StackRadar

CVE-2020-1045

High

Advisory

Published 24 May 2022In the index since 8 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.059
93rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
40
of 17,781 indexed, latest versions
Container images
37
deployed by those charts
Fix available
2 of 2
affected packages

Cookie parsing failure

Carried by container images the latest versions of 40 of 17,781 indexed charts deploy, on 37 images.

Affected packageAffected versionsFixed inImages
Microsoft.AspNetCore.Httpnuget2.0.0, 2.0.0.17205, 2.0.1, 2.1.12.1.2234
Microsoft.AspNetCore.App.Runtime.linux-x64nuget3.1.3, 3.1.4, 3.1.53.1.84
OSV records
GHSA-hxrm-9w7p-39cc
Also known as
BIT-aspnet-core-2020-1045

Charts affected

40 by stars
ChartLatestAffected imagesRadar Score
testhubteshubVerified publisher0.1.41 of 3See more

testhub teshub 0.1.4

1 of the 3 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
testhubio/testhub-api:on-prem56badee134b9
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.3
3.1.8

Open the chart page →

7,517
seqcloudnativeapp1.0.01 of 1See more

seq cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
datalust/seq:5.0.832-pre9c731bb207a6
Microsoft.AspNetCore.Http@2.0.1
2.1.22

Open the chart page →

10,541
ms-catalogs-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-catalogs-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
codedesignplus/ms-catalogs-rest:latest03b80bec4458
Microsoft.AspNetCore.Http@2.1.1
2.1.22

Open the chart page →

235
ms-emails-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-grpc:lateste336012bc781
Microsoft.AspNetCore.Http@2.1.1
2.1.22

Open the chart page →

9,367
ms-emails-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-rest:latestac84661c605e
Microsoft.AspNetCore.Http@2.1.1
2.1.22

Open the chart page →

9,367
ms-emails-workercodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-worker codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-worker:latest48fe7e6ceaba
Microsoft.AspNetCore.Http@2.1.1
2.1.22

Open the chart page →

247
ms-filestorage-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-filestorage-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
codedesignplus/ms-filestorage-rest:latest7666ccfa0d68
Microsoft.AspNetCore.Http@2.1.1
2.1.22

Open the chart page →

235
ms-licenses-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-licenses-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
codedesignplus/ms-licenses-grpc:latest360144457f4d
Microsoft.AspNetCore.Http@2.1.1
2.1.22

Open the chart page →

1,136
ms-licenses-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-licenses-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
codedesignplus/ms-licenses-rest:latest52963715c729
Microsoft.AspNetCore.Http@2.1.1
2.1.22

Open the chart page →

235
ms-licenses-workercodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-licenses-worker codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
codedesignplus/ms-licenses-worker:latest2c302fb759dc
Microsoft.AspNetCore.Http@2.1.1
2.1.22

Open the chart page →

235
ms-locations-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-locations-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
codedesignplus/ms-locations-grpc:latest26855ebf033b
Microsoft.AspNetCore.Http@2.1.1
2.1.22

Open the chart page →

235
ms-locations-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-locations-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
codedesignplus/ms-locations-rest:latestb8d4447931f4
Microsoft.AspNetCore.Http@2.1.1
2.1.22

Open the chart page →

235
ms-microsoftgraph-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-microsoftgraph-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
codedesignplus/ms-microsoftgraph-rest:latestc314db2706e5
Microsoft.AspNetCore.Http@2.1.1
2.1.22

Open the chart page →

247
ms-microsoftgraph-workercodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-microsoftgraph-worker codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
codedesignplus/ms-microsoftgraph-worker:latestc3568b61d762
Microsoft.AspNetCore.Http@2.1.1
2.1.22

Open the chart page →

247
ms-modules-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-modules-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
codedesignplus/ms-modules-grpc:latest3f6aaa32d526
Microsoft.AspNetCore.Http@2.1.1
2.1.22

Open the chart page →

1,136
ms-modules-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-modules-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
codedesignplus/ms-modules-rest:latest091de71a83df
Microsoft.AspNetCore.Http@2.1.1
2.1.22

Open the chart page →

235
ms-notification-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-notification-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
codedesignplus/ms-notification-grpc:latestc7525541cb5f
Microsoft.AspNetCore.Http@2.1.1
2.1.22

Open the chart page →

356
ms-notification-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-notification-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
codedesignplus/ms-notification-rest:lateste46e7e36b8e0
Microsoft.AspNetCore.Http@2.1.1
2.1.22

Open the chart page →

87
ms-payments-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-payments-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
codedesignplus/ms-payments-grpc:latest88ea9bbcb04c
Microsoft.AspNetCore.Http@2.1.1
2.1.22

