CVE-2020-14343
CriticalAdvisory
Published 9 Feb 2021In the index since 5 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.8
- base score, highest
- EPSS
- 0.060
- 93rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 187
- of 17,781 indexed, latest versions
- Container images
- 167
- deployed by those charts
- Fix available
- 9 of 9
- affected packages
Improper Input Validation in PyYAML
Carried by container images the latest versions of 187 of 17,781 indexed charts deploy, on 167 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| pyyamlpypi | 3.10, 3.12, 3.13, 5.1+5 more | 5.4 | 120 |
| python-chardetrpm | 3.0.4-7.el8 | 0:3.0.4-19.module+el8.4.0+8888+89bc7e79 | 44 |
| python-idnarpm | 2.5-5.el8, 2.5-7.el8_10, 2.5-8.el8_10 | 0:2.8-6.module+el8.4.0+8888+89bc7e79 | 44 |
| python-pysocksrpm | 1.6.8-3.el8 | 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 | 44 |
| python-requestsrpm | 2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_8, 2.20.0-6.el8_10 | 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 | 44 |
| python-urllib3rpm | 1.24.2-4.el8, 1.24.2-5.el8, 1.24.2-5.el8_6.1, 1.24.2-5.el8_9.2+3 more | 0:1.25.7-4.module+el8.4.0+8888+89bc7e79 | 44 |
| python-plyrpm | 3.9-8.el8, 3.9-9.el8 | 0:3.11-10.module+el8.4.0+570+c2eaf144, 0:3.11-10.module+el8.4.0+9579+e9717e18 | 13 |
| py3-yamlapk | 5.3.1-r0 | 5.3.1-r1 | 1 |
| python-wheelrpm | 1:0.31.1-2.module+el8.1.0+3724+3c097090 | 0:0.33.6-5.module+el8.4.0+8888+89bc7e79 | 1 |
- OSV records
- ALPINE-CVE-2020-14343GHSA-8q59-q68h-6hv4RHSA-2021:2583RLSA-2021:2583
- Also known as
- PYSEC-2021-142
Charts affected
187 by stars
Container images carrying it
167 by charts deploying them
A fixed version is listed for 9 of the 9 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| oomk8s/ | 875814cc853d | pyyaml | 5.4 | 11 |
| osixia/ | 18742e9c449c | pyyaml | 5.4 | 7 |
| oomk8s/ | 7daa08b81954 | pyyaml | 5.4 | 6 |
| osixia/ | d112b82be133 | pyyaml | 5.4 | 5 |
| osixia/ | 1ab629698ae0 | pyyaml | 5.4 | 4 |
| argoproj/ | 830e86cacefd | pyyaml | 5.4 | 3 |
| kiwigrid/ | 170069ff0976 | pyyaml | 5.4 | 3 |
| kiwigrid/ | 7b98eecdf6d1 | pyyaml | 5.4 | 3 |
| quay.io/ | a7dff785d821 | python-chardet python-idna python-ply python-pysocks python-requests python-urllib3 | 0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:3.11-10.module+el8.4.0+9579+e9717e18 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79 | 3 |
| amancevice/ | 12a0a9e66550 | pyyaml | 5.4 | 2 |
| architectminds/ | 9735e59a1085 | pyyaml | 5.4 | 2 |
| hjacobs/ | 58221b57d4d2 | pyyaml | 5.4 | 2 |
| larribas/ | 05ccb0b46bfb | pyyaml | 5.4 | 2 |
| omecproject/ | 7c17a7b1d1ef | pyyaml | 5.4 | 2 |
| omecproject/ | cfdb566dd949 | pyyaml | 5.4 | 2 |
| osixia/ | ccd95cc6e61e | pyyaml | 5.4 | 2 |
| osixia/ | d212a12aa728 | pyyaml | 5.4 | 2 |
| quay.io/ | f7f8228f17cc | pyyaml | 5.4 | 2 |
| quay.io/ | 464a3af4dfe0 | python-chardet python-idna python-ply python-pysocks python-requests python-urllib3 | 0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:3.11-10.module+el8.4.0+9579+e9717e18 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79 | 2 |
| quay.io/ | bb5e052770e5 | python-chardet python-idna python-ply python-pysocks python-requests python-urllib3 | 0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:3.11-10.module+el8.4.0+9579+e9717e18 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79 | 2 |
| a10networks/ | 8dc58d434d71 | pyyaml | 5.4 | 1 |
| afrank/ | d463c37b08d7 | pyyaml | 5.4 | 1 |
| akeyless/ | 4ba8900a0061 | python-chardet python-idna python-pysocks python-requests python-urllib3 | 0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79 | 1 |
| amancevice/ | c8c04bfe3d66 | pyyaml | 5.4 | 1 |
| amundsendev/ | 4d98eb21f5f9 | pyyaml | 5.4 | 1 |
| amundsendev/ | 99dda9502c3e | pyyaml | 5.4 | 1 |
| anchore/ | bde9eedf639d | python-chardet python-idna python-pysocks python-requests python-urllib3 | 0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79 | 1 |
| anchore/ | ed9b3badd17c | python-wheel pyyaml | 0:0.33.6-5.module+el8.4.0+8888+89bc7e79 5.4 | 1 |
| andrianrf/ | 047a7837651e | python-chardet python-idna python-ply python-pysocks python-requests python-urllib3 | 0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:3.11-10.module+el8.4.0+9579+e9717e18 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79 | 1 |
| ansiblesemaphore/ | 03d1f8684027 | pyyaml | 5.4 | 1 |
| apachepulsar/ | 3b262ab7a7d9 | pyyaml | 5.4 | 1 |
| apachepulsar/ | 4db6ff0b4045 | pyyaml | 5.4 | 1 |
| apachepulsar/ | d056c89b7131 | pyyaml | 5.4 | 1 |
| apachepulsar/ | d538416d5afe | pyyaml | 5.4 | 1 |
| apecloud/ | ff2858eab9cc | python-chardet python-idna python-pysocks python-requests python-urllib3 | 0:3.0.4-19.module+el8.4.0+8888+89bc7e79 0:2.8-6.module+el8.4.0+8888+89bc7e79 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-4.module+el8.4.0+8888+89bc7e79 | 1 |
| asdkant/ | a23d8bf7c885 | pyyaml | 5.4 | 1 |
| buildkite/ | aec38cfaae0e | pyyaml | 5.4 | 1 |
| camptocamp/ | 35c91d5fda04 | pyyaml | 5.4 | 1 |
| camptocamp/ | bff736b15623 | pyyaml | 5.4 | 1 |
| camptocamp/ | 2924b43dbf40 | pyyaml | 5.4 | 1 |
| ceph/ | 90f30824a96e | pyyaml | 5.4 | 1 |
| ceticasbl/ | 6c0aa7567145 | pyyaml | 5.4 | 1 |
| chetangautamm/ | b4b94155ff5a | pyyaml | 5.4 | 1 |
| codekoala/ | 4a999b2cfff2 | pyyaml | 5.4 | 1 |
| confluentinc/ | 1bbda887bc53 | pyyaml | 5.4 | 1 |
| confluentinc/ | c87b1c07fb53 | pyyaml | 5.4 | 1 |
| daskdev/ | 4ecd7bc35500 | pyyaml | 5.4 | 1 |
| daskdev/ | 052630f5ca04 | pyyaml | 5.4 | 1 |
| datadog/ | 8f20e56b5311 | pyyaml | 5.4 | 1 |
| deconzcommunity/ | 6541bbb78952 | pyyaml | 5.4 | 1 |