

seata seata 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-45868.

Container image	Digest	Package	Fixed in
seataio/seata-server :latest	703b5de7f1a6	h2@2.1.214	2.2.220

Open the chart page →

4,245

pagessekharpkube

1 of 3 See more

pages sekharpkube 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-45868.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.2.220

Open the chart page →

20,190

shenyushenyu

1 of 2 See more

shenyu shenyu 0.6.3

1 of the 2 container images this version deploys carry CVE-2022-45868.

Container image	Digest	Package	Fixed in
apache/shenyu-admin :2.5.1	e2be712fc4f4	h2@1.4.200	2.2.220

Open the chart page →

8,804

shenyushenyu-helm-chart-test

1 of 2 See more

shenyu shenyu-helm-chart-test 2.4.27

1 of the 2 container images this version deploys carry CVE-2022-45868.

Container image	Digest	Package	Fixed in
apache/shenyu-admin :2.4.2	e8b7c4ddd069	h2@1.4.200	2.2.220

Open the chart page →

12,513

pagesshrutiujlan-pages

1 of 3 See more

pages shrutiujlan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-45868.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.2.220

Open the chart page →

20,190

simple-keycloaksikalabs

1 of 1 See more

simple-keycloak sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-45868.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.1	8830f76112b6	h2@2.1.214	2.2.220

Open the chart page →

6,443

sonatype-nexus3simcube

1 of 2 See more

sonatype-nexus3 simcube 1.0.1

1 of the 2 container images this version deploys carry CVE-2022-45868.

Container image	Digest	Package	Fixed in
sonatype/nexus3 :3.58.1	586060431b64	h2@1.4.200	2.2.220

Open the chart page →

4,946

atlassian-confluencesomeblackmagic

1 of 1 See more

atlassian-confluence someblackmagic 3.4.1

1 of the 1 container images this version deploys carry CVE-2022-45868.

Container image	Digest	Package	Fixed in
atlassian/confluence-server :7.10.0	3b9222ab32ef	h2@1.4.200	2.2.220

Open the chart page →

13,605

smtp-fake-serversomeblackmagic

1 of 1 See more

smtp-fake-server someblackmagic 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-45868.

Container image	Digest	Package	Fixed in
someblackmagic/smtp-fake-server :latest	0d63ba37a560	h2@1.4.200	2.2.220

Open the chart page →

4,278

pagessrinipages

1 of 3 See more

20,190

trinostatcan

1 of 2 See more

13,767

pagesstephendillondell

1 of 3 See more

pages stephendillondell 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-45868.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.2.220

Open the chart page →

20,190

pagessunilb2590-pages

1 of 3 See more

pages sunilb2590-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-45868.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.2.220

Open the chart page →

20,190

rundecksvtech-public-helm-charts

1 of 2 See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2022-45868.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	h2@2.1.210	2.2.220

Open the chart page →

18,756

pagestest4322

1 of 3 See more

20,190

shenyutest-helm

1 of 2 See more

shenyu test-helm 2.4.21

1 of the 2 container images this version deploys carry CVE-2022-45868.

Container image	Digest	Package	Fixed in
apache/shenyu-admin :2.4.2	e8b7c4ddd069	h2@1.4.200	2.2.220

Open the chart page →

12,513

pagesthiru-pages

1 of 3 See more

pages thiru-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-45868.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.2.220

Open the chart page →

20,190

pagesthuy-pages

1 of 3 See more

20,190

pagesvictor-pages

1 of 3 See more

pages victor-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-45868.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.2.220

Open the chart page →

20,190

pageswalter

1 of 3 See more

20,190

drillwearefrank

1 of 3 See more

9,397

sonarqubewebencryptor

1 of 3 See more

sonarqube webencryptor 6.7.3

1 of the 3 container images this version deploys carry CVE-2022-45868.

Container image	Digest	Package	Fixed in
library/sonarqube :8.2-community	a246bc64207e	h2@1.4.199	2.2.220

Open the chart page →

5,460

is-pattern-1wso2is-pattern1

1 of 2 See more

is-pattern-1 wso2is-pattern1 5.11.0

1 of the 2 container images this version deploys carry CVE-2022-45868.

Container image	Digest	Package	Fixed in
massimolauri/wso2is :5.11.0-centos	e08abf0ce767	h2@1.4.199	2.2.220

Open the chart page →

6,213

zahori-serverzahori

1 of 2 See more

zahori-server zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2022-45868.

Container image	Digest	Package	Fixed in
flyway/flyway :9.14.1-alpine	80f12c80502b	h2@2.1.214	2.2.220

Open the chart page →

5,846

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2022-45868.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	h2@2.1.214	2.2.220

Open the chart page →

6,016

Container images carrying it

62 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
someblackmagic/smtp-fake-server :latest	0d63ba37a560	h2@1.4.200	2.2.220	1
sonatype/nexus3 :3.58.1	586060431b64	h2@1.4.200	2.2.220	1
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	h2@2.1.210	2.2.220	1
trinodb/trino :405	ee80ab5eeab2	h2@1.4.200	2.2.220	1
xeotek/kadeck :6.3.4	39a3b37a17c5	h2@2.1.214	2.2.220	1
xeotek/kadeck :4.2.9	4c6b04d9ce55	h2@1.4.198	2.2.220	1
ghcr.io/jenkins-x/nexus :0.1.37	8caf5289fe73	h2@1.4.200	2.2.220	1
ghcr.io/k8s-at-home/nzbhydra2 :v3.14.2	ef3670f7e0a8	h2@1.4.200	2.2.220	1
quay.io/fiware/canis-major :1.5.15	bb40472e4ff5	h2@1.4.200	2.2.220	1
quay.io/fiware/endpoint-configuration-service :0.4.3	0dc38a87b844	h2@1.4.200	2.2.220	1
quay.io/keycloak/keycloak :20.0.1	8830f76112b6	h2@2.1.214	2.2.220	1
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	h2@2.1.214	2.2.220	1