StackRadar

MAL-2022-4691

Critical

Advisory

Published 20 Jun 2022In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
212
of 17,781 indexed, latest versions
Container images
225
deployed by those charts
Fix available
None
affected package

Malicious code in monorepo-symlink-test (npm)

Carried by container images the latest versions of 212 of 17,781 indexed charts deploy, on 225 images.

Affected packageAffected versionsFixed inImages
monorepo-symlink-testnpm0.0.0no fix listed225
OSV records
MAL-2022-4691
Also known as
GHSA-2jcg-qqmg-46q6

Charts affected

212 by stars
ChartLatestAffected imagesRadar Score
thanhvt27-lab-k8sthanh-vtVerified publisher0.1.41 of 5See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry MAL-2022-4691.

Container imageDigestPackageFixed in
pysga1996/python-redis-web:latestfdeec30ad482
monorepo-symlink-test@0.0.0
no fix listed

Open the chart page →

4,661
csmmth-chartsVerified publisher0.1.01 of 3See more

csmm th-charts 0.1.0

1 of the 3 container images this version deploys carry MAL-2022-4691.

Container imageDigestPackageFixed in
catalysm/csmm:latestf003b35f54d9
monorepo-symlink-test@0.0.0
no fix listed

Open the chart page →

3,576
joplintobiassackmann0.1.71 of 2See more

joplin tobiassackmann 0.1.7

1 of the 2 container images this version deploys carry MAL-2022-4691.

Container imageDigestPackageFixed in
joplin/server:latest3f7b852959aa
monorepo-symlink-test@0.0.0
no fix listed

Open the chart page →

5,535
kubernetes-external-secretstrozz6.3.01 of 1See more

kubernetes-external-secrets trozz 6.3.0

1 of the 1 container images this version deploys carry MAL-2022-4691.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/kubernetes-external-secrets:6.3.0eab9bd0b6986
monorepo-symlink-test@0.0.0
no fix listed

Open the chart page →

2,838
genievhdirkVerified publisher0.1.31 of 1See more

genie vhdirk 0.1.3

1 of the 1 container images this version deploys carry MAL-2022-4691.

Container imageDigestPackageFixed in
stanfordoval/almond-server:latest1a63cdccedaf
monorepo-symlink-test@0.0.0
no fix listed

Open the chart page →

3,129
websitewaldo-visionVerified publisher0.33.01 of 2See more

website waldo-vision 0.33.0

1 of the 2 container images this version deploys carry MAL-2022-4691.

Container imageDigestPackageFixed in
ghcr.io/waldo-vision/migrate:v0.3.6ae31923312ed
monorepo-symlink-test@0.0.0
no fix listed

Open the chart page →

3,474
wazuhwazuh-helm-eksVerified publisher1.2.101 of 6See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry MAL-2022-4691.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.14.491c8d793746f
monorepo-symlink-test@0.0.0
no fix listed

Open the chart page →

5,484
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry MAL-2022-4691.

Container imageDigestPackageFixed in
ubercadence/web:v3.29.58564a5b44a6d
monorepo-symlink-test@0.0.0
no fix listed

Open the chart page →

10,127
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry MAL-2022-4691.

Container imageDigestPackageFixed in
temporalio/web:1.14.033cfa863d8ce
monorepo-symlink-test@0.0.0
no fix listed

Open the chart page →

22,665
opendistro-eswitcom-gmbh1.13.31 of 3See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry MAL-2022-4691.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch-kibana:1.13.2c740d7a89475
monorepo-symlink-test@0.0.0
no fix listed

Open the chart page →

5,806
workadventureworkadventure1.1.03 of 9See more

workadventure workadventure 1.1.0

3 of the 9 container images this version deploys carry MAL-2022-4691.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-back:v1.17.764001369dad5
monorepo-symlink-test@0.0.0
no fix listed
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
monorepo-symlink-test@0.0.0
no fix listed
thecodingmachine/workadventure-play:v1.17.7d8f66979b9b4
monorepo-symlink-test@0.0.0
no fix listed

Open the chart page →

16,083
skoonerxdVerified publisher1.1.01 of 1See more

skooner xd 1.1.0

1 of the 1 container images this version deploys carry MAL-2022-4691.

Container imageDigestPackageFixed in
ymuski/skooner:latest67819ca511b5
monorepo-symlink-test@0.0.0
no fix listed

