StackRadarChart IndexLive demo

CVE-2020-15187

Low

Advisory

Published 24 May 2021In the index since 6 Sept 2026

Severity: Low; worst across findings
CVSS: 3.0; base score, highest
EPSS: 0.015; 73rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 11; of 17,781 indexed, latest versions
Container images: 11; deployed by those charts
Fix available: 2 of 2; affected packages

plugin.yaml file allows for duplicate entries in helm

Carried by container images the latest versions of 11 of 17,781 indexed charts deploy, on 11 images.

Affected package	Affected versions	Fixed in	Images
helm.sh/helm/v3golang	v3.0.2, v3.0.3, v3.1.0, v3.2.0+2 more	3.3.2	8
helmgolang	2.7.2, 2.12.1, 2.14.3	2.16.11	3

OSV records: GHSA-c52f-pq47-2r9j
Also known as: BIT-helm-2020-15187

Charts affected

11 by stars

Chart

Latest

Affected images

Radar Score

helm-exportersstarcher

1 of 1 See more

helm-exporter sstarcher 0.5.0

1 of the 1 container images this version deploys carry CVE-2020-15187.

Container image	Digest	Package	Fixed in
sstarcher/helm-exporter :0.5.0	11769d01ba35	helm.sh/helm/v3@v3.0.2	3.3.2

Open the chart page →

4,154

mesherykubesphere-stable

1 of 13 See more

meshery kubesphere-stable 0.5.0

1 of the 13 container images this version deploys carry CVE-2020-15187.

Container image	Digest	Package	Fixed in
layer5/meshery-nsm :stable-latest	ebd6a8faf21f	helm.sh/helm/v3@v3.3.1	3.3.2

Open the chart page →

24,690

ambassador-operatordatawire

1 of 1 See more

ambassador-operator datawire 0.3.0

1 of the 1 container images this version deploys carry CVE-2020-15187.

Container image	Digest	Package	Fixed in
datawire/ambassador-operator :v1.3.0	f95ae710d75c	helm.sh/helm/v3@v3.0.3	3.3.2

Open the chart page →

7,486

ibm-microclimateibm-charts

1 of 8 See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2020-15187.

Container image	Digest	Package	Fixed in
ibmcom/microclimate-file-watcher :latest	ab3fd1fdfa18	helm@2.7.2	2.16.11

Open the chart page →

57,669

pipecdkrzwiatrzyk

1 of 3 See more

pipecd krzwiatrzyk 0.39.0

1 of the 3 container images this version deploys carry CVE-2020-15187.

Container image	Digest	Package	Fixed in
ghcr.io/pipe-cd/pipecd :v0.39.0	0fae829caf29	helm.sh/helm/v3@v3.2.0	3.3.2

Open the chart page →

3,812

ladeitladeit

1 of 2 See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2020-15187.

Container image	Digest	Package	Fixed in
kubeoperator/webkubectl :v2.4.0	be8f0d624640	helm.sh/helm/v3@v3.2.0	3.3.2

Open the chart page →

26,356

devspace-cloudloft

1 of 8 See more

devspace-cloud loft 0.3.3

1 of the 8 container images this version deploys carry CVE-2020-15187.

Container image	Digest	Package	Fixed in
devspacecloud/manager :0.3.3	49c397413f7b	helm.sh/helm/v3@v3.1.0	3.3.2

Open the chart page →

9,880

flaggermesosphere

1 of 2 See more

flagger mesosphere 0.21.0

1 of the 2 container images this version deploys carry CVE-2020-15187.

Container image	Digest	Package	Fixed in
weaveworks/flagger-loadtester :0.9.0	3cdac6928a63	helm@2.14.3	2.16.11

Open the chart page →

6,048

argo-cdmesosphere-stable

1 of 4 See more

argo-cd mesosphere-stable 0.5.4

1 of the 4 container images this version deploys carry CVE-2020-15187.

Container image	Digest	Package	Fixed in
argoproj/argocd :v1.2.1	b0230853357d	helm@2.12.1	2.16.11

Open the chart page →

1,462

gitlab-runner-operatorpnnl-miscscripts

1 of 1 See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2020-15187.

Container image	Digest	Package	Fixed in
pnnlmiscscripts/gitlab-runner-operator :0.1.3-1	155131891741	helm.sh/helm/v3@v3.0.2	3.3.2

Open the chart page →

11,151

quarksquarks

7.0.1+0.g5396b11

1 of 5 See more

quarks quarks 7.0.1+0.g5396b11

1 of the 5 container images this version deploys carry CVE-2020-15187.

Container image	Digest	Package	Fixed in
ghcr.io/cloudfoundry-incubator/quarks-secret :v1.0.754	f059af4de8ed	helm.sh/helm/v3@v3.3.0	3.3.2

Open the chart page →

18,197

Container images carrying it

11 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
argoproj/argocd :v1.2.1	b0230853357d	helm@2.12.1	2.16.11	1
datawire/ambassador-operator :v1.3.0	f95ae710d75c	helm.sh/helm/v3@v3.0.3	3.3.2	1
devspacecloud/manager :0.3.3	49c397413f7b	helm.sh/helm/v3@v3.1.0	3.3.2	1
ibmcom/microclimate-file-watcher :latest	ab3fd1fdfa18	helm@2.7.2	2.16.11	1
kubeoperator/webkubectl :v2.4.0	be8f0d624640	helm.sh/helm/v3@v3.2.0	3.3.2	1
layer5/meshery-nsm :stable-latest	ebd6a8faf21f	helm.sh/helm/v3@v3.3.1	3.3.2	1
pnnlmiscscripts/gitlab-runner-operator :0.1.3-1	155131891741	helm.sh/helm/v3@v3.0.2	3.3.2	1
sstarcher/helm-exporter :0.5.0	11769d01ba35	helm.sh/helm/v3@v3.0.2	3.3.2	1
weaveworks/flagger-loadtester :0.9.0	3cdac6928a63	helm@2.14.3	2.16.11	1
ghcr.io/cloudfoundry-incubator/quarks-secret :v1.0.754	f059af4de8ed	helm.sh/helm/v3@v3.3.0	3.3.2	1
ghcr.io/pipe-cd/pipecd :v0.39.0	0fae829caf29	helm.sh/helm/v3@v3.2.0	3.3.2	1