StackRadar

CVE-2022-49872

Medium

Advisory

Published 1 May 2025In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.005
42nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
72
of 17,813 indexed, latest versions
Container images
68
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 72 of 17,813 indexed charts deploy, on 68 images.

Affected packageAffected versionsFixed inImages
linuxdeb4.15.0-38.41, 4.15.0-46.49, 4.15.0-50.54, 4.15.0-74.84+40 more4.15.0-206.217, 5.4.0-144.161, 5.15.0-67.7468
OSV records
UBUNTU-CVE-2022-49872

Charts affected

72 by stars
ChartLatestAffected imagesRadar Score
kovi-appkovi-charts0.8.11 of 1See more

kovi-app kovi-charts 0.8.1

1 of the 1 container images this version deploys carry CVE-2022-49872.

Container imageDigestPackageFixed in
kennethreitz/httpbin:latest599fe5e50731
linux@4.15.0-38.41
4.15.0-206.217

Open the chart page →

85,956
pulsarkubesphere-stable2.7.131 of 3See more

pulsar kubesphere-stable 2.7.13

1 of the 3 container images this version deploys carry CVE-2022-49872.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
linux@5.4.0-77.86
5.4.0-144.161

Open the chart page →

91,524
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2022-49872.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
linux@5.4.0-100.113
5.4.0-144.161

Open the chart page →

91,568
alluremidokura-communityVerified publisher0.1.31 of 2See more

allure midokura-community 0.1.3

1 of the 2 container images this version deploys carry CVE-2022-49872.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.19.0cafa03b94dac
linux@4.15.0-191.202
4.15.0-206.217

Open the chart page →

72,154
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2022-49872.

Container imageDigestPackageFixed in
mintproject/graphql-engine:305c0dbeba1878eafe348f21fc300fbfc017d9dc83aade2c1855
linux@5.4.0-117.132
5.4.0-144.161

Open the chart page →

114,972
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2022-49872.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
linux@5.4.0-90.101
5.4.0-144.161

Open the chart page →

101,376
danboorumy0nVerified publisher0.0.21 of 1See more

danbooru my0n 0.0.2

1 of the 1 container images this version deploys carry CVE-2022-49872.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
linux@5.15.0-46.49
5.15.0-67.74

Open the chart page →

102,088
danbooru-stackmy0nVerified publisher0.0.31 of 4See more

danbooru-stack my0n 0.0.3

1 of the 4 container images this version deploys carry CVE-2022-49872.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
linux@5.15.0-46.49
5.15.0-67.74

Open the chart page →

102,088
splashntppoolVerified publisher1.0.41 of 1See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2022-49872.

Container imageDigestPackageFixed in
scrapinghub/splash:3.4.1a5f89bc84606
linux@4.15.0-74.84
4.15.0-206.217

Open the chart page →

95,457
omec-control-planeopencord0.1.311 of 8See more

omec-control-plane opencord 0.1.31

1 of the 8 container images this version deploys carry CVE-2022-49872.

Container imageDigestPackageFixed in
omecproject/mme-exporter:paging-latestbcc5f19fd676
linux@4.15.0-88.88
4.15.0-206.217

Open the chart page →

108,599
open-vpnopenvpn0.0.11 of 1See more

open-vpn openvpn 0.0.1

1 of the 1 container images this version deploys carry CVE-2022-49872.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
linux@4.15.0-126.129
4.15.0-206.217

Open the chart page →

81,512
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2022-49872.

Container imageDigestPackageFixed in
openwhisk/ow-utils:1.0.0c80dba0de3aa
linux@4.15.0-122.124
4.15.0-206.217

Open the chart page →

102,196
seafilephybros-helm-charts4.0.11 of 1See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2022-49872.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.97ac833196f60
linux@5.4.0-125.141
5.4.0-144.161

Open the chart page →

92,617
podnat-state-storepodnat-controller0.3.21 of 1See more

podnat-state-store podnat-controller 0.3.2

1 of the 1 container images this version deploys carry CVE-2022-49872.

Container imageDigestPackageFixed in
dgraziotin/nginx-webdav-nononsense:1.23.138f2de42bed0
linux@5.4.0-122.138
5.4.0-144.161

Open the chart page →

79,983
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-49872.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
linux@5.4.0-117.132
5.4.0-144.161

Open the chart page →

101,945
spotinst-ocean-network-clientspot1.0.01 of 1See more

spotinst-ocean-network-client spot 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-49872.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
linux@4.15.0-191.202
4.15.0-206.217

Open the chart page →

66,239
istio-discoverytemp-charts0.3.31 of 1See more

istio-discovery temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2022-49872.

Container imageDigestPackageFixed in
istio/pilot:1.10.0294ca55bd1cc
linux@4.15.0-143.147
4.15.0-206.217

Open the chart page →

75,347
istio-ingresstemp-charts0.3.31 of 1See more

istio-ingress temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2022-49872.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.088c6c693e67a
linux@4.15.0-143.147
4.15.0-206.217

Open the chart page →

75,293
tensor_apptensor-app0.2.21 of 3See more

tensor_app tensor-app 0.2.2

1 of the 3 container images this version deploys carry CVE-2022-49872.

Container imageDigestPackageFixed in
xeladock/mysql_dns:latest4baf531453f1
linux@5.15.0-25.25
5.15.0-67.74

Open the chart page →

109,723
tdarrvhdirkVerified publisher5.0.51 of 2See more

tdarr vhdirk 5.0.5

1 of the 2 container images this version deploys carry CVE-2022-49872.

Container imageDigestPackageFixed in
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
linux@5.4.0-110.124
5.4.0-144.161

Open the chart page →

159,238
emissary-ingresswener8.12.21 of 2See more

emissary-ingress wener 8.12.2

1 of the 2 container images this version deploys carry CVE-2022-49872.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
linux@4.15.0-112.113
4.15.0-206.217

Open the chart page →

77,296
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2022-49872.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
linux@4.15.0-112.113
4.15.0-206.217

Open the chart page →

77,296

Container images carrying it

68 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
seafileltd/seafile-mc:9.0.97ac833196f60
linux@5.4.0-125.141
5.4.0-144.161
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
linux@5.4.0-80.90
5.4.0-144.161
1
snipe/snipe-it:v6.0.1455fb7636a98c
linux@5.4.0-131.147
5.4.0-144.161
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
linux@5.4.0-117.132
5.4.0-144.161
1
statcan/ckan:2.93921305425b8
linux@5.4.0-74.83
5.4.0-144.161
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
linux@5.4.0-77.86
5.4.0-144.161
1
vinanrra/7dtd-server:v0.4.4f9534490bd2b
linux@4.15.0-204.215
4.15.0-206.217
1
xeladock/mysql_dns:latest4baf531453f1
linux@5.15.0-25.25
5.15.0-67.74
1
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
linux@4.15.0-88.88
4.15.0-206.217
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
linux@5.4.0-110.124
5.4.0-144.161
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
linux@5.4.0-80.90
5.4.0-144.161
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
linux@5.4.0-80.90
5.4.0-144.161
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
linux@5.4.0-121.137
5.4.0-144.161
1
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
linux@5.4.0-131.147
5.4.0-144.161
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
linux@5.4.0-131.147
5.4.0-144.161
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
linux@5.4.0-131.147
5.4.0-144.161
1
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
linux@4.15.0-191.202
4.15.0-206.217
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
linux@5.4.0-67.75
5.4.0-144.161
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.