StackRadar

CVE-2020-11023

MediumKEV

Advisory

Published 29 Apr 2020In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.9
base score, highest
EPSS
0.838
100th percentile
CISA KEV
Listed
since 23 Jan 2025
Charts affected
250
of 17,781 indexed, latest versions
Container images
296
deployed by those charts
Fix available
4 of 4
affected packages

Potential XSS vulnerability in jQuery

Carried by container images the latest versions of 250 of 17,781 indexed charts deploy, on 296 images.

Affected packageAffected versionsFixed inImages
jquerynpm1.9.1, 1.10.2, 2.0.0pre, 2.2.1+3 more3.5.010
jquerydeb3.2.1-1, 3.3.1~dfsg-33.2.1-1ubuntu0.1~esm1, 3.3.1~dfsg-3ubuntu0.18
jquery-railsgem4.2.24.4.01
gccrpm4.8.5-36.el7_6.2, 4.8.5-39.el7, 4.8.5-44.el7, 8.2.1-3.5.el8+21 more0:4.8.5-40.el7_7, 0:4.8.5-45.el7_9, 0:8.5.0-23.el8_10, 0:11.3.1-4.4.el9_2+2 more277
OSV records
GHSA-jpcq-cgw6-v4j6RHSA-2025:1301RHSA-2025:1303RHSA-2025:1304RHSA-2025:1346RHSA-2025:1580RHSA-2025:1601RLSA-2025:1346UBUNTU-CVE-2020-11023RLSA-2025:1301
Also known as
BIT-drupal-2020-11023, RHSA-2025:1308, RHSA-2025:1310, RHSA-2025:1311, RHSA-2025:1312, USN-7246-1, USN-7622-1

Charts affected

250 by stars
ChartLatestAffected imagesRadar Score
doris-foundationdbdorisVerified publisher25.8.01 of 4See more

doris-foundationdb doris 25.8.0

1 of the 4 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
foundationdb/fdb-kubernetes-operator:v2.3.07d7b6985291e
gcc@11.5.0-2.el9
0:11.5.0-5.el9_5

Open the chart page →

3,167
drogue-cloud-coredrogue-iotVerified publisher0.7.1120 of 22See more

drogue-cloud-core drogue-iot 0.7.11

20 of the 22 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
ghcr.io/drogue-iot/authentication-service:0.11.0857b137fc7b3
gcc@11.3.1-2.1.el9
0:11.5.0-5.el9_5
ghcr.io/drogue-iot/coap-endpoint:0.11.044790b71aa22
gcc@11.3.1-2.1.el9
0:11.5.0-5.el9_5
ghcr.io/drogue-iot/command-endpoint:0.11.06dce3158b851
gcc@11.3.1-2.1.el9
0:11.5.0-5.el9_5
ghcr.io/drogue-iot/console-backend:0.11.025d229ae5bde
gcc@11.3.1-2.1.el9
0:11.5.0-5.el9_5
ghcr.io/drogue-iot/console-frontend:0.11.0558972f9374c
gcc@11.3.1-2.1.el9
0:11.5.0-5.el9_5
ghcr.io/drogue-iot/database-migration:0.11.057072c72a7cd
gcc@11.3.1-2.1.el9
0:11.5.0-5.el9_5
ghcr.io/drogue-iot/device-management-controller:0.11.0200aea1a2b42
gcc@11.3.1-2.1.el9
0:11.5.0-5.el9_5
ghcr.io/drogue-iot/device-management-service:0.11.0f4a5bfc06a74
gcc@11.3.1-2.1.el9
0:11.5.0-5.el9_5
ghcr.io/drogue-iot/device-state-service:0.11.0fbf0738cfc7e
gcc@11.3.1-2.1.el9
0:11.5.0-5.el9_5
ghcr.io/drogue-iot/http-endpoint:0.11.0b612c18479e0
gcc@11.3.1-2.1.el9
0:11.5.0-5.el9_5
ghcr.io/drogue-iot/knative-operator:0.11.0e2d927639f6e
gcc@11.3.1-2.1.el9
0:11.5.0-5.el9_5
ghcr.io/drogue-iot/mqtt-endpoint:0.11.032c6d2f5eab9
gcc@11.3.1-2.1.el9
0:11.5.0-5.el9_5
ghcr.io/drogue-iot/mqtt-integration:0.11.07ac2adb6ca49
gcc@11.3.1-2.1.el9
0:11.5.0-5.el9_5
ghcr.io/drogue-iot/outbox-controller:0.11.01a958edafdb1
gcc@11.3.1-2.1.el9
0:11.5.0-5.el9_5
ghcr.io/drogue-iot/test-cert-generator:0.11.06ba7e1608286
gcc@8.5.0-15.el8
0:8.5.0-23.el8_10
ghcr.io/drogue-iot/topic-strimzi-operator:0.11.05253fbf8d04c
gcc@11.3.1-2.1.el9
0:11.5.0-5.el9_5
ghcr.io/drogue-iot/ttn-operator:0.11.07dd5ac80c8f1
gcc@11.3.1-2.1.el9
0:11.5.0-5.el9_5
ghcr.io/drogue-iot/user-auth-service:0.11.0adebc40ddf98
gcc@11.3.1-2.1.el9
0:11.5.0-5.el9_5
ghcr.io/drogue-iot/websocket-integration:0.11.0372dcd370945
gcc@11.3.1-2.1.el9
0:11.5.0-5.el9_5
quay.io/keycloak/keycloak:20.0054ef67eb7da
gcc@8.5.0-16.el8_7
0:8.5.0-23.el8_10

