StackRadarChart IndexLive demo

CVE-2019-20149

High

Advisory

Published 31 Mar 2020In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.023; 83rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 18; of 17,781 indexed, latest versions
Container images: 18; deployed by those charts
Fix available: 1 of 1; affected package

Validation Bypass in kind-of

Carried by container images the latest versions of 18 of 17,781 indexed charts deploy, on 18 images.

Affected package	Affected versions	Fixed in	Images
kind-ofnpm	6.0.2	6.0.3	18

OSV records: GHSA-6c8f-qphg-qjgp

Charts affected

18 by stars

Chart

Latest

Affected images

Radar Score

open5gsopen5gs

1 of 5 See more

open5gs open5gs 2.3.4

1 of the 5 container images this version deploys carry CVE-2019-20149.

Container image	Digest	Package	Fixed in
gradiant/open5gs-webui :2.7.5	fbd10c017541	kind-of@6.0.2	6.0.3

Open the chart page →

9,261

hubotdecayofmind

1 of 3 See more

hubot decayofmind 1.0.2

1 of the 3 container images this version deploys carry CVE-2019-20149.

Container image	Digest	Package	Fixed in
decayofmind/hubot :3.3.2	1e18e92fe694	kind-of@6.0.2	6.0.3

Open the chart page →

2,513

flagsmithone-acre-fund

1 of 6 See more

flagsmith one-acre-fund 0.1.5

1 of the 6 container images this version deploys carry CVE-2019-20149.

Container image	Digest	Package	Fixed in
flagsmith/flagsmith-frontend :v2.6.0	df02a29e8b0c	kind-of@6.0.2	6.0.3

Open the chart page →

6,868

open5gs-webuiopen5gs-webui

1 of 2 See more

open5gs-webui open5gs-webui 2.3.1

1 of the 2 container images this version deploys carry CVE-2019-20149.

Container image	Digest	Package	Fixed in
gradiant/open5gs-webui :2.7.5	fbd10c017541	kind-of@6.0.2	6.0.3

Open the chart page →

5,300

open5gsadaptivenetlab

1 of 3 See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2019-20149.

Container image	Digest	Package	Fixed in
registry.gitlab.com/infinitydon/registry/open5gs-webui :v2.2.2	fda21b0a0344	kind-of@6.0.2	6.0.3

Open the chart page →

25,443

daskcloudnativeapp

1 of 2 See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry CVE-2019-20149.

Container image	Digest	Package	Fixed in
daskdev/dask-notebook :1.1.0	052630f5ca04	kind-of@6.0.2	6.0.3

Open the chart page →

29,901

hubotcloudnativeapp

1 of 1 See more

hubot cloudnativeapp 0.0.1

1 of the 1 container images this version deploys carry CVE-2019-20149.

Container image	Digest	Package	Fixed in
minddocdev/hubot :0.1.9	6c60b11a4fa7	kind-of@6.0.2	6.0.3

Open the chart page →

2,580

developer-dashboardcloud-native-toolkit

1 of 1 See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2019-20149.

Container image	Digest	Package	Fixed in
quay.io/ibmgaragecloud/developer-dashboard :v1.4.4	7a4b9fedc724	kind-of@6.0.2	6.0.3

Open the chart page →

25,456

1 of 7 See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2019-20149.

Container image	Digest	Package	Fixed in
amundsendev/amundsen-frontend :2.1.1	69e7915e61c1	kind-of@6.0.2	6.0.3

Open the chart page →

11,174

testnet-faucetethereum-helm-charts

1 of 1 See more

testnet-faucet ethereum-helm-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2019-20149.

Container image	Digest	Package	Fixed in
parithoshj/testnet-faucet :9859e0d	cdca426fea6d	kind-of@6.0.2	6.0.3

Open the chart page →

3,005

ibm-app-navigatoribm-charts

1 of 5 See more

ibm-app-navigator ibm-charts 1.0.1

1 of the 5 container images this version deploys carry CVE-2019-20149.

Container image	Digest	Package	Fixed in
ibmcom/app-nav-ui :1.0.1	e2a86997b36b	kind-of@6.0.2	6.0.3

Open the chart page →

32,915

ibm-microclimateibm-charts

2 of 8 See more

ibm-microclimate ibm-charts 0.1.0

2 of the 8 container images this version deploys carry CVE-2019-20149.

