StackRadar

CVE-2020-15257

Medium

Advisory

Published 24 May 2021In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.2
base score, highest
EPSS
0.032
88th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
85
of 17,781 indexed, latest versions
Container images
80
deployed by those charts
Fix available
1 of 1
affected package

containerd-shim API Exposed to Host Network Containers

Carried by container images the latest versions of 85 of 17,781 indexed charts deploy, on 80 images.

Affected packageAffected versionsFixed inImages
github.com/containerd/containerdgolangv1.3.0, v1.3.2, v1.3.3, v1.3.4+3 more1.3.9, 1.4.380
OSV records
GHSA-36xw-fx78-c5r4
Also known as
GO-2022-0784

Charts affected

85 by stars
ChartLatestAffected imagesRadar Score
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.14.3f09282d281f6
github.com/containerd/containerd@v1.3.3
1.3.9

Open the chart page →

11,384
helm-exportersstarcher0.5.01 of 1See more

helm-exporter sstarcher 0.5.0

1 of the 1 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
sstarcher/helm-exporter:0.5.011769d01ba35
github.com/containerd/containerd@v1.3.0
1.3.9

Open the chart page →

4,154
wazuhwazuh-helmVerified publisher0.0.81 of 4See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.11.11da5c38c6a78
github.com/containerd/containerd@v1.3.3
1.3.9

Open the chart page →

6,168
fadicetic0.3.11 of 25See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
library/traefik:2.5.47d0228d19042
github.com/containerd/containerd@v1.3.2
1.3.9

Open the chart page →

52,919
drone-runner-dockerdroneVerified publisher0.7.01 of 3See more

drone-runner-docker drone 0.7.0

1 of the 3 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
drone/drone-runner-docker:1.8.1137e79c5e23c
github.com/containerd/containerd@v1.3.4
1.3.9

Open the chart page →

5,674
maeshtraefikOfficialVerified publisher2.1.21 of 7See more

maesh traefik 2.1.2

1 of the 7 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
containous/maesh:v1.3.2587162516502
github.com/containerd/containerd@v1.3.2
1.3.9

Open the chart page →

4,136
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
github.com/containerd/containerd@v1.3.3
1.3.9

Open the chart page →

10,730
dltbrokerassist-iot-distributed-broker0.2.02 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
hyperledger/fabric-peer:2.46ff36af21eb1
github.com/containerd/containerd@v1.4.1
1.4.3
hyperledger/fabric-tools:2.4b1194f509085
github.com/containerd/containerd@v1.4.1
1.4.3

Open the chart page →

77,706
dltloggingassist-iot-logging-auditing0.2.02 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
hyperledger/fabric-peer:2.46ff36af21eb1
github.com/containerd/containerd@v1.4.1
1.4.3
hyperledger/fabric-tools:2.4b1194f509085
github.com/containerd/containerd@v1.4.1
1.4.3

Open the chart page →

77,687
brpservicebrpservice1.1.01 of 4See more

brpservice brpservice 1.1.0

1 of the 4 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/brpservice-php:latestc17f1ba17d36
github.com/containerd/containerd@v1.3.2
1.3.9

Open the chart page →

7,830
cloudflow-enterprise-componentscloudflow-helm-charts0.0.0-NIGHTLY011220201 of 9See more

cloudflow-enterprise-components cloudflow-helm-charts 0.0.0-NIGHTLY01122020

1 of the 9 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
prom/prometheus:v2.21.0d43417c260e5
github.com/containerd/containerd@v1.3.4
1.3.9

Open the chart page →

4,256
contactcataloguscontact-catalogus1.0.01 of 3See more

contactcatalogus contact-catalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/contactcatalogus-php:latesteeb625bd660c
github.com/containerd/containerd@v1.3.2
1.3.9

Open the chart page →

7,303
digispoof-interfacedigispoof-interface1.0.01 of 3See more

digispoof-interface digispoof-interface 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/digispoof-interface-php:latest03aba499950f
github.com/containerd/containerd@v1.3.2
1.3.9

Open the chart page →

7,779
dnation-pingdnationcloud0.1.91 of 5See more

dnation-ping dnationcloud 0.1.9

1 of the 5 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
prom/prometheus:v2.21.0d43417c260e5
github.com/containerd/containerd@v1.3.4
1.3.9