Open the chart page →

55,666
drogue-cloud-examplesdrogue-iotVerified publisher0.7.113 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

3 of the 6 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
ghcr.io/ctron/kubectl:1.25e37d61b5277c
gcc@8.5.0-20.el8
0:8.5.0-23.el8_10
ghcr.io/drogue-iot/drogue-event-source:0.2.1e2e812a4cf8e
gcc@8.5.0-4.el8_5
0:8.5.0-23.el8_10
ghcr.io/drogue-iot/postgresql-pusher:0.2.1c6bb121ced90
gcc@8.5.0-4.el8_5
0:8.5.0-23.el8_10

Open the chart page →

30,699
drogue-cloud-twindrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-twin drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
gcc@8.5.0-16.el8_7
0:8.5.0-23.el8_10

Open the chart page →

6,915
amundsenduyet1.1.01 of 7See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
amundsendev/amundsen-frontend:2.1.169e7915e61c1
jquery@3.4.1
3.5.0

Open the chart page →

11,174
mintakaeclipse-aeriosVerified publisher1.0.01 of 2See more

mintaka eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
fiware/mintaka:0.7.092a3c5cf43c0
gcc@8.5.0-10.el8
0:8.5.0-23.el8_10

Open the chart page →

11,482
egeria-baseegeria-charts4.3.01 of 5See more

egeria-base egeria-charts 4.3.0

1 of the 5 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
gcc@8.5.0-18.el8
0:8.5.0-23.el8_10

Open the chart page →

4,046
egeria-ctsegeria-charts4.3.01 of 3See more

egeria-cts egeria-charts 4.3.0

1 of the 3 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
gcc@8.5.0-18.el8
0:8.5.0-23.el8_10

Open the chart page →

4,033
egeria-ptsegeria-charts4.3.01 of 3See more

egeria-pts egeria-charts 4.3.0

1 of the 3 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
gcc@8.5.0-18.el8
0:8.5.0-23.el8_10

Open the chart page →

4,033
odpi-egeria-labegeria-charts4.3.01 of 4See more

odpi-egeria-lab egeria-charts 4.3.0

1 of the 4 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
gcc@8.5.0-18.el8
0:8.5.0-23.el8_10

Open the chart page →

4,033
eoloPlanteolo-plannerVerified publisher0.1.02 of 7See more

eoloPlant eolo-planner 0.1.0

2 of the 7 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
gcc@8.5.0-16.el8_7
0:8.5.0-23.el8_10
mastercloudapps/weatherservice:v1.23de859d29c116
gcc@8.5.0-10.1.el8_6
0:8.5.0-23.el8_10

Open the chart page →

27,537
eoloplannereoloplannerVerified publisher0.1.02 of 7See more

eoloplanner eoloplanner 0.1.0

2 of the 7 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
gcc@8.5.0-16.el8_7
0:8.5.0-23.el8_10
codeurjc/weatherservice:v1.0b9e2f7234349
gcc@8.5.0-10.1.el8_6
0:8.5.0-23.el8_10

Open the chart page →

32,205
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.02 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

