CVE-2019-11254
MediumAdvisory
Published 14 Apr 2021In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.5
- base score, highest
- EPSS
- 0.031
- 87th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 120
- of 17,781 indexed, latest versions
- Container images
- 91
- deployed by those charts
- Fix available
- 1 of 2
- affected packages
Excessive Platform Resource Consumption within a Loop in Kubernetes
Carried by container images the latest versions of 120 of 17,781 indexed charts deploy, on 91 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| gopkg.in/ | v2.0.0-20170712054546-1be3d31502d6, v2.0.0-20170812160011-eb3733d160e7, v2.0.0-20190319135612-7b8349ac747c, v2.2.1+5 more | 2.2.8 | 85 |
| github.com/ | v2.1.0+incompatible | no fix listed | 7 |
- OSV records
- GHSA-wxc4-f4m6-wwqv
- Also known as
- GO-2020-0036
Charts affected
120 by stars
Container images carrying it
91 by charts deploying them
A fixed version is listed for 1 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| grafana/ | d72946c8e5d5 | gopkg.in/ | 2.2.8 | 6 |
| prom/ | 7e4e9f7a0954 | gopkg.in/ | 2.2.8 | 5 |
| prom/ | 0a8caa2e9f19 | gopkg.in/ | 2.2.8 | 5 |
| grafana/ | 1ff3999e0fc0 | gopkg.in/ | 2.2.8 | 4 |
| mintel/ | caf71cee7b9a | gopkg.in/ | 2.2.8 | 3 |
| stakater/ | 83fef483d497 | gopkg.in/ | 2.2.8 | 3 |
| quay.io/ | 7bcf286807b8 | gopkg.in/ | 2.2.8 | 3 |
| quay.io/ | f402e6039b3c | gopkg.in/ | 2.2.8 | 3 |
| registry.k8s.io/ | c825f3d5e28b | gopkg.in/ | 2.2.8 | 3 |
| cesanta/ | 4d16885f3d4c | gopkg.in/ | 2.2.8 | 2 |
| crate/ | b8d89fa5d19b | gopkg.in/ | 2.2.8 | 2 |
| hashicorp/ | 4db614d40d0e | github.com/ | no fix listed | 2 |
| jettech/ | c42098c8d855 | gopkg.in/ | 2.2.8 | 2 |
| natsio/ | 9fbf7bf684e4 | gopkg.in/ | 2.2.8 | 2 |
| pottava/ | 20a0bcb15f76 | gopkg.in/ | 2.2.8 | 2 |
| prom/ | 1ffc3f109eb3 | gopkg.in/ | 2.2.8 | 2 |
| thomasnyambati/ | 148ae3f99fea | gopkg.in/ | 2.2.8 | 2 |
| weblate/ | 69c160d37a3c | gopkg.in/ | 2.2.8 | 2 |
| gcr.io/ | 2de1d15fc1f2 | gopkg.in/ | 2.2.8 | 2 |
| ghcr.io/ | f04718704dab | gopkg.in/ | 2.2.8 | 2 |
| quay.io/ | c9b7f6d0d953 | gopkg.in/ | 2.2.8 | 2 |
| almir/ | 1698346f6077 | gopkg.in/ | 2.2.8 | 1 |
| codercom/ | 1e2cc688008e | gopkg.in/ | 2.2.8 | 1 |
| codercom/ | 47605610ad8d | gopkg.in/ | 2.2.8 | 1 |
| codeskyblue/ | caa862590e34 | github.com/ | no fix listed | 1 |
| datawire/ | f95ae710d75c | gopkg.in/ | 2.2.8 | 1 |
| devspacecloud/ | 49c397413f7b | gopkg.in/ | 2.2.8 | 1 |
| drone/ | 137e79c5e23c | gopkg.in/ | 2.2.8 | 1 |
| drone/ | 206df2280ecf | gopkg.in/ | 2.2.8 | 1 |
| envoyproxy/ | 71081616da3e | gopkg.in/ | 2.2.8 | 1 |
| filebrowser/ | c5d0a75a0041 | gopkg.in/ | 2.2.8 | 1 |
| gotify/ | 09c79bc1e403 | github.com/ | no fix listed | 1 |
| grafana/ | 052147d7e0ec | gopkg.in/ | 2.2.8 | 1 |
| grafana/ | befcd84da2c1 | gopkg.in/ | 2.2.8 | 1 |
| hashicorp/ | dfc3500beb0e | github.com/ | no fix listed | 1 |
| hashicorp/ | 5697b85bc69a | gopkg.in/ | 2.2.8 | 1 |
| ianw/ | dc49dd460c37 | gopkg.in/ | 2.2.8 | 1 |
| jmferrer/ | 030f68ec6998 | gopkg.in/ | 2.2.8 | 1 |
| kudobuilder/ | 69072d979708 | gopkg.in/ | 2.2.8 | 1 |
| layer5/ | 8c20a8a1d6a4 | gopkg.in/ | 2.2.8 | 1 |
| lmierzwa/ | 3751e5eed656 | gopkg.in/ | 2.2.8 | 1 |
| mesosphere/ | 5456581d7b76 | gopkg.in/ | 2.2.8 | 1 |
| metalmatze/ | 426bc2ca7586 | gopkg.in/ | 2.2.8 | 1 |
| minio/ | 1806872732e1 | gopkg.in/ | 2.2.8 | 1 |
| minio/ | 571feb124476 | gopkg.in/ | 2.2.8 | 1 |
| minio/ | f00aa6ef2b72 | gopkg.in/ | 2.2.8 | 1 |
| mirrorgitlabcontainers/ | 83599461ef8b | gopkg.in/ | 2.2.8 | 1 |
| mirrorgitlabcontainers/ | 06b19a4bc805 | gopkg.in/ | 2.2.8 | 1 |
| mirrorgitlabcontainers/ | 9f3654f1eafc | gopkg.in/ | 2.2.8 | 1 |
| monitoror/ | 4b88edcf51ff | gopkg.in/ | 2.2.8 | 1 |