StackRadar

CVE-2020-15999

CriticalKEV

Advisory

Published 20 Oct 2020In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.6
base score, highest
EPSS
0.443
99th percentile
CISA KEV
Listed
since 3 Nov 2021
Charts affected
417
of 17,781 indexed, latest versions
Container images
208
deployed by those charts
Fix available
4 of 4
affected packages

Red Hat Security Advisory: freetype security update

Carried by container images the latest versions of 417 of 17,781 indexed charts deploy, on 208 images.

Affected packageAffected versionsFixed inImages
freetypedeb2.5.2-1ubuntu2.2, 2.5.2-1ubuntu2.8, 2.6.1-0.1ubuntu2.3, 2.6.1-0.1ubuntu2.4+5 more2.5.2-1ubuntu2.8+esm2, 2.6.1-0.1ubuntu2.5, 2.6.3-3.2+deb9u2, 2.8.1-2ubuntu2.1+1 more135
freetypeapk2.9.1-r2, 2.10.0-r0, 2.10.1-r0, 2.10.2-r02.9.1-r3, 2.10.0-r1, 2.10.1-r1, 2.10.4-r066
chromium-browserdeb63.0.3239.84-0ubuntu0.16.04.186.0.4240.198-0ubuntu0.16.04.11
freetyperpm2.8-12.el7_6.1, 2.8-14.el7, 2.9.1-4.el80:2.8-14.el7_9.1, 0:2.9.1-4.el8_2.17
OSV records
ALPINE-CVE-2020-15999UBUNTU-CVE-2020-15999RHSA-2020:4907RHSA-2020:4951DLA-2415-1DSA-4777-1
Also known as
RHSA-2020:4952, USN-4593-1, USN-4593-2

Charts affected

417 by stars
ChartLatestAffected imagesRadar Score
swaggeruicetic0.3.61 of 1See more

swaggerui cetic 0.3.6

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
swaggerapi/swagger-ui:v3.24.3d434cac93813
freetype@2.10.0-r0
2.10.0-r1

Open the chart page →

976
apicurio-registryapicurio-registry-helmVerified publisher3.8.01 of 2See more

apicurio-registry apicurio-registry-helm 3.8.0

1 of the 2 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
quay.io/apicurio/apicurio-registry-kube-sync:1.0.170ef31840269
freetype@2.10.1-r0
2.10.1-r1

Open the chart page →

6,675
zipkincarlosjgp0.2.01 of 2See more

zipkin carlosjgp 0.2.0

1 of the 2 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
openzipkin/zipkin-ui:2.21.0672cbc94256b
freetype@2.10.0-r0
2.10.0-r1

Open the chart page →

3,229
supersetcloudposse1.2.01 of 1See more

superset cloudposse 1.2.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2

Open the chart page →

5,851
temporallemontechVerified publisher0.37.01 of 13See more

temporal lemontech 0.37.0

1 of the 13 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

14,893
sparkmicrosoft1.0.42 of 3See more

spark microsoft 1.0.4

2 of the 3 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
dbanda/livy:0.80ca125e68e53
freetype@2.9.1-r2
2.9.1-r3
dbanda/spark:2.4.6d0e6367876ae
freetype@2.9.1-r2
2.9.1-r3

Open the chart page →

13,738
netris-controllernetrisai2.8.21 of 14See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
graphiteapp/graphite-statsd:1.1.7-604a0037cc2ae
freetype@2.10.2-r0
2.10.4-r0

Open the chart page →

30,326
hadoopbigdata-chartsVerified publisher1.0.11 of 2See more

hadoop bigdata-charts 1.0.1

1 of the 2 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
marcelmay/hadoop-hdfs-fsimage-exporter:1.3abeccb740ef7
freetype@2.9.1-r2
2.9.1-r3

Open the chart page →

12,111
fadicetic0.3.12 of 25See more

fadi cetic 0.3.1

2 of the 25 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2
ceticasbl/pg-ldap-sync:latest6c0aa7567145
freetype@2.9.1-3
2.9.1-3+deb10u2

Open the chart page →

52,919
backstagedeliveryheroVerified publisher0.1.152 of 2See more

backstage deliveryhero 0.1.15

2 of the 2 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2
martinaif/backstage-k8s-demo-frontend:test1f07fbe15e5b5
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2

Open the chart page →

8,213
guacamolehalkeye0.2.12 of 3See more

guacamole halkeye 0.2.1

2 of the 3 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
guacamole/guacamole:1.1.0333a7f40c145
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2
guacamole/guacd:1.1.02288530a4d1c
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2

Open the chart page →

4,839
skywalkingkubesphere-testVerified publisher3.1.02 of 4See more

skywalking kubesphere-test 3.1.0

2 of the 4 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.1.0-es7641237e0299b
freetype@2.9.1-r2
2.9.1-r3
apache/skywalking-ui:8.1.067d50e4deff4
freetype@2.9.1-r2
2.9.1-r3

