CVE-2020-14343

Critical

Advisory

Published 9 Feb 2021In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.8; base score, highest
EPSS: 0.060; 93rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 187; of 17,781 indexed, latest versions
Container images: 167; deployed by those charts
Fix available: 9 of 9; affected packages

Improper Input Validation in PyYAML

Carried by container images the latest versions of 187 of 17,781 indexed charts deploy, on 167 images.

Affected package	Affected versions	Fixed in	Images
pyyamlpypi	3.10, 3.12, 3.13, 5.1+5 more	5.4	120
python-chardetrpm	3.0.4-7.el8	0:3.0.4-19.module+el8.4.0+8888+89bc7e79	44
python-idnarpm	2.5-5.el8, 2.5-7.el8_10, 2.5-8.el8_10	0:2.8-6.module+el8.4.0+8888+89bc7e79	44
python-pysocksrpm	1.6.8-3.el8	0:1.7.1-4.module+el8.4.0+8888+89bc7e79	44
python-requestsrpm	2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_8, 2.20.0-6.el8_10	0:2.22.0-9.module+el8.4.0+8888+89bc7e79	44
python-urllib3rpm	1.24.2-4.el8, 1.24.2-5.el8, 1.24.2-5.el8_6.1, 1.24.2-5.el8_9.2+3 more	0:1.25.7-4.module+el8.4.0+8888+89bc7e79	44
python-plyrpm	3.9-8.el8, 3.9-9.el8	0:3.11-10.module+el8.4.0+570+c2eaf144, 0:3.11-10.module+el8.4.0+9579+e9717e18	13
py3-yamlapk	5.3.1-r0	5.3.1-r1	1
python-wheelrpm	1:0.31.1-2.module+el8.1.0+3724+3c097090	0:0.33.6-5.module+el8.4.0+8888+89bc7e79	1

OSV records: ALPINE-CVE-2020-14343 GHSA-8q59-q68h-6hv4 RHSA-2021:2583 RLSA-2021:2583
Also known as: PYSEC-2021-142

Charts affected

187 by stars

Chart

Latest

Affected images

Radar Score

online-boutiquekubesphere-test

0.1.0

1 of 11 See more

online-boutique kubesphere-test 0.1.0

1 of the 11 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
gcr.io/google-samples/microservices-demo/recommendationservice :v0.2.3	5f60c4988859	pyyaml@5.3.1	5.4

Open the chart page →

26,018

kyso-nbdimekyso

1.0.0

1 of 1 See more

kyso-nbdime kyso 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
kyso/kyso-nbdime :latest	4aa9d38ee81d	pyyaml@5.3.1	5.4

Open the chart page →

2,765

jenkinsleechistest

2.7.1

1 of 2 See more

jenkins leechistest 2.7.1

1 of the 2 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
kiwigrid/k8s-sidecar :0.1.193	170069ff0976	pyyaml@5.3.1	5.4

Open the chart page →

4,423

legendlegend

0.1.2

1 of 1 See more

legend legend 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
ghcr.io/grofers/legend :0.1	d6e901ad0ebd	pyyaml@5.3.1	5.4

Open the chart page →

4,067

squash-apilsst-sqre

0.1.6

1 of 3 See more

squash-api lsst-sqre 0.1.6

1 of the 3 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
lsstsqre/squash-api :0.5.3	4879415ec6ac	pyyaml@5.3.1	5.4

Open the chart page →

6,611

marge-botmarge-bot

1.1.0

1 of 1 See more

marge-bot marge-bot 1.1.0

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
smarketshq/marge-bot :0.9.2	cfc765b27e64	pyyaml@5.1	5.4

Open the chart page →

337

marge-botmarge-bot-helm

1.3.5

1 of 1 See more

marge-bot marge-bot-helm 1.3.5

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.16.0	b59f01bc0418	pyyaml@5.3.1	5.4

Open the chart page →

3,574

kommandermesosphere-stable

0.39.2

1 of 29 See more

kommander mesosphere-stable 0.39.2

1 of the 29 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
kiwigrid/k8s-sidecar :1.3.0	65095a82d4a1	pyyaml@5.3.1	5.4

Open the chart page →

68,284

fossologymidokura-community

0.2.2

1 of 2 See more

fossology midokura-community 0.2.2

1 of the 2 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
fossology/fossology :4.2.1	8bd1f22ba7bb	pyyaml@3.13	5.4

