StackRadar

CVE-2020-0601

UnscoredKEV

Advisory

Published 1 Aug 2022In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.894
100th percentile
CISA KEV
Listed
since 3 Nov 2021
Charts affected
72
of 17,781 indexed, latest versions
Container images
54
deployed by those charts
Fix available
1 of 1
affected package

Certificate validation bypass on Windows in crypto/x509

Carried by container images the latest versions of 72 of 17,781 indexed charts deploy, on 54 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+2 more1.12.1654
OSV records
GO-2022-0535
Also known as
BIT-golang-2020-0601

Charts affected

72 by stars
ChartLatestAffected imagesRadar Score
pulsarv2milvus-helm2.7.81 of 4See more

pulsarv2 milvus-helm 2.7.8

1 of the 4 container images this version deploys carry CVE-2020-0601.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.10ebcf7f033b54
stdlib@go1.13.4
1.12.16

Open the chart page →

15,855
nfs-server-provisionernovum-rgi-charts1.1.21 of 1See more

nfs-server-provisioner novum-rgi-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2020-0601.

Container imageDigestPackageFixed in
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
stdlib@go1.13.4
1.12.16

Open the chart page →

2,806
hive-metastoreolehrgfVerified publisher0.1.01 of 1See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-0601.

Container imageDigestPackageFixed in
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
stdlib@go1.13.4
1.12.16

Open the chart page →

8,540
nem-monitoringopencord1.3.221 of 9See more

nem-monitoring opencord 1.3.22

1 of the 9 container images this version deploys carry CVE-2020-0601.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
stdlib@go1.13.1
1.12.16

Open the chart page →

4,612
liftbridgepozetron0.1.11 of 1See more

liftbridge pozetron 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-0601.

Container imageDigestPackageFixed in
pozetroninc/liftbridge:v1.1.079fd6b9d93e6
stdlib@go1.13.3
1.12.16

Open the chart page →

3,167
hive-metastorepresto-loadbalancer0.2.31 of 1See more

hive-metastore presto-loadbalancer 0.2.3

1 of the 1 container images this version deploys carry CVE-2020-0601.

Container imageDigestPackageFixed in
datappeal/hive-metastore:lateste38c085a3567
stdlib@go1.13.4
1.12.16

Open the chart page →

9,606
cf-operatorquarks2.3.0+0.g27a91cdf2 of 2See more

cf-operator quarks 2.3.0+0.g27a91cdf

2 of the 2 container images this version deploys carry CVE-2020-0601.

Container imageDigestPackageFixed in
cfcontainerization/cf-operator:v2.3.0-0.g27a91cdf82fa261c18a8
stdlib@go1.13.3
1.12.16
cfcontainerization/quarks-job:v0.0.0-0.g70ae34b58fb1c173a46
stdlib@go1.13.4
1.12.16

Open the chart page →

11,942
reportportalreportportal5.7.21 of 8See more

reportportal reportportal 5.7.2

1 of the 8 container images this version deploys carry CVE-2020-0601.

Container imageDigestPackageFixed in
reportportal/migrations:5.7.0da5d8e1395fe
stdlib@go1.13.6
1.12.16

Open the chart page →

25,737
seldon-core-analyticsseldon1.17.12 of 8See more

seldon-core-analytics seldon 1.17.1

2 of the 8 container images this version deploys carry CVE-2020-0601.

Container imageDigestPackageFixed in
prom/alertmanager:v0.20.07e4e9f7a0954
stdlib@go1.13.5
1.12.16
prom/pushgateway:v1.0.1a5df60347882
stdlib@go1.13.5
1.12.16

Open the chart page →

10,733
weblateslamdev0.0.111 of 2See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry CVE-2020-0601.

Container imageDigestPackageFixed in
weblate/weblate:3.11.3-182848df56ecd
stdlib@go1.13.5
1.12.16

Open the chart page →

8,694
spinnakerspinnakerVerified publisher2.2.131 of 4See more

spinnaker spinnaker 2.2.13

1 of the 4 container images this version deploys carry CVE-2020-0601.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2020-01-03T19-12-21Zf00aa6ef2b72
stdlib@go1.13.5
1.12.16

Open the chart page →

6,836
proxyinjectorstakaterVerified publisher0.0.231 of 1See more

proxyinjector stakater 0.0.23

1 of the 1 container images this version deploys carry CVE-2020-0601.

