StackRadarChart IndexLive demo

CVE-2020-12666

Medium

Advisory

Published 14 Apr 2021In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.1; base score, highest
EPSS: 0.014; 70th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 14; of 17,781 indexed, latest versions
Container images: 6; deployed by those charts
Fix available: 1 of 1; affected package

gopkg.in/macaron.v1 Open Redirect vulnerability

Carried by container images the latest versions of 14 of 17,781 indexed charts deploy, on 6 images.

Affected package	Affected versions	Fixed in	Images
gopkg.in/macaron.v1golang	v1.3.4	1.3.7	6

OSV records: GHSA-733f-44f3-3frw
Also known as: GO-2020-0039

Charts affected

14 by stars

Chart

Latest

Affected images

Radar Score

kube-prometheuschoerodon

1 of 7 See more

kube-prometheus choerodon 9.3.1

1 of the 7 container images this version deploys carry CVE-2020-12666.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	gopkg.in/macaron.v1@v1.3.4	1.3.7

Open the chart page →

12,237

temporallemontech

1 of 13 See more

temporal lemontech 0.37.0

1 of the 13 container images this version deploys carry CVE-2020-12666.

Container image	Digest	Package	Fixed in
grafana/grafana :6.7.1	1ff3999e0fc0	gopkg.in/macaron.v1@v1.3.4	1.3.7

Open the chart page →

14,893

Grafanasurajwarbhe-grafana

1 of 1 See more

Grafana surajwarbhe-grafana 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-12666.

Container image	Digest	Package	Fixed in
surajwarbhe/grafana :v1	85248611e9f1	gopkg.in/macaron.v1@v1.3.4	1.3.7

Open the chart page →

2,597

temporaldtrdnk-helm-charts

1 of 13 See more

temporal dtrdnk-helm-charts 0.35.0

1 of the 13 container images this version deploys carry CVE-2020-12666.

Container image	Digest	Package	Fixed in
grafana/grafana :6.7.1	1ff3999e0fc0	gopkg.in/macaron.v1@v1.3.4	1.3.7

Open the chart page →

20,205

1 of 1 See more

grafana edu 5.3.0

1 of the 1 container images this version deploys carry CVE-2020-12666.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	gopkg.in/macaron.v1@v1.3.4	1.3.7

Open the chart page →

3,191

jx-app-flaggerjenkins-x

1 of 2 See more

jx-app-flagger jenkins-x 0.0.5

1 of the 2 container images this version deploys carry CVE-2020-12666.

Container image	Digest	Package	Fixed in
grafana/grafana :6.5.1	befcd84da2c1	gopkg.in/macaron.v1@v1.3.4	1.3.7

Open the chart page →

6,028

grafanaleechistest

1 of 1 See more

grafana leechistest 5.3.0

1 of the 1 container images this version deploys carry CVE-2020-12666.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	gopkg.in/macaron.v1@v1.3.4	1.3.7

Open the chart page →

3,191

kommandermesosphere-stable

1 of 29 See more

kommander mesosphere-stable 0.39.2

1 of the 29 container images this version deploys carry CVE-2020-12666.

Container image	Digest	Package	Fixed in
grafana/grafana :6.6.0	052147d7e0ec	gopkg.in/macaron.v1@v1.3.4	1.3.7

Open the chart page →

68,284

pulsarv2milvus-helm

1 of 4 See more

pulsarv2 milvus-helm 2.7.8

1 of the 4 container images this version deploys carry CVE-2020-12666.

Container image	Digest	Package	Fixed in
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.10	ebcf7f033b54	gopkg.in/macaron.v1@v1.3.4	1.3.7

Open the chart page →

15,855

seldon-core-analyticsseldon

1 of 8 See more

seldon-core-analytics seldon 1.17.1

1 of the 8 container images this version deploys carry CVE-2020-12666.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	gopkg.in/macaron.v1@v1.3.4	1.3.7

Open the chart page →

10,733

prometheus-operatorstatcan

1 of 7 See more

prometheus-operator statcan 0.2.2

1 of the 7 container images this version deploys carry CVE-2020-12666.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	gopkg.in/macaron.v1@v1.3.4	1.3.7

Open the chart page →

12,237

temporaltemporal

1 of 13 See more

temporal temporal 0.28.9

1 of the 13 container images this version deploys carry CVE-2020-12666.

Container image	Digest	Package	Fixed in
grafana/grafana :6.7.1	1ff3999e0fc0	gopkg.in/macaron.v1@v1.3.4	1.3.7

Open the chart page →

21,005

1 of 1 See more

grafana tnh 5.3.0

1 of the 1 container images this version deploys carry CVE-2020-12666.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	gopkg.in/macaron.v1@v1.3.4	1.3.7

Open the chart page →

3,191

temporalwenerme

1 of 13 See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2020-12666.

Container image	Digest	Package	Fixed in
grafana/grafana :6.7.1	1ff3999e0fc0	gopkg.in/macaron.v1@v1.3.4	1.3.7

Open the chart page →

22,665

Container images carrying it

6 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
grafana/grafana :7.0.3	d72946c8e5d5	gopkg.in/macaron.v1@v1.3.4	1.3.7	6
grafana/grafana :6.7.1	1ff3999e0fc0	gopkg.in/macaron.v1@v1.3.4	1.3.7	4
grafana/grafana :6.6.0	052147d7e0ec	gopkg.in/macaron.v1@v1.3.4	1.3.7	1
grafana/grafana :6.5.1	befcd84da2c1	gopkg.in/macaron.v1@v1.3.4	1.3.7	1
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.10	ebcf7f033b54	gopkg.in/macaron.v1@v1.3.4	1.3.7	1
surajwarbhe/grafana :v1	85248611e9f1	gopkg.in/macaron.v1@v1.3.4	1.3.7	1