2 of the 7 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
gcc@8.5.0-16.el8_7
0:8.5.0-23.el8_10
mastercloudapps/weatherservice:v1.23de859d29c116
gcc@8.5.0-10.1.el8_6
0:8.5.0-23.el8_10

Open the chart page →

27,537
eoloplannereoloplanner-molynx-gat0.1.02 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

2 of the 7 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
gcc@8.5.0-16.el8_7
0:8.5.0-23.el8_10
codeurjc/weatherservice:v1.0b9e2f7234349
gcc@8.5.0-10.1.el8_6
0:8.5.0-23.el8_10

Open the chart page →

28,482
eolo-plannereolo-planner-repo0.1.01 of 7See more

eolo-planner eolo-planner-repo 0.1.0

1 of the 7 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
codeurjc/weatherservice:v1.0b9e2f7234349
gcc@8.5.0-10.1.el8_6
0:8.5.0-23.el8_10

Open the chart page →

27,096
eoloplanteoloplant1.0.02 of 7See more

eoloplant eoloplant 1.0.0

2 of the 7 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
gcc@8.5.0-16.el8_7
0:8.5.0-23.el8_10
mastercloudapps/weatherservice:v1.23de859d29c116
gcc@8.5.0-10.1.el8_6
0:8.5.0-23.el8_10

Open the chart page →

27,537
eoloplantseoloplants-urjcVerified publisher0.1.02 of 7See more

eoloplants eoloplants-urjc 0.1.0

2 of the 7 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
gcc@8.5.0-16.el8_7
0:8.5.0-23.el8_10
codeurjc/weatherservice:v1.0b9e2f7234349
gcc@8.5.0-10.1.el8_6
0:8.5.0-23.el8_10

Open the chart page →

27,721
servereoloserverVerified publisher0.1.02 of 7See more

server eoloserver 0.1.0

2 of the 7 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
gcc@8.5.0-16.el8_7
0:8.5.0-23.el8_10
codeurjc/weatherservice:v1.0b9e2f7234349
gcc@8.5.0-10.1.el8_6
0:8.5.0-23.el8_10

Open the chart page →

32,205
apollofiware0.1.41 of 1See more

apollo fiware 0.1.4

1 of the 1 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
quay.io/fiware/apollo:0.0.1055330b1b60c1
gcc@8.5.0-10.el8
0:8.5.0-23.el8_10

Open the chart page →

6,936
canis-majorfiware0.2.31 of 1See more

canis-major fiware 0.2.3

1 of the 1 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
quay.io/fiware/canis-major:1.5.15bb40472e4ff5
gcc@8.5.0-4.el8_5
0:8.5.0-23.el8_10

Open the chart page →

8,528
consent-facadefiware0.1.11 of 1See more

consent-facade fiware 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
quay.io/seamware/consent-facade:0.0.14be844c750c7e
gcc@8.5.0-22.el8_10
0:8.5.0-23.el8_10

Open the chart page →

2,475
contract-managementfiware3.5.361 of 1See more

contract-management fiware 3.5.36

1 of the 1 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
quay.io/fiware/contract-management:3.3.122bcfcf874451
gcc@8.5.0-22.el8_10
0:8.5.0-23.el8_10

Open the chart page →

2,411
credentials-config-servicefiware2.6.41 of 1See more

credentials-config-service fiware 2.6.4

1 of the 1 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
quay.io/fiware/credentials-config-service:3.4.3f2fbced76da8
gcc@8.5.0-22.el8_10
0:8.5.0-23.el8_10

Open the chart page →

2,293
dss-validation-servicefiware0.0.191 of 1See more

dss-validation-service fiware 0.0.19

1 of the 1 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
quay.io/wi_stefan/dss-validation-service:0.0.18e928db29ee1
gcc@8.5.0-16.el8_7
0:8.5.0-23.el8_10

Open the chart page →

4,536
endpoint-auth-servicefiware0.1.41 of 4See more

endpoint-auth-service fiware 0.1.4

1 of the 4 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
quay.io/fiware/endpoint-configuration-service:0.4.30dc38a87b844
gcc@8.5.0-10.el8
0:8.5.0-23.el8_10

Open the chart page →

11,835
mintakafiware0.4.71 of 1See more

mintaka fiware 0.4.7

1 of the 1 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
fiware/mintaka:latestefc6793388cc
gcc@8.5.0-10.el8
0:8.5.0-23.el8_10

