CVE-2020-14343

Critical

Advisory

Published 9 Feb 2021In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.8; base score, highest
EPSS: 0.060; 93rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 187; of 17,781 indexed, latest versions
Container images: 167; deployed by those charts
Fix available: 9 of 9; affected packages

Improper Input Validation in PyYAML

Carried by container images the latest versions of 187 of 17,781 indexed charts deploy, on 167 images.

Affected package	Affected versions	Fixed in	Images
pyyamlpypi	3.10, 3.12, 3.13, 5.1+5 more	5.4	120
python-chardetrpm	3.0.4-7.el8	0:3.0.4-19.module+el8.4.0+8888+89bc7e79	44
python-idnarpm	2.5-5.el8, 2.5-7.el8_10, 2.5-8.el8_10	0:2.8-6.module+el8.4.0+8888+89bc7e79	44
python-pysocksrpm	1.6.8-3.el8	0:1.7.1-4.module+el8.4.0+8888+89bc7e79	44
python-requestsrpm	2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_8, 2.20.0-6.el8_10	0:2.22.0-9.module+el8.4.0+8888+89bc7e79	44
python-urllib3rpm	1.24.2-4.el8, 1.24.2-5.el8, 1.24.2-5.el8_6.1, 1.24.2-5.el8_9.2+3 more	0:1.25.7-4.module+el8.4.0+8888+89bc7e79	44
python-plyrpm	3.9-8.el8, 3.9-9.el8	0:3.11-10.module+el8.4.0+570+c2eaf144, 0:3.11-10.module+el8.4.0+9579+e9717e18	13
py3-yamlapk	5.3.1-r0	5.3.1-r1	1
python-wheelrpm	1:0.31.1-2.module+el8.1.0+3724+3c097090	0:0.33.6-5.module+el8.4.0+8888+89bc7e79	1

OSV records: ALPINE-CVE-2020-14343 GHSA-8q59-q68h-6hv4 RHSA-2021:2583 RLSA-2021:2583
Also known as: PYSEC-2021-142

Charts affected

187 by stars

Chart

Latest

Affected images

Radar Score

online-boutiquekubesphere-test

0.1.0

1 of 11 See more

online-boutique kubesphere-test 0.1.0

1 of the 11 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
gcr.io/google-samples/microservices-demo/recommendationservice :v0.2.3	5f60c4988859	pyyaml@5.3.1	5.4

Open the chart page →

26,018

kyso-nbdimekyso

1.0.0

1 of 1 See more

kyso-nbdime kyso 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
kyso/kyso-nbdime :latest	4aa9d38ee81d	pyyaml@5.3.1	5.4

Open the chart page →

2,765

jenkinsleechistest

2.7.1

1 of 2 See more

jenkins leechistest 2.7.1

1 of the 2 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
kiwigrid/k8s-sidecar :0.1.193	170069ff0976	pyyaml@5.3.1	5.4

Open the chart page →

4,423

legendlegend

0.1.2

1 of 1 See more

legend legend 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
ghcr.io/grofers/legend :0.1	d6e901ad0ebd	pyyaml@5.3.1	5.4

Open the chart page →

4,067

squash-apilsst-sqre

0.1.6

1 of 3 See more

squash-api lsst-sqre 0.1.6

1 of the 3 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
lsstsqre/squash-api :0.5.3	4879415ec6ac	pyyaml@5.3.1	5.4

Open the chart page →

6,611

marge-botmarge-bot

1.1.0

1 of 1 See more

marge-bot marge-bot 1.1.0

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
smarketshq/marge-bot :0.9.2	cfc765b27e64	pyyaml@5.1	5.4

Open the chart page →

337

marge-botmarge-bot-helm

1.3.5

1 of 1 See more

marge-bot marge-bot-helm 1.3.5

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.16.0	b59f01bc0418	pyyaml@5.3.1	5.4

Open the chart page →

3,574

kommandermesosphere-stable

0.39.2

1 of 29 See more

kommander mesosphere-stable 0.39.2

1 of the 29 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
kiwigrid/k8s-sidecar :1.3.0	65095a82d4a1	pyyaml@5.3.1	5.4

Open the chart page →

68,284

fossologymidokura-community

0.2.2

1 of 2 See more

fossology midokura-community 0.2.2

1 of the 2 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
fossology/fossology :4.2.1	8bd1f22ba7bb	pyyaml@3.13	5.4

