StackRadar

CVE-2020-11008

High

Advisory

Published 20 Apr 2020In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.039
90th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
115
of 17,781 indexed, latest versions
Container images
91
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: git security update

Carried by container images the latest versions of 115 of 17,781 indexed charts deploy, on 91 images.

Affected packageAffected versionsFixed inImages
gitdeb1:2.1.4-2.1+deb8u2, 1:2.1.4-2.1+deb8u3, 1:2.1.4-2.1+deb8u5, 1:2.1.4-2.1+deb8u6+16 more1:2.1.4-2.1+deb8u10, 1:2.7.4-0ubuntu1.9, 1:2.11.0-3+deb9u7, 1:2.17.1-1ubuntu0.7+1 more76
gitapk2.18.1-r0, 2.20.1-r0, 2.20.2-r0, 2.24.1-r02.18.4-r0, 2.20.4-r0, 2.24.3-r013
gitrpm1.8.3.1-20.el70:1.8.3.1-23.el7_82
OSV records
ALPINE-CVE-2020-11008RHSA-2020:2337UBUNTU-CVE-2020-11008DLA-2182-1DSA-4659-1
Also known as
USN-4334-1

Charts affected

115 by stars
ChartLatestAffected imagesRadar Score
sdcsmo-helm-chart6.0.01 of 14See more

sdc smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2020-11008.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
git@1:2.7.4-0ubuntu1.6
1:2.7.4-0ubuntu1.9

Open the chart page →

25,769
sdnc-ansible-serversmo-helm-chart6.0.01 of 3See more

sdnc-ansible-server smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-11008.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
git@1:2.7.4-0ubuntu1.6
1:2.7.4-0ubuntu1.9

Open the chart page →

25,769
sdnc-portalsmo-helm-chart6.0.01 of 3See more

sdnc-portal smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-11008.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
git@1:2.7.4-0ubuntu1.6
1:2.7.4-0ubuntu1.9

Open the chart page →

25,769
sdnc-promsmo-helm-chart6.0.01 of 2See more

sdnc-prom smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2020-11008.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
git@1:2.7.4-0ubuntu1.6
1:2.7.4-0ubuntu1.9

Open the chart page →

24,776
sdnc-websmo-helm-chart6.0.01 of 3See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-11008.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
git@1:2.7.4-0ubuntu1.6
1:2.7.4-0ubuntu1.9

Open the chart page →

24,776
ueb-listenersmo-helm-chart6.0.01 of 3See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-11008.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
git@1:2.7.4-0ubuntu1.6
1:2.7.4-0ubuntu1.9

Open the chart page →

25,769
restful-distributed-lock-managerstakaterVerified publisher1.0.41 of 1See more

restful-distributed-lock-manager stakater 1.0.4

1 of the 1 container images this version deploys carry CVE-2020-11008.

Container imageDigestPackageFixed in
stakater/restful-distributed-lock-manager:0.5.34f8e409f30c2
git@1:2.1.4-2.1+deb8u5
1:2.1.4-2.1+deb8u10

Open the chart page →

3,116
sonarqubestakaterVerified publisher0.10.31 of 2See more

sonarqube stakater 0.10.3

1 of the 2 container images this version deploys carry CVE-2020-11008.

Container imageDigestPackageFixed in
library/sonarqube:6.7.6-community0ae5169e3d0f
git@1:2.11.0-3+deb9u4
1:2.11.0-3+deb9u7

Open the chart page →

11,841
pachydermstatcan0.5.11 of 4See more

pachyderm statcan 0.5.1

1 of the 4 container images this version deploys carry CVE-2020-11008.

Container imageDigestPackageFixed in
pachyderm/grpc-proxy:0.4.92b27f41d4d02
git@1:2.11.0-3+deb9u4
1:2.11.0-3+deb9u7

Open the chart page →

4,967
pi-holet3n1.0.01 of 1See more

pi-hole t3n 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-11008.

Container imageDigestPackageFixed in
pihole/pihole:v4.48c172c4cf344
git@1:2.11.0-3+deb9u5
1:2.11.0-3+deb9u7

Open the chart page →

1,373
voteappvoting-app-helm-charts-repoVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo 1.0.0

1 of the 5 container images this version deploys carry CVE-2020-11008.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
git@1:2.11.0-3+deb9u2
1:2.11.0-3+deb9u7

Open the chart page →

8,262
workerappvoting-app-helm-charts-repoVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-11008.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
git@1:2.11.0-3+deb9u2
1:2.11.0-3+deb9u7

Open the chart page →

3,329
voteappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 5 container images this version deploys carry CVE-2020-11008.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
git@1:2.11.0-3+deb9u2
1:2.11.0-3+deb9u7

Open the chart page →

8,262
workerappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-11008.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
git@1:2.11.0-3+deb9u2
1:2.11.0-3+deb9u7

Open the chart page →

3,329
satisfyymrs1.0.21 of 1See more

satisfy ymrs 1.0.2

1 of the 1 container images this version deploys carry CVE-2020-11008.