Open the chart page →

7,019
orionfiware1.6.111 of 2See more

orion fiware 1.6.11

1 of the 2 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
quay.io/opencloudio/ibm-mongodb:4.0.24d8c631a6dc43
gcc@8.4.1-1.el8
0:8.5.0-23.el8_10

Open the chart page →

10,637
trusted-issuers-registryfiware0.13.01 of 1See more

trusted-issuers-registry fiware 0.13.0

1 of the 1 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
quay.io/fiware/trusted-issuers-registry:0.11.1a8a9ec461034
gcc@8.5.0-10.el8
0:8.5.0-23.el8_10

Open the chart page →

7,087
maxscalefour-allportalVerified publisher4.1.161 of 3See more

maxscale four-allportal 4.1.16

1 of the 3 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
mariadb/maxscale:23.02.256c5e0908148
gcc@8.5.0-18.el8
0:8.5.0-23.el8_10

Open the chart page →

6,611
galoy-depsgaloymoney0.10.201 of 9See more

galoy-deps galoymoney 0.10.20

1 of the 9 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.39.002f6f143fc6d
gcc@8.5.0-20.el8
0:8.5.0-23.el8_10

Open the chart page →

11,961
galoy-depsgaloymoney20.10.201 of 9See more

galoy-deps galoymoney2 0.10.20

1 of the 9 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.39.002f6f143fc6d
gcc@8.5.0-20.el8
0:8.5.0-23.el8_10

Open the chart page →

11,961
grocygeek-cookbookVerified publisher8.5.21 of 1See more

grocy geek-cookbook 8.5.2

1 of the 1 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
linuxserver/grocy:version-v3.1.3291296e66c2a
jquery@3.3.1
3.5.0

Open the chart page →

1,043
mimir-openshift-experimentalgrafana2.1.02 of 4See more

mimir-openshift-experimental grafana 2.1.0

2 of the 4 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2021-02-14T04-28-06Z2a374c124d44
gcc@8.3.1-5.1.el8
0:8.5.0-23.el8_10
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
gcc@8.3.1-5.1.el8
0:8.5.0-23.el8_10

Open the chart page →

17,759
ditto-operatorhelm-chartsVerified publisher0.3.01 of 1See more

ditto-operator helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
ghcr.io/ctron/ditto-operator:0.4.061a9bb81b85c
gcc@8.5.0-4.el8_5
0:8.5.0-23.el8_10

Open the chart page →

2,674
hawkbit-operatorhelm-chartsVerified publisher0.1.41 of 1See more

hawkbit-operator helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
ctron/hawkbit-operator:0.1.48fdea8f76499
gcc@8.3.1-5.el8
0:8.5.0-23.el8_10

Open the chart page →

5,792
iofoghelm-chartsVerified publisher0.1.11 of 3See more

iofog helm-charts 0.1.1

1 of the 3 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
quay.io/ctrontesting/iofog-controller:latest10df27bc5560
gcc@8.4.1-1.el8
0:8.5.0-23.el8_10

Open the chart page →

24,161
streamsheetshelm-chartsVerified publisher0.2.35 of 8See more

streamsheets helm-charts 0.2.3

5 of the 8 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
ghcr.io/ctron/streamsheets-base:2.4.00cf25ed621e2
gcc@8.4.1-1.el8
0:8.5.0-23.el8_10
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
gcc@8.4.1-1.el8
0:8.5.0-23.el8_10
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
gcc@8.4.1-1.el8
0:8.5.0-23.el8_10
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
gcc@8.4.1-1.el8
0:8.5.0-23.el8_10
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
gcc@8.4.1-1.el8
0:8.5.0-23.el8_10

Open the chart page →

89,959
openbashelm-openbasVerified publisher1.8.142 of 7See more

openbas helm-openbas 1.8.14

2 of the 7 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
gcc@11.5.0-2.el9
0:11.5.0-5.el9_5
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
gcc@11.5.0-2.el9
0:11.5.0-5.el9_5

Open the chart page →

25,017
eoloplanthttpd-eoloplant0.1.02 of 7See more

eoloplant httpd-eoloplant 0.1.0

2 of the 7 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
gcc@8.5.0-16.el8_7
0:8.5.0-23.el8_10
codeurjc/weatherservice:v1.0b9e2f7234349
gcc@8.5.0-10.1.el8_6
0:8.5.0-23.el8_10

