StackRadarChart IndexLive demo

CVE-2018-1000620

Critical

Advisory

Published 11 Sept 2018In the index since 6 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.8; base score, highest
EPSS: 0.017; 76th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 19; of 17,781 indexed, latest versions
Container images: 18; deployed by those charts
Fix available: 1 of 1; affected package

Insufficient Entropy in cryptiles

Carried by container images the latest versions of 19 of 17,781 indexed charts deploy, on 18 images.

Affected package	Affected versions	Fixed in	Images
cryptilesnpm	3.1.2	3.1.3	18

OSV records: GHSA-rq8g-5pc5-wrhr

Charts affected

19 by stars

Chart

Latest

Affected images

Radar Score

lemmyananace-charts

1 of 5 See more

lemmy ananace-charts 0.6.15

1 of the 5 container images this version deploys carry CVE-2018-1000620.

Container image	Digest	Package	Fixed in
dessalines/lemmy-ui :0.19.20	ee4c620d8e93	cryptiles@3.1.2	3.1.3

Open the chart page →

7,210

kongakonga

1 of 1 See more

konga konga 1.1.0

1 of the 1 container images this version deploys carry CVE-2018-1000620.

Container image	Digest	Package	Fixed in
pantsel/konga :latest	c8172b75607d	cryptiles@3.1.2	3.1.3

Open the chart page →

5,209

dltbrokerassist-iot-distributed-broker

2 of 9 See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2018-1000620.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	cryptiles@3.1.2	3.1.3
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	cryptiles@3.1.2	3.1.3

Open the chart page →

77,706

dltloggingassist-iot-logging-auditing

2 of 9 See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2018-1000620.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	cryptiles@3.1.2	3.1.3
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	cryptiles@3.1.2	3.1.3

Open the chart page →

77,687

data-fairdata354-helm

1 of 12 See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2018-1000620.

Container image	Digest	Package	Fixed in
koumoul/openapi-viewer :1	8eeca2e8285b	cryptiles@3.1.2	3.1.3

Open the chart page →

38,346

uptimerobotgeek-cookbook

1 of 1 See more

uptimerobot geek-cookbook 3.0.4

1 of the 1 container images this version deploys carry CVE-2018-1000620.

Container image	Digest	Package	Fixed in
billimek/node-influx-uptimerobot :latest	5814f0bcf5ba	cryptiles@3.1.2	3.1.3

Open the chart page →

1,669

dltkvassist-iot-data-integrity-verification

2 of 9 See more

dltkv assist-iot-data-integrity-verification 0.2.0

2 of the 9 container images this version deploys carry CVE-2018-1000620.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	cryptiles@3.1.2	3.1.3
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	cryptiles@3.1.2	3.1.3

Open the chart page →

77,706

dltflassist-iot-dlt-based-fl

2 of 9 See more

dltfl assist-iot-dlt-based-fl 0.2.0

2 of the 9 container images this version deploys carry CVE-2018-1000620.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	cryptiles@3.1.2	3.1.3
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	cryptiles@3.1.2	3.1.3

Open the chart page →

77,706

openapiassist-iot-open-api-management

1 of 6 See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2018-1000620.

Container image	Digest	Package	Fixed in
pantsel/konga :latest	c8172b75607d	cryptiles@3.1.2	3.1.3

Open the chart page →

18,277

daskcloudnativeapp

1 of 2 See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry CVE-2018-1000620.

Container image	Digest	Package	Fixed in
daskdev/dask-notebook :1.1.0	052630f5ca04	cryptiles@3.1.2	3.1.3

Open the chart page →

29,901

ethereumcloudnativeapp

1 of 3 See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-1000620.

Container image	Digest	Package	Fixed in
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	cryptiles@3.1.2	3.1.3

Open the chart page →

27,417

hlf-couchdbcloudnativeapp

1 of 1 See more

hlf-couchdb cloudnativeapp 1.0.6

1 of the 1 container images this version deploys carry CVE-2018-1000620.

Container image	Digest	Package	Fixed in
hyperledger/fabric-couchdb :0.4.10	c65891b6c237	cryptiles@3.1.2	3.1.3

Open the chart page →

33,963

galaxy-stablecloudve

1 of 5 See more

galaxy-stable cloudve 2.0.0

1 of the 5 container images this version deploys carry CVE-2018-1000620.