Open the chart page →

10,454
mesherykubesphere-stable0.5.01 of 13See more

meshery kubesphere-stable 0.5.0

1 of the 13 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
layer5/meshery-nsm:stable-latestebd6a8faf21f
github.com/containerd/containerd@v1.3.4
1.3.9

Open the chart page →

24,690
landelijketabellencataloguslandelijketabellencatalogus1.0.01 of 3See more

landelijketabellencatalogus landelijketabellencatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/landelijketabellencatalogus-php:latest26d91dcbba56
github.com/containerd/containerd@v1.3.2
1.3.9

Open the chart page →

7,510
prometheusprometheus-worawutchan13.0.01 of 6See more

prometheus prometheus-worawutchan 13.0.0

1 of the 6 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.22.1b899dbd1b901
github.com/containerd/containerd@v1.3.4
1.3.9

Open the chart page →

9,939
hlf-k8ssubstraVerified publisher10.2.42 of 7See more

hlf-k8s substra 10.2.4

2 of the 7 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
ghcr.io/substra/fabric-peer:0.2.4f681e0343a31
github.com/containerd/containerd@v1.4.1
1.4.3
ghcr.io/substra/fabric-tools:0.2.43491a0f31c4a
github.com/containerd/containerd@v1.4.1
1.4.3

Open the chart page →

12,006
user-componentuser-component1.2.01 of 4See more

user-component user-component 1.2.0

1 of the 4 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/user-component-php:latest198db44fabb5
github.com/containerd/containerd@v1.3.2
1.3.9

Open the chart page →

7,303
waardepapierenwaardepapieren1.0.01 of 3See more

waardepapieren waardepapieren 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/waardepapieren-php:latestb2666ffcbad8
github.com/containerd/containerd@v1.3.2
1.3.9

Open the chart page →

8,079
waardepapieren-baliewaardepapieren-balie1.0.01 of 3See more

waardepapieren-balie waardepapieren-balie 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/waardepapieren-balie-php:latestf36c423cd259
github.com/containerd/containerd@v1.3.2
1.3.9

Open the chart page →

7,871
waardepapieren-registerwaardepapieren-register1.1.01 of 4See more

waardepapieren-register waardepapieren-register 1.1.0

1 of the 4 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/waardepapieren-register-php:latest9affab218351
github.com/containerd/containerd@v1.3.2
1.3.9

Open the chart page →

7,429
adresserviceadresservice1.1.01 of 5See more

adresservice adresservice 1.1.0

1 of the 5 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/adresservice-php:latestc5075f0320cd
github.com/containerd/containerd@v1.3.2
1.3.9

Open the chart page →

7,447
agendaserviceagendaservice1.0.01 of 3See more

agendaservice agendaservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
conduction/agendaservice-php:latest9cfeeb6c7c20
github.com/containerd/containerd@v1.3.2
1.3.9

Open the chart page →

7,209
dltkvassist-iot-data-integrity-verification0.2.02 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

2 of the 9 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
hyperledger/fabric-peer:2.46ff36af21eb1
github.com/containerd/containerd@v1.4.1
1.4.3
hyperledger/fabric-tools:2.4b1194f509085
github.com/containerd/containerd@v1.4.1
1.4.3

Open the chart page →

77,706
dltflassist-iot-dlt-based-fl0.2.02 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

2 of the 9 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
hyperledger/fabric-peer:2.46ff36af21eb1
github.com/containerd/containerd@v1.4.1
1.4.3
hyperledger/fabric-tools:2.4b1194f509085
github.com/containerd/containerd@v1.4.1
1.4.3

Open the chart page →

77,706
authorization-componentauthorization-component1.0.01 of 3See more

authorization-component authorization-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/authorization-component-php:latest94a749392fcf
github.com/containerd/containerd@v1.3.2
1.3.9

Open the chart page →

7,561
balance-registrationbalance-registration0.1.01 of 4See more

balance-registration balance-registration 0.1.0

1 of the 4 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
conduction/balance-registration-php:devc36094a41369
github.com/containerd/containerd@v1.3.2
1.3.9

Open the chart page →

8,408
berichtserviceberichtservice1.0.01 of 3See more

berichtservice berichtservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/berichtservice-php:latestee6a21e66ff0
github.com/containerd/containerd@v1.3.2
1.3.9

Open the chart page →

7,342
checkin-componentcheckin-component0.1.01 of 4See more

checkin-component checkin-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
conduction/checkin-component-php:dev3423845692c1
github.com/containerd/containerd@v1.3.2
1.3.9

