StackRadar

CVE-2020-14040

High

Advisory

Published 14 Apr 2021In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.018
78th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
271
of 17,781 indexed, latest versions
Container images
252
deployed by those charts
Fix available
1 of 1
affected package

golang.org/x/text Infinite loop

Carried by container images the latest versions of 271 of 17,781 indexed charts deploy, on 252 images.

Affected packageAffected versionsFixed inImages
golang.org/x/textgolangv0.3.0, v0.3.1-0.20180807135948-17ff2d5776d2, v0.3.1-0.20181227161524-e6919f6577db, v0.3.2+1 more0.3.3252
OSV records
GHSA-5rcv-m4m3-hfh7
Also known as
GO-2020-0015

Charts affected

271 by stars
ChartLatestAffected imagesRadar Score
labelsmanager-controllerhelm-charts-nr1.0.41 of 1See more

labelsmanager-controller helm-charts-nr 1.0.4

1 of the 1 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
thomasnyambati/labelsmanager-controller:1.0.0148ae3f99fea
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

2,305
weblatehelm-charts-nr0.3.21 of 3See more

weblate helm-charts-nr 0.3.2

1 of the 3 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
golang.org/x/text@v0.3.0
0.3.3

Open the chart page →

7,984
gophishhelmforgeVerified publisher0.1.51 of 1See more

gophish helmforge 0.1.5

1 of the 1 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
gophish/gophish:0.12.18a57cd171999
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

2,819
stoloniamalryz0.10.01 of 2See more

stolon iamalryz 0.10.0

1 of the 2 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
sorintlab/stolon:v0.16.0-pg1236b45c0f97fc
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

4,045
instemmingserviceinstemmingservice1.0.01 of 3See more

instemmingservice instemmingservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/instemmingservice-php:latest4ffe222b3e3a
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

7,510
consulintelVerified publisher0.8.11 of 2See more

consul intel 0.8.1

1 of the 2 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
hashicorp/consul-k8s-control-plane:1.0.2538a3436398d
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

5,389
evi-consulintelVerified publisher3.0.31 of 2See more

evi-consul intel 3.0.3

1 of the 2 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
hashicorp/consul-k8s-control-plane:1.0.2538a3436398d
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

5,389
jx-app-athensjenkins-x0.0.181 of 1See more

jx-app-athens jenkins-x 0.0.18

1 of the 1 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
gomods/athens:v0.8.1d714c7ff0231
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

4,225
jx-app-flaggerjenkins-x0.0.52 of 2See more

jx-app-flagger jenkins-x 0.0.5

2 of the 2 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
grafana/grafana:6.5.1befcd84da2c1
golang.org/x/text@v0.3.2
0.3.3
weaveworks/flagger:1.0.0-rc.5174307de1b36
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

6,028
alpine-torjfwenischVerified publisher1.1.01 of 1See more

alpine-tor jfwenisch 1.1.0

1 of the 1 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
jfwenisch/alpine-tor:latest9e6c229f953c
golang.org/x/text@v0.3.0
0.3.3

Open the chart page →

4,460
csi-driver-nfskeyporttech0.1.41 of 2See more

csi-driver-nfs keyporttech 0.1.4

1 of the 2 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
keyporttech/csi-driver-nfs:2.0.05bd7955ea2f1
golang.org/x/text@v0.3.1-0.20181227161524-e6919f6577db
0.3.3

Open the chart page →

3,357
dex-k8s-authenticatorkfirfer0.0.31 of 1See more

dex-k8s-authenticator kfirfer 0.0.3

1 of the 1 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
mintel/dex-k8s-authenticator:1.4.0caf71cee7b9a
golang.org/x/text@v0.3.0
0.3.3

Open the chart page →

2,791
lndkronkltdVerified publisher0.3.92 of 4See more

lnd kronkltd 0.3.9

2 of the 4 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
thesisrobot/loop:v0.11.1-beta89ae07e787ca
golang.org/x/text@v0.3.1-0.20180807135948-17ff2d5776d2
0.3.3
thesisrobot/pool:v0.3.3-alpha2d1c388a4bda
golang.org/x/text@v0.3.1-0.20180807135948-17ff2d5776d2
0.3.3

Open the chart page →

8,451
pipecdkrzwiatrzyk0.39.01 of 3See more

pipecd krzwiatrzyk 0.39.0

1 of the 3 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

3,812
fluentbit-operatorkubesphereVerified publisher0.1.01 of 2See more

fluentbit-operator kubesphere 0.1.0

1 of the 2 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
kubesphere/fluentbit-operator:v0.9.0b87db3c57cb3
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

