StackRadar

CVE-2022-45868

High

Advisory

Published 23 Nov 2022In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.003
24th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
134
of 17,781 indexed, latest versions
Container images
62
deployed by those charts
Fix available
1 of 1
affected package

Password exposure in H2 Database

Carried by container images the latest versions of 134 of 17,781 indexed charts deploy, on 62 images.

Affected packageAffected versionsFixed inImages
h2maven1.4.198, 1.4.199, 1.4.200, 2.1.210+2 more2.2.22062
OSV records
GHSA-22wj-vf5f-wrvj

Charts affected

134 by stars
ChartLatestAffected imagesRadar Score
pagesprasanthi1.0.01 of 3See more

pages prasanthi 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-45868.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
h2@1.4.200
2.2.220

Open the chart page →

20,190
pagesranjinigogga1.0.01 of 3See more

pages ranjinigogga 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-45868.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
h2@1.4.200
2.2.220

Open the chart page →

20,190
pagesrebecca-pages1.0.01 of 3See more

pages rebecca-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-45868.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
h2@1.4.200
2.2.220

Open the chart page →

20,190
pagesroccohiggins-pages1.0.01 of 3See more

pages roccohiggins-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-45868.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
h2@1.4.200
2.2.220

Open the chart page →

20,190
bastillion-upstreamrock8sVerified publisher0.1.01 of 1See more

bastillion-upstream rock8s 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-45868.

Container imageDigestPackageFixed in
iamdorsah/bastillion:v0.1db83a0254d81
h2@2.1.210
2.2.220

Open the chart page →

3,051
pagesronan-pages1.0.01 of 3See more

pages ronan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-45868.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
h2@1.4.200
2.2.220

Open the chart page →

20,190
helm-chart-examplesalaboy0.1.01 of 1See more

helm-chart-example salaboy 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-45868.

Container imageDigestPackageFixed in
salaboy/fmtok8s-monolith:v0.1.0f225568e6d03
h2@1.4.200
2.2.220

Open the chart page →

2,847
pagessamanvithkaranth1.0.01 of 3See more

pages samanvithkaranth 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-45868.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
h2@1.4.200
2.2.220

Open the chart page →

20,190
pagessarubits-pages1.0.01 of 3See more

pages sarubits-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-45868.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
h2@1.4.200
2.2.220

Open the chart page →

20,190
seataseataVerified publisher0.1.01 of 1See more

seata seata 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-45868.

Container imageDigestPackageFixed in
seataio/seata-server:latest703b5de7f1a6
h2@2.1.214
2.2.220

Open the chart page →

4,245
pagessekharpkube1.0.01 of 3See more

pages sekharpkube 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-45868.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
h2@1.4.200
2.2.220

Open the chart page →

20,190
shenyushenyu0.6.31 of 2See more

shenyu shenyu 0.6.3

1 of the 2 container images this version deploys carry CVE-2022-45868.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.5.1e2be712fc4f4
h2@1.4.200
2.2.220

Open the chart page →

8,804
shenyushenyu-helm-chart-test2.4.271 of 2See more

shenyu shenyu-helm-chart-test 2.4.27

1 of the 2 container images this version deploys carry CVE-2022-45868.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.4.2e8b7c4ddd069
h2@1.4.200
2.2.220

Open the chart page →

12,513
pagesshrutiujlan-pages1.0.01 of 3See more

pages shrutiujlan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-45868.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
h2@1.4.200
2.2.220

Open the chart page →

20,190
simple-keycloaksikalabs0.1.01 of 1See more

simple-keycloak sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-45868.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.18830f76112b6
h2@2.1.214
2.2.220

Open the chart page →

6,443
sonatype-nexus3simcube1.0.11 of 2See more

sonatype-nexus3 simcube 1.0.1

1 of the 2 container images this version deploys carry CVE-2022-45868.