Open the chart page →

1,752

Container images carrying it

225 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
monorepo-symlink-test@0.0.0
no fix listed
1
speckle/speckle-server:2.17.14-branch.testing.72707.921a5f849d10dcdfb91
monorepo-symlink-test@0.0.0
no fix listed
1
speckle/speckle-server:2.19.2-branch.hotfix-2.19.1.124125-665e7e14b6a0750d5aa
monorepo-symlink-test@0.0.0
no fix listed
1
speckle/speckle-server:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb52f8eabf5cea
monorepo-symlink-test@0.0.0
no fix listed
1
speckle/speckle-server:2.20.2-branch.testing4.134160-9fad4b2687f43ab16f3
monorepo-symlink-test@0.0.0
no fix listed
1
speckle/speckle-server:2.25.10-branch.testing6.645-b125c1e75cdf256067b
monorepo-symlink-test@0.0.0
no fix listed
1
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
monorepo-symlink-test@0.0.0
no fix listed
1
speckle/speckle-server:2.21.3-branch.testing5.219631-2153bef8fd157733393
monorepo-symlink-test@0.0.0
no fix listed
1
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
monorepo-symlink-test@0.0.0
no fix listed
1
speckle/speckle-server:2.20.6-branch.testing1.154030-9b09114e8413f57b327
monorepo-symlink-test@0.0.0
no fix listed
1
speckle/speckle-webhook-service:2.21.3-branch.testing5.219631-2153bef06ecc7a66a40
monorepo-symlink-test@0.0.0
no fix listed
1
speckle/speckle-webhook-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb107c63336ab5
monorepo-symlink-test@0.0.0
no fix listed
1
speckle/speckle-webhook-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e14828aee2277c
monorepo-symlink-test@0.0.0
no fix listed
1
speckle/speckle-webhook-service:2.20.2-branch.testing4.134160-9fad4b270f5167d1d4d
monorepo-symlink-test@0.0.0
no fix listed
1
speckle/speckle-webhook-service:2.18.12-branch.testing3.88744-f55b341771f872cfa63
monorepo-symlink-test@0.0.0
no fix listed
1
speckle/speckle-webhook-service:2.18.11-branch.testing2.88634-335d469902b98ad5327
monorepo-symlink-test@0.0.0
no fix listed
1
speckle/speckle-webhook-service:2.17.14-branch.testing.72707.921a5f899913052b72e
monorepo-symlink-test@0.0.0
no fix listed
1
speckle/speckle-webhook-service:2.20.6-branch.testing1.154030-9b09114cf1d99bad89a
monorepo-symlink-test@0.0.0
no fix listed
1
speckle/speckle-webhook-service:2.25.10-branch.testing6.645-b125c1edd9db6cbe9bb
monorepo-symlink-test@0.0.0
no fix listed
1
stanfordoval/almond-server:latest1a63cdccedaf
monorepo-symlink-test@0.0.0
no fix listed
1
subsquid/hydra-indexer:5.0.0-alpha.37a7f8b9bad7ee
monorepo-symlink-test@0.0.0
no fix listed
1
temporalio/web:1.14.033cfa863d8ce
monorepo-symlink-test@0.0.0
no fix listed
1
testhubio/testhub-frontend:on-preme86c2db53be8
monorepo-symlink-test@0.0.0
no fix listed
1
thecodingmachine/workadventure-back:v1.17.764001369dad5
monorepo-symlink-test@0.0.0
no fix listed
1
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
monorepo-symlink-test@0.0.0
no fix listed
1
thecodingmachine/workadventure-play:v1.17.7d8f66979b9b4
monorepo-symlink-test@0.0.0
no fix listed
1
tooljet/tooljet-ce:v1.18.0c85a4720e42e
monorepo-symlink-test@0.0.0
no fix listed
1
ubercadence/web:v3.29.58564a5b44a6d
monorepo-symlink-test@0.0.0
no fix listed
1
unleashorg/unleash-server:7.5.09adb37e399ba
monorepo-symlink-test@0.0.0
no fix listed
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
monorepo-symlink-test@0.0.0
no fix listed
1
visualregressiontracker/api:5.0.11941aeb8c8bf9
monorepo-symlink-test@0.0.0
no fix listed
1
vlebediantsev/notes-admin-front:latest007c6670ff48
monorepo-symlink-test@0.0.0
no fix listed
1
vlebediantsev/notes-project-front:latest945675fd2636
monorepo-symlink-test@0.0.0
no fix listed
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
monorepo-symlink-test@0.0.0
no fix listed
1
wazuh/wazuh-dashboard:4.11.10c58e7b47bb6
monorepo-symlink-test@0.0.0
no fix listed
1
wazuh/wazuh-dashboard:4.4.11787550d2358
monorepo-symlink-test@0.0.0
no fix listed
1
wazuh/wazuh-dashboard:4.14.491c8d793746f
monorepo-symlink-test@0.0.0
no fix listed
1
wazuh/wazuh-dashboard:4.14.391e4f0a7feed
monorepo-symlink-test@0.0.0
no fix listed
1
wekanteam/wekan:v4.2268a51f0327df
monorepo-symlink-test@0.0.0
no fix listed
1
winfred008/amazon:910a68de5b398
monorepo-symlink-test@0.0.0
no fix listed
1
wiremind/scrapoxy:lateste7048929a676
monorepo-symlink-test@0.0.0
no fix listed
1
ymuski/skooner:latest67819ca511b5
monorepo-symlink-test@0.0.0
no fix listed
1
zazuko/trifid:2.3.7054be137de70
monorepo-symlink-test@0.0.0
no fix listed
1
zwavejs/zwavejs2mqtt:5.0.215a6040fb468
monorepo-symlink-test@0.0.0
no fix listed
1
gcr.io/google-samples/microservices-demo/currencyservice:v0.2.349d458a3650f
monorepo-symlink-test@0.0.0
no fix listed
1
gcr.io/google-samples/microservices-demo/paymentservice:v0.2.36eb201217a8f
monorepo-symlink-test@0.0.0
no fix listed
1
ghcr.io/aolde/lametric-nightscout-proxy:latest7d1951b6baf5
monorepo-symlink-test@0.0.0
no fix listed
1
ghcr.io/bryopsida/openmct:main38b6a50a62b2
monorepo-symlink-test@0.0.0
no fix listed
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
monorepo-symlink-test@0.0.0
no fix listed
1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
monorepo-symlink-test@0.0.0
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.