StackRadar

CVE-2018-16886

High

Advisory

Published 14 Apr 2021In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
8.1
base score, highest
EPSS
0.040
90th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
31
of 17,781 indexed, latest versions
Container images
19
deployed by those charts
Fix available
1 of 1
affected package

go.etcd.io/etcd Authentication Bypass

Carried by container images the latest versions of 31 of 17,781 indexed charts deploy, on 19 images.

Affected packageAffected versionsFixed inImages
go.etcd.io/etcdgolangv0.0.0-20190215181705-784daa04988c, v0.0.0-20190228193606-a943ad0ee4c9, v0.0.0-20191023171146-3cf2f69b5738, v0.0.0-20200401174654-e694b7bb0875+3 more0.5.0-alpha.5.0.20190108173120-83c051b701d319
OSV records
GHSA-h6xx-pmxh-3wgp
Also known as
GO-2021-0077

Charts affected

31 by stars
ChartLatestAffected imagesRadar Score
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2018-16886.

Container imageDigestPackageFixed in
quay.io/dexidp/dex:v2.24.0c9b7f6d0d953
go.etcd.io/etcd@v0.0.0-20191023171146-3cf2f69b5738
0.5.0-alpha.5.0.20190108173120-83c051b701d3

Open the chart page →

96,941
dexwiremindVerified publisher2.15.71 of 2See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2018-16886.

Container imageDigestPackageFixed in
quay.io/dexidp/dex:v2.24.0c9b7f6d0d953
go.etcd.io/etcd@v0.0.0-20191023171146-3cf2f69b5738
0.5.0-alpha.5.0.20190108173120-83c051b701d3

Open the chart page →

13,562
dltbrokerassist-iot-distributed-broker0.2.01 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

1 of the 9 container images this version deploys carry CVE-2018-16886.

Container imageDigestPackageFixed in
hyperledger/fabric-orderer:2.46ec3fe59ea55
go.etcd.io/etcd@v0.5.0-alpha.5.0.20181228115726-23731bf9ba55
0.5.0-alpha.5.0.20190108173120-83c051b701d3

Open the chart page →

77,706
dltloggingassist-iot-logging-auditing0.2.01 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

1 of the 9 container images this version deploys carry CVE-2018-16886.

Container imageDigestPackageFixed in
hyperledger/fabric-orderer:2.46ec3fe59ea55
go.etcd.io/etcd@v0.5.0-alpha.5.0.20181228115726-23731bf9ba55
0.5.0-alpha.5.0.20190108173120-83c051b701d3

Open the chart page →

77,687
dex-k8sav1o-chartsVerified publisher0.2.11 of 1See more

dex-k8s av1o-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2018-16886.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.28.15e88f2205de1
go.etcd.io/etcd@v0.0.0-20191023171146-3cf2f69b5738
0.5.0-alpha.5.0.20190108173120-83c051b701d3

Open the chart page →

3,391
datadogdatadog-test2.4.231 of 2See more

datadog datadog-test 2.4.23

1 of the 2 container images this version deploys carry CVE-2018-16886.

Container imageDigestPackageFixed in
datadog/agent:7.22.08f20e56b5311
go.etcd.io/etcd@v0.0.0-20191023171146-3cf2f69b5738
0.5.0-alpha.5.0.20190108173120-83c051b701d3

Open the chart page →

4,568
dexgabibbo974.0.41 of 1See more

dex gabibbo97 4.0.4

1 of the 1 container images this version deploys carry CVE-2018-16886.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.28.15e88f2205de1
go.etcd.io/etcd@v0.0.0-20191023171146-3cf2f69b5738
0.5.0-alpha.5.0.20190108173120-83c051b701d3

Open the chart page →

3,391
miniomilvus8.0.171 of 1See more

minio milvus 8.0.17

1 of the 1 container images this version deploys carry CVE-2018-16886.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
go.etcd.io/etcd@v0.0.0-20201125193152-8a03d2e9614b
0.5.0-alpha.5.0.20190108173120-83c051b701d3

Open the chart page →

6,915
hlf-ordowkin3.1.01 of 1See more

hlf-ord owkin 3.1.0

1 of the 1 container images this version deploys carry CVE-2018-16886.

Container imageDigestPackageFixed in
hyperledger/fabric-orderer:2.2.137294e05209b
go.etcd.io/etcd@v0.5.0-alpha.5.0.20181228115726-23731bf9ba55
0.5.0-alpha.5.0.20190108173120-83c051b701d3

Open the chart page →

3,350
cert-manager-webhook-safednsansgroupVerified publisher1.3.01 of 1See more

cert-manager-webhook-safedns ansgroup 1.3.0

1 of the 1 container images this version deploys carry CVE-2018-16886.

