StackRadar

CVE-2020-15999

CriticalKEV

Advisory

Published 20 Oct 2020In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.6
base score, highest
EPSS
0.443
99th percentile
CISA KEV
Listed
since 3 Nov 2021
Charts affected
417
of 17,781 indexed, latest versions
Container images
208
deployed by those charts
Fix available
4 of 4
affected packages

Red Hat Security Advisory: freetype security update

Carried by container images the latest versions of 417 of 17,781 indexed charts deploy, on 208 images.

Affected packageAffected versionsFixed inImages
freetypedeb2.5.2-1ubuntu2.2, 2.5.2-1ubuntu2.8, 2.6.1-0.1ubuntu2.3, 2.6.1-0.1ubuntu2.4+5 more2.5.2-1ubuntu2.8+esm2, 2.6.1-0.1ubuntu2.5, 2.6.3-3.2+deb9u2, 2.8.1-2ubuntu2.1+1 more135
freetypeapk2.9.1-r2, 2.10.0-r0, 2.10.1-r0, 2.10.2-r02.9.1-r3, 2.10.0-r1, 2.10.1-r1, 2.10.4-r066
chromium-browserdeb63.0.3239.84-0ubuntu0.16.04.186.0.4240.198-0ubuntu0.16.04.11
freetyperpm2.8-12.el7_6.1, 2.8-14.el7, 2.9.1-4.el80:2.8-14.el7_9.1, 0:2.9.1-4.el8_2.17
OSV records
ALPINE-CVE-2020-15999UBUNTU-CVE-2020-15999RHSA-2020:4907RHSA-2020:4951DLA-2415-1DSA-4777-1
Also known as
RHSA-2020:4952, USN-4593-1, USN-4593-2

Charts affected

417 by stars
ChartLatestAffected imagesRadar Score
dltflassist-iot-dlt-based-fl0.2.02 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

2 of the 9 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
freetype@2.6.1-0.1ubuntu2.3
2.6.1-0.1ubuntu2.5
hyperledger/fabric-couchdb:0.4.15f6c724592abf
freetype@2.6.1-0.1ubuntu2.3
2.6.1-0.1ubuntu2.5

Open the chart page →

77,706
testawesomeVerified publisher0.1.11 of 1See more

test awesome 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

702
base-webaxell-web-app0.1.01 of 1See more

base-web axell-web-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

702
myfirstchartayeme006-helm-charts-repo0.2.01 of 1See more

myfirstchart ayeme006-helm-charts-repo 0.2.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kubenginxhelm:0.2.0ae2268dcc930
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2

Open the chart page →

1,138
aks-helloworldazure-sample0.1.11 of 1See more

aks-helloworld azure-sample 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
neilpeterson/aks-helloworld:v1fb47732ef36b
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

4,269
azure-voteazure-sample0.1.11 of 2See more

azure-vote azure-sample 0.1.1

1 of the 2 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
neilpeterson/azure-vote-front:v384062718347c
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

5,224
azure-vote-osbaazure-sample0.1.01 of 1See more

azure-vote-osba azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
neilpeterson/azure-vote-front:v384062718347c
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

4,269
twitter-sentimentazure-sample0.1.02 of 3See more

twitter-sentiment azure-sample 0.1.0

2 of the 3 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
neilpeterson/chart-tweet:latest64fd8dab075f
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2
neilpeterson/process-tweet:latest39ce9f92e899
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

11,833
balance-registrationbalance-registration0.1.01 of 4See more

balance-registration balance-registration 0.1.0

1 of the 4 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
conduction/balance-registration-nginx:dev9e24264ea8f3
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

8,408
mariadbbarravarVerified publisher0.1.01 of 1See more

mariadb barravar 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

702
postgresqlbarravarVerified publisher0.1.01 of 1See more

postgresql barravar 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

702
pagesberrutig-pages1.0.01 of 3See more

pages berrutig-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.1

Open the chart page →

20,190
myfirstchartbohdan-helm-charts-repo0.2.01 of 1See more

myfirstchart bohdan-helm-charts-repo 0.2.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kubenginxhelm:0.2.0ae2268dcc930
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2

Open the chart page →

1,138
jaegerbook-k8sinfra-v23.4.01 of 5See more

jaeger book-k8sinfra-v2 3.4.0

1 of the 5 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/cassandra:3.11.65aa8400b4b3b
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.1

Open the chart page →

19,229
pagesbrian-pages1.0.01 of 3See more

pages brian-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.1

Open the chart page →

20,190
pagesbrixton-mayuribhavsar23-pages1.0.01 of 3See more

pages brixton-mayuribhavsar23-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.1

Open the chart page →

20,190
pagesbrixton-pages1.0.01 of 3See more

pages brixton-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.1

Open the chart page →

20,190
generic-webbryanalves0.2.01 of 1See more

generic-web bryanalves 0.2.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.13.12b1d09e971889
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

961
honeywell-exporterbryanalves0.1.11 of 1See more

honeywell-exporter bryanalves 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
bryanalves/honeywell_exporter:0.0.1195f73dce8b21
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

5,437
rtorrentbryanalves0.6.01 of 2See more

rtorrent bryanalves 0.6.0

1 of the 2 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.13.12b1d09e971889
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

961
smart-exporterbryanalves0.2.21 of 1See more

smart-exporter bryanalves 0.2.2

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
bryanalves/smart_exporter:0.2af47dfbb9413
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