Open the chart page →

3,294

sample-appmongodb-helm-charts

0.1.0

1 of 2 See more

sample-app mongodb-helm-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
quay.io/mongodb/farm-intro-backend :0.1	1a9ce0b8fbd4	pyyaml@5.3.1	5.4

Open the chart page →

6,438

chirpstackmosquitto-helm-chart

0.5.0

1 of 8 See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
apachepulsar/pulsar :2.9.0	d056c89b7131	pyyaml@5.3.1	5.4

Open the chart page →

25,933

pulsarmosquitto-helm-chart

0.2.0

1 of 1 See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
apachepulsar/pulsar :2.10.0	3b262ab7a7d9	pyyaml@5.3.1	5.4

Open the chart page →

15,675

mozalert-controllermozilla

0.4.0

1 of 1 See more

mozalert-controller mozilla 0.4.0

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
afrank/mozalert-controller :latest	d463c37b08d7	pyyaml@5.3.1	5.4

Open the chart page →

2,969

elasticsearch2ncsa

0.2.2

1 of 2 See more

elasticsearch2 ncsa 0.2.2

1 of the 2 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
elastichq/elasticsearch-hq :latest	bb3bd22c2b87	pyyaml@3.13	5.4

Open the chart page →

4,911

polyglotncsa

0.1.1

1 of 18 See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
ncsapolyglot/converters-ebook-convert :latest	438d82cdbdb5	pyyaml@3.12	5.4

Open the chart page →

55,726

nfl-walletnfl-wallet

0.1.3

1 of 4 See more

nfl-wallet nfl-wallet 0.1.3

1 of the 4 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/nfl-wallet-webapp :1.0.1	3fead5702be7	python-chardet@3.0.4-7.el8 python-idna@2.5-7.el8_10 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-6.el8_10 python-urllib3@1.24.2-9.el8_10	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:3.11-10.module+el8.4.0+9579+e9717e18 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

13,041

nominatimnominatim-chart

1.3.0

1 of 3 See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
mediagis/nominatim :3.7	c15e941485ef	pyyaml@5.3.1	5.4

Open the chart page →

22,658

anchore-engineopencloudcx

1.13.0

1 of 2 See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
anchore/anchore-engine :v0.10.0	bde9eedf639d	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-urllib3@1.24.2-5.el8	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

18,023

comacopencord

1.0.0

3 of 9 See more

comac opencord 1.0.0

3 of the 9 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
omecproject/kubernetes-synchronizer :comac-1.0.0	7c17a7b1d1ef	pyyaml@5.1	5.4
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	pyyaml@3.12	5.4
omecproject/progran-synchronizer :comac-1.0.0	d109a8e57e71	pyyaml@3.12	5.4

Open the chart page →

88,546

comac-platformopencord

0.0.17

2 of 11 See more

comac-platform opencord 0.0.17

2 of the 11 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
omecproject/kubernetes-synchronizer :comac-1.0.0	7c17a7b1d1ef	pyyaml@5.1	5.4
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	pyyaml@3.12	5.4

Open the chart page →

26,211

nem-monitoringopencord

1.3.22

1 of 9 See more

nem-monitoring opencord 1.3.22

1 of the 9 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
kiwigrid/k8s-sidecar :0.1.20	af151f677a63	pyyaml@5.1.2	5.4

Open the chart page →

4,612

ponsimv2opencord

1.2.3

1 of 2 See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
voltha/voltha-tester :1.7.0	655c3048a602	pyyaml@3.12	5.4

Open the chart page →

12,609

sebaopencord

1.0.0

4 of 17 See more

seba opencord 1.0.0

4 of the 17 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
voltha/voltha-cli :1.6.0	c4e41e92f046	pyyaml@3.12	5.4
voltha/voltha-netconf :1.6.0	37f80524c207	pyyaml@3.12	5.4
voltha/voltha-ofagent :1.6.0	9ee8c1f4428c	pyyaml@3.12	5.4
voltha/voltha-voltha :1.6.0	ff596b62de59	pyyaml@3.12	5.4

Open the chart page →

93,855

openldapopenldap

0.1.1

1 of 2 See more

5,293

akeyless-api-gatewayopenshift

1.41.2

1 of 1 See more

akeyless-api-gateway openshift 1.41.2

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
akeyless/base-rhel :0.0.1	4ba8900a0061	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_8 python-urllib3@1.24.2-5.el8_9.2	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