Container imageDigestPackageFixed in
ansgroup/cert-manager-webhook-safedns:v1.0.1cd6b0ef2b309
go.etcd.io/etcd@v0.0.0-20191023171146-3cf2f69b5738
0.5.0-alpha.5.0.20190108173120-83c051b701d3

Open the chart page →

2,488
dltkvassist-iot-data-integrity-verification0.2.01 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

1 of the 9 container images this version deploys carry CVE-2018-16886.

Container imageDigestPackageFixed in
hyperledger/fabric-orderer:2.46ec3fe59ea55
go.etcd.io/etcd@v0.5.0-alpha.5.0.20181228115726-23731bf9ba55
0.5.0-alpha.5.0.20190108173120-83c051b701d3

Open the chart page →

77,706
dltflassist-iot-dlt-based-fl0.2.01 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

1 of the 9 container images this version deploys carry CVE-2018-16886.

Container imageDigestPackageFixed in
hyperledger/fabric-orderer:2.46ec3fe59ea55
go.etcd.io/etcd@v0.5.0-alpha.5.0.20181228115726-23731bf9ba55
0.5.0-alpha.5.0.20190108173120-83c051b701d3

Open the chart page →

77,706
lokichoerodon0.29.01 of 1See more

loki choerodon 0.29.0

1 of the 1 container images this version deploys carry CVE-2018-16886.

Container imageDigestPackageFixed in
grafana/loki:1.5.0922b3f412fdd
go.etcd.io/etcd@v0.0.0-20200401174654-e694b7bb0875
0.5.0-alpha.5.0.20190108173120-83c051b701d3

Open the chart page →

2,869
ibm-toolkit-installcloud-native-toolkit0.3.01 of 1See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2018-16886.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
go.etcd.io/etcd@v0.0.0-20211004023027-19e2e70e4f50
0.5.0-alpha.5.0.20190108173120-83c051b701d3

Open the chart page →

6,695
iteration-zerocloud-native-toolkit0.2.01 of 1See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2018-16886.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
go.etcd.io/etcd@v0.0.0-20211004023027-19e2e70e4f50
0.5.0-alpha.5.0.20190108173120-83c051b701d3

Open the chart page →

6,921
k8s-cloudwatch-adapterdeliveryheroVerified publisher0.2.21 of 1See more

k8s-cloudwatch-adapter deliveryhero 0.2.2

1 of the 1 container images this version deploys carry CVE-2018-16886.

Container imageDigestPackageFixed in
chankh/k8s-cloudwatch-adapter:v0.9.0963c44c7f8b1
go.etcd.io/etcd@v0.0.0-20191023171146-3cf2f69b5738
0.5.0-alpha.5.0.20190108173120-83c051b701d3

Open the chart page →

2,468
argocddevtron1.8.11 of 3See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry CVE-2018-16886.

Container imageDigestPackageFixed in
quay.io/dexidp/dex:v2.25.07bcf286807b8
go.etcd.io/etcd@v0.0.0-20191023171146-3cf2f69b5738
0.5.0-alpha.5.0.20190108173120-83c051b701d3

Open the chart page →

10,466
dgraphdevtron0.0.201 of 1See more

dgraph devtron 0.0.20

1 of the 1 container images this version deploys carry CVE-2018-16886.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
go.etcd.io/etcd@v0.0.0-20190228193606-a943ad0ee4c9
0.5.0-alpha.5.0.20190108173120-83c051b701d3

Open the chart page →

11,909
argocddevtron-labs1.8.11 of 3See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry CVE-2018-16886.

Container imageDigestPackageFixed in
quay.io/dexidp/dex:v2.25.07bcf286807b8
go.etcd.io/etcd@v0.0.0-20191023171146-3cf2f69b5738
0.5.0-alpha.5.0.20190108173120-83c051b701d3

Open the chart page →

10,466
dgraphdevtron-labs0.0.201 of 1See more

dgraph devtron-labs 0.0.20

1 of the 1 container images this version deploys carry CVE-2018-16886.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
go.etcd.io/etcd@v0.0.0-20190228193606-a943ad0ee4c9
0.5.0-alpha.5.0.20190108173120-83c051b701d3

Open the chart page →

11,909
overlorddoubanVerified publisher0.2.21 of 1See more

overlord douban 0.2.2

1 of the 1 container images this version deploys carry CVE-2018-16886.