2,902
gitlabkubesphereVerified publisher4.2.35 of 17See more

gitlab kubesphere 4.2.3

5 of the 17 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
gitlab/gitlab-runner:alpine-v13.2.1fd7e5dfb9f30
golang.org/x/text@v0.3.2
0.3.3
mirrorgitlabcontainers/gitaly:v13.2.283599461ef8b
golang.org/x/text@v0.3.2
0.3.3
mirrorgitlabcontainers/gitlab-container-registry:v2.9.1-gitlab06b19a4bc805
golang.org/x/text@v0.3.2
0.3.3
mirrorgitlabcontainers/gitlab-shell:v13.3.09f3654f1eafc
golang.org/x/text@v0.3.2
0.3.3
mirrorgitlabcontainers/gitlab-workhorse-ce:v13.2.2a6d7bf42805a
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

38,133
harborkubesphereVerified publisher1.9.32 of 11See more

harbor kubesphere 1.9.3

2 of the 11 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
goharbor/notary-server-photon:v2.5.3fd91a4a1273f
golang.org/x/text@v0.3.2
0.3.3
goharbor/notary-signer-photon:v2.5.3a92b51aa7d6e
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

17,798
csi-qingcloudkubesphere-stable1.4.01 of 6See more

csi-qingcloud kubesphere-stable 1.4.0

1 of the 6 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
csiplugin/csi-qingcloud:v1.4.00766163dc046
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

12,402
curvefs-csikubesphere-stable0.1.01 of 3See more

curvefs-csi kubesphere-stable 0.1.0

1 of the 3 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
golang.org/x/text@v0.3.0
0.3.3

Open the chart page →

2,822
iomeshkubesphere-stable1.1.01 of 25See more

iomesh kubesphere-stable 1.1.0

1 of the 25 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
iomesh/hostpath-provisioner:v0.5.1f4878c8ae53a
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

48,665
IOMeshkubesphere-stable1.2.01 of 25See more

IOMesh kubesphere-stable 1.2.0

1 of the 25 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
iomesh/hostpath-provisioner:v0.5.1f4878c8ae53a
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

46,341
pulsarkubesphere-stable2.7.131 of 3See more

pulsar kubesphere-stable 2.7.13

1 of the 3 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
prom/prometheus:v2.17.242d2395cd719
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

14,320
csi-neonsankubesphere-testVerified publisher1.3.01 of 6See more

csi-neonsan kubesphere-test 1.3.0

1 of the 6 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
csiplugin/csi-neonsan:v1.2.21fa83d45417f
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

18,475
csi-qingcloudkubesphere-testVerified publisher1.4.01 of 6See more

csi-qingcloud kubesphere-test 1.4.0

1 of the 6 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
csiplugin/csi-qingcloud:v1.4.00766163dc046
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

12,402
curvefs-csikubesphere-testVerified publisher0.1.01 of 3See more

curvefs-csi kubesphere-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
golang.org/x/text@v0.3.0
0.3.3

Open the chart page →

2,822
online-boutiquekubesphere-testVerified publisher0.1.04 of 11See more

online-boutique kubesphere-test 0.1.0

4 of the 11 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.30fad1066de77
golang.org/x/text@v0.3.2
0.3.3
gcr.io/google-samples/microservices-demo/frontend:v0.2.3ca5c0f0771c8
golang.org/x/text@v0.3.2
0.3.3
gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.35a4a0e54c6d0
golang.org/x/text@v0.3.2
0.3.3
gcr.io/google-samples/microservices-demo/shippingservice:v0.2.30cb1707fc503
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

26,018
openelbkubesphere-testVerified publisher0.2.41 of 2See more

openelb kubesphere-test 0.2.4

1 of the 2 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
kubesphere/openelb:v0.4.4ed7311a0f9e4
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

4,329
porterkubesphere-testVerified publisher0.2.21 of 2See more

porter kubesphere-test 0.2.2

1 of the 2 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
kubesphere/porter:v0.4.38d1ed5ee1d2e
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

2,784
longhornkvalitetsitVerified publisher1.1.1-01 of 2See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.1.1ede61fe2a472
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

16,520
kvkkvkservice0.1.01 of 4See more

kvk kvkservice 0.1.0

1 of the 4 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
conduction/kvk-php:dev8f177f9f8a7b
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

8,534
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
kubeoperator/webkubectl:v2.4.0be8f0d624640
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

26,356
grafanaleechistest5.3.01 of 1See more

grafana leechistest 5.3.0

1 of the 1 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

3,191
prometheusleechistest11.6.03 of 6See more

prometheus leechistest 11.6.0

3 of the 6 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
prom/alertmanager:v0.20.07e4e9f7a0954
golang.org/x/text@v0.3.2
0.3.3
prom/prometheus:v2.19.0bfad037f95e5
golang.org/x/text@v0.3.2
0.3.3
quay.io/prometheus/node-exporter:v1.0.1cf66a6bbd573
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

