StackRadarChart IndexLive demo

CVE-2025-22233

Low

Advisory

Published 16 May 2025In the index since 5 Sept 2026

Severity: Low; worst across findings
CVSS: 3.1; base score, highest
EPSS: 0.004; 34th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 359; of 17,781 indexed, latest versions
Container images: 313; deployed by those charts
Fix available: 1 of 1; affected package

Spring Framework DataBinder Case Sensitive Match Exception

Carried by container images the latest versions of 359 of 17,781 indexed charts deploy, on 313 images.

Affected package	Affected versions	Fixed in	Images
spring-contextmaven	2.5.6.SEC03, 3.0.7, 3.0.7.RELEASE, 3.2.5.RELEASE+96 more	6.1.20, 6.2.7	313

OSV records: GHSA-4wp7-92pw-q264

Charts affected

359 by stars

Chart

Latest

Affected images

Radar Score

webapp-db-javawebapp-db-java-repo

1 of 2 See more

webapp-db-java webapp-db-java-repo 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-22233.

Container image	Digest	Package	Fixed in
arturisimo/webapp-db-java :v2	c95524e90b57	spring-context@5.3.15	no fix listed

Open the chart page →

2,566

webhookiewebhookie

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22233.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	spring-context@5.3.15	no fix listed

Open the chart page →

14,364

webhookie-allwebhookie

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-22233.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	spring-context@5.3.15	no fix listed

Open the chart page →

28,605

hazelcastwenerme

1 of 2 See more

hazelcast wenerme 5.10.2

1 of the 2 container images this version deploys carry CVE-2025-22233.

Container image	Digest	Package	Fixed in
hazelcast/management-center :5.5.2	991ddb27c251	spring-context@6.1.12	6.1.20

Open the chart page →

2,634

opendistro-eswitcom-gmbh

1 of 3 See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry CVE-2025-22233.

Container image	Digest	Package	Fixed in
amazon/opendistro-for-elasticsearch :1.13.3	2acfa1dcc5f8	spring-context@5.2.5.RELEASE	no fix listed

Open the chart page →

5,806

workshop-pipelinesworkshop-pipelines

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-22233.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	spring-context@6.1.1	6.1.20

Open the chart page →

11,577

is-pattern-1wso2is-pattern1

1 of 2 See more

is-pattern-1 wso2is-pattern1 5.11.0

1 of the 2 container images this version deploys carry CVE-2025-22233.

Container image	Digest	Package	Fixed in
massimolauri/wso2is :5.11.0-centos	e08abf0ce767	spring-context@5.1.2.RELEASE	no fix listed

Open the chart page →

6,213

zahori-processzahori

1 of 1 See more

zahori-process zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-22233.

Container image	Digest	Package	Fixed in
zahoriaut/zahori-process :0.1.13	351f8a220ed7	spring-context@6.0.10	no fix listed

Open the chart page →

3,480

zahori-serverzahori

1 of 2 See more

zahori-server zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2025-22233.

Container image	Digest	Package	Fixed in
zahoriaut/zahori-server :0.1.17	b2de13916f3e	spring-context@5.3.25	no fix listed

Open the chart page →

5,846

Container images carrying it

313 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/privacyengineering/hawk-service :latest	bfedf47bb5e0	spring-context@6.1.1	6.1.20	1
ghcr.io/radar-base/managementportal/management-portal :3.0.0	c1b37e821f72	spring-context@5.3.31	no fix listed	1
ghcr.io/stacksimplify/kube-usermgmt-webapp :1.0.0-mysqldb	41b45003c6b6	spring-context@5.1.8.RELEASE	no fix listed	1
ghcr.io/star-whale/server :0.6.15	8368359c8dd0	spring-context@5.3.24	no fix listed	1
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer :1.59.3_local	8cdcb7e83f9f	spring-context@5.3.16	no fix listed	1
quay.io/evryfs/spring-boot-admin :2.7.10	60950ef63764	spring-context@5.3.24	no fix listed	1
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	spring-context@6.1.1	6.1.20	1
quay.io/opsmxpublic/ubi8-gate :isd-spin-2025.10.01-5c720954-202511260810	2b3554029737	spring-context@6.0.11	no fix listed	1
quay.io/opsmxpublic/ubi8-oes-audit-client :isd-spin-2025.10.01-cb1bfce-202511261037	32a5b1887eab	spring-context@6.1.3	6.1.20	1
quay.io/opsmxpublic/ubi8-oes-autopilot :isd-spin-2025.10.01-af26a30d4-202511261054	58bd0bcf72f9	spring-context@6.1.3	6.1.20	1
quay.io/opsmxpublic/ubi8-oes-platform :isd-spin-2025.10.01-a7c191ec-202511261122	8ed603ab7417	spring-context@6.1.3	6.1.20	1
quay.io/snowdrop/spring-boot-rest-http-example :2.7	b1a054613715	spring-context@5.3.31	no fix listed	1
quay.io/srcmaxim/gradle-example-app :1.1.3	7c3fc28746ef	spring-context@5.3.7	no fix listed	1