Container imageDigestPackageFixed in
sonatype/nexus3:3.58.1586060431b64
h2@1.4.200
2.2.220

Open the chart page →

4,946
atlassian-confluencesomeblackmagic3.4.11 of 1See more

atlassian-confluence someblackmagic 3.4.1

1 of the 1 container images this version deploys carry CVE-2022-45868.

Container imageDigestPackageFixed in
atlassian/confluence-server:7.10.03b9222ab32ef
h2@1.4.200
2.2.220

Open the chart page →

13,605
smtp-fake-serversomeblackmagic0.1.01 of 1See more

smtp-fake-server someblackmagic 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-45868.

Container imageDigestPackageFixed in
someblackmagic/smtp-fake-server:latest0d63ba37a560
h2@1.4.200
2.2.220

Open the chart page →

4,278
pagessrinipages1.0.01 of 3See more

pages srinipages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-45868.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
h2@1.4.200
2.2.220

Open the chart page →

20,190
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2022-45868.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
h2@1.4.200
2.2.220

Open the chart page →

13,767
pagesstephendillondell1.0.01 of 3See more

pages stephendillondell 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-45868.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
h2@1.4.200
2.2.220

Open the chart page →

20,190
pagessunilb2590-pages1.0.01 of 3See more

pages sunilb2590-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-45868.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
h2@1.4.200
2.2.220

Open the chart page →

20,190
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2022-45868.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
h2@2.1.210
2.2.220

Open the chart page →

18,756
pagestest43221.0.01 of 3See more

pages test4322 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-45868.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
h2@1.4.200
2.2.220

Open the chart page →

20,190
shenyutest-helm2.4.211 of 2See more

shenyu test-helm 2.4.21

1 of the 2 container images this version deploys carry CVE-2022-45868.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.4.2e8b7c4ddd069
h2@1.4.200
2.2.220

Open the chart page →

12,513
pagesthiru-pages1.0.01 of 3See more

pages thiru-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-45868.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
h2@1.4.200
2.2.220

Open the chart page →

20,190
pagesthuy-pages1.0.01 of 3See more

pages thuy-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-45868.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
h2@1.4.200
2.2.220

Open the chart page →

20,190
pagesvictor-pages1.0.01 of 3See more

pages victor-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-45868.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
h2@1.4.200
2.2.220

Open the chart page →

20,190
pageswalter1.0.01 of 3See more

pages walter 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-45868.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
h2@1.4.200
2.2.220

Open the chart page →

20,190
drillwearefrank1.3.61 of 3See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2022-45868.

Container imageDigestPackageFixed in
apache/drill:1.21.11f96558fd292
h2@2.1.214
2.2.220

Open the chart page →

9,397
sonarqubewebencryptor6.7.31 of 3See more

sonarqube webencryptor 6.7.3

1 of the 3 container images this version deploys carry CVE-2022-45868.

Container imageDigestPackageFixed in
library/sonarqube:8.2-communitya246bc64207e
h2@1.4.199
2.2.220

Open the chart page →

5,460
is-pattern-1wso2is-pattern15.11.01 of 2See more

is-pattern-1 wso2is-pattern1 5.11.0

1 of the 2 container images this version deploys carry CVE-2022-45868.

Container imageDigestPackageFixed in
massimolauri/wso2is:5.11.0-centose08abf0ce767
h2@1.4.199
2.2.220

Open the chart page →

6,213
zahori-serverzahoriVerified publisher1.0.11 of 2See more

zahori-server zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2022-45868.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
h2@2.1.214
2.2.220

Open the chart page →

5,846
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2022-45868.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
h2@2.1.214
2.2.220