Container imageDigestPackageFixed in
douz/overlord:latestf2bc7fc068c1
go.etcd.io/etcd@v0.0.0-20191023171146-3cf2f69b5738
0.5.0-alpha.5.0.20190108173120-83c051b701d3

Open the chart page →

3,693
mimir-openshift-experimentalgrafana2.1.02 of 4See more

mimir-openshift-experimental grafana 2.1.0

2 of the 4 container images this version deploys carry CVE-2018-16886.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2021-02-14T04-28-06Z2a374c124d44
go.etcd.io/etcd@v0.0.0-20201125193152-8a03d2e9614b
0.5.0-alpha.5.0.20190108173120-83c051b701d3
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
go.etcd.io/etcd@v0.0.0-20201125193152-8a03d2e9614b
0.5.0-alpha.5.0.20190108173120-83c051b701d3

Open the chart page →

17,759
k8s-cloudwatch-adapterhelm-charts-nr0.2.21 of 1See more

k8s-cloudwatch-adapter helm-charts-nr 0.2.2

1 of the 1 container images this version deploys carry CVE-2018-16886.

Container imageDigestPackageFixed in
chankh/k8s-cloudwatch-adapter:v0.9.0963c44c7f8b1
go.etcd.io/etcd@v0.0.0-20191023171146-3cf2f69b5738
0.5.0-alpha.5.0.20190108173120-83c051b701d3

Open the chart page →

2,468
stoloniamalryz0.10.01 of 2See more

stolon iamalryz 0.10.0

1 of the 2 container images this version deploys carry CVE-2018-16886.

Container imageDigestPackageFixed in
sorintlab/stolon:v0.16.0-pg1236b45c0f97fc
go.etcd.io/etcd@v0.0.0-20191023171146-3cf2f69b5738
0.5.0-alpha.5.0.20190108173120-83c051b701d3

Open the chart page →

4,045
jx-app-athensjenkins-x0.0.181 of 1See more

jx-app-athens jenkins-x 0.0.18

1 of the 1 container images this version deploys carry CVE-2018-16886.

Container imageDigestPackageFixed in
gomods/athens:v0.8.1d714c7ff0231
go.etcd.io/etcd@v0.0.0-20190215181705-784daa04988c
0.5.0-alpha.5.0.20190108173120-83c051b701d3

Open the chart page →

4,225
kube-oidc-proxymesosphere0.3.41 of 1See more

kube-oidc-proxy mesosphere 0.3.4

1 of the 1 container images this version deploys carry CVE-2018-16886.

Container imageDigestPackageFixed in
quay.io/jetstack/kube-oidc-proxy:v0.3.0e045b26eb6df
go.etcd.io/etcd@v0.0.0-20191023171146-3cf2f69b5738
0.5.0-alpha.5.0.20190108173120-83c051b701d3

Open the chart page →

3,144
argocdromholdings1.8.11 of 3See more

argocd romholdings 1.8.1

1 of the 3 container images this version deploys carry CVE-2018-16886.

Container imageDigestPackageFixed in
quay.io/dexidp/dex:v2.25.07bcf286807b8
go.etcd.io/etcd@v0.0.0-20191023171146-3cf2f69b5738
0.5.0-alpha.5.0.20190108173120-83c051b701d3

Open the chart page →

10,466
dgraphromholdings0.0.201 of 1See more

dgraph romholdings 0.0.20

1 of the 1 container images this version deploys carry CVE-2018-16886.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
go.etcd.io/etcd@v0.0.0-20190228193606-a943ad0ee4c9
0.5.0-alpha.5.0.20190108173120-83c051b701d3

Open the chart page →

11,909
lokit3n1.0.01 of 1See more

loki t3n 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-16886.

Container imageDigestPackageFixed in
grafana/loki:1.5.0922b3f412fdd
go.etcd.io/etcd@v0.0.0-20200401174654-e694b7bb0875
0.5.0-alpha.5.0.20190108173120-83c051b701d3

Open the chart page →

2,869
athens-proxywenerme0.5.21 of 2See more

athens-proxy wenerme 0.5.2

1 of the 2 container images this version deploys carry CVE-2018-16886.