Open the chart page →

32,205
ibm-app-navigatoribm-charts1.0.15 of 5See more

ibm-app-navigator ibm-charts 1.0.1

5 of the 5 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
ibmcom/app-nav-api:1.0.1ce9d2a564273
gcc@4.8.5-36.el7_6.2
0:4.8.5-45.el7_9
ibmcom/app-nav-controller:1.0.1ee4624ba513d
gcc@4.8.5-36.el7_6.2
0:4.8.5-45.el7_9
ibmcom/app-nav-init:1.0.1240ff499eb5b
gcc@4.8.5-36.el7_6.2
0:4.8.5-45.el7_9
ibmcom/app-nav-ui:1.0.1e2a86997b36b
gcc@4.8.5-36.el7_6.2
0:4.8.5-45.el7_9
ibmcom/app-nav-was-controller:1.0.1a6748792da26
gcc@4.8.5-36.el7_6.2
0:4.8.5-45.el7_9

Open the chart page →

32,915
ibm-business-automation-insights-devibm-charts3.2.06 of 6See more

ibm-business-automation-insights-dev ibm-charts 3.2.0

6 of the 6 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
ibmcom/bai-admin-dev:19.0.202d882f2836e
gcc@4.8.5-39.el7
0:4.8.5-40.el7_7
ibmcom/bai-elasticsearch-dev:19.0.25441dba2fa00
gcc@4.8.5-39.el7
0:4.8.5-40.el7_7
ibmcom/bai-flink-dev:19.0.2e31ff09e8aad
gcc@4.8.5-39.el7
0:4.8.5-40.el7_7
ibmcom/bai-flink-zookeeper-dev:19.0.258548034cf55
gcc@4.8.5-39.el7
0:4.8.5-40.el7_7
ibmcom/bai-init-dev:19.0.2b138f1eac0b1
gcc@4.8.5-39.el7
0:4.8.5-40.el7_7
ibmcom/bai-setup-dev:19.0.2b8e8df11072d
gcc@4.8.5-39.el7
0:4.8.5-40.el7_7

Open the chart page →

39,349
ibm-object-storage-pluginibm-charts1.1.52 of 2See more

ibm-object-storage-plugin ibm-charts 1.1.5

2 of the 2 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
ibmcom/ibmcloud-object-storage-driver:1.8.16c796a4c693b4
gcc@8.3.1-5.el8
0:8.5.0-23.el8_10
ibmcom/ibmcloud-object-storage-plugin:1.8.169c73804b37a3
gcc@8.3.1-5.el8
0:8.5.0-23.el8_10

Open the chart page →

12,461
ibm-open-libertyibm-charts1.10.01 of 1See more

ibm-open-liberty ibm-charts 1.10.0

1 of the 1 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
openliberty/open-liberty:javaee8-ubi-min6f9278b8b2cc
gcc@4.8.5-39.el7
0:4.8.5-40.el7_7

Open the chart page →

2,063
ibm-open-liberty-springibm-charts1.10.01 of 1See more

ibm-open-liberty-spring ibm-charts 1.10.0

1 of the 1 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
openliberty/open-liberty:springBoot2-ubi-minc649524bc428
gcc@4.8.5-39.el7
0:4.8.5-40.el7_7

Open the chart page →

2,063
ibm-voice-gateway-devibm-charts3.1.01 of 2See more

ibm-voice-gateway-dev ibm-charts 3.1.0

1 of the 2 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
ibmcom/voice-gateway-mr:1.0.5.00762ab1df6c1
gcc@4.8.5-39.el7
0:4.8.5-40.el7_7

Open the chart page →

4,505
ibm-websphere-libertyibm-charts1.10.01 of 1See more

ibm-websphere-liberty ibm-charts 1.10.0

1 of the 1 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
ibmcom/websphere-liberty:javaee8-ubi-min28ae40e05980
gcc@4.8.5-39.el7
0:4.8.5-40.el7_7

Open the chart page →

2,063
ibm-ucv-prodibm-helm5.2.61 of 16See more

ibm-ucv-prod ibm-helm 5.2.6

1 of the 16 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
ibmcom/opencontent-common-utils:1.1.2cd5065df7304
gcc@8.2.1-3.5.el8
0:8.5.0-23.el8_10