Open the chart page →

3,294

sample-appmongodb-helm-charts

0.1.0

1 of 2 See more

sample-app mongodb-helm-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
quay.io/mongodb/farm-intro-backend :0.1	1a9ce0b8fbd4	pyyaml@5.3.1	5.4

Open the chart page →

6,438

chirpstackmosquitto-helm-chart

0.5.0

1 of 8 See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
apachepulsar/pulsar :2.9.0	d056c89b7131	pyyaml@5.3.1	5.4

Open the chart page →

25,933

pulsarmosquitto-helm-chart

0.2.0

1 of 1 See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
apachepulsar/pulsar :2.10.0	3b262ab7a7d9	pyyaml@5.3.1	5.4

Open the chart page →

15,675

mozalert-controllermozilla

0.4.0

1 of 1 See more

mozalert-controller mozilla 0.4.0

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
afrank/mozalert-controller :latest	d463c37b08d7	pyyaml@5.3.1	5.4

Open the chart page →

2,969

elasticsearch2ncsa

0.2.2

1 of 2 See more

elasticsearch2 ncsa 0.2.2

1 of the 2 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
elastichq/elasticsearch-hq :latest	bb3bd22c2b87	pyyaml@3.13	5.4

Open the chart page →

4,911

polyglotncsa

0.1.1

1 of 18 See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
ncsapolyglot/converters-ebook-convert :latest	438d82cdbdb5	pyyaml@3.12	5.4

Open the chart page →

55,726

nfl-walletnfl-wallet

0.1.3

1 of 4 See more

nfl-wallet nfl-wallet 0.1.3

1 of the 4 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/nfl-wallet-webapp :1.0.1	3fead5702be7	python-chardet@3.0.4-7.el8 python-idna@2.5-7.el8_10 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-6.el8_10 python-urllib3@1.24.2-9.el8_10	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:3.11-10.module+el8.4.0+9579+e9717e18 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

13,041

nominatimnominatim-chart

1.3.0

1 of 3 See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
mediagis/nominatim :3.7	c15e941485ef	pyyaml@5.3.1	5.4

Open the chart page →

22,658

anchore-engineopencloudcx

1.13.0

1 of 2 See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
anchore/anchore-engine :v0.10.0	bde9eedf639d	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-urllib3@1.24.2-5.el8	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

18,023

comacopencord

1.0.0

3 of 9 See more

comac opencord 1.0.0

3 of the 9 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
omecproject/kubernetes-synchronizer :comac-1.0.0	7c17a7b1d1ef	pyyaml@5.1	5.4
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	pyyaml@3.12	5.4
omecproject/progran-synchronizer :comac-1.0.0	d109a8e57e71	pyyaml@3.12	5.4

Open the chart page →

88,546

comac-platformopencord

0.0.17

2 of 11 See more

comac-platform opencord 0.0.17

2 of the 11 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
omecproject/kubernetes-synchronizer :comac-1.0.0	7c17a7b1d1ef	pyyaml@5.1	5.4
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	pyyaml@3.12	5.4

Open the chart page →

26,211

nem-monitoringopencord

1.3.22

1 of 9 See more

nem-monitoring opencord 1.3.22

1 of the 9 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
kiwigrid/k8s-sidecar :0.1.20	af151f677a63	pyyaml@5.1.2	5.4

Open the chart page →

4,612

ponsimv2opencord

1.2.3

1 of 2 See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
voltha/voltha-tester :1.7.0	655c3048a602	pyyaml@3.12	5.4

Open the chart page →

12,609

sebaopencord

1.0.0

4 of 17 See more

seba opencord 1.0.0

4 of the 17 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
voltha/voltha-cli :1.6.0	c4e41e92f046	pyyaml@3.12	5.4
voltha/voltha-netconf :1.6.0	37f80524c207	pyyaml@3.12	5.4
voltha/voltha-ofagent :1.6.0	9ee8c1f4428c	pyyaml@3.12	5.4
voltha/voltha-voltha :1.6.0	ff596b62de59	pyyaml@3.12	5.4

Open the chart page →

93,855

openldapopenldap

0.1.1

1 of 2 See more

5,293

akeyless-api-gatewayopenshift

1.41.2

1 of 1 See more

akeyless-api-gateway openshift 1.41.2

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
akeyless/base-rhel :0.0.1	4ba8900a0061	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_8 python-urllib3@1.24.2-5.el8_9.2	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

11,796

bpjstk-serviceopenshift

1.0.0

1 of 6 See more

bpjstk-service openshift 1.0.0

1 of the 6 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
andrianrf/backoffice :latest	047a7837651e	python-chardet@3.0.4-7.el8 python-idna@2.5-7.el8_10 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_8 python-urllib3@1.24.2-8.el8_10	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:3.11-10.module+el8.4.0+9579+e9717e18 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

