StackRadar

CVE-2022-48468

Medium

Advisory

Published 13 Apr 2023In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.2
base score, highest
EPSS
0.004
30th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
41
of 17,781 indexed, latest versions
Container images
36
deployed by those charts
Fix available
1 of 2
affected packages

Red Hat Security Advisory: protobuf-c security update

Carried by container images the latest versions of 41 of 17,781 indexed charts deploy, on 36 images.

Affected packageAffected versionsFixed inImages
protobuf-crpm1.3.0-6.el8, 1.3.3-12.el90:1.3.0-8.el8, 0:1.3.3-13.el97
protobuf-cdeb1.2.1-2, 1.3.3-1, 1.3.3-1ubuntu0.1, 1.3.3-1ubuntu0.3+2 moreno fix listed29
OSV records
RHSA-2023:6621RHSA-2023:6944UBUNTU-CVE-2022-48468
Also known as
RHSA-2024:0406, RHSA-2024:3812

Charts affected

41 by stars
ChartLatestAffected imagesRadar Score
istio-operatorwiremindVerified publisher1.18.21 of 1See more

istio-operator wiremind 1.18.2

1 of the 1 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
istio/operator:1.18.270f9d1fe5fff
protobuf-c@1.3.3-1ubuntu2.1
no fix listed

Open the chart page →

5,630
kamu-api-serverkamuVerified publisher0.89.01 of 1See more

kamu-api-server kamu 0.89.0

1 of the 1 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
ghcr.io/kamu-data/kamu-api-server:0.89.04ed7a896dd2b
protobuf-c@1.3.3-1ubuntu0.3
no fix listed

Open the chart page →

6,307
kubeflowkubeflow1.6.22 of 45See more

kubeflow kubeflow 1.6.2

2 of the 45 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
istio/proxyv2:1.9.687a9db561d2e
protobuf-c@1.2.1-2
no fix listed
istio/proxyv2:1.14.1df69c1a7af7c
protobuf-c@1.3.3-1
no fix listed

Open the chart page →

96,941
openshift-secured-appeximiaitVerified publisher0.5.01 of 1See more

openshift-secured-app eximiait 0.5.0

1 of the 1 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
protobuf-c@1.3.0-6.el8
0:1.3.0-8.el8

Open the chart page →

12,042
openshift-secured-pgadmineximiaitVerified publisher0.2.01 of 2See more

openshift-secured-pgadmin eximiait 0.2.0

1 of the 2 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
protobuf-c@1.3.0-6.el8
0:1.3.0-8.el8

Open the chart page →

14,546
openshift-secured-redisInsighteximiaitVerified publisher0.9.21 of 2See more

openshift-secured-redisInsight eximiait 0.9.2

1 of the 2 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
protobuf-c@1.3.0-6.el8
0:1.3.0-8.el8

Open the chart page →

13,874
htnn-controllerhtnnVerified publisher0.5.01 of 1See more

htnn-controller htnn 0.5.0

1 of the 1 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
protobuf-c@1.3.3-1ubuntu2.1
no fix listed

Open the chart page →

4,300
cniistio1.10.31 of 1See more

cni istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
istio/install-cni:1.10.32232f365aed6
protobuf-c@1.2.1-2
no fix listed

Open the chart page →

10,400
discoveryistio1.10.31 of 1See more

discovery istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
istio/pilot:1.10.3e7e110a421c2
protobuf-c@1.2.1-2
no fix listed

Open the chart page →

10,475
egressistio1.10.31 of 1See more

egress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
protobuf-c@1.2.1-2
no fix listed

Open the chart page →

10,421
ingressistio1.10.31 of 1See more

ingress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
protobuf-c@1.2.1-2
no fix listed

Open the chart page →

10,421
operatoristio1.10.31 of 1See more

operator istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
istio/operator:1.10.3655eefa11c84
protobuf-c@1.2.1-2
no fix listed

Open the chart page →

10,701
routehub-client-hubroutehub-helm1.0.01 of 3See more

routehub-client-hub routehub-helm 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg16d7db8f1085a3
protobuf-c@1.3.3-1ubuntu2.1
no fix listed

Open the chart page →

12,930
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
protobuf-c@1.3.3-1ubuntu2.1
no fix listed

Open the chart page →

32,501
istio-discoveryaveshaVerified publisher1.16.01 of 1See more

istio-discovery avesha 1.16.0

1 of the 1 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
istio/pilot:1.16.0ac0284d75ec9
protobuf-c@1.3.3-1ubuntu2.1
no fix listed

Open the chart page →

6,908
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
protobuf-c@1.3.3-1ubuntu2.1
no fix listed

Open the chart page →

20,900
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
protobuf-c@1.3.0-6.el8
0:1.3.0-8.el8