11,796

bpjstk-serviceopenshift

1.0.0

1 of 6 See more

bpjstk-service openshift 1.0.0

1 of the 6 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
andrianrf/backoffice :latest	047a7837651e	python-chardet@3.0.4-7.el8 python-idna@2.5-7.el8_10 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_8 python-urllib3@1.24.2-8.el8_10	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:3.11-10.module+el8.4.0+9579+e9717e18 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

34,671

canvas-oamportalopenshift

4.0.0

1 of 1 See more

canvas-oamportal openshift 4.0.0

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
gurolakman/oam :4.0.0	ed8fd2062548	python-chardet@3.0.4-7.el8 python-idna@2.5-7.el8_10 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_8 python-urllib3@1.24.2-8.el8_10	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

7,519

exporteropenshift

1.0.47

1 of 3 See more

exporter openshift 1.0.47

1 of the 3 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
public.ecr.aws/perfectscale-io/kube-state-metrics :4.1.14-redhat	849e235e2d3e	python-chardet@3.0.4-7.el8 python-idna@2.5-7.el8_10 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_8 python-urllib3@1.24.2-8.el8_10	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:3.11-10.module+el8.4.0+9579+e9717e18 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

13,000

hamiopenshift

2.10.0-r0-openshift.c4e22e88

1 of 2 See more

hami openshift 2.10.0-r0-openshift.c4e22e88

1 of the 2 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
ghcr.io/dynamia-ai/hami-enterprise :v2.10.0-r0-openshift.c4e22e88	745504757300	python-chardet@3.0.4-7.el8 python-idna@2.5-8.el8_10 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-6.el8_10 python-urllib3@1.24.2-10.el8_10	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

4,749

kite-agentopenshift

1.0.0

1 of 1 See more

kite-agent openshift 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
quay.io/fengyuanxing/zte_endogenous_security/kite-agent :V2.0.0	734808044936	python-chardet@3.0.4-7.el8 python-idna@2.5-7.el8_10 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-6.el8_10 python-urllib3@1.24.2-9.el8_10	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

5,863

orion-ldopenshift

1.0.3

1 of 2 See more

orion-ld openshift 1.0.3

1 of the 2 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
quay.io/fiware/orion-ld :1.0.1	ea838e5b4051	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-urllib3@1.24.2-5.el8	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

14,727

smsf-configurationopenshift

1.0.4

1 of 1 See more

smsf-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
gurolakman/smsf-configuration :1.0.4	9abb3882bcbd	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_8 python-urllib3@1.24.2-5.el8_9.2	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

13,607

smsf-dispatcheropenshift

1.0.4

1 of 1 See more

smsf-dispatcher openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
gurolakman/smsf-dispatcher :1.0.4	6537e8ed8de8	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_8 python-urllib3@1.24.2-5.el8_9.2	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

11,738

smsf-momtopenshift

1.0.4

1 of 1 See more

smsf-momt openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
gurolakman/smsf-momt :1.0.4	ce23b20a8a17	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_8 python-urllib3@1.24.2-5.el8_9.2	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

13,568

smsf-registrationopenshift

1.0.4

1 of 1 See more

smsf-registration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
gurolakman/smsf-registration :1.0.4	b22e746edd5d	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_8 python-urllib3@1.24.2-5.el8_9.2	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

13,551

ussigw-configurationopenshift

1.0.4

1 of 1 See more

ussigw-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
gurolakman/ussigw-configuration :1.0.4	bf18525c5ad9	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_8 python-urllib3@1.24.2-5.el8_9.2	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

13,455

ussigw-coreopenshift

1.0.4

1 of 1 See more

ussigw-core openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
gurolakman/ussigw-core :1.0.4	8739565c3ea2	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_8 python-urllib3@1.24.2-5.el8_9.2	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

13,100

openwhiskopenwhisk

1.0.0

1 of 10 See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
openwhisk/ow-utils :1.0.0	c80dba0de3aa	pyyaml@5.3.1	5.4

Open the chart page →

36,215

pet-battle-infrapetbattle

1.0.32

1 of 2 See more

pet-battle-infra petbattle 1.0.32

1 of the 2 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.8	bb5e052770e5	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-urllib3@1.24.2-5.el8	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:3.11-10.module+el8.4.0+9579+e9717e18 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

15,466

pet-battle-tournamentpetbattle

1.0.40

1 of 3 See more

pet-battle-tournament petbattle 1.0.40

1 of the 3 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.8	bb5e052770e5	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-urllib3@1.24.2-5.el8	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:3.11-10.module+el8.4.0+9579+e9717e18 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