Open the chart page →

12,105
eoloserverihuertas2021-vmartinp2021-helm0.1.02 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

2 of the 7 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
gcc@8.5.0-16.el8_7
0:8.5.0-23.el8_10
codeurjc/weatherservice:v1.0b9e2f7234349
gcc@8.5.0-10.1.el8_6
0:8.5.0-23.el8_10

Open the chart page →

27,721
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
kuberay/operator:v1.0.04e6ac8a3a2c4
gcc@8.5.0-18.el8
0:8.5.0-23.el8_10

Open the chart page →

37,671
evi-kesintelVerified publisher3.0.31 of 1See more

evi-kes intel 3.0.3

1 of the 1 container images this version deploys carry CVE-2020-11023.

Container imageDigestPackageFixed in
minio/kes:2023-04-03T16-41-28Zf93c2d9088df
gcc@8.5.0-16.el8_7
0:8.5.0-23.el8_10

Open the chart page →

1,758

Container images carrying it

296 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
rancher/hardened-flannel:v0.13.0-rancher142784bb38ed3
gcc@4.8.5-44.el7
0:4.8.5-45.el7_9
1
rancher/hardened-flannel:v0.14.1-build20211022d6a47d394c03
gcc@4.8.5-44.el7
0:4.8.5-45.el7_9
1
rancher/hardened-kube-proxy:v1.20.2d0600143c23c
gcc@4.8.5-44.el7
0:4.8.5-45.el7_9
1
rancher/hardened-multus-cni:v3.7.1-build202104168eb8092f0728
gcc@4.8.5-44.el7
0:4.8.5-45.el7_9
1
rm3l/dev-feed-api:latest9a7f732245a3
gcc@11.3.1-4.3.el9
0:11.3.1-4.4.el9_2
1
rm3l/mac-oui:1.8.03a5e1f95c132
gcc@8.5.0-20.el8
0:8.5.0-23.el8_10
1
sarwansharma/minio:v359d1da9385d1
gcc@8.5.0-10.1.el8_6
0:8.5.0-23.el8_10
1
seldonio/seldon-request-logger:1.11.24e985d2006a8
gcc@8.4.1-1.el8
0:8.5.0-23.el8_10
1
sigma2as/minio:20240306-3a2e4f5c284ead9ec3e
gcc@8.5.0-10.1.el8_6
0:8.5.0-23.el8_10
1
sonatype/nexus3:3.58.1586060431b64
gcc@8.5.0-18.el8
0:8.5.0-23.el8_10
1
splunk/splunk-operator:2.0.0c4e0d3146226
gcc@8.5.0-10.1.el8_6
0:8.5.0-23.el8_10
1
stakater/workshop-operator:v0.0.3897bf456cc97c
gcc@8.5.0-4.el8_5
0:8.5.0-23.el8_10
1
testhubio/testhub-frontend:on-preme86c2db53be8
jquery@3.4.1
3.5.0
1
trinodb/trino:45038c6f24ab1a4
gcc@11.4.1-3.el9
0:11.4.1-4.el9_4
1
viniciusfcf/gitops-quarkus-app-jvm:latestbba8ee1b5cd5
gcc@8.5.0-4.el8_5
0:8.5.0-23.el8_10
1
vividplanet/swr-cache-proxy:v1ae1c5b1cbecb
gcc@8.5.0-20.el8
0:8.5.0-23.el8_10
1
zazuko/trifid:2.3.7054be137de70
jquery@2.2.4
3.5.0
1
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert:1.3e225fe7eaa55
gcc@4.8.5-44.el7
0:4.8.5-45.el7_9
1
gcr.io/kubecost1/kubecost-modeling:v0.1.22a461dc5cb96a
gcc@11.5.0-2.el9
0:11.5.0-5.el9_5
1
ghcr.io/appuio/maxscale-docker:6.4.613a01be102b0
gcc@8.5.0-16.el8_7
0:8.5.0-23.el8_10
1
ghcr.io/ctron/ditto-operator:0.4.061a9bb81b85c
gcc@8.5.0-4.el8_5
0:8.5.0-23.el8_10
1
ghcr.io/ctron/kubectl:1.25e37d61b5277c
gcc@8.5.0-20.el8