34,671

canvas-oamportalopenshift

4.0.0

1 of 1 See more

canvas-oamportal openshift 4.0.0

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
gurolakman/oam :4.0.0	ed8fd2062548	python-chardet@3.0.4-7.el8 python-idna@2.5-7.el8_10 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_8 python-urllib3@1.24.2-8.el8_10	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

7,519

exporteropenshift

1.0.47

1 of 3 See more

exporter openshift 1.0.47

1 of the 3 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
public.ecr.aws/perfectscale-io/kube-state-metrics :4.1.14-redhat	849e235e2d3e	python-chardet@3.0.4-7.el8 python-idna@2.5-7.el8_10 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_8 python-urllib3@1.24.2-8.el8_10	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:3.11-10.module+el8.4.0+9579+e9717e18 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

13,000

hamiopenshift

2.10.0-r0-openshift.c4e22e88

1 of 2 See more

hami openshift 2.10.0-r0-openshift.c4e22e88

1 of the 2 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
ghcr.io/dynamia-ai/hami-enterprise :v2.10.0-r0-openshift.c4e22e88	745504757300	python-chardet@3.0.4-7.el8 python-idna@2.5-8.el8_10 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-6.el8_10 python-urllib3@1.24.2-10.el8_10	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

4,749

kite-agentopenshift

1.0.0

1 of 1 See more

kite-agent openshift 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
quay.io/fengyuanxing/zte_endogenous_security/kite-agent :V2.0.0	734808044936	python-chardet@3.0.4-7.el8 python-idna@2.5-7.el8_10 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-6.el8_10 python-urllib3@1.24.2-9.el8_10	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

5,863

orion-ldopenshift

1.0.3

1 of 2 See more

orion-ld openshift 1.0.3

1 of the 2 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
quay.io/fiware/orion-ld :1.0.1	ea838e5b4051	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-urllib3@1.24.2-5.el8	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

14,727

smsf-configurationopenshift

1.0.4

1 of 1 See more

smsf-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
gurolakman/smsf-configuration :1.0.4	9abb3882bcbd	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_8 python-urllib3@1.24.2-5.el8_9.2	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

13,607

smsf-dispatcheropenshift

1.0.4

1 of 1 See more

smsf-dispatcher openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
gurolakman/smsf-dispatcher :1.0.4	6537e8ed8de8	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_8 python-urllib3@1.24.2-5.el8_9.2	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

11,738

smsf-momtopenshift

1.0.4

1 of 1 See more

smsf-momt openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
gurolakman/smsf-momt :1.0.4	ce23b20a8a17	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_8 python-urllib3@1.24.2-5.el8_9.2	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

13,568

smsf-registrationopenshift

1.0.4

1 of 1 See more

smsf-registration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
gurolakman/smsf-registration :1.0.4	b22e746edd5d	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_8 python-urllib3@1.24.2-5.el8_9.2	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

13,551

ussigw-configurationopenshift

1.0.4

1 of 1 See more

ussigw-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
gurolakman/ussigw-configuration :1.0.4	bf18525c5ad9	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_8 python-urllib3@1.24.2-5.el8_9.2	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

13,455

ussigw-coreopenshift

1.0.4

1 of 1 See more

ussigw-core openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
gurolakman/ussigw-core :1.0.4	8739565c3ea2	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_8 python-urllib3@1.24.2-5.el8_9.2	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

13,100

openwhiskopenwhisk

1.0.0

1 of 10 See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
openwhisk/ow-utils :1.0.0	c80dba0de3aa	pyyaml@5.3.1	5.4

Open the chart page →

36,215

pet-battle-infrapetbattle

1.0.32

1 of 2 See more

pet-battle-infra petbattle 1.0.32

1 of the 2 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.8	bb5e052770e5	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-urllib3@1.24.2-5.el8	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:3.11-10.module+el8.4.0+9579+e9717e18 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

15,466

pet-battle-tournamentpetbattle

1.0.40

1 of 3 See more

pet-battle-tournament petbattle 1.0.40

1 of the 3 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.8	bb5e052770e5	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-urllib3@1.24.2-5.el8	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:3.11-10.module+el8.4.0+9579+e9717e18 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

15,466

gitlab-runner-operatorpnnl-miscscripts

0.1.6

1 of 1 See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
pnnlmiscscripts/gitlab-runner-operator :0.1.3-1	155131891741	pyyaml@5.3	5.4