15,466

gitlab-runner-operatorpnnl-miscscripts

0.1.6

1 of 1 See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
pnnlmiscscripts/gitlab-runner-operator :0.1.3-1	155131891741	pyyaml@5.3	5.4

Open the chart page →

11,151

tenant-namespace-operatorpnnl-miscscripts

0.1.28

1 of 1 See more

tenant-namespace-operator pnnl-miscscripts 0.1.28

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
pnnlmiscscripts/tenant-namespace-operator :0.1.24-1	8af4b7551d40	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_8 python-urllib3@1.24.2-5.el8	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

12,754

ibm-mongodb-enterprise-helmredhat

0.3.0

1 of 1 See more

ibm-mongodb-enterprise-helm redhat 0.3.0

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
ibmcom/ibm-enterprise-mongodb-ppc64le :4.4	d28bf361327a	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-urllib3@1.24.2-4.el8	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

12,248

ansible-automation-platformredhat-cop

0.0.9

1 of 1 See more

ansible-automation-platform redhat-cop 0.0.9

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-urllib3@1.24.2-5.el8	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:3.11-10.module+el8.4.0+9579+e9717e18 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

15,291

argocd-operatorredhat-cop

1.2.2

1 of 1 See more

argocd-operator redhat-cop 1.2.2

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-urllib3@1.24.2-5.el8	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:3.11-10.module+el8.4.0+9579+e9717e18 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

15,291

ploigosredhat-cop

0.0.9

1 of 2 See more

ploigos redhat-cop 0.0.9

1 of the 2 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.6	6722d5041b47	python-ply@3.9-8.el8	0:3.11-10.module+el8.4.0+9579+e9717e18

Open the chart page →

11,437

sonatype-nexusredhat-cop

1.1.13

1 of 2 See more

sonatype-nexus redhat-cop 1.1.13

1 of the 2 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-jenkins-agent-base :latest	c241c971aef8	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_6 python-urllib3@1.24.2-5.el8_6.1	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:3.11-10.module+el8.4.0+9579+e9717e18 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

16,047

stackrox-chartredhat-cop

0.0.10

1 of 1 See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-urllib3@1.24.2-5.el8	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:3.11-10.module+el8.4.0+9579+e9717e18 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79

Open the chart page →

29,227

argocdromholdings

1.8.1

1 of 3 See more

argocd romholdings 1.8.1

1 of the 3 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
argoproj/argocd :v1.8.1	830e86cacefd	pyyaml@5.3.1	5.4

Open the chart page →

10,466

test-helm-app2saam-helm-test

0.1.0

1 of 1 See more

test-helm-app2 saam-helm-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-14343.

Container image	Digest	Package	Fixed in
asdkant/fastapi-hello-world :latest	a23d8bf7c885	pyyaml@5.3.1	5.4

Open the chart page →

2,770

Container images carrying it

167 by charts deploying them

A fixed version is listed for 9 of the 9 affected packages.