Container imageDigestPackageFixed in
gomods/athens:v0.11.0efb811df7844
go.etcd.io/etcd@v0.0.0-20190215181705-784daa04988c
0.5.0-alpha.5.0.20190108173120-83c051b701d3

Open the chart page →

4,984
miniowenerme8.0.101 of 1See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2018-16886.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
go.etcd.io/etcd@v0.0.0-20201125193152-8a03d2e9614b
0.5.0-alpha.5.0.20190108173120-83c051b701d3

Open the chart page →

6,915

Container images carrying it

19 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
hyperledger/fabric-orderer:2.46ec3fe59ea55
go.etcd.io/etcd@v0.5.0-alpha.5.0.20181228115726-23731bf9ba55
0.5.0-alpha.5.0.20190108173120-83c051b701d3
4
dgraph/dgraph:v21.12.03b55ea83fffe
go.etcd.io/etcd@v0.0.0-20190228193606-a943ad0ee4c9
0.5.0-alpha.5.0.20190108173120-83c051b701d3
3
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
go.etcd.io/etcd@v0.0.0-20201125193152-8a03d2e9614b
0.5.0-alpha.5.0.20190108173120-83c051b701d3
3
quay.io/dexidp/dex:v2.25.07bcf286807b8
go.etcd.io/etcd@v0.0.0-20191023171146-3cf2f69b5738
0.5.0-alpha.5.0.20190108173120-83c051b701d3
3
chankh/k8s-cloudwatch-adapter:v0.9.0963c44c7f8b1
go.etcd.io/etcd@v0.0.0-20191023171146-3cf2f69b5738
0.5.0-alpha.5.0.20190108173120-83c051b701d3
2
grafana/loki:1.5.0922b3f412fdd
go.etcd.io/etcd@v0.0.0-20200401174654-e694b7bb0875
0.5.0-alpha.5.0.20190108173120-83c051b701d3
2
ghcr.io/dexidp/dex:v2.28.15e88f2205de1
go.etcd.io/etcd@v0.0.0-20191023171146-3cf2f69b5738
0.5.0-alpha.5.0.20190108173120-83c051b701d3
2
quay.io/dexidp/dex:v2.24.0c9b7f6d0d953
go.etcd.io/etcd@v0.0.0-20191023171146-3cf2f69b5738
0.5.0-alpha.5.0.20190108173120-83c051b701d3
2
ansgroup/cert-manager-webhook-safedns:v1.0.1cd6b0ef2b309
go.etcd.io/etcd@v0.0.0-20191023171146-3cf2f69b5738
0.5.0-alpha.5.0.20190108173120-83c051b701d3
1
datadog/agent:7.22.08f20e56b5311
go.etcd.io/etcd@v0.0.0-20191023171146-3cf2f69b5738
0.5.0-alpha.5.0.20190108173120-83c051b701d3
1
douz/overlord:latestf2bc7fc068c1
go.etcd.io/etcd@v0.0.0-20191023171146-3cf2f69b5738
0.5.0-alpha.5.0.20190108173120-83c051b701d3
1
gomods/athens:v0.8.1d714c7ff0231
go.etcd.io/etcd@v0.0.0-20190215181705-784daa04988c
0.5.0-alpha.5.0.20190108173120-83c051b701d3
1
gomods/athens:v0.11.0efb811df7844
go.etcd.io/etcd@v0.0.0-20190215181705-784daa04988c
0.5.0-alpha.5.0.20190108173120-83c051b701d3
1
hyperledger/fabric-orderer:2.2.137294e05209b
go.etcd.io/etcd@v0.5.0-alpha.5.0.20181228115726-23731bf9ba55
0.5.0-alpha.5.0.20190108173120-83c051b701d3
1
minio/mc:RELEASE.2021-02-14T04-28-06Z2a374c124d44
go.etcd.io/etcd@v0.0.0-20201125193152-8a03d2e9614b
0.5.0-alpha.5.0.20190108173120-83c051b701d3
1
sorintlab/stolon:v0.16.0-pg1236b45c0f97fc
go.etcd.io/etcd@v0.0.0-20191023171146-3cf2f69b5738
0.5.0-alpha.5.0.20190108173120-83c051b701d3
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
go.etcd.io/etcd@v0.0.0-20211004023027-19e2e70e4f50
0.5.0-alpha.5.0.20190108173120-83c051b701d3
1
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
go.etcd.io/etcd@v0.0.0-20211004023027-19e2e70e4f50
0.5.0-alpha.5.0.20190108173120-83c051b701d3
1
quay.io/jetstack/kube-oidc-proxy:v0.3.0e045b26eb6df
go.etcd.io/etcd@v0.0.0-20191023171146-3cf2f69b5738
0.5.0-alpha.5.0.20190108173120-83c051b701d3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.