Container imageDigestPackageFixed in
anapsix/satisfydigest-pinnedfae78e3809e9
git@2.18.1-r0
2.18.4-r0

Open the chart page →

1,572

Container images carrying it

91 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ibmcom/icp-sert-bats:3.2.0b558f2b444ae
git@2.20.1-r0
2.20.4-r0
1
ibmcom/icp-swift-sample:latestb5d8c6714dbc
git@1:2.7.4-0ubuntu1.3
1:2.7.4-0ubuntu1.9
1
jenkinsci/jenkins:2.67a1f33f004659
git@1:2.11.0-3+deb9u1
1:2.11.0-3+deb9u7
1
jijiechen/alpine-curl-git:v2.24.10ee39a17903f
git@2.24.1-r0
2.24.3-r0
1
jmferrer/azure-devops-agent:latest030f68ec6998
git@1:2.7.4-0ubuntu1.7
1:2.7.4-0ubuntu1.9
1
library/sonarqube:6.7.6-community0ae5169e3d0f
git@1:2.11.0-3+deb9u4
1:2.11.0-3+deb9u7
1
linuxserver/couchpotato:75e576ee-ls389cd8d5fb1ac
git@2.18.1-r0
2.18.4-r0
1
muluder/prograncontrollermcord:0.1.843b597a93da7
git@1:2.7.4-0ubuntu1.3
1:2.7.4-0ubuntu1.9
1
mvitale1989/docker-taiga:20191031-4.2.141504ccda06df
git@1:2.11.0-3+deb9u4
1:2.11.0-3+deb9u7
1
neilpeterson/aks-helloworld:v1fb47732ef36b
git@1:2.11.0-3+deb9u2
1:2.11.0-3+deb9u7
1
neilpeterson/burst-scheduler:v1.23a8877032972
git@1:2.11.0-3+deb9u2
1:2.11.0-3+deb9u7
1
neilpeterson/chart-tweet:latest64fd8dab075f
git@1:2.11.0-3+deb9u2
1:2.11.0-3+deb9u7
1
neilpeterson/get-tweet:v28b645ac1a23e
git@1:2.1.4-2.1+deb8u5
1:2.1.4-2.1+deb8u10
1
neilpeterson/osba-container-instances-demo:latest6527b05d5d03
git@1:2.1.4-2.1+deb8u5
1:2.1.4-2.1+deb8u10
1
neilpeterson/osba-cosmos-mongodb-demo:latestf4940e84ed05
git@1:2.1.4-2.1+deb8u5
1:2.1.4-2.1+deb8u10
1
neilpeterson/osba-mysql-demo:latest5859d68a6c9f
git@1:2.1.4-2.1+deb8u5
1:2.1.4-2.1+deb8u10
1
neilpeterson/osba-storage-demo:latest29d229ab446e
git@1:2.1.4-2.1+deb8u5
1:2.1.4-2.1+deb8u10
1
neilpeterson/osba-text-analytics-demo:latest969af3cb8466
git@1:2.1.4-2.1+deb8u5
1:2.1.4-2.1+deb8u10
1
neilpeterson/process-tweet:latest39ce9f92e899
git@1:2.11.0-3+deb9u2
1:2.11.0-3+deb9u7
1
nmalhotr/webserver:v1.0.03419361fb0dd
git@1:2.20.1-2+deb10u2
1:2.20.1-2+deb10u3
1
nodered/node-red-docker:0.19.6-v8070643219ea2
git@1:2.11.0-3+deb9u4
1:2.11.0-3+deb9u7
1
omecproject/onos-progran:1.0.05715e5648aa0
git@1:2.7.4-0ubuntu1.3
1:2.7.4-0ubuntu1.9
1
opencord/voltha-kafka-dump:6.1.31d9ee8ce7fab
git@1:2.11.0-3+deb9u4
1:2.11.0-3+deb9u7
1
opendatacube/pipelines:wofs-1.225d810e8504b8
git@1:2.17.1-1ubuntu0.4
1:2.17.1-1ubuntu0.7
1
opendatacube/restcube:latest91870111837c
git@1:2.17.1-1ubuntu0.4
1:2.17.1-1ubuntu0.7
1
opendatacube/wms:latest1b90cdf68831
git@1:2.17.1-1ubuntu0.5
1:2.17.1-1ubuntu0.7
1
pachyderm/grpc-proxy:0.4.92b27f41d4d02
git@1:2.11.0-3+deb9u4
1:2.11.0-3+deb9u7
1
pe46dro/xbackbone-docker:3.3.309dfe3aa10f6
git@2.20.2-r0
2.20.4-r0
1
pihole/pihole:v4.48c172c4cf344
git@1:2.11.0-3+deb9u5
1:2.11.0-3+deb9u7
1
raykrueger/riemann:0.2.14c8baf3de57bb
git@1:2.11.0-3+deb9u2
1:2.11.0-3+deb9u7
1
royalwang/sentinel-dashboard:1.8.4df99e2499f91
git@1:2.11.0-3+deb9u4
1:2.11.0-3+deb9u7
1
runatlantis/atlantis:v0.7.168fa470d1416
git@2.20.1-r0
2.20.4-r0
1
seldonio/locust-core:0.81d0da98a2d76
git@1:2.7.4-0ubuntu1.6
1:2.7.4-0ubuntu1.9
1
stakater/restful-distributed-lock-manager:0.5.34f8e409f30c2
git@1:2.1.4-2.1+deb8u5
1:2.1.4-2.1+deb8u10
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
git@1:2.7.4-0ubuntu1.3
1:2.7.4-0ubuntu1.9
1
tenstartups/ser2sock:latest379d9338c720
git@2.20.1-r0
2.20.4-r0
1
weblate/weblate:3.11.3-182848df56ecd
git@1:2.20.1-2+deb10u1
1:2.20.1-2+deb10u3
1
wiremind/pghoard:12-2019-11-264dea42c8166c
git@1:2.20.1-2
1:2.20.1-2+deb10u3
1
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
git@1:2.17.1-1ubuntu0.5
1:2.17.1-1ubuntu0.7
1
ghcr.io/leoquote/mergeable:latest451706815103
git@1:2.11.0-3+deb9u5
1:2.11.0-3+deb9u7
1
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
git@1:2.11.0-3+deb9u5
1:2.11.0-3+deb9u7
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.