Open the chart page →

235
ms-payments-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-payments-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
codedesignplus/ms-payments-rest:latest6a3591b82a40
Microsoft.AspNetCore.Http@2.1.1
2.1.22

Open the chart page →

235
ms-payments-workercodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-payments-worker codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
codedesignplus/ms-payments-worker:latest50171f042666
Microsoft.AspNetCore.Http@2.1.1
2.1.22

Open the chart page →

235
ms-rbac-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-rbac-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
codedesignplus/ms-rbac-grpc:latest85bee1edfe2a
Microsoft.AspNetCore.Http@2.1.1
2.1.22

Open the chart page →

235
ms-rbac-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-rbac-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
codedesignplus/ms-rbac-rest:latesta156d021775d
Microsoft.AspNetCore.Http@2.1.1
2.1.22

Open the chart page →

235
ms-roles-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-roles-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
codedesignplus/ms-roles-rest:latestc364711341a0
Microsoft.AspNetCore.Http@2.1.1
2.1.22

Open the chart page →

235
ms-services-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-services-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
codedesignplus/ms-services-grpc:latest1462eb1101db
Microsoft.AspNetCore.Http@2.1.1
2.1.22

Open the chart page →

235
ms-services-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-services-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
codedesignplus/ms-services-rest:lateste0f8ef13842f
Microsoft.AspNetCore.Http@2.1.1
2.1.22

Open the chart page →

235
ms-tenants-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-tenants-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
codedesignplus/ms-tenants-grpc:latesta33d3361e60c
Microsoft.AspNetCore.Http@2.1.1
2.1.22

Open the chart page →

235
ms-tenants-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-tenants-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
codedesignplus/ms-tenants-rest:latest5762fc421070
Microsoft.AspNetCore.Http@2.1.1
2.1.22

Open the chart page →

235
ms-tenants-workercodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-tenants-worker codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
codedesignplus/ms-tenants-worker:latestf476a3084860
Microsoft.AspNetCore.Http@2.1.1
2.1.22

Open the chart page →

235
ms-users-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-users-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
codedesignplus/ms-users-grpc:latest2cff841dd824
Microsoft.AspNetCore.Http@2.1.1
2.1.22

Open the chart page →

235
ms-users-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-users-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
codedesignplus/ms-users-rest:lateste9c7ab8d91ef
Microsoft.AspNetCore.Http@2.1.1
2.1.22

Open the chart page →

235
ms-users-workercodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-users-worker codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
codedesignplus/ms-users-worker:latest94094b21a2c5
Microsoft.AspNetCore.Http@2.1.1
2.1.22

Open the chart page →

235
kafkamagicdysnixVerified publisher0.2.31 of 1See more

kafkamagic dysnix 0.2.3

1 of the 1 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
digitsy/kafka-magic:2.0.3.4f91d7f56b55d
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.3
3.1.8

Open the chart page →

1,906
nbxplorerkronkltdVerified publisher0.1.51 of 2See more

nbxplorer kronkltd 0.1.5

1 of the 2 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
nicolasdorier/nbxplorer:2.1.52ee70dba03ec2
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.4
3.1.8

Open the chart page →

1,669
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
Microsoft.AspNetCore.Http@2.0.0
2.1.22

Open the chart page →

55,726
dotstatsuitestatcan0.2.81 of 6See more

dotstatsuite statcan 0.2.8

1 of the 6 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
siscc/dotstatsuite-core-auth-management:9a653e82bb1e9a45b6fa
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.5
Microsoft.AspNetCore.Http@2.0.0
3.1.8
2.1.22

Open the chart page →

3,841
voteappvoting-app-helm-charts-repoVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo 1.0.0

1 of the 5 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
Microsoft.AspNetCore.Http@2.0.0.17205
2.1.22

Open the chart page →

8,262
workerappvoting-app-helm-charts-repoVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
Microsoft.AspNetCore.Http@2.0.0.17205
2.1.22

Open the chart page →

3,329
voteappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 5 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
Microsoft.AspNetCore.Http@2.0.0.17205
2.1.22

Open the chart page →

8,262
workerappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-1045.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
Microsoft.AspNetCore.Http@2.0.0.17205
2.1.22

