StackRadarChart IndexLive demo

CVE-2020-15366

Medium

Advisory

Published 15 Jul 2020In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.6; base score, highest
EPSS: 0.023; 82nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 125; of 17,781 indexed, latest versions
Container images: 123; deployed by those charts
Fix available: 1 of 2; affected packages

Prototype Pollution in Ajv

Carried by container images the latest versions of 125 of 17,781 indexed charts deploy, on 123 images.

Affected package	Affected versions	Fixed in	Images
ajvnpm	4.11.8, 5.2.3, 5.5.2, 6.4.0+9 more	6.12.3	123
node-ajvdeb	6.10.2-1	no fix listed	2

OSV records: GHSA-v88g-cgmw-v5xw UBUNTU-CVE-2020-15366

Charts affected

125 by stars

Chart

Latest

Affected images

Radar Score

comacopencord

1 of 9 See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2020-15366.

Container image	Digest	Package	Fixed in
omecproject/onos-progran :1.0.0	5715e5648aa0	ajv@5.2.3	6.12.3

Open the chart page →

88,546

onos-progranopencord

1 of 2 See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2020-15366.

Container image	Digest	Package	Fixed in
muluder/prograncontrollermcord :0.1.8	43b597a93da7	ajv@5.2.3	6.12.3

Open the chart page →

38,865

openwhiskopenwhisk

1 of 10 See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2020-15366.

Container image	Digest	Package	Fixed in
openwhisk/alarmprovider :2.2.0	b695a6ceb406	ajv@5.5.2	6.12.3

Open the chart page →

36,215

hive-selfservice-ui-nodeory

1 of 1 See more

hive-selfservice-ui-node ory 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-15366.

Container image	Digest	Package	Fixed in
oryd/hive-selfservice-ui-node :v0.0.4	26347ef0a2de	ajv@5.5.2	6.12.3

Open the chart page →

1,986

myappp4-helm

2 of 6 See more

myapp p4-helm 0.1.0

2 of the 6 container images this version deploys carry CVE-2020-15366.

Container image	Digest	Package	Fixed in
fjvela/urjc-fjvela-external-service :1.0.1	a8ebe5ca13fc	ajv@5.5.2	6.12.3
fjvela/urjc-fjvela-server :1.0.5	3c840aebce22	ajv@5.5.2	6.12.3

Open the chart page →

19,720

1 of 7 See more

bookinfo rgnu 1.0.0

1 of the 7 container images this version deploys carry CVE-2020-15366.

Container image	Digest	Package	Fixed in
istio/examples-bookinfo-ratings-v1 :1.14.0	eb0f1a725ca8	ajv@5.5.2	6.12.3

Open the chart page →

20,462

istio-bookinforgnu

1 of 7 See more

istio-bookinfo rgnu 1.0.2

1 of the 7 container images this version deploys carry CVE-2020-15366.

Container image	Digest	Package	Fixed in
istio/examples-bookinfo-ratings-v1 :1.14.0	eb0f1a725ca8	ajv@5.5.2	6.12.3

Open the chart page →

20,462

1 of 1 See more

5,215

unifi-protectschichtel

1 of 1 See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry CVE-2020-15366.

Container image	Digest	Package	Fixed in
markdegroot/unifi-protect-arm64 :latest	d8445f2a0de6	ajv@5.5.2	6.12.3

Open the chart page →

5,582

wekanschmitzis

1 of 1 See more

wekan schmitzis 1.1.1

1 of the 1 container images this version deploys carry CVE-2020-15366.

Container image	Digest	Package	Fixed in
quay.io/wekan/wekan :v5.65	cb17600883a3	ajv@5.5.2	6.12.3

Open the chart page →

3,638

parkingsikalabs

1 of 1 See more

parking sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-15366.

Container image	Digest	Package	Fixed in
ondrejsika/parking :latest	b1fd497416c8	ajv@6.10.2	6.12.3

Open the chart page →

3,696

logsmo-helm-chart

1 of 6 See more

log smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2020-15366.

Container image	Digest	Package	Fixed in
taskrabbit/elasticsearch-dump :latest	c967fe68b9c7	ajv@5.5.2	6.12.3

Open the chart page →

29,220

pombasmo-helm-chart

1 of 17 See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2020-15366.

Container image	Digest	Package	Fixed in
taskrabbit/elasticsearch-dump :latest	c967fe68b9c7	ajv@5.5.2	6.12.3

Open the chart page →

29,220

pachydermstatcan

1 of 4 See more

pachyderm statcan 0.5.1

1 of the 4 container images this version deploys carry CVE-2020-15366.

Container image	Digest	Package	Fixed in
pachyderm/grpc-proxy :0.4.9	2b27f41d4d02	ajv@5.5.2	6.12.3

Open the chart page →

4,967

kurento_webrtc_demostunner

1 of 2 See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2020-15366.

Container image	Digest	Package	Fixed in
l7mp/kurento-one2one-call-server :latest	fd2b2d06fff6	ajv@4.11.8	6.12.3

Open the chart page →

12,460

stunner-kurento-one2one-callstunner

1 of 2 See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2020-15366.