Open the chart page →

11,151

tenant-namespace-operatorpnnl-miscscripts

0.1.28

1 of 1 See more

tenant-namespace-operator pnnl-miscscripts 0.1.28

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
pnnlmiscscripts/tenant-namespace-operator :0.1.24-1	8af4b7551d40	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_8 python-urllib3@1.24.2-5.el8	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

12,754

ibm-mongodb-enterprise-helmredhat

0.3.0

1 of 1 See more

ibm-mongodb-enterprise-helm redhat 0.3.0

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
ibmcom/ibm-enterprise-mongodb-ppc64le :4.4	d28bf361327a	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-urllib3@1.24.2-4.el8	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

12,248

ansible-automation-platformredhat-cop

0.0.9

1 of 1 See more

ansible-automation-platform redhat-cop 0.0.9

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-urllib3@1.24.2-5.el8	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:3.11-10.module+el8.4.0+9579+e9717e18 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

15,291

argocd-operatorredhat-cop

1.2.2

1 of 1 See more

argocd-operator redhat-cop 1.2.2

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-urllib3@1.24.2-5.el8	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:3.11-10.module+el8.4.0+9579+e9717e18 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

15,291

ploigosredhat-cop

0.0.9

1 of 2 See more

ploigos redhat-cop 0.0.9

1 of the 2 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.6	6722d5041b47	python-ply@3.9-8.el8	0:3.11-10.module+el8.4.0+9579+e9717e18

Open the chart page →

11,437

sonatype-nexusredhat-cop

1.1.13

1 of 2 See more

sonatype-nexus redhat-cop 1.1.13

1 of the 2 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-jenkins-agent-base :latest	c241c971aef8	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_6 python-urllib3@1.24.2-5.el8_6.1	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:3.11-10.module+el8.4.0+9579+e9717e18 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

16,047

stackrox-chartredhat-cop

0.0.10

1 of 1 See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-urllib3@1.24.2-5.el8	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:3.11-10.module+el8.4.0+9579+e9717e18 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

29,227

argocdromholdings

1.8.1

1 of 3 See more

argocd romholdings 1.8.1

1 of the 3 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
argoproj/argocd :v1.8.1	830e86cacefd	pyyaml@5.3.1	5.4

Open the chart page →

10,466

test-helm-app2saam-helm-test

0.1.0

1 of 1 See more

test-helm-app2 saam-helm-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
asdkant/fastapi-hello-world :latest	a23d8bf7c885	pyyaml@5.3.1	5.4

Open the chart page →

2,770

Container images carrying it

167 by charts deploying them

A fixed version is listed for 9 of the 9 affected packages.

