CVE-2020-13757

High

Advisory

Published 1 Jun 2020In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.014; 71st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 52; of 17,781 indexed, latest versions
Container images: 35; deployed by those charts
Fix available: 2 of 2; affected packages

Python-RSA decryption of ciphertext leads to DoS

Carried by container images the latest versions of 52 of 17,781 indexed charts deploy, on 35 images.

Affected package	Affected versions	Fixed in	Images
rsapypi	3.4.2, 4.0	4.1	35
python-rsadeb	3.4.2-1	3.4.2-1ubuntu0.1~esm1	2

OSV records: GHSA-537h-rv9q-vvph UBUNTU-CVE-2020-13757
Also known as: PYSEC-2020-99, USN-4478-2

Charts affected

52 by stars

Chart

Latest

Affected images

Radar Score

prometheus-operatorstatcan

0.2.2

1 of 7 See more

prometheus-operator statcan 0.2.2

1 of the 7 container images this version deploys carry CVE-2020-13757.

Container image	Digest	Package	Fixed in
kiwigrid/k8s-sidecar :0.1.151	7b98eecdf6d1	rsa@4.0	4.1

Open the chart page →

12,237

gtmetrix-bqt3n

1.0.0

1 of 1 See more

1,287

Container images carrying it

35 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
oomk8s/readiness-check :2.0.2	875814cc853d	rsa@4.0	4.1	11
oomk8s/readiness-check :2.0.0	7daa08b81954	rsa@3.4.2	4.1	6
argoproj/argocd :v1.8.1	830e86cacefd	rsa@3.4.2	4.1	3
kiwigrid/k8s-sidecar :0.1.151	7b98eecdf6d1	rsa@4.0	4.1	3
amancevice/superset :0.35.2	12a0a9e66550	rsa@4.0	4.1	2
architectminds/aws-kubectl :1.1	9735e59a1085	rsa@3.4.2	4.1	2
omecproject/kubernetes-synchronizer :comac-1.0.0	7c17a7b1d1ef	rsa@4.0	4.1	2
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	rsa@4.0	4.1	2
amancevice/superset :0.28.1	c8c04bfe3d66	rsa@4.0	4.1	1
camptocamp/ekorre :0.1.0	35c91d5fda04	rsa@3.4.2	4.1	1
camptocamp/pghoard :10	bff736b15623	rsa@3.4.2	4.1	1
ceph/daemon :latest-nautilus	90f30824a96e	rsa@3.4.2	4.1	1
dysnix/pritunl :v1.29-r8	19951e3e7a32	rsa@4.0	4.1	1
esailors/aws-ecr-http-proxy :1.5.1	5608ae045fa7	rsa@3.4.2	4.1	1
galaxy/galaxy-init :v18.01	0267bad550e6	rsa@3.4.2	4.1	1
getsentry/sentry-kubernetes :latest	6ac37974fd2a	rsa@4.0	4.1	1
kiwigrid/k8s-sidecar :0.0.18	6eb52513d59e	rsa@4.0	4.1	1
kiwigrid/k8s-sidecar :0.0.16	899ccd0b1f54	rsa@4.0	4.1	1
kiwigrid/k8s-sidecar :0.1.20	af151f677a63	rsa@4.0	4.1	1
kubeaws/kube-spot-termination-notice-handler :1.13.0-1	c9cd2ba4373a	rsa@3.4.2	4.1	1
nlmacamp/check_mk :latest	5dbb8589f824	rsa@4.0	4.1	1
odaniait/aws-kubectl :latest	3fff8a8570ec	rsa@3.4.2	4.1	1
omecproject/progran-synchronizer :comac-1.0.0	d109a8e57e71	rsa@4.0	4.1	1
opendatacube/restcube :latest	91870111837c	python-rsa@3.4.2-1 rsa@3.4.2	3.4.2-1ubuntu0.1~esm1 4.1	1
opendatacube/wms :latest	1b90cdf68831	python-rsa@3.4.2-1 rsa@3.4.2	3.4.2-1ubuntu0.1~esm1 4.1	1
pnnlmiscscripts/gitlab-runner-operator :0.1.3-1	155131891741	rsa@4.0	4.1	1
t3nde/gtmetrix-bq :0.2.0	d2939e9a719b	rsa@4.0	4.1	1
voltha/voltha-cli :1.6.0	c4e41e92f046	rsa@4.0	4.1	1
voltha/voltha-netconf :1.6.0	37f80524c207	rsa@4.0	4.1	1
voltha/voltha-ofagent :1.6.0	9ee8c1f4428c	rsa@4.0	4.1	1
voltha/voltha-tester :1.7.0	655c3048a602	rsa@4.0	4.1	1
voltha/voltha-voltha :1.6.0	ff596b62de59	rsa@4.0	4.1	1
weblate/weblate :3.11.3-1	82848df56ecd	rsa@4.0	4.1	1
wiremind/pghoard :12-2019-11-26	4dea42c8166c	rsa@3.4.2	4.1	1
gcr.io/spinnaker-marketplace/halyard :1.32.0	0ee5f968d2ab	rsa@3.4.2	4.1	1