StackRadar

CVE-2020-15999

CriticalKEV

Advisory

Published 20 Oct 2020In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.6
base score, highest
EPSS
0.443
99th percentile
CISA KEV
Listed
since 3 Nov 2021
Charts affected
417
of 17,781 indexed, latest versions
Container images
208
deployed by those charts
Fix available
4 of 4
affected packages

Red Hat Security Advisory: freetype security update

Carried by container images the latest versions of 417 of 17,781 indexed charts deploy, on 208 images.

Affected packageAffected versionsFixed inImages
freetypedeb2.5.2-1ubuntu2.2, 2.5.2-1ubuntu2.8, 2.6.1-0.1ubuntu2.3, 2.6.1-0.1ubuntu2.4+5 more2.5.2-1ubuntu2.8+esm2, 2.6.1-0.1ubuntu2.5, 2.6.3-3.2+deb9u2, 2.8.1-2ubuntu2.1+1 more135
freetypeapk2.9.1-r2, 2.10.0-r0, 2.10.1-r0, 2.10.2-r02.9.1-r3, 2.10.0-r1, 2.10.1-r1, 2.10.4-r066
chromium-browserdeb63.0.3239.84-0ubuntu0.16.04.186.0.4240.198-0ubuntu0.16.04.11
freetyperpm2.8-12.el7_6.1, 2.8-14.el7, 2.9.1-4.el80:2.8-14.el7_9.1, 0:2.9.1-4.el8_2.17
OSV records
ALPINE-CVE-2020-15999UBUNTU-CVE-2020-15999RHSA-2020:4907RHSA-2020:4951DLA-2415-1DSA-4777-1
Also known as
RHSA-2020:4952, USN-4593-1, USN-4593-2

Charts affected

417 by stars
ChartLatestAffected imagesRadar Score
helmexampletomsuehelmexample0.1.01 of 1See more

helmexample tomsuehelmexample 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

702
pagesvictor-pages1.0.01 of 3See more

pages victor-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.1

Open the chart page →

20,190
pageswalter1.0.01 of 3See more

pages walter 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.1

Open the chart page →

20,190
nginx-file-browserwarjiang0.1.21 of 1See more

nginx-file-browser warjiang 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

702
queryservicewbstack0.2.11 of 1See more

queryservice wbstack 0.2.1

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
ghcr.io/wbstack/queryservice:0.3.6_0.6b83b5b81d4b6
freetype@2.9.1-r2
2.9.1-r3

Open the chart page →

4,649
queryservice-updaterwbstack0.3.01 of 1See more

queryservice-updater wbstack 0.3.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
ghcr.io/wbstack/queryservice-updater:0.3.84_3.97525a57ac3f1
freetype@2.9.1-r2
2.9.1-r3

Open the chart page →

3,176
sonarqubewebencryptor6.7.31 of 3See more

sonarqube webencryptor 6.7.3

1 of the 3 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/sonarqube:8.2-communitya246bc64207e
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2

Open the chart page →

5,460
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

10,127
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

22,665
nginxwiremindVerified publisher2.1.11 of 1See more

nginx wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.17-alpine763e7f0188e3
freetype@2.10.1-r0
2.10.1-r1

Open the chart page →

966
apicurio-registry-sqlwitcom-gmbh0.1.01 of 1See more

apicurio-registry-sql witcom-gmbh 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-jpa:1.3.2.Final44eeddd3562c
freetype@2.10.1-r0
2.10.1-r1

Open the chart page →

3,424
myfirstchartww-helm-charts-repo0.1.01 of 1See more

myfirstchart ww-helm-charts-repo 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kubenginx:0.1.0205961b09a80
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2

Open the chart page →

1,138
upsourcexykongVerified publisher0.1.11 of 1See more

upsource xykong 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

702
helmexampleycztest0.1.01 of 1See more

helmexample ycztest 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

702
mychartyi-test-chart0.1.01 of 1See more

mychart yi-test-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

702
helmexampleyunpeng-helmexample0.1.01 of 1See more

helmexample yunpeng-helmexample 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

702
myfirstchartzikilabVerified publisher0.2.01 of 1See more

myfirstchart zikilab 0.2.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kubenginxhelm:0.2.0ae2268dcc930
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2