0:8.5.0-23.el8_10
1
ghcr.io/ctron/streamsheets-base:2.4.00cf25ed621e2
gcc@8.4.1-1.el8
0:8.5.0-23.el8_10
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
gcc@8.4.1-1.el8
0:8.5.0-23.el8_10
1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
gcc@8.4.1-1.el8
0:8.5.0-23.el8_10
1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
gcc@8.4.1-1.el8
0:8.5.0-23.el8_10
1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
gcc@8.4.1-1.el8
0:8.5.0-23.el8_10
1
ghcr.io/drogue-iot/authentication-service:0.11.0857b137fc7b3
gcc@11.3.1-2.1.el9
0:11.5.0-5.el9_5
1
ghcr.io/drogue-iot/coap-endpoint:0.11.044790b71aa22
gcc@11.3.1-2.1.el9
0:11.5.0-5.el9_5
1
ghcr.io/drogue-iot/command-endpoint:0.11.06dce3158b851
gcc@11.3.1-2.1.el9
0:11.5.0-5.el9_5
1
ghcr.io/drogue-iot/console-backend:0.11.025d229ae5bde
gcc@11.3.1-2.1.el9
0:11.5.0-5.el9_5
1
ghcr.io/drogue-iot/console-frontend:0.11.0558972f9374c
gcc@11.3.1-2.1.el9
0:11.5.0-5.el9_5
1
ghcr.io/drogue-iot/database-migration:0.11.057072c72a7cd
gcc@11.3.1-2.1.el9
0:11.5.0-5.el9_5
1
ghcr.io/drogue-iot/device-management-controller:0.11.0200aea1a2b42
gcc@11.3.1-2.1.el9
0:11.5.0-5.el9_5
1
ghcr.io/drogue-iot/device-management-service:0.11.0f4a5bfc06a74
gcc@11.3.1-2.1.el9
0:11.5.0-5.el9_5
1
ghcr.io/drogue-iot/device-state-service:0.11.0fbf0738cfc7e
gcc@11.3.1-2.1.el9
0:11.5.0-5.el9_5
1
ghcr.io/drogue-iot/drogue-event-source:0.2.1e2e812a4cf8e
gcc@8.5.0-4.el8_5
0:8.5.0-23.el8_10
1
ghcr.io/drogue-iot/http-endpoint:0.11.0b612c18479e0
gcc@11.3.1-2.1.el9
0:11.5.0-5.el9_5
1
ghcr.io/drogue-iot/knative-operator:0.11.0e2d927639f6e
gcc@11.3.1-2.1.el9
0:11.5.0-5.el9_5
1
ghcr.io/drogue-iot/mqtt-endpoint:0.11.032c6d2f5eab9
gcc@11.3.1-2.1.el9
0:11.5.0-5.el9_5
1
ghcr.io/drogue-iot/mqtt-integration:0.11.07ac2adb6ca49
gcc@11.3.1-2.1.el9
0:11.5.0-5.el9_5
1
ghcr.io/drogue-iot/outbox-controller:0.11.01a958edafdb1
gcc@11.3.1-2.1.el9
0:11.5.0-5.el9_5
1
ghcr.io/drogue-iot/postgresql-pusher:0.2.1c6bb121ced90
gcc@8.5.0-4.el8_5
0:8.5.0-23.el8_10
1
ghcr.io/drogue-iot/test-cert-generator:0.11.06ba7e1608286
gcc@8.5.0-15.el8
0:8.5.0-23.el8_10
1
ghcr.io/drogue-iot/topic-strimzi-operator:0.11.05253fbf8d04c
gcc@11.3.1-2.1.el9
0:11.5.0-5.el9_5
1
ghcr.io/drogue-iot/ttn-operator:0.11.07dd5ac80c8f1
gcc@11.3.1-2.1.el9
0:11.5.0-5.el9_5
1
ghcr.io/drogue-iot/user-auth-service:0.11.0adebc40ddf98
gcc@11.3.1-2.1.el9
0:11.5.0-5.el9_5
1
ghcr.io/drogue-iot/websocket-integration:0.11.0372dcd370945
gcc@11.3.1-2.1.el9
0:11.5.0-5.el9_5
1
ghcr.io/it-at-m/wjh-rechner:1.0.0bc70cdb5a01a
gcc@11.4.1-2.1.el9
0:11.5.0-5.el9_5
1
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
gcc@8.3.1-5.el8
0:8.5.0-23.el8_10
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.