Container image	Digest	Package	Fixed in
ibmcom/microclimate-file-watcher :latest	ab3fd1fdfa18	kind-of@6.0.2	6.0.3
ibmcom/microclimate-portal :latest	ed5505e5c7ec	kind-of@6.0.2	6.0.3

Open the chart page →

57,669

opendistro-eslsst-sqre

1 of 3 See more

opendistro-es lsst-sqre 1.4.1

1 of the 3 container images this version deploys carry CVE-2019-20149.

Container image	Digest	Package	Fixed in
amazon/opendistro-for-elasticsearch-kibana :1.4.0	5126e2e79a1f	kind-of@6.0.2	6.0.3

Open the chart page →

7,929

frontendluiscajl

1 of 1 See more

frontend luiscajl 0.1.7

1 of the 1 container images this version deploys carry CVE-2019-20149.

Container image	Digest	Package	Fixed in
lavandadelpatio/frontend :latest	501c3f31e0bc	kind-of@6.0.2	6.0.3

Open the chart page →

3,651

sentence-collectormozilla

1 of 2 See more

sentence-collector mozilla 0.1.2

1 of the 2 container images this version deploys carry CVE-2019-20149.

Container image	Digest	Package	Fixed in
mozilla/sentencecollector :2.0.9	1da6ff5c4895	kind-of@6.0.2	6.0.3

Open the chart page →

6,684

ferdi-serverobeone

1 of 2 See more

ferdi-server obeone 1.0.3

1 of the 2 container images this version deploys carry CVE-2019-20149.

Container image	Digest	Package	Fixed in
getferdi/ferdi-server :1.3.2	6e620b85afaa	kind-of@6.0.2	6.0.3

Open the chart page →

1,866

parkingsikalabs

1 of 1 See more

parking sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-20149.

Container image	Digest	Package	Fixed in
ondrejsika/parking :latest	b1fd497416c8	kind-of@6.0.2	6.0.3

Open the chart page →

3,696

trudesktechpreta

1 of 3 See more

trudesk techpreta 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-20149.

Container image	Digest	Package	Fixed in
polonel/trudesk :1.2.6	0cf6513f6fe3	kind-of@6.0.2	6.0.3

Open the chart page →

4,017

Container images carrying it

18 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
gradiant/open5gs-webui :2.7.5	fbd10c017541	kind-of@6.0.2	6.0.3	2
amazon/opendistro-for-elasticsearch-kibana :1.4.0	5126e2e79a1f	kind-of@6.0.2	6.0.3	1
amundsendev/amundsen-frontend :2.1.1	69e7915e61c1	kind-of@6.0.2	6.0.3	1
daskdev/dask-notebook :1.1.0	052630f5ca04	kind-of@6.0.2	6.0.3	1
decayofmind/hubot :3.3.2	1e18e92fe694	kind-of@6.0.2	6.0.3	1
flagsmith/flagsmith-frontend :v2.6.0	df02a29e8b0c	kind-of@6.0.2	6.0.3	1
getferdi/ferdi-server :1.3.2	6e620b85afaa	kind-of@6.0.2	6.0.3	1
ibmcom/app-nav-ui :1.0.1	e2a86997b36b	kind-of@6.0.2	6.0.3	1
ibmcom/microclimate-file-watcher :latest	ab3fd1fdfa18	kind-of@6.0.2	6.0.3	1
ibmcom/microclimate-portal :latest	ed5505e5c7ec	kind-of@6.0.2	6.0.3	1
lavandadelpatio/frontend :latest	501c3f31e0bc	kind-of@6.0.2	6.0.3	1
minddocdev/hubot :0.1.9	6c60b11a4fa7	kind-of@6.0.2	6.0.3	1
mozilla/sentencecollector :2.0.9	1da6ff5c4895	kind-of@6.0.2	6.0.3	1
ondrejsika/parking :latest	b1fd497416c8	kind-of@6.0.2	6.0.3	1
parithoshj/testnet-faucet :9859e0d	cdca426fea6d	kind-of@6.0.2	6.0.3	1
polonel/trudesk :1.2.6	0cf6513f6fe3	kind-of@6.0.2	6.0.3	1
quay.io/ibmgaragecloud/developer-dashboard :v1.4.4	7a4b9fedc724	kind-of@6.0.2	6.0.3	1
registry.gitlab.com/infinitydon/registry/open5gs-webui :v2.2.2	fda21b0a0344	kind-of@6.0.2	6.0.3	1