CVE-2020-14040
HighAdvisory
Published 14 Apr 2021In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.018
- 78th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 271
- of 17,781 indexed, latest versions
- Container images
- 252
- deployed by those charts
- Fix available
- 1 of 1
- affected package
golang.org/x/text Infinite loop
Carried by container images the latest versions of 271 of 17,781 indexed charts deploy, on 252 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| golang.org/ | v0.3.0, v0.3.1-0.20180807135948-17ff2d5776d2, v0.3.1-0.20181227161524-e6919f6577db, v0.3.2+1 more | 0.3.3 | 252 |
- OSV records
- GHSA-5rcv-m4m3-hfh7
- Also known as
- GO-2020-0015
Charts affected
271 by stars
Container images carrying it
252 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| joeelliott/ | b4acd14642d0 | golang.org/ | 0.3.3 | 1 |
| keptncontrib/ | 29969dd547de | golang.org/ | 0.3.3 | 1 |
| keyporttech/ | 5bd7955ea2f1 | golang.org/ | 0.3.3 | 1 |
| kubeflowkatib/ | db88bf09d88e | golang.org/ | 0.3.3 | 1 |
| kubeoperator/ | be8f0d624640 | golang.org/ | 0.3.3 | 1 |
| kubesphere/ | b87db3c57cb3 | golang.org/ | 0.3.3 | 1 |
| kubesphere/ | b5b665c4672c | golang.org/ | 0.3.3 | 1 |
| kubesphere/ | ed7311a0f9e4 | golang.org/ | 0.3.3 | 1 |
| kubesphere/ | 8d1ed5ee1d2e | golang.org/ | 0.3.3 | 1 |
| kudobuilder/ | 69072d979708 | golang.org/ | 0.3.3 | 1 |
| layer5/ | 8c20a8a1d6a4 | golang.org/ | 0.3.3 | 1 |
| library/ | 7367adca165f | golang.org/ | 0.3.3 | 1 |
| library/ | f5af5a5ce17f | golang.org/ | 0.3.3 | 1 |
| lmierzwa/ | 3751e5eed656 | golang.org/ | 0.3.3 | 1 |
| logiqai/ | f5b551bca98e | golang.org/ | 0.3.3 | 1 |
| logiqai/ | 798306811f2d | golang.org/ | 0.3.3 | 1 |
| longhornio/ | ede61fe2a472 | golang.org/ | 0.3.3 | 1 |
| mesosphere/ | 4693bb4e0814 | golang.org/ | 0.3.3 | 1 |
| mesosphere/ | 9f863160127b | golang.org/ | 0.3.3 | 1 |
| mesosphere/ | c10011f866f2 | golang.org/ | 0.3.3 | 1 |
| mesosphere/ | 5456581d7b76 | golang.org/ | 0.3.3 | 1 |
| minio/ | 1806872732e1 | golang.org/ | 0.3.3 | 1 |
| minio/ | 571feb124476 | golang.org/ | 0.3.3 | 1 |
| minio/ | f00aa6ef2b72 | golang.org/ | 0.3.3 | 1 |
| mintel/ | 0e0707b7732b | golang.org/ | 0.3.3 | 1 |
| mirrorgitlabcontainers/ | 83599461ef8b | golang.org/ | 0.3.3 | 1 |
| mirrorgitlabcontainers/ | 06b19a4bc805 | golang.org/ | 0.3.3 | 1 |
| mirrorgitlabcontainers/ | 9f3654f1eafc | golang.org/ | 0.3.3 | 1 |
| mirrorgitlabcontainers/ | a6d7bf42805a | golang.org/ | 0.3.3 | 1 |
| moikot/ | 8625f53aa9b7 | golang.org/ | 0.3.3 | 1 |
| moikot/ | fb8565140106 | golang.org/ | 0.3.3 | 1 |
| monitoror/ | 4b88edcf51ff | golang.org/ | 0.3.3 | 1 |
| mpioperator/ | 3ccfa8d8b7bf | golang.org/ | 0.3.3 | 1 |
| olliai/ | a470d96525e4 | golang.org/ | 0.3.3 | 1 |
| olliai/ | 5716f2a8bd4c | golang.org/ | 0.3.3 | 1 |
| opsgenie/ | ecb246e4d260 | golang.org/ | 0.3.3 | 1 |
| pnnlmiscscripts/ | 155131891741 | golang.org/ | 0.3.3 | 1 |
| pozetroninc/ | 79fd6b9d93e6 | golang.org/ | 0.3.3 | 1 |
| prom/ | 01267317c95d | golang.org/ | 0.3.3 | 1 |
| prom/ | 5880ec936055 | golang.org/ | 0.3.3 | 1 |
| prom/ | cd134bd4fca0 | golang.org/ | 0.3.3 | 1 |
| prom/ | e4ca62c0d62f | golang.org/ | 0.3.3 | 1 |
| prom/ | 9d226d7de223 | golang.org/ | 0.3.3 | 1 |
| qonstrukt/ | 089af7925aa1 | golang.org/ | 0.3.3 | 1 |
| rancher/ | 6d2cd61a338b | golang.org/ | 0.3.3 | 1 |
| rancher/ | c678c25d47c8 | golang.org/ | 0.3.3 | 1 |
| rancher/ | 42784bb38ed3 | golang.org/ | 0.3.3 | 1 |
| reportportal/ | da5d8e1395fe | golang.org/ | 0.3.3 | 1 |
| reportportal/ | 2b27a2d7a87d | golang.org/ | 0.3.3 | 1 |
| runatlantis/ | 45fbaf7e207c | golang.org/ | 0.3.3 | 1 |