Container image	Digest	Package	Fixed in	Used by
oomk8s/readiness-check :2.0.2	875814cc853d	pyyaml@3.13	5.4	11
osixia/openldap :1.5.0	18742e9c449c	pyyaml@3.13	5.4	7
oomk8s/readiness-check :2.0.0	7daa08b81954	pyyaml@3.12	5.4	6
osixia/phpldapadmin :0.9.0	d112b82be133	pyyaml@3.13	5.4	5
osixia/phpldapadmin :0.7.1	1ab629698ae0	pyyaml@3.12	5.4	4
argoproj/argocd :v1.8.1	830e86cacefd	pyyaml@5.3.1	5.4	3
kiwigrid/k8s-sidecar :0.1.193	170069ff0976	pyyaml@5.3.1	5.4	3
kiwigrid/k8s-sidecar :0.1.151	7b98eecdf6d1	pyyaml@5.3.1	5.4	3
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-urllib3@1.24.2-5.el8	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:3.11-10.module+el8.4.0+9579+e9717e18 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79	3
amancevice/superset :0.35.2	12a0a9e66550	pyyaml@5.1.2	5.4	2
architectminds/aws-kubectl :1.1	9735e59a1085	pyyaml@5.1	5.4	2
hjacobs/kube-ops-view :20.4.0	58221b57d4d2	pyyaml@5.3.1	5.4	2
larribas/mlflow :1.9.1	05ccb0b46bfb	pyyaml@5.3.1	5.4	2
omecproject/kubernetes-synchronizer :comac-1.0.0	7c17a7b1d1ef	pyyaml@5.1	5.4	2
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	pyyaml@3.12	5.4	2
osixia/openldap :1.4.0	ccd95cc6e61e	pyyaml@3.13	5.4	2
osixia/openldap :1.2.4	d212a12aa728	pyyaml@3.12	5.4	2
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	pyyaml@3.12	5.4	2
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-urllib3@1.24.2-5.el8	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:3.11-10.module+el8.4.0+9579+e9717e18 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79	2
quay.io/openshift/origin-cli :4.8	bb5e052770e5	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-urllib3@1.24.2-5.el8	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:3.11-10.module+el8.4.0+9579+e9717e18 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79	2
a10networks/acos-prometheus-exporter :latest	8dc58d434d71	pyyaml@5.3.1	5.4	1
afrank/mozalert-controller :latest	d463c37b08d7	pyyaml@5.3.1	5.4	1
akeyless/base-rhel :0.0.1	4ba8900a0061	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_8 python-urllib3@1.24.2-5.el8_9.2	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79	1
amancevice/superset :0.28.1	c8c04bfe3d66	pyyaml@3.12	5.4	1
amundsendev/amundsen-metadata :2.5.4	4d98eb21f5f9	pyyaml@5.3.1	5.4	1
amundsendev/amundsen-search :2.4.0	99dda9502c3e	pyyaml@5.3.1	5.4	1
anchore/anchore-engine :v0.10.0	bde9eedf639d	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-2.1.el8_1 python-urllib3@1.24.2-5.el8	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79	1
anchore/anchore-engine :v0.7.1	ed9b3badd17c	python-wheel@1:0.31.1-2.module+el8.1.0+3724+3c097090 pyyaml@5.3	0:0.33.6-5.module+el8.4.0+8888+89bc7e79 5.4	1
andrianrf/backoffice :latest	047a7837651e	python-chardet@3.0.4-7.el8 python-idna@2.5-7.el8_10 python-ply@3.9-9.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_8 python-urllib3@1.24.2-8.el8_10	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:3.11-10.module+el8.4.0+9579+e9717e18 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79	1
ansiblesemaphore/semaphore :v2.8.53	03d1f8684027	pyyaml@5.3.1	5.4	1
apachepulsar/pulsar :2.10.0	3b262ab7a7d9	pyyaml@5.3.1	5.4	1
apachepulsar/pulsar :2.6.1	4db6ff0b4045	pyyaml@3.13	5.4	1
apachepulsar/pulsar :2.9.0	d056c89b7131	pyyaml@5.3.1	5.4	1
apachepulsar/pulsar :2.8.2	d538416d5afe	pyyaml@5.3.1	5.4	1
apecloud/smartfs-csi-driver :0.1.1	ff2858eab9cc	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_8 python-urllib3@1.24.2-5.el8	0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79	1
asdkant/fastapi-hello-world :latest	a23d8bf7c885	pyyaml@5.3.1	5.4	1
buildkite/agent :3.25.0	aec38cfaae0e	pyyaml@3.13	5.4	1
camptocamp/ekorre :0.1.0	35c91d5fda04	pyyaml@5.2	5.4	1
camptocamp/pghoard :10	bff736b15623	pyyaml@3.13	5.4	1
camptocamp/snow-webhook :latest	2924b43dbf40	pyyaml@3.13	5.4	1
ceph/daemon :latest-nautilus	90f30824a96e	pyyaml@3.10	5.4	1
ceticasbl/pg-ldap-sync :latest	6c0aa7567145	pyyaml@3.13	5.4	1
chetangautamm/repo :Opensips_Build	b4b94155ff5a	pyyaml@3.10	5.4	1
codekoala/pypi :1.2.1	4a999b2cfff2	pyyaml@3.12	5.4	1
confluentinc/cp-kafka :5.4.0	1bbda887bc53	pyyaml@3.13	5.4	1
confluentinc/cp-kafka :5.0.1	c87b1c07fb53	pyyaml@3.13	5.4	1
daskdev/dask :1.1.0	4ecd7bc35500	pyyaml@3.13	5.4	1
daskdev/dask-notebook :1.1.0	052630f5ca04	pyyaml@3.13	5.4	1
datadog/agent :7.22.0	8f20e56b5311	pyyaml@5.3.1	5.4	1
deconzcommunity/deconz :2.12.06	6541bbb78952	pyyaml@3.13	5.4	1