StackRadar

CVE-2020-14040

High

Advisory

Published 14 Apr 2021In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.018
78th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
271
of 17,781 indexed, latest versions
Container images
252
deployed by those charts
Fix available
1 of 1
affected package

golang.org/x/text Infinite loop

Carried by container images the latest versions of 271 of 17,781 indexed charts deploy, on 252 images.

Affected packageAffected versionsFixed inImages
golang.org/x/textgolangv0.3.0, v0.3.1-0.20180807135948-17ff2d5776d2, v0.3.1-0.20181227161524-e6919f6577db, v0.3.2+1 more0.3.3252
OSV records
GHSA-5rcv-m4m3-hfh7
Also known as
GO-2020-0015

Charts affected

271 by stars
ChartLatestAffected imagesRadar Score
taalhuizen-servicetaalhuizen-service1.0.01 of 3See more

taalhuizen-service taalhuizen-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/taalhuizen-service-php:latest04f1b7f0d573
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

7,480
temporaltemporal0.28.91 of 13See more

temporal temporal 0.28.9

1 of the 13 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

21,005
grafanatnh5.3.01 of 1See more

grafana tnh 5.3.0

1 of the 1 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

3,191
prometheustnh11.6.03 of 6See more

prometheus tnh 11.6.0

3 of the 6 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
prom/alertmanager:v0.20.07e4e9f7a0954
golang.org/x/text@v0.3.2
0.3.3
prom/prometheus:v2.19.0bfad037f95e5
golang.org/x/text@v0.3.2
0.3.3
quay.io/prometheus/node-exporter:v1.0.1cf66a6bbd573
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

8,484
trouw-servicetrouw-service1.0.01 of 3See more

trouw-service trouw-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/trouw-service-php:latestf745e2870692
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

7,510
monitorortrozz0.0.11 of 1See more

monitoror trozz 0.0.1

1 of the 1 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
monitoror/monitoror:44b88edcf51ff
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

3,109
verhuis-serviceverhuis-service1.0.01 of 3See more

verhuis-service verhuis-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verhuis-service-php:latest66bbaf95a123
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

7,510
verzoekconversieserviceverzoekconversieservice1.0.01 of 3See more

verzoekconversieservice verzoekconversieservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekconversieservice-php:lateste918014fb8d3
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

7,528
verzoekregistratiecomponentverzoekregistratiecomponent1.1.01 of 4See more

verzoekregistratiecomponent verzoekregistratiecomponent 1.1.0

1 of the 4 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekregistratiecomponent-php:latestc4f6c03af5d3
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

7,429
verzoektypecatalogusverzoektypecatalogus1.1.01 of 4See more

verzoektypecatalogus verzoektypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoektypecatalogus-php:latest64f5eb7a398b
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

7,429
wazuhwazuh-helm-eksVerified publisher1.2.101 of 6See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.14.45a065930682d
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

5,484
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

11,119
webresourcecataloguswebresourcecatalogus1.1.01 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

7,552
athens-proxywenerme0.5.21 of 2See more

athens-proxy wenerme 0.5.2

1 of the 2 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
gomods/athens:v0.11.0efb811df7844
golang.org/x/text@v0.3.0
0.3.3

Open the chart page →

4,984
filebrowserwenerme1.0.01 of 1See more

filebrowser wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
filebrowser/filebrowser:v2.13.0c5d0a75a0041
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

3,174
frpcwenerme1.0.11 of 1See more

frpc wenerme 1.0.1

1 of the 1 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
wener/frpc:v0.37.0cc9fd4da44c0
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

3,359
nfs-subdir-external-provisionerwenerme4.0.181 of 1See more

nfs-subdir-external-provisioner wenerme 4.0.18

1 of the 1 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

2,743
temporalwenerme0.15.13 of 13See more

temporal wenerme 0.15.1

3 of the 13 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
golang.org/x/text@v0.3.2
0.3.3
prom/alertmanager:v0.20.07e4e9f7a0954
golang.org/x/text@v0.3.2
0.3.3
prom/prometheus:v2.16.0e4ca62c0d62f
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

22,665
traefikwenerme9.1.11 of 1See more

traefik wenerme 9.1.1

1 of the 1 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
library/traefik:2.2.8f5af5a5ce17f
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

3,369
dex-k8s-authenticatorwiremindVerified publisher1.7.01 of 1See more

dex-k8s-authenticator wiremind 1.7.0

1 of the 1 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
mintel/dex-k8s-authenticator:1.4.0caf71cee7b9a
golang.org/x/text@v0.3.0
0.3.3