Container imageDigestPackageFixed in
stakater/proxyinjector:v0.0.2383fef483d497
stdlib@go1.13.1
1.12.16

Open the chart page →

2,853
whitelisterstakaterVerified publisher0.0.161 of 1See more

whitelister stakater 0.0.16

1 of the 1 container images this version deploys carry CVE-2020-0601.

Container imageDigestPackageFixed in
stakater/whitelister:v0.0.1639107924063e
stdlib@go1.13.1
1.12.16

Open the chart page →

2,564
prometheus-operatorstatcan0.2.21 of 7See more

prometheus-operator statcan 0.2.2

1 of the 7 container images this version deploys carry CVE-2020-0601.

Container imageDigestPackageFixed in
squareup/ghostunnel:v1.5.270f4cf270425
stdlib@go1.13.4
1.12.16

Open the chart page →

12,237
vaultstatcan0.1.81 of 2See more

vault statcan 0.1.8

1 of the 2 container images this version deploys carry CVE-2020-0601.

Container imageDigestPackageFixed in
hashicorp/vault-k8s:0.6.05697b85bc69a
stdlib@go1.13.5
1.12.16

Open the chart page →

4,222
temporaltemporal0.28.91 of 13See more

temporal temporal 0.28.9

1 of the 13 container images this version deploys carry CVE-2020-0601.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
stdlib@go1.13.4
1.12.16

Open the chart page →

21,005
prometheustnh11.6.01 of 6See more

prometheus tnh 11.6.0

1 of the 6 container images this version deploys carry CVE-2020-0601.

Container imageDigestPackageFixed in
prom/alertmanager:v0.20.07e4e9f7a0954
stdlib@go1.13.5
1.12.16

Open the chart page →

8,484
transmission-exporterutkuozdemirVerified publisher1.1.01 of 1See more

transmission-exporter utkuozdemir 1.1.0

1 of the 1 container images this version deploys carry CVE-2020-0601.

Container imageDigestPackageFixed in
metalmatze/transmission-exporter:0.3.090d6acb6d47d
stdlib@go1.13
1.12.16

Open the chart page →

1,646
volantmqvolantmq0.1.21 of 1See more

volantmq volantmq 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-0601.

Container imageDigestPackageFixed in
volantmq/volantmq:v0.4.0-rc.69bfe7857ebc3
stdlib@go1.13.6
1.12.16

Open the chart page →

2,550
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2020-0601.

Container imageDigestPackageFixed in
ubercadence/server:0.23.22ac5491d13bb
stdlib@go1.13.6
1.12.16

Open the chart page →

10,127
temporalwenerme0.15.13 of 13See more

temporal wenerme 0.15.1

3 of the 13 container images this version deploys carry CVE-2020-0601.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
stdlib@go1.13.4
1.12.16
prom/alertmanager:v0.20.07e4e9f7a0954
stdlib@go1.13.5
1.12.16
prom/pushgateway:v1.0.1a5df60347882
stdlib@go1.13.5
1.12.16

Open the chart page →

22,665
nginx-vts-exporterymrs0.1.21 of 1See more

nginx-vts-exporter ymrs 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-0601.

Container imageDigestPackageFixed in
sophos/nginx-vts-exporter:latestf1073556b29b
stdlib@go1.13.6
1.12.16