Container image	Digest	Package	Fixed in
l7mp/kurento-one2one-call-server :latest	fd2b2d06fff6	ajv@4.11.8	6.12.3

Open the chart page →

12,460

grafanasvtech-public-helm-charts

1 of 2 See more

grafana svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2020-15366.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_grafana :v1.2.2	1d71314424aa	ajv@6.10.2 node-ajv@6.10.2-1	6.12.3 no fix listed

Open the chart page →

10,902

1 of 1 See more

dashkiosk t3n 2.0.0

1 of the 1 container images this version deploys carry CVE-2020-15366.

Container image	Digest	Package	Fixed in
quay.io/t3n/dashkiosk :v2.7.8	c973e166a5dc	ajv@5.5.2	6.12.3

Open the chart page →

3,827

trudesktechpreta

1 of 3 See more

trudesk techpreta 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-15366.

Container image	Digest	Package	Fixed in
polonel/trudesk :1.2.6	0cf6513f6fe3	ajv@6.7.0	6.12.3

Open the chart page →

4,017

csmmth-charts

1 of 3 See more

3,576

kubernetes-external-secretstrozz

1 of 1 See more

kubernetes-external-secrets trozz 6.3.0

1 of the 1 container images this version deploys carry CVE-2020-15366.

Container image	Digest	Package	Fixed in
ghcr.io/external-secrets/kubernetes-external-secrets :6.3.0	eab9bd0b6986	ajv@5.5.2	6.12.3

Open the chart page →

2,838

queryservice-gatewaywbstack

1 of 1 See more

queryservice-gateway wbstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2020-15366.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/queryservice-gateway :2.2	ab8e2f583e56	ajv@6.10.2	6.12.3

Open the chart page →

2,559

cadencewenerme

1 of 5 See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2020-15366.

Container image	Digest	Package	Fixed in
ubercadence/web :v3.29.5	8564a5b44a6d	ajv@5.5.2	6.12.3

Open the chart page →

10,127

temporalwenerme

1 of 13 See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2020-15366.

Container image	Digest	Package	Fixed in
temporalio/web :1.14.0	33cfa863d8ce	ajv@5.5.2	6.12.3

Open the chart page →

22,665

helloworldyotron-helm-charts

1 of 1 See more

helloworld yotron-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-15366.

Container image	Digest	Package	Fixed in
a5hut0sh/helloworld :1.0	2ae77620e616	ajv@5.5.2	6.12.3

Open the chart page →

1,309

Container images carrying it

123 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
temporalio/web :1.14.0	33cfa863d8ce	ajv@5.5.2	6.12.3	1
testhubio/testhub-frontend :on-prem	e86c2db53be8	ajv@6.12.0	6.12.3	1
thelounge/thelounge :4.2.0-alpine	639978459c3a	ajv@5.5.2	6.12.3	1
tzahi12345/youtubedl-material :4.2	3720b856bd2f	ajv@6.12.0	6.12.3	1
ubercadence/web :v3.29.5	8564a5b44a6d	ajv@5.5.2	6.12.3	1
wekanteam/wekan :v4.22	68a51f0327df	ajv@5.5.2	6.12.3	1
willwill/kube-slack :v4.1.1	d443017aae98	ajv@5.5.2	6.12.3	1
wiremind/scrapoxy :latest	e7048929a676	ajv@5.5.2	6.12.3	1
zooz/predator :1.6	f491d1f7a865	ajv@5.5.2	6.12.3	1
ghcr.io/ctron/streamsheets-gateway :2.4.0	0635f17c9d2c	ajv@6.12.2	6.12.3	1
ghcr.io/ctron/streamsheets-service-graphs :2.4.0	e34964e336c1	ajv@6.12.2	6.12.3	1
ghcr.io/ctron/streamsheets-service-machines :2.4.0	0c5a3398d1e4	ajv@6.12.2	6.12.3	1
ghcr.io/ctron/streamsheets-service-streams :2.4.0	8ba040e79ca0	ajv@6.12.2	6.12.3	1
ghcr.io/external-secrets/kubernetes-external-secrets :6.3.0	eab9bd0b6986	ajv@5.5.2	6.12.3	1
ghcr.io/leoquote/mergeable :latest	451706815103	ajv@5.5.2	6.12.3	1
ghcr.io/mario-f/kubevis :v1.4.0	763daf9caf8e	ajv@5.5.2	6.12.3	1
ghcr.io/wbstack/queryservice-gateway :2.2	ab8e2f583e56	ajv@6.10.2	6.12.3	1
quay.io/helmpack/monocular-ui :v1.10.0	86b71e90319f	ajv@4.11.8	6.12.3	1
quay.io/ibmgaragecloud/developer-dashboard :v1.4.4	7a4b9fedc724	ajv@6.5.5	6.12.3	1
quay.io/ibmgaragecloud/nodejs :latest	01c3b7acb301	ajv@5.5.2	6.12.3	1
quay.io/t3n/dashkiosk :v2.7.8	c973e166a5dc	ajv@5.5.2	6.12.3	1
quay.io/wekan/wekan :v5.65	cb17600883a3	ajv@5.5.2	6.12.3	1
registry.gitlab.com/infinitydon/registry/open5gs-webui :v2.2.2	fda21b0a0344	ajv@5.5.2	6.12.3	1