Open the chart page →

3,329

Container images carrying it

37 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
kodekloud/examplevotingapp_worker:v1741e3aaaa812
Microsoft.AspNetCore.Http@2.0.0.17205
2.1.22
4
codedesignplus/ms-catalogs-rest:latest03b80bec4458
Microsoft.AspNetCore.Http@2.1.1
2.1.22
1
codedesignplus/ms-emails-grpc:lateste336012bc781
Microsoft.AspNetCore.Http@2.1.1
2.1.22
1
codedesignplus/ms-emails-rest:latestac84661c605e
Microsoft.AspNetCore.Http@2.1.1
2.1.22
1
codedesignplus/ms-emails-worker:latest48fe7e6ceaba
Microsoft.AspNetCore.Http@2.1.1
2.1.22
1
codedesignplus/ms-filestorage-rest:latest7666ccfa0d68
Microsoft.AspNetCore.Http@2.1.1
2.1.22
1
codedesignplus/ms-licenses-grpc:latest360144457f4d
Microsoft.AspNetCore.Http@2.1.1
2.1.22
1
codedesignplus/ms-licenses-rest:latest52963715c729
Microsoft.AspNetCore.Http@2.1.1
2.1.22
1
codedesignplus/ms-licenses-worker:latest2c302fb759dc
Microsoft.AspNetCore.Http@2.1.1
2.1.22
1
codedesignplus/ms-locations-grpc:latest26855ebf033b
Microsoft.AspNetCore.Http@2.1.1
2.1.22
1
codedesignplus/ms-locations-rest:latestb8d4447931f4
Microsoft.AspNetCore.Http@2.1.1
2.1.22
1
codedesignplus/ms-microsoftgraph-rest:latestc314db2706e5
Microsoft.AspNetCore.Http@2.1.1
2.1.22
1
codedesignplus/ms-microsoftgraph-worker:latestc3568b61d762
Microsoft.AspNetCore.Http@2.1.1
2.1.22
1
codedesignplus/ms-modules-grpc:latest3f6aaa32d526
Microsoft.AspNetCore.Http@2.1.1
2.1.22
1
codedesignplus/ms-modules-rest:latest091de71a83df
Microsoft.AspNetCore.Http@2.1.1
2.1.22
1
codedesignplus/ms-notification-grpc:latestc7525541cb5f
Microsoft.AspNetCore.Http@2.1.1
2.1.22
1
codedesignplus/ms-notification-rest:lateste46e7e36b8e0
Microsoft.AspNetCore.Http@2.1.1
2.1.22
1
codedesignplus/ms-payments-grpc:latest88ea9bbcb04c
Microsoft.AspNetCore.Http@2.1.1
2.1.22
1
codedesignplus/ms-payments-rest:latest6a3591b82a40
Microsoft.AspNetCore.Http@2.1.1
2.1.22
1
codedesignplus/ms-payments-worker:latest50171f042666
Microsoft.AspNetCore.Http@2.1.1
2.1.22
1
codedesignplus/ms-rbac-grpc:latest85bee1edfe2a
Microsoft.AspNetCore.Http@2.1.1
2.1.22
1
codedesignplus/ms-rbac-rest:latesta156d021775d
Microsoft.AspNetCore.Http@2.1.1
2.1.22
1
codedesignplus/ms-roles-rest:latestc364711341a0
Microsoft.AspNetCore.Http@2.1.1
2.1.22
1
codedesignplus/ms-services-grpc:latest1462eb1101db
Microsoft.AspNetCore.Http@2.1.1
2.1.22
1
codedesignplus/ms-services-rest:lateste0f8ef13842f
Microsoft.AspNetCore.Http@2.1.1
2.1.22
1
codedesignplus/ms-tenants-grpc:latesta33d3361e60c
Microsoft.AspNetCore.Http@2.1.1
2.1.22
1
codedesignplus/ms-tenants-rest:latest5762fc421070
Microsoft.AspNetCore.Http@2.1.1
2.1.22
1
codedesignplus/ms-tenants-worker:latestf476a3084860
Microsoft.AspNetCore.Http@2.1.1
2.1.22
1
codedesignplus/ms-users-grpc:latest2cff841dd824
Microsoft.AspNetCore.Http@2.1.1
2.1.22
1
codedesignplus/ms-users-rest:lateste9c7ab8d91ef
Microsoft.AspNetCore.Http@2.1.1
2.1.22
1
codedesignplus/ms-users-worker:latest94094b21a2c5
Microsoft.AspNetCore.Http@2.1.1
2.1.22
1
craigwillis/c2metadata-bd:latestae317d7e4724
Microsoft.AspNetCore.Http@2.0.0
2.1.22
1
datalust/seq:5.0.832-pre9c731bb207a6
Microsoft.AspNetCore.Http@2.0.1
2.1.22
1
digitsy/kafka-magic:2.0.3.4f91d7f56b55d
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.3
3.1.8
1
nicolasdorier/nbxplorer:2.1.52ee70dba03ec2
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.4
3.1.8
1
siscc/dotstatsuite-core-auth-management:9a653e82bb1e9a45b6fa
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.5
Microsoft.AspNetCore.Http@2.0.0
3.1.8
2.1.22
1
testhubio/testhub-api:on-prem56badee134b9
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.3
3.1.8
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.