Open the chart page →

25,151
eg-edge-stackdatawire0.0.11 of 7See more

eg-edge-stack datawire 0.0.1

1 of the 7 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
protobuf-c@1.2.1-2
no fix listed

Open the chart page →

10,666
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
protobuf-c@1.3.3-1ubuntu2.1
no fix listed

Open the chart page →

24,917
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
protobuf-c@1.3.3-1ubuntu2
no fix listed

Open the chart page →

30,699
istiogetindataVerified publisher1.11.12 of 2See more

istio getindata 1.11.1

2 of the 2 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:1.11.1c552478f8f11
protobuf-c@1.3.3-1
no fix listed
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
protobuf-c@1.3.3-1
no fix listed

Open the chart page →

16,756
nominatimheywood8-helm-chartsVerified publisher3.10.81 of 3See more

nominatim heywood8-helm-charts 3.10.8

1 of the 3 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
mediagis/nominatim:4.2d0eae7b51374
protobuf-c@1.3.3-1ubuntu2.1
no fix listed

Open the chart page →

14,290
istio-aws-private-ingress-customizedistio-aws-private-ingress-customized1.0.01 of 1See more

istio-aws-private-ingress-customized istio-aws-private-ingress-customized 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
istio/proxyv2:1.18.0757d28c24100
protobuf-c@1.3.3-1ubuntu2.1
no fix listed

Open the chart page →

5,530
istio-azure-private-ingress-customizedistio-azure-private-ingress-customized1.0.01 of 1See more

istio-azure-private-ingress-customized istio-azure-private-ingress-customized 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
istio/proxyv2:1.18.0757d28c24100
protobuf-c@1.3.3-1ubuntu2.1
no fix listed

Open the chart page →

5,530
kiaekiae0.1.61 of 9See more

kiae kiae 0.1.6

1 of the 9 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
istio/pilot:1.15.2db08d6963975
protobuf-c@1.3.3-1ubuntu2.1
no fix listed

Open the chart page →

19,168
istio-operatormetakube1.12.01 of 1See more

istio-operator metakube 1.12.0

1 of the 1 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
istio/operator:1.12.06cfce8a071b9
protobuf-c@1.3.3-1
no fix listed

Open the chart page →

8,902
nominatimnominatim-chart1.3.01 of 3See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
mediagis/nominatim:3.7c15e941485ef
protobuf-c@1.3.3-1ubuntu0.1
no fix listed

Open the chart page →

22,658
oaisimopencord0.1.71 of 3See more

oaisim opencord 0.1.7

1 of the 3 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
omecproject/lte-softmodem:1.1.0b5ddd36ec20c
protobuf-c@1.2.1-2
no fix listed

Open the chart page →

14,536
redhat-trusted-application-pipelineopenshift1.0.21 of 2See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
protobuf-c@1.3.3-12.el9
0:1.3.3-13.el9

Open the chart page →

8,599
pet-battle-infrapetbattle1.0.321 of 2See more

pet-battle-infra petbattle 1.0.32

1 of the 2 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.8bb5e052770e5
protobuf-c@1.3.0-6.el8
0:1.3.0-8.el8

Open the chart page →

15,466
pet-battle-tournamentpetbattle1.0.401 of 3See more

pet-battle-tournament petbattle 1.0.40

1 of the 3 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.8bb5e052770e5
protobuf-c@1.3.0-6.el8
0:1.3.0-8.el8

Open the chart page →

15,466
ansible-automation-platformredhat-cop0.0.91 of 1See more

ansible-automation-platform redhat-cop 0.0.9

1 of the 1 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.7464a3af4dfe0
protobuf-c@1.3.0-6.el8
0:1.3.0-8.el8

Open the chart page →

15,291
argocd-operatorredhat-cop1.2.21 of 1See more

argocd-operator redhat-cop 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.7464a3af4dfe0
protobuf-c@1.3.0-6.el8
0:1.3.0-8.el8

Open the chart page →

15,291
stackrox-chartredhat-cop0.0.101 of 1See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
protobuf-c@1.3.0-6.el8
0:1.3.0-8.el8

Open the chart page →

29,227
allurestakaterVerified publisher1.0.11 of 1See more

allure stakater 1.0.1

1 of the 1 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
protobuf-c@1.3.0-6.el8
0:1.3.0-8.el8

Open the chart page →

28,165
istio-discoverytemp-charts0.3.31 of 1See more

istio-discovery temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
istio/pilot:1.10.0294ca55bd1cc
protobuf-c@1.2.1-2
no fix listed

Open the chart page →

10,568
istio-ingresstemp-charts0.3.31 of 1See more

istio-ingress temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.088c6c693e67a
protobuf-c@1.2.1-2
no fix listed