Container image	Digest	Package	Fixed in
galaxy/galaxy-init :v18.01	0267bad550e6	cryptiles@3.1.2	3.1.3

Open the chart page →

70,895

kongacreate-databases

1 of 1 See more

konga create-databases 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-1000620.

Container image	Digest	Package	Fixed in
pantsel/konga :latest	c8172b75607d	cryptiles@3.1.2	3.1.3

Open the chart page →

5,209

ibm-app-navigatoribm-charts

2 of 5 See more

ibm-app-navigator ibm-charts 1.0.1

2 of the 5 container images this version deploys carry CVE-2018-1000620.

Container image	Digest	Package	Fixed in
ibmcom/app-nav-init :1.0.1	240ff499eb5b	cryptiles@3.1.2	3.1.3
ibmcom/app-nav-ui :1.0.1	e2a86997b36b	cryptiles@3.1.2	3.1.3

Open the chart page →

32,915

ibm-microclimateibm-charts

3 of 8 See more

ibm-microclimate ibm-charts 0.1.0

3 of the 8 container images this version deploys carry CVE-2018-1000620.

Container image	Digest	Package	Fixed in
ibmcom/microclimate-file-watcher :latest	ab3fd1fdfa18	cryptiles@3.1.2	3.1.3
ibmcom/microclimate-portal :latest	ed5505e5c7ec	cryptiles@3.1.2	3.1.3
ibmcom/microclimate-theia :latest	e17bdccc5030	cryptiles@3.1.2	3.1.3

Open the chart page →

57,669

1 of 23 See more

smile ncsa 1.1.0

1 of the 23 container images this version deploys carry CVE-2018-1000620.

Container image	Digest	Package	Fixed in
socialmediamacroscope/smile_graphql :0.3.1	c5095e94bc65	cryptiles@3.1.2	3.1.3

Open the chart page →

109,294

comacopencord

1 of 9 See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2018-1000620.

Container image	Digest	Package	Fixed in
omecproject/onos-progran :1.0.0	5715e5648aa0	cryptiles@3.1.2	3.1.3

Open the chart page →

88,546

onos-progranopencord

1 of 2 See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2018-1000620.

Container image	Digest	Package	Fixed in
muluder/prograncontrollermcord :0.1.8	43b597a93da7	cryptiles@3.1.2	3.1.3

Open the chart page →

38,865

Container images carrying it

18 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	cryptiles@3.1.2	3.1.3	4
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	cryptiles@3.1.2	3.1.3	4
pantsel/konga :latest	c8172b75607d	cryptiles@3.1.2	3.1.3	3
billimek/node-influx-uptimerobot :latest	5814f0bcf5ba	cryptiles@3.1.2	3.1.3	1
daskdev/dask-notebook :1.1.0	052630f5ca04	cryptiles@3.1.2	3.1.3	1
dessalines/lemmy-ui :0.19.20	ee4c620d8e93	cryptiles@3.1.2	3.1.3	1
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	cryptiles@3.1.2	3.1.3	1
galaxy/galaxy-init :v18.01	0267bad550e6	cryptiles@3.1.2	3.1.3	1
hyperledger/fabric-couchdb :0.4.10	c65891b6c237	cryptiles@3.1.2	3.1.3	1
ibmcom/app-nav-init :1.0.1	240ff499eb5b	cryptiles@3.1.2	3.1.3	1
ibmcom/app-nav-ui :1.0.1	e2a86997b36b	cryptiles@3.1.2	3.1.3	1
ibmcom/microclimate-file-watcher :latest	ab3fd1fdfa18	cryptiles@3.1.2	3.1.3	1
ibmcom/microclimate-portal :latest	ed5505e5c7ec	cryptiles@3.1.2	3.1.3	1
ibmcom/microclimate-theia :latest	e17bdccc5030	cryptiles@3.1.2	3.1.3	1
koumoul/openapi-viewer :1	8eeca2e8285b	cryptiles@3.1.2	3.1.3	1
muluder/prograncontrollermcord :0.1.8	43b597a93da7	cryptiles@3.1.2	3.1.3	1
omecproject/onos-progran :1.0.0	5715e5648aa0	cryptiles@3.1.2	3.1.3	1
socialmediamacroscope/smile_graphql :0.3.1	c5095e94bc65	cryptiles@3.1.2	3.1.3	1