Open the chart page →

18,042
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
freetype@2.6.1-0.1ubuntu2.3
2.6.1-0.1ubuntu2.5

Open the chart page →

107,811
maeshtraefikOfficialVerified publisher2.1.21 of 7See more

maesh traefik 2.1.2

1 of the 7 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
grafana/grafana:6.2.5ab415470454b
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

4,136
traefik-meshtraefikOfficialVerified publisher4.1.11 of 7See more

traefik-mesh traefik 4.1.1

1 of the 7 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
grafana/grafana:6.2.5ab415470454b
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

9,257
activemq-artemisactivemq-artemis-helm0.3.61 of 1See more

activemq-artemis activemq-artemis-helm 0.3.6

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
vromero/activemq-artemis:2.16.0408d6a46b153
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

4,419
dltbrokerassist-iot-distributed-broker0.2.02 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
freetype@2.6.1-0.1ubuntu2.3
2.6.1-0.1ubuntu2.5
hyperledger/fabric-couchdb:0.4.15f6c724592abf
freetype@2.6.1-0.1ubuntu2.3
2.6.1-0.1ubuntu2.5

Open the chart page →

77,706
dltloggingassist-iot-logging-auditing0.2.02 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
freetype@2.6.1-0.1ubuntu2.3
2.6.1-0.1ubuntu2.5
hyperledger/fabric-couchdb:0.4.15f6c724592abf
freetype@2.6.1-0.1ubuntu2.3
2.6.1-0.1ubuntu2.5

Open the chart page →

77,687
azure-ai-servicesazure-ai-servicesVerified publisher0.1.01 of 1See more

azure-ai-services azure-ai-services 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

702
distributed-jmetercloudnativeapp1.0.11 of 1See more

distributed-jmeter cloudnativeapp 1.0.1

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
pedrocesarti/jmeter-docker:3.314851f144f57
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

4,532
tensorflow-notebookcloudnativeapp0.1.21 of 1See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
tensorflow/tensorflow:1.6.0-devel1e3172090703
freetype@2.6.1-0.1ubuntu2.3
2.6.1-0.1ubuntu2.5

Open the chart page →

36,094
duplicaticronce0.1.01 of 1See more

duplicati cronce 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
duplicati/duplicati:2.0.5.111_canary_2020-09-268660f0eda7c9
freetype@2.6.3-3.2+deb9u1
2.6.3-3.2+deb9u2

Open the chart page →

3,026
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
koumoul/capture:17108d47be3b2
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

38,346
weblatedeliveryheroVerified publisher0.3.21 of 3See more

weblate deliveryhero 0.3.2

1 of the 3 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2

Open the chart page →

7,984
wiremockdeliveryheroVerified publisher1.4.61 of 2See more

wiremock deliveryhero 1.4.6

1 of the 2 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
rodolpheche/wiremock:2.26.03be08a386092
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

2,140
opentsdbdmwm-bigdataVerified publisher0.1.71 of 6See more

opentsdb dmwm-bigdata 0.1.7

1 of the 6 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
gradiant/opentsdb:2.4.0c33d53913869
freetype@2.9.1-r2
2.9.1-r3

Open the chart page →

17,511
spinnakerdwardu-helm-charts2.2.61 of 2See more

spinnaker dwardu-helm-charts 2.2.6

1 of the 2 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
freetype@2.10.1-r0
2.10.1-r1

Open the chart page →

8,752
temporalglasskubeVerified publisher0.45.2-gk.11 of 14See more

temporal glasskube 0.45.2-gk.1

1 of the 14 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

16,346
riot-imhalkeye0.2.91 of 1See more

riot-im halkeye 0.2.9

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
vectorim/riot-web:v1.7.8080e313abd37
freetype@2.10.2-r0
2.10.4-r0

Open the chart page →

1,710
seata-serverheidaodageshiwoVerified publisher1.0.01 of 1See more

seata-server heidaodageshiwo 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
seataio/seata-server:1.5.1ee1ed55f4144
freetype@2.9.1-r2
2.9.1-r3

Open the chart page →

5,624
mycharthelm-charts-examplesVerified publisher0.1.01 of 1See more

mychart helm-charts-examples 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

702
neuvectorlifen1.5.21 of 3See more

neuvector lifen 1.5.2

1 of the 3 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
neuvector/manager:3.2.1f1b7d666eae0
freetype@2.10.1-r0
2.10.1-r1

Open the chart page →

2,747
Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacionVerified publisher1.0.12 of 6See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

2 of the 6 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
fjvela/urjc-fjvela-external-service:1.0.1a8ebe5ca13fc
freetype@2.6.3-3.2+deb9u1
2.6.3-3.2+deb9u2
fjvela/urjc-fjvela-server:1.0.53c840aebce22
freetype@2.6.3-3.2+deb9u1
2.6.3-3.2+deb9u2

Open the chart page →

19,187
helm-taigamvitale1989-helm-taigaVerified publisher0.2.51 of 2See more

helm-taiga mvitale1989-helm-taiga 0.2.5

1 of the 2 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
mvitale1989/docker-taiga:20191031-4.2.141504ccda06df
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