8,484
ocatiecataloguslocatiecatalogus1.0.01 of 3See more

ocatiecatalogus locatiecatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/ocatiecatalogus-php:latestc22764cbfa97
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

7,510
devspace-cloudloftVerified publisher0.3.31 of 8See more

devspace-cloud loft 0.3.3

1 of the 8 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
devspacecloud/manager:0.3.349c397413f7b
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

9,880
loggingcomponentloggingcomponent1.0.01 of 3See more

loggingcomponent loggingcomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/loggingcomponent-php:latest834b8e1af290
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

7,492
logicservicelogicservice1.0.01 of 4See more

logicservice logicservice 1.0.0

1 of the 4 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/logicservice-php:latest72aae2080595
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

7,499
apica-ascentlogiqai2.0.43 of 19See more

apica-ascent logiqai 2.0.4

3 of the 19 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
logiqai/flash-discovery:v2.0.3f5b551bca98e
golang.org/x/text@v0.3.2
0.3.3
logiqai/logiqctl:2.0.4798306811f2d
golang.org/x/text@v0.3.2
0.3.3
minio/mc:RELEASE.2020-03-14T01-23-37Z571feb124476
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

23,613
squash-apilsst-sqre0.1.61 of 3See more

squash-api lsst-sqre 0.1.6

1 of the 3 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
gcr.io/cloudsql-docker/gce-proxy:1.17a85176b8e7cc
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

6,611
medewerkercatalogusmedewerkercatalogus1.0.01 of 3See more

medewerkercatalogus medewerkercatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/medewerkercatalogus-php:latest1ea5412bed26
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

7,327
memo-componentmemo-component1.0.01 of 3See more

memo-component memo-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/memo-component-php:latestef77f4c089a1
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

7,510
flaggermesosphere0.21.02 of 2See more

flagger mesosphere 0.21.0

2 of the 2 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
weaveworks/flagger:0.19.0a9c2e9df4227
golang.org/x/text@v0.3.2
0.3.3
weaveworks/flagger-loadtester:0.9.03cdac6928a63
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

6,048
karmamesosphere1.3.01 of 1See more

karma mesosphere 1.3.0

1 of the 1 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
lmierzwa/karma:v0.503751e5eed656
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

2,111
kube-oidc-proxymesosphere0.3.41 of 1See more

kube-oidc-proxy mesosphere 0.3.4

1 of the 1 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
quay.io/jetstack/kube-oidc-proxy:v0.3.0e045b26eb6df
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

3,144
kudomesosphere0.1.41 of 1See more

kudo mesosphere 0.1.4

1 of the 1 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
kudobuilder/controller:v0.9.069072d979708
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

5,682
nfs-server-provisionermesosphere0.6.11 of 1See more

nfs-server-provisioner mesosphere 0.6.1

1 of the 1 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

2,806
prometheus-operatormesosphere12.11.131 of 8See more

prometheus-operator mesosphere 12.11.13

1 of the 8 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
quay.io/prometheus/node-exporter:v1.0.1cf66a6bbd573
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

11,689
azuredisk-csi-drivermesosphere-stable0.8.12 of 6See more

azuredisk-csi-driver mesosphere-stable 0.8.1

2 of the 6 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
mcr.microsoft.com/oss/kubernetes-csi/csi-attacher:v2.2.0f55f30876129
golang.org/x/text@v0.3.2
0.3.3
mcr.microsoft.com/oss/kubernetes-csi/csi-provisioner:v1.6.1667b1b1ea1e4
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

14,065
gcpdisk-csi-drivermesosphere-stable0.7.31 of 7See more

gcpdisk-csi-driver mesosphere-stable 0.7.3

1 of the 7 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
golang.org/x/text@v0.3.0
0.3.3

Open the chart page →

3,603
kommandermesosphere-stable0.39.25 of 29See more

kommander mesosphere-stable 0.39.2

5 of the 29 container images this version deploys carry CVE-2020-14040.

Container imageDigestPackageFixed in
grafana/grafana:6.6.0052147d7e0ec
golang.org/x/text@v0.3.2
0.3.3
mesosphere/karma:v0.55-d2iq-proxy4693bb4e0814
golang.org/x/text@v0.3.2
0.3.3
mesosphere/kubeaddons-addon-initializer:v0.2.8c10011f866f2
golang.org/x/text@v0.3.2
0.3.3
prom/prometheus:v2.19.2cd134bd4fca0
golang.org/x/text@v0.3.2
0.3.3
quay.io/prometheus/alertmanager:v0.21.024a5204b418e
golang.org/x/text@v0.3.2
0.3.3

Open the chart page →

68,284

Container images carrying it

252 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/titansoft/imagepullsecret-patcher:v0.1421e6d6a155dc
golang.org/x/text@v0.3.2
0.3.3
1
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.03ce0fdba4d8e
golang.org/x/text@v0.3.2
0.3.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.