CVE-2020-10531

High

Advisory

Published 12 Mar 2020In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.8; base score, highest
EPSS: 0.027; 85th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 256; of 17,781 indexed, latest versions
Container images: 138; deployed by those charts
Fix available: 4 of 4; affected packages

Red Hat Security Advisory: nodejs:10 security update

Carried by container images the latest versions of 256 of 17,781 indexed charts deploy, on 138 images.

Affected package	Affected versions	Fixed in	Images
icudeb	52.1-8+deb8u3, 52.1-8+deb8u4, 52.1-8+deb8u5, 52.1-8+deb8u6+10 more	52.1-8+deb8u8, 55.1-7ubuntu0.5, 57.1-6+deb9u4, 60.2-3ubuntu3.1+1 more	135
icuapk	62.1-r0, 64.2-r0	62.1-r1, 64.2-r1	2
chromium-browserdeb	63.0.3239.84-0ubuntu0.16.04.1	80.0.3987.149-0ubuntu0.16.04.1	1
nodejs-nodemonrpm	1.18.3-1.module+el8.1.0+3369+37ae6a45	0:1.18.3-1.module+el8+2632+6c5111ed	1

OSV records: ALPINE-CVE-2020-10531 RHSA-2020:1317 UBUNTU-CVE-2020-10531 DLA-2151-1 DSA-4646-1
Also known as: USN-4305-1

Charts affected

256 by stars

Chart

Latest

Affected images

Radar Score

nginx-file-browserwarjiang

0.1.2

1 of 1 See more

nginx-file-browser warjiang 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-10531.

Container image	Digest	Package	Fixed in
library/nginx :1.16.0	3e373fd5b8d4	icu@57.1-6+deb9u2	57.1-6+deb9u4

Open the chart page →

702

webencryptorwebencryptor

1.1.0

1 of 1 See more

webencryptor webencryptor 1.1.0

1 of the 1 container images this version deploys carry CVE-2020-10531.

Container image	Digest	Package	Fixed in
beubi/webencryptor :latest	a02c2e200920	icu@57.1-6+deb9u2	57.1-6+deb9u4

Open the chart page →

1,968

upsourcexykong

0.1.1

1 of 1 See more

upsource xykong 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-10531.

Container image	Digest	Package	Fixed in
library/nginx :1.16.0	3e373fd5b8d4	icu@57.1-6+deb9u2	57.1-6+deb9u4

Open the chart page →

702

helmexampleycztest

0.1.0

1 of 1 See more

helmexample ycztest 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-10531.

Container image	Digest	Package	Fixed in
library/nginx :1.16.0	3e373fd5b8d4	icu@57.1-6+deb9u2	57.1-6+deb9u4

Open the chart page →

702

mychartyi-test-chart

0.1.0

1 of 1 See more

mychart yi-test-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-10531.

Container image	Digest	Package	Fixed in
library/nginx :1.16.0	3e373fd5b8d4	icu@57.1-6+deb9u2	57.1-6+deb9u4

Open the chart page →

702

helmexampleyunpeng-helmexample

0.1.0

1 of 1 See more

helmexample yunpeng-helmexample 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-10531.

Container image	Digest	Package	Fixed in
library/nginx :1.16.0	3e373fd5b8d4	icu@57.1-6+deb9u2	57.1-6+deb9u4