Open the chart page →

6,016

Container images carrying it

62 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
flyway/flyway:6.4.422d97ceb0c47
h2@1.4.200
2.2.220
79
apache/shenyu-admin:2.4.2e8b7c4ddd069
h2@1.4.200
2.2.220
3
dependencytrack/apiserver:4.6.3485ac0952c02
h2@2.1.214
2.2.220
2
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
h2@1.4.200
2.2.220
2
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
h2@1.4.200
2.2.220
2
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
h2@1.4.200
2.2.220
2
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
h2@1.4.200
2.2.220
2
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
h2@1.4.200
2.2.220
2
quay.io/keycloak/keycloak:20.0054ef67eb7da
h2@2.1.214
2.2.220
2
andrianrf/bpjstk-service:latest46abe878d9d8
h2@1.4.200
2.2.220
1
andrianrf/iso-client:latestba560086ce15
h2@1.4.200
2.2.220
1
apache/drill:1.21.11f96558fd292
h2@2.1.214
2.2.220
1
apache/nifi-registry:1.14.0090b7f87ec7f
h2@1.4.199
2.2.220
1
apache/nifi-registry:0.8.0974efa2f21da
h2@1.4.199
2.2.220
1
apache/shenyu-admin:2.5.1e2be712fc4f4
h2@1.4.200
2.2.220
1
apache/skywalking-oap-server:9.2.0133d35d2c263
h2@2.1.212
2.2.220
1
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
h2@1.4.200
2.2.220
1
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
h2@1.4.200
2.2.220
1
atlassian/bitbucket:10.2.705933f2b1cfd
h2@2.1.214
2.2.220
1
atlassian/confluence-server:7.10.03b9222ab32ef
h2@1.4.200
2.2.220
1
atlassian/jira-software:9.7.264a75aa4ec4e
h2@2.1.214
2.2.220
1
beastob/url-shortener:1.0.299a49885ab33
h2@1.4.200
2.2.220
1
binhex/arch-nzbhydra2:3.1.0-1-01fb8952921ab6
h2@1.4.200
2.2.220
1
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
h2@2.1.214
2.2.220
1
eikek0/sharry:1.8.0661ff3ef42cd
h2@1.4.200
2.2.220
1
esperotech/yaade:latest24d2d692d948
h2@1.4.200
2.2.220
1
flyway/flyway:9.1545b5d7cdc75a
h2@2.1.214
2.2.220
1
flyway/flyway:9.14.1-alpine80f12c80502b
h2@2.1.214
2.2.220
1
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
h2@1.4.200
2.2.220
1
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
h2@1.4.200
2.2.220
1
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
h2@1.4.200
2.2.220
1
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
h2@1.4.200
2.2.220
1
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
h2@1.4.200
2.2.220
1
gocd/gocd-server:v26.1.0720d1012b93f
h2@1.4.200
2.2.220
1
iamdorsah/bastillion:v0.1db83a0254d81
h2@2.1.210
2.2.220
1
jingking/geonetwork-hnap:4.2.843e74ab234e1
h2@2.1.212
2.2.220
1
library/sonarqube:9.1.0-datacenter-search7e43ff493a47
h2@1.4.199
2.2.220
1
library/sonarqube:8.9.2-community88cd63154d4b
h2@1.4.199
2.2.220
1
library/sonarqube:8.2-communitya246bc64207e
h2@1.4.199
2.2.220
1
library/sonarqube:9.1.0-datacenter-appa9bc5a3a1fc3
h2@1.4.199
2.2.220
1
library/sonarqube:8.9-communityeb2f0be32efd
h2@1.4.199
2.2.220
1
library/sonarqube:10.0.0-communityef9723cf4fe4
h2@2.1.214
2.2.220
1
massimolauri/wso2is:5.11.0-centose08abf0ce767
h2@1.4.199
2.2.220
1
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
h2@1.4.199
2.2.220
1
owasp/dependency-track:3.8.0efc65e702ee1
h2@1.4.200
2.2.220
1
remche/shinyproxy:2.6.18bcda8a04d3b
h2@1.4.200
2.2.220
1
rundeck/rundeck:3.2.74d64fe56f767
h2@1.4.199
2.2.220
1
salaboy/fmtok8s-monolith:v0.1.0f225568e6d03
h2@1.4.200
2.2.220
1
seataio/seata-server:latest703b5de7f1a6
h2@2.1.214
2.2.220
1
sismics/docs:v1.10f4b0ef019cf1
h2@1.4.199
2.2.220
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.