Container image	Digest	Package	Fixed in	Used by
deepflowce/deepflow-app :v6.2.6.5	a1888d35e787	pyyaml@3.13	5.4	1
douz/helpdesk :latest	4384103d0219	pyyaml@5.1.2	5.4	1
elastichq/elasticsearch-hq :latest	bb3bd22c2b87	pyyaml@3.13	5.4	1
esailors/aws-ecr-http-proxy :1.5.1	5608ae045fa7	pyyaml@3.12	5.4	1
fiware/bae-activation-service :v0.0.3	3e3ec88d59ed	pyyaml@5.3.1	5.4	1
fiware/orion-ld :1.10.0	3c490a746f65	python-chardet@3.0.4-7.el8 python-idna@2.5-7.el8_10 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-6.el8_10 python-urllib3@1.24.2-8.el8_10	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79	1
fossology/fossology :4.2.1	8bd1f22ba7bb	pyyaml@3.13	5.4	1
galaxy/galaxy-init :v18.01	0267bad550e6	pyyaml@3.10	5.4	1
galaxy/galaxy-stable :v18.01	8e577a626dfd	pyyaml@3.10	5.4	1
geoscienceaustralia/dea-k8s-data :latest	f4039b45572a	pyyaml@5.3.1	5.4	1
getsentry/sentry-kubernetes :latest	6ac37974fd2a	pyyaml@3.13	5.4	1
gurolakman/oam :4.0.0	ed8fd2062548	python-chardet@3.0.4-7.el8 python-idna@2.5-7.el8_10 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_8 python-urllib3@1.24.2-8.el8_10	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79	1
gurolakman/smsf-configuration :1.0.4	9abb3882bcbd	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_8 python-urllib3@1.24.2-5.el8_9.2	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79	1
gurolakman/smsf-dispatcher :1.0.4	6537e8ed8de8	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_8 python-urllib3@1.24.2-5.el8_9.2	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79	1
gurolakman/smsf-momt :1.0.4	ce23b20a8a17	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_8 python-urllib3@1.24.2-5.el8_9.2	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79	1
gurolakman/smsf-registration :1.0.4	b22e746edd5d	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_8 python-urllib3@1.24.2-5.el8_9.2	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79	1
gurolakman/ussigw-configuration :1.0.4	bf18525c5ad9	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_8 python-urllib3@1.24.2-5.el8_9.2	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79	1
gurolakman/ussigw-core :1.0.4	8739565c3ea2	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_8 python-urllib3@1.24.2-5.el8_9.2	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79	1
hiboxsystems/marge-bot :0.12.1	a96c10b61a59	pyyaml@5.3.1	5.4	1
hiboxsystems/marge-bot :0.16.0	b59f01bc0418	pyyaml@5.3.1	5.4	1
hiboxsystems/marge-bot :0.14.0	dcffb926e563	pyyaml@5.3.1	5.4	1
hjacobs/kube-web-view :20.10.0	b44a9cf81a2f	pyyaml@5.3.1	5.4	1
hmdmph/mongo-pod-labeler :1.0.1-alpine	79e4a170f3dc	pyyaml@5.3.1	5.4	1
hmdmph/redis-pod-labeler :1.0.0-alpine	7f1381fe0f3b	pyyaml@5.3.1	5.4	1
ibmcom/ibm-enterprise-mongodb-ppc64le :4.4	d28bf361327a	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-urllib3@1.24.2-4.el8	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79	1
jmferrer/azure-devops-agent :latest	030f68ec6998	pyyaml@5.3	5.4	1
julb/kubernetes-configmap-sync :1.1.0	d7d8836366ad	pyyaml@5.3.1	5.4	1
jupyterhub/k8s-hub :0.11.1	b6b4a1a34bf0	pyyaml@5.3.1	5.4	1
kennethreitz/httpbin :latest	599fe5e50731	pyyaml@3.13	5.4	1
kfserving/models-web-app :v0.6.1	f322d6ffdfa3	pyyaml@3.13	5.4	1
kiwigrid/k8s-sidecar :1.1.0	3e86186656d3	pyyaml@5.3.1	5.4	1
kiwigrid/k8s-sidecar :1.3.0	65095a82d4a1	pyyaml@5.3.1	5.4	1
kiwigrid/k8s-sidecar :0.0.18	6eb52513d59e	pyyaml@5.1.1	5.4	1
kiwigrid/k8s-sidecar :0.0.16	899ccd0b1f54	pyyaml@3.13	5.4	1
kiwigrid/k8s-sidecar :0.1.20	af151f677a63	pyyaml@5.1.2	5.4	1
kubeaws/kube-spot-termination-notice-handler :1.13.0-1	c9cd2ba4373a	pyyaml@3.13	5.4	1
kyso/kyso-nbdime :latest	4aa9d38ee81d	pyyaml@5.3.1	5.4	1
louislam/uptime-kuma :1.22.1	0b55bcb83a1c	pyyaml@3.13	5.4	1
louislam/uptime-kuma :1	3d632903e6af	pyyaml@3.13	5.4	1
louislam/uptime-kuma :1.23.13	96510915e6be	pyyaml@3.13	5.4	1
louislam/uptime-kuma :1.17.1	a4eab252e5a2	pyyaml@3.13	5.4	1
louislam/uptime-kuma :1.18.5	a84767d7934f	pyyaml@3.13	5.4	1
louislam/uptime-kuma :1.23.12	bc6f244ecf27	pyyaml@3.13	5.4	1
lsstsqre/squash-api :0.5.3	4879415ec6ac	pyyaml@5.3.1	5.4	1
mariadb/maxscale :23.02.2	56c5e0908148	python-ply@3.9-9.el8	0:3.11-10.module+el8.4.0+570+c2eaf144	1
mediagis/nominatim :3.7	c15e941485ef	pyyaml@5.3.1	5.4	1
ncsapolyglot/converters-ebook-convert :latest	438d82cdbdb5	pyyaml@3.12	5.4	1
ngoduykhanh/powerdns-admin :0.2.3	099371dd9ba6	pyyaml@5.3.1	5.4	1
nlmacamp/check_mk :latest	5dbb8589f824	pyyaml@3.13	5.4	1
octoprint/octoprint :1.4.0	106c26efcd8a	pyyaml@5.3.1	5.4	1