CVE-2019-11254
MediumAdvisory
Published 14 Apr 2021In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.5
- base score, highest
- EPSS
- 0.031
- 87th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 120
- of 17,781 indexed, latest versions
- Container images
- 91
- deployed by those charts
- Fix available
- 1 of 2
- affected packages
Excessive Platform Resource Consumption within a Loop in Kubernetes
Carried by container images the latest versions of 120 of 17,781 indexed charts deploy, on 91 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| gopkg.in/ | v2.0.0-20170712054546-1be3d31502d6, v2.0.0-20170812160011-eb3733d160e7, v2.0.0-20190319135612-7b8349ac747c, v2.2.1+5 more | 2.2.8 | 85 |
| github.com/ | v2.1.0+incompatible | no fix listed | 7 |
- OSV records
- GHSA-wxc4-f4m6-wwqv
- Also known as
- GO-2020-0036
Charts affected
120 by stars
Container images carrying it
91 by charts deploying them
A fixed version is listed for 1 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| olliai/ | a470d96525e4 | gopkg.in/ | 2.2.8 | 1 |
| olliai/ | 5716f2a8bd4c | gopkg.in/ | 2.2.8 | 1 |
| opsgenie/ | ecb246e4d260 | gopkg.in/ | 2.2.8 | 1 |
| oxynozeta/ | 31f11669d597 | github.com/ gopkg.in/ | no fix listed 2.2.8 | 1 |
| pnnlmiscscripts/ | 155131891741 | gopkg.in/ | 2.2.8 | 1 |
| prom/ | e4ca62c0d62f | gopkg.in/ | 2.2.8 | 1 |
| rancher/ | 6d2cd61a338b | gopkg.in/ | 2.2.8 | 1 |
| rancher/ | c678c25d47c8 | gopkg.in/ | 2.2.8 | 1 |
| rancher/ | 42784bb38ed3 | gopkg.in/ | 2.2.8 | 1 |
| rancher/ | d5999b20a1b1 | gopkg.in/ | 2.2.8 | 1 |
| rancher/ | e34c88ae0aff | gopkg.in/ | 2.2.8 | 1 |
| reportportal/ | 2b27a2d7a87d | gopkg.in/ | 2.2.8 | 1 |
| softonic/ | 94b87f1fb362 | gopkg.in/ | 2.2.8 | 1 |
| sstarcher/ | 2d43c390cb19 | gopkg.in/ | 2.2.8 | 1 |
| sstarcher/ | 11769d01ba35 | gopkg.in/ | 2.2.8 | 1 |
| sstarcher/ | 1f8cae8cfa80 | gopkg.in/ | 2.2.8 | 1 |
| streamnative/ | ebcf7f033b54 | gopkg.in/ | 2.2.8 | 1 |
| surajwarbhe/ | 85248611e9f1 | gopkg.in/ | 2.2.8 | 1 |
| timonwong/ | a0fcc028bd8d | gopkg.in/ | 2.2.8 | 1 |
| tobiasbp/ | 14bee6e33a26 | gopkg.in/ | 2.2.8 | 1 |
| weaveworks/ | a9c2e9df4227 | gopkg.in/ | 2.2.8 | 1 |
| weblate/ | 82848df56ecd | gopkg.in/ | 2.2.8 | 1 |
| gcr.io/ | 2b1a3d08caac | gopkg.in/ | 2.2.8 | 1 |
| gcr.io/ | a348db3e4d74 | gopkg.in/ | 2.2.8 | 1 |
| ghcr.io/ | 0c84c2d71006 | gopkg.in/ | 2.2.8 | 1 |
| ghcr.io/ | 233aa9808fc7 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 72e7e77f8091 | gopkg.in/ | 2.2.8 | 1 |
| ghcr.io/ | 5c6b8f91f1c4 | gopkg.in/ | 2.2.8 | 1 |
| ghcr.io/ | 827aa2f2389d | gopkg.in/ | 2.2.8 | 1 |
| ghcr.io/ | 54ebc1f90963 | gopkg.in/ | 2.2.8 | 1 |
| ghcr.io/ | cbd5d4cc1245 | gopkg.in/ | 2.2.8 | 1 |
| ghcr.io/ | ef3670f7e0a8 | gopkg.in/ | 2.2.8 | 1 |
| ghcr.io/ | ad943e9309e4 | gopkg.in/ | 2.2.8 | 1 |
| ghcr.io/ | c2d6e775db5a | gopkg.in/ | 2.2.8 | 1 |
| ghcr.io/ | 4ea617c30397 | gopkg.in/ | 2.2.8 | 1 |
| ghcr.io/ | 448045c4270b | gopkg.in/ | 2.2.8 | 1 |
| ghcr.io/ | 087618d16b83 | gopkg.in/ | 2.2.8 | 1 |
| ghcr.io/ | c3d9d9c98be7 | github.com/ | no fix listed | 1 |
| mcr.microsoft.com/ | f55f30876129 | gopkg.in/ | 2.2.8 | 1 |
| quay.io/ | 6c308e9732e1 | gopkg.in/ | 2.2.8 | 1 |
| quay.io/ | 21e6d6a155dc | gopkg.in/ | 2.2.8 | 1 |