Open the chart page →

1,336

Container images carrying it

54 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
prom/alertmanager:v0.20.07e4e9f7a0954
stdlib@go1.13.5
1.12.16
5
prom/prometheus:v2.13.10a8caa2e9f19
stdlib@go1.13.1
1.12.16
5
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
stdlib@go1.13.3
1.12.16
5
grafana/grafana:6.7.11ff3999e0fc0
stdlib@go1.13.4
1.12.16
4
stakater/proxyinjector:v0.0.2383fef483d497
stdlib@go1.13.1
1.12.16
3
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
stdlib@go1.13.4
1.12.16
3
iomesh/hostpath-provisioner:v0.5.1f4878c8ae53a
stdlib@go1.13.1
1.12.16
2
osixia/openldap:1.4.0ccd95cc6e61e
stdlib@go1.13.4
1.12.16
2
prom/pushgateway:v1.0.1a5df60347882
stdlib@go1.13.5
1.12.16
2
squareup/ghostunnel:v1.5.270f4cf270425
stdlib@go1.13.4
1.12.16
2
weblate/weblate:4.2.2-169c160d37a3c
stdlib@go1.13.5
1.12.16
2
alpine/k8s:1.18.16a41efe02a041
stdlib@go1.13.4
1.12.16
1
amazon/aws-efs-csi-driver:v0.3.0b55277652ea8
stdlib@go1.13.4
1.12.16
1
apache/skywalking-oap-server:8.1.0-es7641237e0299b
stdlib@go1.13.3
1.12.16
1
apache/skywalking-ui:8.1.067d50e4deff4
stdlib@go1.13.3
1.12.16
1
assistiot/smart-orchestrator_helm:latest9bb46ea14e8e
stdlib@go1.13
1.12.16
1
cfcontainerization/cf-operator:v2.3.0-0.g27a91cdf82fa261c18a8
stdlib@go1.13.3
1.12.16
1
cfcontainerization/quarks-job:v0.0.0-0.g70ae34b58fb1c173a46
stdlib@go1.13.4
1.12.16
1
chandanteekinavar/findery-market-payment-service:1.0c96f759b6ce4
stdlib@go1.13
1.12.16
1
cloudposse/bastion:latest0d9507e8a760
stdlib@go1.13.3
1.12.16
1
datappeal/hive-metastore:lateste38c085a3567
stdlib@go1.13.4
1.12.16
1
gomods/athens:v0.8.1d714c7ff0231
stdlib@go1.13.4
1.12.16
1
grafana/grafana:6.6.0052147d7e0ec
stdlib@go1.13.4
1.12.16
1
grafana/grafana:6.5.1befcd84da2c1
stdlib@go1.13.1
1.12.16
1
hashicorp/vault-k8s:0.6.05697b85bc69a
stdlib@go1.13.5
1.12.16
1
ianw/quickchart:v1.7.1dc49dd460c37
stdlib@go1.13.1
1.12.16
1
jmferrer/azure-devops-agent:latest030f68ec6998
stdlib@go1.13.5
1.12.16
1
kubeflowkatib/katib-db-manager:v0.12.0db88bf09d88e
stdlib@go1.13.3
1.12.16
1
kudobuilder/controller:v0.9.069072d979708
stdlib@go1.13
1.12.16
1
layer5/meshery-cpx:stable-latest8c20a8a1d6a4
stdlib@go1.13.1
1.12.16
1
lmierzwa/karma:v0.503751e5eed656
stdlib@go1.13.4
1.12.16
1
metalmatze/transmission-exporter:0.3.090d6acb6d47d
stdlib@go1.13
1.12.16
1
mikefarah/yq:2.4.16fc625c402de
stdlib@go1.13.3
1.12.16
1
minio/minio:RELEASE.2020-01-03T19-12-21Zf00aa6ef2b72
stdlib@go1.13.5
1.12.16
1
mirrorgitlabcontainers/kubectl:1.13.1299931bd06b41
stdlib@go1.13.3
1.12.16
1
nacos/nacos-peer-finder-plugin:latesta9c769301fa6
stdlib@go1.13.5
1.12.16
1
pozetroninc/liftbridge:v1.1.079fd6b9d93e6
stdlib@go1.13.3
1.12.16
1
reportportal/migrations:5.7.0da5d8e1395fe
stdlib@go1.13.6
1.12.16
1
sophos/nginx-vts-exporter:latestf1073556b29b
stdlib@go1.13.6
1.12.16
1
sstarcher/helm-exporter:0.5.011769d01ba35
stdlib@go1.13.6
1.12.16
1
stakater/gitwebhookproxy:v0.2.79c1226e5270cd
stdlib@go1.13.1
1.12.16
1
stakater/whitelister:v0.0.1639107924063e
stdlib@go1.13.1
1.12.16
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.10ebcf7f033b54
stdlib@go1.13.4
1.12.16
1
timonwong/prometheus-webhook-dingtalk:v1.4.0a0fcc028bd8d
stdlib@go1.13.5
1.12.16
1
traggo/server:0.2.3f1ced637510e
stdlib@go1.13.1
1.12.16
1
ubercadence/server:0.23.22ac5491d13bb
stdlib@go1.13.6
1.12.16
1
volantmq/volantmq:v0.4.0-rc.69bfe7857ebc3
stdlib@go1.13.6
1.12.16
1
weaveworks/flagger:0.19.0a9c2e9df4227
stdlib@go1.13.1
1.12.16
1
weaveworks/flagger-loadtester:0.9.03cdac6928a63
stdlib@go1.13.1
1.12.16
1
weblate/weblate:3.11.3-182848df56ecd
stdlib@go1.13.5
1.12.16
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.