CVE-2020-14001

Critical

Advisory

Published 7 Aug 2020In the index since 6 Sept 2026

Unintended read access in kramdown gem

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 4 images.

Affected package	Affected versions	Fixed in	Images
kramdowngem	1.3.3, 2.2.1	2.3.0	4

2 by stars

Chart

Latest

Affected images

Radar Score

huginnutkuozdemir

1 of the 4 container images this version deploys carry CVE-2020-14001.

Container image	Digest	Package	Fixed in
huginn/huginn-single-process :4d17829cf6b15b004ad3f4be196303dca4944810	c794eddc7b47	kramdown@1.3.3	2.3.0

18,137

gitlabkubesphere

3 of the 17 container images this version deploys carry CVE-2020-14001.

Container image	Digest	Package	Fixed in
mirrorgitlabcontainers/gitlab-sidekiq-ce :v13.2.2	94d1431683fa	kramdown@2.2.1	2.3.0
mirrorgitlabcontainers/gitlab-task-runner-ce :v13.2.2	9efd73993c34	kramdown@2.2.1	2.3.0
mirrorgitlabcontainers/gitlab-webservice-ce :v13.2.2	30393f990f5c	kramdown@2.2.1	2.3.0

38,133

4 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
huginn/huginn-single-process :4d17829cf6b15b004ad3f4be196303dca4944810	c794eddc7b47	kramdown@1.3.3	2.3.0	1
mirrorgitlabcontainers/gitlab-sidekiq-ce :v13.2.2	94d1431683fa	kramdown@2.2.1	2.3.0	1
mirrorgitlabcontainers/gitlab-task-runner-ce :v13.2.2	9efd73993c34	kramdown@2.2.1	2.3.0	1
mirrorgitlabcontainers/gitlab-webservice-ce :v13.2.2	30393f990f5c	kramdown@2.2.1	2.3.0	1