Open the chart page →

10,514
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
protobuf-c@1.3.3-1ubuntu2.1
no fix listed

Open the chart page →

13,459
istio-service-meshwbstack0.0.11 of 1See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
istio/pilot:1.17.1ce9d87606701
protobuf-c@1.3.3-1ubuntu2.1
no fix listed

Open the chart page →

6,232
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
protobuf-c@1.2.1-2
no fix listed

Open the chart page →

10,843
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2022-48468.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
protobuf-c@1.3.3-1ubuntu2.1
no fix listed

Open the chart page →

7,849

Container images carrying it

36 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
protobuf-c@1.3.0-6.el8
0:1.3.0-8.el8
3
istio/kubectl:1.5.10dbb7726d1bf0
protobuf-c@1.2.1-2
no fix listed
2
istio/proxyv2:1.18.0757d28c24100
protobuf-c@1.3.3-1ubuntu2.1
no fix listed
2
istio/proxyv2:1.10.3a78b7a165744
protobuf-c@1.2.1-2
no fix listed
2
quay.io/openshift/origin-cli:4.7464a3af4dfe0
protobuf-c@1.3.0-6.el8
0:1.3.0-8.el8
2
quay.io/openshift/origin-cli:4.8bb5e052770e5
protobuf-c@1.3.0-6.el8
0:1.3.0-8.el8
2
istio/install-cni:1.10.32232f365aed6
protobuf-c@1.2.1-2
no fix listed
1
istio/operator:1.10.3655eefa11c84
protobuf-c@1.2.1-2
no fix listed
1
istio/operator:1.12.06cfce8a071b9
protobuf-c@1.3.3-1
no fix listed
1
istio/operator:1.18.270f9d1fe5fff
protobuf-c@1.3.3-1ubuntu2.1
no fix listed
1
istio/pilot:1.10.0294ca55bd1cc
protobuf-c@1.2.1-2
no fix listed
1
istio/pilot:1.16.0ac0284d75ec9
protobuf-c@1.3.3-1ubuntu2.1
no fix listed
1
istio/pilot:1.17.1ce9d87606701
protobuf-c@1.3.3-1ubuntu2.1
no fix listed
1
istio/pilot:1.15.2db08d6963975
protobuf-c@1.3.3-1ubuntu2.1
no fix listed
1
istio/pilot:1.10.3e7e110a421c2
protobuf-c@1.2.1-2
no fix listed
1
istio/proxyv2:1.9.687a9db561d2e
protobuf-c@1.2.1-2
no fix listed
1
istio/proxyv2:1.10.088c6c693e67a
protobuf-c@1.2.1-2
no fix listed
1
istio/proxyv2:1.14.1df69c1a7af7c
protobuf-c@1.3.3-1
no fix listed
1
mediagis/nominatim:3.7c15e941485ef
protobuf-c@1.3.3-1ubuntu0.1
no fix listed
1
mediagis/nominatim:4.2d0eae7b51374
protobuf-c@1.3.3-1ubuntu2.1
no fix listed
1
omecproject/lte-softmodem:1.1.0b5ddd36ec20c
protobuf-c@1.2.1-2
no fix listed
1
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
protobuf-c@1.3.3-1ubuntu2.1
no fix listed
1
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
protobuf-c@1.3.3-1ubuntu2.1
no fix listed
1
timescale/timescaledb-ha:pg16d7db8f1085a3
protobuf-c@1.3.3-1ubuntu2.1
no fix listed
1
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
protobuf-c@1.3.3-1ubuntu2.1
no fix listed
1
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
protobuf-c@1.3.3-1ubuntu2
no fix listed
1
twentycrm/twenty-postgres-spilo:latest2f78405a78be
protobuf-c@1.3.3-1ubuntu2.1
no fix listed
1
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
protobuf-c@1.3.3-1ubuntu2.1
no fix listed
1
gcr.io/istio-release/pilot:1.11.1c552478f8f11
protobuf-c@1.3.3-1
no fix listed
1
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
protobuf-c@1.3.3-1
no fix listed
1
ghcr.io/kamu-data/kamu-api-server:0.89.04ed7a896dd2b
protobuf-c@1.3.3-1ubuntu0.3
no fix listed
1
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
protobuf-c@1.3.3-1ubuntu2.1
no fix listed
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
protobuf-c@1.3.0-6.el8
0:1.3.0-8.el8
1
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
protobuf-c@1.3.0-6.el8
0:1.3.0-8.el8
1
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
protobuf-c@1.3.3-12.el9
0:1.3.3-13.el9
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
protobuf-c@1.3.0-6.el8
0:1.3.0-8.el8
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.