Open the chart page →

702

Container images carrying it

138 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/nginx :1.16.0	3e373fd5b8d4	icu@57.1-6+deb9u2	57.1-6+deb9u4	86
oomk8s/readiness-check :2.0.2	875814cc853d	icu@55.1-7ubuntu0.4	55.1-7ubuntu0.5	11
oomk8s/readiness-check :2.0.0	7daa08b81954	icu@55.1-7ubuntu0.3	55.1-7ubuntu0.5	6
osixia/phpldapadmin :0.9.0	d112b82be133	icu@63.1-6	63.1-6+deb10u1	5
bde2020/hive :2.3.2-postgresql-metastore	620267768985	icu@52.1-8+deb8u6	52.1-8+deb8u8	4
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	icu@55.1-7ubuntu0.4	55.1-7ubuntu0.5	4
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	icu@55.1-7ubuntu0.4	55.1-7ubuntu0.5	4
kodekloud/examplevotingapp_worker :v1	741e3aaaa812	icu@57.1-6	57.1-6+deb9u4	4
osixia/phpldapadmin :0.7.1	1ab629698ae0	icu@57.1-6+deb9u1	57.1-6+deb9u4	4
mautic/mautic :2.13-apache	a954c5868d76	icu@52.1-8+deb8u7	52.1-8+deb8u8	3
omecproject/cdn-video-repo :1.0.0 :remote-v3	d59ccb138ffb	icu@55.1-7ubuntu0.4	55.1-7ubuntu0.5	3
quay.io/devtron/postgres :11.3	ef035ac10498	icu@57.1-6+deb9u2	57.1-6+deb9u4	3
amancevice/superset :0.35.2	12a0a9e66550	icu@63.1-6	63.1-6+deb10u1	2
danisla/hadoop :2.9.0	255ba2dd739b	icu@52.1-8+deb8u4	52.1-8+deb8u8	2
fjvela/urjc-fjvela-external-service :1.0.1	a8ebe5ca13fc	icu@57.1-6+deb9u3	57.1-6+deb9u4	2
fjvela/urjc-fjvela-server :1.0.5	3c840aebce22	icu@57.1-6+deb9u3	57.1-6+deb9u4	2
gradiant/hive :2.3.2-postgresql-metastore	aae4f8a21f8b	icu@52.1-8+deb8u6	52.1-8+deb8u8	2
gradiant/spark :2.4.4-python-alpine	97657d56e927	icu@64.2-r0	64.2-r1	2
library/nginx :1.13.12	b1d09e971889	icu@57.1-6+deb9u2	57.1-6+deb9u4	2
library/postgres :11.5	b3770d9c4ef1	icu@57.1-6+deb9u3	57.1-6+deb9u4	2
lightstep/collector :2021-01-26_23-02-36Z	11c5569aaf3b	icu@55.1-7ubuntu0.4	55.1-7ubuntu0.5	2
nachomillangarcia/prometheus_aws_cost_exporter :latest	e4ce056f2d6d	icu@57.1-6+deb9u2	57.1-6+deb9u4	2
neilpeterson/azure-vote-front :v3	84062718347c	icu@57.1-6+deb9u1	57.1-6+deb9u4	2
ngick8stesting/c3po-mmeinit :latest	1e764eab77b4	icu@60.2-3ubuntu3	60.2-3ubuntu3.1	2
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	icu@55.1-7ubuntu0.4	55.1-7ubuntu0.5	2
osixia/openldap :1.2.4	d212a12aa728	icu@57.1-6+deb9u2	57.1-6+deb9u4	2
statsd/statsd :v0.8.6	dab129e74c25	icu@57.1-6+deb9u2	57.1-6+deb9u4	2
ujamii/prometheus-sentry-exporter :0.5.0	6243197349e1	icu@63.1-6	63.1-6+deb10u1	2
a5huynh/oauth2_proxy :2.2	0c7307d31ca8	icu@52.1-8+deb8u5	52.1-8+deb8u8	1
alphayax/phpmemcachedadmin :latest	c284977f027a	icu@57.1-6+deb9u2	57.1-6+deb9u4	1
amancevice/superset :0.28.1	c8c04bfe3d66	icu@57.1-6+deb9u2	57.1-6+deb9u4	1
apache/couchdb :2.3	9f895c8ae371	icu@57.1-6+deb9u3	57.1-6+deb9u4	1
apacherocketmq/rocketmq-dashboard :1.0.0	24799aff6cf8	icu@52.1-8+deb8u4	52.1-8+deb8u8	1
beubi/webencryptor :latest	a02c2e200920	icu@57.1-6+deb9u2	57.1-6+deb9u4	1
billimek/comcastusage-for-influxdb :latest	801bba1228ac	icu@52.1-8+deb8u6	52.1-8+deb8u8	1
bryanalves/honeywell_exporter :0.0.11	95f73dce8b21	icu@57.1-6+deb9u1	57.1-6+deb9u4	1
bryanalves/smart_exporter :0.2	af47dfbb9413	icu@57.1-6+deb9u2	57.1-6+deb9u4	1
buoyantio/linkerd :1.1.2	f4048edaca6f	icu@52.1-8+deb8u5	52.1-8+deb8u8	1
camptocamp/ekorre :0.1.0	35c91d5fda04	icu@63.1-6	63.1-6+deb10u1	1
camptocamp/imap-mailbox-exporter :latest	9dec019e4c62	icu@52.1-8+deb8u5	52.1-8+deb8u8	1
camptocamp/ldap-search-exporter :latest	5e55370dd292	icu@52.1-8+deb8u5	52.1-8+deb8u8	1
camptocamp/pghoard :10	bff736b15623	icu@57.1-6+deb9u2	57.1-6+deb9u4	1
cdignam/kodiak :v0.54.0	5a6a55b39cee	icu@63.1-6	63.1-6+deb10u1	1
ceticasbl/pg-ldap-sync :latest	6c0aa7567145	icu@63.1-6	63.1-6+deb10u1	1
cheyang/distributed-tf :1.6.0	46cc34755493	icu@55.1-7ubuntu0.3	55.1-7ubuntu0.5	1
codaprotocol/coda-user-agent :0.1.5	4ba4dd3a041f	icu@57.1-6+deb9u3	57.1-6+deb9u4	1
conduction/agendaservice-nginx :latest	e1c176458aaf	icu@57.1-6+deb9u2	57.1-6+deb9u4	1
conduction/balance-registration-nginx :dev	9e24264ea8f3	icu@57.1-6+deb9u2	57.1-6+deb9u4	1
conduction/betaalservice-nginx :latest	d3577ddd5c67	icu@57.1-6+deb9u2	57.1-6+deb9u4	1
conduction/cgrc-nginx :dev	d8e23f10e882	icu@57.1-6+deb9u2	57.1-6+deb9u4	1