Open the chart page →

8,408
ibm-toolkit-installcloud-native-toolkit0.3.01 of 1See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
github.com/containerd/containerd@v1.3.2
1.3.9

Open the chart page →

6,695
cgrccommongroundregistratiecomponent0.1.01 of 3See more

cgrc commongroundregistratiecomponent 0.1.0

1 of the 3 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
conduction/cgrc-php:dev25415534d245
github.com/containerd/containerd@v1.3.2
1.3.9

Open the chart page →

7,572
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
conduction/conduction-ui-php:dev2744565516e8
github.com/containerd/containerd@v1.3.2
1.3.9

Open the chart page →

12,907
betaalservicecontacten-catalog1.0.01 of 3See more

betaalservice contacten-catalog 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
conduction/betaalservice-php:latestece1ab544c57
github.com/containerd/containerd@v1.3.2
1.3.9

Open the chart page →

7,209
contactmoment-componentcontactmoment-component0.1.01 of 4See more

contactmoment-component contactmoment-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
conduction/contactmoment-component-php:deve1d4ad1e22a8
github.com/containerd/containerd@v1.3.2
1.3.9

Open the chart page →

8,408
wazuhcsic-charts0.1.01 of 4See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.4.121994f40e0da
github.com/containerd/containerd@v1.3.3
1.3.9

Open the chart page →

13,852
cloudwatch-agent-prometheusdasmeta0.2.21 of 1See more

cloudwatch-agent-prometheus dasmeta 0.2.2

1 of the 1 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:1.247350.0b251780e745d1783c93
github.com/containerd/containerd@v1.3.3
1.3.9

Open the chart page →

2,977
ambassador-operatordatawire0.3.01 of 1See more

ambassador-operator datawire 0.3.0

1 of the 1 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
datawire/ambassador-operator:v1.3.0f95ae710d75c
github.com/containerd/containerd@v1.3.0
1.3.9

Open the chart page →

7,486
argocddevtron1.8.11 of 3See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/containerd/containerd@v1.3.4
1.3.9

Open the chart page →

10,466
argocddevtron-labs1.8.11 of 3See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/containerd/containerd@v1.3.4
1.3.9

Open the chart page →

10,466
docparserdocparser0.1.01 of 4See more

docparser docparser 0.1.0

1 of the 4 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
conduction/docparser-php:devb6f95c8ead7d
github.com/containerd/containerd@v1.3.2
1.3.9

Open the chart page →

8,408
eav-componenteav-component1.0.01 of 3See more

eav-component eav-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eav-component-php:latest24bbca4a52a8
github.com/containerd/containerd@v1.3.2
1.3.9

Open the chart page →

7,255
education-componenteducation-component1.0.01 of 3See more

education-component education-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/education-component-php:latestda6b05a1a601
github.com/containerd/containerd@v1.3.2
1.3.9

Open the chart page →

7,327
eherkenning-uieherkenning-ui1.0.01 of 3See more

eherkenning-ui eherkenning-ui 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eherkenning-ui-php:latestdeed102b4255
github.com/containerd/containerd@v1.3.2
1.3.9

Open the chart page →

7,510
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
github.com/containerd/containerd@v1.3.0
1.3.9

Open the chart page →

14,673
grafregistratiecomponentgrafregistratiecomponent1.0.01 of 3See more

grafregistratiecomponent grafregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/grafregistratiecomponent-php:latest35225eaa87ab
github.com/containerd/containerd@v1.3.2
1.3.9

Open the chart page →

7,510
instemmingserviceinstemmingservice1.0.01 of 3See more

instemmingservice instemmingservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/instemmingservice-php:latest4ffe222b3e3a
github.com/containerd/containerd@v1.3.2
1.3.9

Open the chart page →

7,510
promtailkube-opsVerified publisher1.5.11 of 2See more

promtail kube-ops 1.5.1

1 of the 2 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
quay.io/kube-ops/promtail:2.2.134de6387233b
github.com/containerd/containerd@v1.4.1
1.4.3

Open the chart page →

4,149
kvkkvkservice0.1.01 of 4See more

kvk kvkservice 0.1.0

1 of the 4 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
conduction/kvk-php:dev8f177f9f8a7b
github.com/containerd/containerd@v1.3.2
1.3.9

Open the chart page →

8,534
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2020-15257.