5,104
sentinel-dashboardsentinel-dashboardVerified publisher0.1.01 of 1See more

sentinel-dashboard sentinel-dashboard 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
royalwang/sentinel-dashboard:1.8.4df99e2499f91
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

4,287
mychart1stacksimplifyVerified publisher0.1.01 of 1See more

mychart1 stacksimplify 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kubenginx:1.0.0205961b09a80
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2

Open the chart page →

1,138
statsdstatsd-airflow-smd0.1.191 of 1See more

statsd statsd-airflow-smd 0.1.19

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
statsd/statsd:v0.8.6dab129e74c25
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

4,185
hlf-k8ssubstraVerified publisher10.2.41 of 7See more

hlf-k8s substra 10.2.4

1 of the 7 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.17.6b2d89d0a2103
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2

Open the chart page →

12,006
testhubteshubVerified publisher0.1.41 of 3See more

testhub teshub 0.1.4

1 of the 3 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
testhubio/testhub-frontend:on-preme86c2db53be8
freetype@2.10.1-r0
2.10.1-r1

Open the chart page →

7,517
wavefront-adapter-for-istiowavefront0.1.41 of 2See more

wavefront-adapter-for-istio wavefront 0.1.4

1 of the 2 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
wavefronthq/proxy:9.2d1064d28f6eb
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.1

Open the chart page →

15,970
kafka-devwikimedia0.2.01 of 1See more

kafka-dev wikimedia 0.2.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
freetype@2.5.2-1ubuntu2.2
2.5.2-1ubuntu2.8+esm2

Open the chart page →

41,427
agendaserviceagendaservice1.0.01 of 3See more

agendaservice agendaservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
conduction/agendaservice-nginx:lateste1c176458aaf
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

7,209
aitrainaitrain-helm3Verified publisher0.2.01 of 9See more

aitrain aitrain-helm3 0.2.0

1 of the 9 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.15-alpine57a226fb6ab6
freetype@2.9.1-r2
2.9.1-r3

Open the chart page →

627
myfirstchartajay-helm-charts-repository0.2.01 of 1See more

myfirstchart ajay-helm-charts-repository 0.2.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kubenginxhelm:0.2.0ae2268dcc930
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2

Open the chart page →

1,138
pagesalstom-pages-app1.0.01 of 3See more

pages alstom-pages-app 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.1

Open the chart page →

20,190
pagesandrei-pages1.0.01 of 3See more

pages andrei-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.1

Open the chart page →

20,190
myfirstchartandrewhelmchartrepo1440.2.01 of 1See more

myfirstchart andrewhelmchartrepo144 0.2.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kubenginxhelm:0.2.0ae2268dcc930
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2

Open the chart page →

1,138
d.vazquezm.2021_helmapphelmVerified publisher1.0.02 of 6See more

d.vazquezm.2021_helm apphelm 1.0.0

2 of the 6 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
davidvmar/urjc-davidvmar-external-service:1.0.02a68e9ac7f09
freetype@2.6.3-3.2+deb9u1
2.6.3-3.2+deb9u2
davidvmar/urjc-davidvmar-server:1.0.05663f5b24615
freetype@2.6.3-3.2+deb9u1
2.6.3-3.2+deb9u2

Open the chart page →

19,745
chart-app-vidapp-vid-chartVerified publisher0.0.71 of 2See more

chart-app-vid app-vid-chart 0.0.7

1 of the 2 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
fimperato/sparkvid-api:1.0.5-RELEASE604012b77841
freetype@2.9.1-r2
2.9.1-r3

Open the chart page →

8,866
dltkvassist-iot-data-integrity-verification0.2.02 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

2 of the 9 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
freetype@2.6.1-0.1ubuntu2.3
2.6.1-0.1ubuntu2.5
hyperledger/fabric-couchdb:0.4.15f6c724592abf
freetype@2.6.1-0.1ubuntu2.3
2.6.1-0.1ubuntu2.5

Open the chart page →

77,706

Container images carrying it

208 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/wbstack/queryservice:0.3.6_0.6b83b5b81d4b6
freetype@2.9.1-r2
2.9.1-r3
1
ghcr.io/wbstack/queryservice-updater:0.3.84_3.97525a57ac3f1
freetype@2.9.1-r2
2.9.1-r3
1
quay.io/apicurio/apicurio-registry-kube-sync:1.0.170ef31840269
freetype@2.10.1-r0
2.10.1-r1
1
quay.io/fairwinds/yelb-ui:v0.1.05ac114e567ed
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
freetype@2.9.1-4.el8
0:2.9.1-4.el8_2.1
1
quay.io/ibmgaragecloud/nodejs:latest01c3b7acb301
freetype@2.6.3-3.2+deb9u1
2.6.3-3.2+deb9u2
1
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
freetype@2.9.1-r2
2.9.1-r3
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
freetype@2.6.1-0.1ubuntu2.3
2.6.1-0.1ubuntu2.5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.