Open the chart page →

1,138

Container images carrying it

208 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
onosproject/onos:2.2.144914a8d4b3f
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.1
1
opendatacube/wms:latest1b90cdf68831
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.1
1
openwhisk/alarmprovider:2.2.0b695a6ceb406
freetype@2.6.3-3.2+deb9u1
2.6.3-3.2+deb9u2
1
openwhisk/kafkaprovider:2.1.063dc3d2a0904
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.1
1
openzipkin/zipkin-ui:2.21.0672cbc94256b
freetype@2.10.0-r0
2.10.0-r1
1
opsmx11/issuegen:v2.1.05c50ca123d88
freetype@2.5.2-1ubuntu2.8
2.5.2-1ubuntu2.8+esm2
1
pachyderm/dash:1.9.094e9a281e5a4
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2
1
pachyderm/grpc-proxy:0.4.92b27f41d4d02
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2
1
paulczar/spring-helloworld:latestc7140cecd5f7
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2
1
pe46dro/xbackbone-docker:3.3.309dfe3aa10f6
freetype@2.9.1-r2
2.9.1-r3
1
pecan/monitor:1.7.273b2074f3fec
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2
1
pedrocesarti/jmeter-docker:3.314851f144f57
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2
1
phntom/binaryvision-static-wordpress:0.0.385a2dfb83b11
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2
1
pnnlmiscscripts/anaconda:20181125-1500-nginx-74eafeb809124
freetype@2.10.0-r0
2.10.0-r1
1
pnnlmiscscripts/anaconda:20200421-1700-nginx-1bbb6940d849f
freetype@2.10.1-r0
2.10.1-r1
1
pnnlmiscscripts/k8s-node-image:1.13.11-nginx-12648032cb498
freetype@2.10.0-r0
2.10.0-r1
1
pnnlmiscscripts/k8s-node-image:1.14.10-nginx-78af4c559fff0
freetype@2.10.1-r0
2.10.1-r1
1
raykrueger/riemann:0.2.14c8baf3de57bb
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2
1
richardchesterwood/k8s-fleetman-position-simulator:release20b540a28f5a6
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2
1
richardchesterwood/k8s-fleetman-position-tracker:release336c43961214c
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2
1
rodolpheche/wiremock:2.27.22328a9fce2bf
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2
1
royalwang/sentinel-dashboard:1.8.4df99e2499f91
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2
1
rundeck/rundeck:3.2.74d64fe56f767
freetype@2.6.1-0.1ubuntu2.4
2.6.1-0.1ubuntu2.5
1
rundeck/rundeck:3.0.16b13e8059ad72
freetype@2.6.1-0.1ubuntu2.3
2.6.1-0.1ubuntu2.5
1
scrapinghub/splash:3.4.1a5f89bc84606
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.1
1
sdandey/dandey-apps:kanban-board-kanban-ui04594ada18be
freetype@2.9.1-r2
2.9.1-r3
1
sdandey/dandey-apps:kanban-board-kanban-appbef0f599737b
freetype@2.9.1-r2
2.9.1-r3
1
seataio/seata-server:1.5.1ee1ed55f4144
freetype@2.9.1-r2
2.9.1-r3
1
seldonio/apife:0.3.1eea0d3f578ca
freetype@2.9.1-r2
2.9.1-r3
1
sismics/docs:v1.10f4b0ef019cf1
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.1
1
stacksimplify/kube-nginxapp1:1.0.0ead648280067
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2
1
stacksimplify/kube-nginxapp2:1.0.0ce2b15139aca
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2
1
swaggerapi/swagger-ui:v3.24.3d434cac93813
freetype@2.10.0-r0
2.10.0-r1
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
freetype@2.6.1-0.1ubuntu2.3
2.6.1-0.1ubuntu2.5
1
testhubio/testhub-frontend:on-preme86c2db53be8
freetype@2.10.1-r0
2.10.1-r1
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
chromium-browser@63.0.3239.84-0ubuntu0.16.04.1
freetype@2.6.1-0.1ubuntu2.3
86.0.4240.198-0ubuntu0.16.04.1
2.6.1-0.1ubuntu2.5
1
vectorim/riot-web:v1.7.8080e313abd37
freetype@2.10.2-r0
2.10.4-r0
1
voltha/voltha-onos:5.1.8e038acb950d3
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.1
1
vromero/activemq-artemis:2.16.0408d6a46b153
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2
1
wavefronthq/proxy:9.2d1064d28f6eb
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.1
1
weblate/weblate:3.11.3-182848df56ecd
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2
1
xetusoss/archiva:v2.2.588f25242b9ee
freetype@2.9.1-r2
2.9.1-r3
1
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
freetype@2.10.1-r0
2.10.1-r1
1
ghcr.io/conductionnl/bisc-frontend:latestd8a0334cddfc
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2
1
ghcr.io/fleeksoft/hbase/hbase-base:2.4.13.2c144bdd688d7
freetype@2.9.1-r2
2.9.1-r3
1
ghcr.io/grofers/legend:0.1d6e901ad0ebd
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2
1
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
freetype@2.9.1-4.el8
0:2.9.1-4.el8_2.1
1
ghcr.io/leoquote/mergeable:latest451706815103
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2
1
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.