Container imageDigestPackageFixed in
kubeoperator/webkubectl:v2.4.0be8f0d624640
github.com/containerd/containerd@v1.3.2
1.3.9

Open the chart page →

26,356

Container images carrying it

80 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/conductionnl/instemmingservice-php:latest4ffe222b3e3a
github.com/containerd/containerd@v1.3.2
1.3.9
1
ghcr.io/conductionnl/landelijketabellencatalogus-php:latest26d91dcbba56
github.com/containerd/containerd@v1.3.2
1.3.9
1
ghcr.io/conductionnl/loggingcomponent-php:latest834b8e1af290
github.com/containerd/containerd@v1.3.2
1.3.9
1
ghcr.io/conductionnl/logicservice-php:latest72aae2080595
github.com/containerd/containerd@v1.3.2
1.3.9
1
ghcr.io/conductionnl/medewerkercatalogus-php:latest1ea5412bed26
github.com/containerd/containerd@v1.3.2
1.3.9
1
ghcr.io/conductionnl/memo-component-php:latestef77f4c089a1
github.com/containerd/containerd@v1.3.2
1.3.9
1
ghcr.io/conductionnl/notification-component-php:latestcd9656e6bc2c
github.com/containerd/containerd@v1.3.2
1.3.9
1
ghcr.io/conductionnl/ocatiecatalogus-php:latestc22764cbfa97
github.com/containerd/containerd@v1.3.2
1.3.9
1
ghcr.io/conductionnl/orderregistratiecomponent-php:latestd17257e4fa27
github.com/containerd/containerd@v1.3.2
1.3.9
1
ghcr.io/conductionnl/procestypecatalogus-php:latest956c4fb64796
github.com/containerd/containerd@v1.3.2
1.3.9
1
ghcr.io/conductionnl/productenendienstencatalogus-php:latest7242da105081
github.com/containerd/containerd@v1.3.2
1.3.9
1
ghcr.io/conductionnl/proto-component-commonground-php:latesteb36ead1954e
github.com/containerd/containerd@v1.3.2
1.3.9
1
ghcr.io/conductionnl/review-component-php:latestafe623824b82
github.com/containerd/containerd@v1.3.2
1.3.9
1
ghcr.io/conductionnl/taalhuizen-service-php:latest04f1b7f0d573
github.com/containerd/containerd@v1.3.2
1.3.9
1
ghcr.io/conductionnl/trouw-service-php:latestf745e2870692
github.com/containerd/containerd@v1.3.2
1.3.9
1
ghcr.io/conductionnl/user-component-php:latest198db44fabb5
github.com/containerd/containerd@v1.3.2
1.3.9
1
ghcr.io/conductionnl/verhuis-service-php:latest66bbaf95a123
github.com/containerd/containerd@v1.3.2
1.3.9
1
ghcr.io/conductionnl/verzoekconversieservice-php:lateste918014fb8d3
github.com/containerd/containerd@v1.3.2
1.3.9
1
ghcr.io/conductionnl/verzoekregistratiecomponent-php:latestc4f6c03af5d3
github.com/containerd/containerd@v1.3.2
1.3.9
1
ghcr.io/conductionnl/verzoektypecatalogus-php:latest64f5eb7a398b
github.com/containerd/containerd@v1.3.2
1.3.9
1
ghcr.io/conductionnl/waardepapieren-balie-php:latestf36c423cd259
github.com/containerd/containerd@v1.3.2
1.3.9
1
ghcr.io/conductionnl/waardepapieren-php:latestb2666ffcbad8
github.com/containerd/containerd@v1.3.2
1.3.9
1
ghcr.io/conductionnl/waardepapieren-register-php:latest9affab218351
github.com/containerd/containerd@v1.3.2
1.3.9
1
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
github.com/containerd/containerd@v1.3.2
1.3.9
1
ghcr.io/substra/fabric-peer:0.2.4f681e0343a31
github.com/containerd/containerd@v1.4.1
1.4.3
1
ghcr.io/substra/fabric-tools:0.2.43491a0f31c4a
github.com/containerd/containerd@v1.4.1
1.4.3
1
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
github.com/containerd/containerd@v1.3.2
1.3.9
1
quay.io/kube-ops/promtail:2.2.134de6387233b
github.com/containerd/containerd@v1.4.1
1.4.3
1
quay.io/openshift/origin-cli:4.66722d5041b47
github.com/containerd/containerd@v1.3.3
1.3.9
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
github.com/containerd/containerd@v1.4.1-0.20201117152358-0edc412565dc
1.4.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.