Open the chart page →

2,791
zahori-consulzahoriVerified publisher1.0.11 of 2See more

zahori-consul zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

5,033

Container images carrying it

252 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/conductionnl/loggingcomponent-php:latest834b8e1af290
golang.org/x/text@v0.3.2
0.3.3
1
ghcr.io/conductionnl/logicservice-php:latest72aae2080595
golang.org/x/text@v0.3.2
0.3.3
1
ghcr.io/conductionnl/medewerkercatalogus-php:latest1ea5412bed26
golang.org/x/text@v0.3.2
0.3.3
1
ghcr.io/conductionnl/memo-component-php:latestef77f4c089a1
golang.org/x/text@v0.3.2
0.3.3
1
ghcr.io/conductionnl/notification-component-php:latestcd9656e6bc2c
golang.org/x/text@v0.3.2
0.3.3
1
ghcr.io/conductionnl/ocatiecatalogus-php:latestc22764cbfa97
golang.org/x/text@v0.3.2
0.3.3
1
ghcr.io/conductionnl/orderregistratiecomponent-php:latestd17257e4fa27
golang.org/x/text@v0.3.2
0.3.3
1
ghcr.io/conductionnl/procestypecatalogus-php:latest956c4fb64796
golang.org/x/text@v0.3.2
0.3.3
1
ghcr.io/conductionnl/productenendienstencatalogus-php:latest7242da105081
golang.org/x/text@v0.3.2
0.3.3
1
ghcr.io/conductionnl/proto-component-commonground-php:latesteb36ead1954e
golang.org/x/text@v0.3.2
0.3.3
1
ghcr.io/conductionnl/review-component-php:latestafe623824b82
golang.org/x/text@v0.3.2
0.3.3
1
ghcr.io/conductionnl/taalhuizen-service-php:latest04f1b7f0d573
golang.org/x/text@v0.3.2
0.3.3
1
ghcr.io/conductionnl/trouw-service-php:latestf745e2870692
golang.org/x/text@v0.3.2
0.3.3
1
ghcr.io/conductionnl/user-component-php:latest198db44fabb5
golang.org/x/text@v0.3.2
0.3.3
1
ghcr.io/conductionnl/verhuis-service-php:latest66bbaf95a123
golang.org/x/text@v0.3.2
0.3.3
1
ghcr.io/conductionnl/verzoekconversieservice-php:lateste918014fb8d3
golang.org/x/text@v0.3.2
0.3.3
1
ghcr.io/conductionnl/verzoekregistratiecomponent-php:latestc4f6c03af5d3
golang.org/x/text@v0.3.2
0.3.3
1
ghcr.io/conductionnl/verzoektypecatalogus-php:latest64f5eb7a398b
golang.org/x/text@v0.3.2
0.3.3
1
ghcr.io/conductionnl/waardepapieren-balie-php:latestf36c423cd259
golang.org/x/text@v0.3.2
0.3.3
1
ghcr.io/conductionnl/waardepapieren-php:latestb2666ffcbad8
golang.org/x/text@v0.3.2
0.3.3
1
ghcr.io/conductionnl/waardepapieren-register-php:latest9affab218351
golang.org/x/text@v0.3.2
0.3.3
1
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
golang.org/x/text@v0.3.2
0.3.3
1
ghcr.io/fluxcd/flagger-loadtester:0.39.06a8546993cb5
golang.org/x/text@v0.3.0
0.3.3
1
ghcr.io/k8s-at-home/emby:v4.6.1.05c6b8f91f1c4
golang.org/x/text@v0.3.2
0.3.3
1
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
golang.org/x/text@v0.3.2
0.3.3
1
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
golang.org/x/text@v0.3.2
0.3.3
1
ghcr.io/k8s-at-home/network-ups-tools:v2.7.4-2479-g86a32237cbd5d4cc1245
golang.org/x/text@v0.3.2
0.3.3
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
golang.org/x/text@v0.3.2
0.3.3
1
ghcr.io/k8s-at-home/readarr:v0.1.0.715ad943e9309e4
golang.org/x/text@v0.3.2
0.3.3
1
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
golang.org/x/text@v0.3.2
0.3.3
1
ghcr.io/k8s-at-home/tautulli:v2.7.74ea617c30397
golang.org/x/text@v0.3.2
0.3.3
1
ghcr.io/k8s-at-home/wireguard:v1.0.20210424448045c4270b
golang.org/x/text@v0.3.2
0.3.3
1
ghcr.io/kvaps/linstor-controller:v1.14.000ce11c31087
golang.org/x/text@v0.3.2
0.3.3
1
ghcr.io/kvaps/linstor-csi:v1.14.0087618d16b83
golang.org/x/text@v0.3.2
0.3.3
1
ghcr.io/liangyuanpeng/replacer:v1.1.00b2a41c2a43e
golang.org/x/text@v0.3.2
0.3.3
1
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
golang.org/x/text@v0.3.2
0.3.3
1
ghcr.io/mvisonneau/approuvez:v0.1.0441da62e6cb3
golang.org/x/text@v0.3.0
0.3.3
1
ghcr.io/paganuzzi/ngrokoperator:latest5a10cd095699
golang.org/x/text@v0.3.2
0.3.3
1
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
golang.org/x/text@v0.3.2
0.3.3
1
ghcr.io/salesforce/sloop:sha-2ce8bbe119e24f24b1d
golang.org/x/text@v0.3.2
0.3.3
1
mcr.microsoft.com/oss/kubernetes-csi/csi-attacher:v2.2.0f55f30876129
golang.org/x/text@v0.3.2
0.3.3
1
mcr.microsoft.com/oss/kubernetes-csi/csi-provisioner:v1.6.1667b1b1ea1e4
golang.org/x/text@v0.3.2
0.3.3
1
public.ecr.aws/j1r0q0g6/notebooks/notebook-controller:v1.4cac3ed9a9826
golang.org/x/text@v0.3.2
0.3.3
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
golang.org/x/text@v0.3.2
0.3.3
1
quay.io/ddn/exascaler-csi-file-driver:v2.2.6fe2e2e5a2751
golang.org/x/text@v0.3.2
0.3.3
1
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
golang.org/x/text@v0.3.2
0.3.3
1
quay.io/jetstack/kube-oidc-proxy:v0.3.0e045b26eb6df
golang.org/x/text@v0.3.2
0.3.3
1
quay.io/mongodb/mongodb-kubernetes-operator:0.3.0107a7c73af59
golang.org/x/text@v0.3.2
0.3.3
1
quay.io/oauth2-proxy/oauth2-proxy:v6.1.1791aef35b8d1
golang.org/x/text@v0.3.2
0.3.3
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
golang.org/x/text@v0.3.0
0.3.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.