4,131
demobuall20.1.01 of 1See more

demo buall2 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

702
pagescamden-pages1.0.01 of 3See more

pages camden-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.1

Open the chart page →

20,190
ekorrecamptocamp30.1.11 of 1See more

ekorre camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
camptocamp/ekorre:0.1.035c91d5fda04
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2

Open the chart page →

3,891
prometheus-operatorcamptocamp35.15.11 of 5See more

prometheus-operator camptocamp3 5.15.1

1 of the 5 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
grafana/grafana:6.2.09e7fe9c7903a
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

2,490
pagescarina-pages1.0.01 of 3See more

pages carina-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.1

Open the chart page →

20,190
pagescarmel-pages-dell1.0.01 of 3See more

pages carmel-pages-dell 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.1

Open the chart page →

20,190
temporalcastaiVerified publisher0.54.21 of 14See more

temporal castai 0.54.2

1 of the 14 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

16,198
CBTNuggets-Testcbtnuggets-test0.8.11 of 1See more

CBTNuggets-Test cbtnuggets-test 0.8.1

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

702
celebrimborcelebrimbor0.1.01 of 1See more

celebrimbor celebrimbor 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

702
tsaascetic0.1.51 of 1See more

tsaas cetic 0.1.5

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
ceticasbl/tsimulus-saas:0.1.18bc34ce180d0c
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2

Open the chart page →

1,653
tsoragecetic0.4.111 of 8See more

tsorage cetic 0.4.11

1 of the 8 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/cassandra:3.11.598531a31f213
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

12,018
chart-release-samplechart-release-sample2.1.171 of 1See more

chart-release-sample chart-release-sample 2.1.17

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

702
checkin-componentcheckin-component0.1.01 of 4See more

checkin-component checkin-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
conduction/checkin-component-nginx:dev583d2cd8476c
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

8,408
cerebrocloudnativeapp1.0.11 of 2See more

cerebro cloudnativeapp 1.0.1

1 of the 2 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
lmenezes/cerebro:0.8.36684131caf5f
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

2,842
daskcloudnativeapp2.2.11 of 2See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
daskdev/dask-notebook:1.1.0052630f5ca04
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.1

Open the chart page →

29,901
distributed-tensorflowcloudnativeapp0.1.11 of 1See more

distributed-tensorflow cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
cheyang/distributed-tf:1.6.046cc34755493
freetype@2.6.1-0.1ubuntu2.3
2.6.1-0.1ubuntu2.5

Open the chart page →

36,094
grafanacloudnativeapp3.3.81 of 1See more

grafana cloudnativeapp 3.3.8

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
grafana/grafana:6.1.6d66b41cf7e05
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

1,102
hazelcast-jetcloudnativeapp1.1.01 of 1See more

hazelcast-jet cloudnativeapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
hazelcast/hazelcast-jet:3.0df495e64ea65
freetype@2.9.1-r2
2.9.1-r3

Open the chart page →

5,326
hlf-couchdbcloudnativeapp1.0.61 of 1See more

hlf-couchdb cloudnativeapp 1.0.6

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
hyperledger/fabric-couchdb:0.4.10c65891b6c237
freetype@2.6.1-0.1ubuntu2.3
2.6.1-0.1ubuntu2.5

Open the chart page →

33,963
neo4jcloudnativeapp1.0.01 of 1See more

neo4j cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/neo4j:3.4.5-enterprisea1ba477fa412
freetype@2.9.1-r2
2.9.1-r3

Open the chart page →

2,837
node-redcloudnativeapp1.2.21 of 1See more

node-red cloudnativeapp 1.2.2

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
nodered/node-red-docker:0.19.6-v8070643219ea2
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

4,790
orientdbcloudnativeapp0.1.21 of 2See more

orientdb cloudnativeapp 0.1.2

1 of the 2 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/orientdb:3.0.1318a6c004398f
freetype@2.9.1-r2
2.9.1-r3

Open the chart page →

1,822
prestocloudnativeapp0.1.11 of 1See more

presto cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
bivas/presto:0.19605545994f806
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

7,226
prometheus-operatorcloudnativeapp6.4.01 of 7See more

prometheus-operator cloudnativeapp 6.4.0

1 of the 7 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
grafana/grafana:6.2.5ab415470454b
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

2,954
riemanncloudnativeapp0.1.21 of 1See more

riemann cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
raykrueger/riemann:0.2.14c8baf3de57bb
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

6,497
rundeckcloudnativeapp0.1.01 of 2See more

rundeck cloudnativeapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
rundeck/rundeck:3.0.16b13e8059ad72
freetype@2.6.1-0.1ubuntu2.3
2.6.1-0.1ubuntu2.5

Open the chart page →

23,665
supersetcloudnativeapp1.1.61 of 1See more

superset cloudnativeapp 1.1.6

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
amancevice/superset:0.28.1c8c04bfe3d66
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

5,060
unificloudnativeapp0.4.21 of 1See more

unifi cloudnativeapp 0.4.2

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
jacobalberty/unifi:5.10.19c409924e2463
freetype@2.6.1-0.1ubuntu2.3
2.6.1-0.1ubuntu2.5

Open the chart page →

22,442
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
chromium-browser@63.0.3239.84-0ubuntu0.16.04.1
freetype@2.6.1-0.1ubuntu2.3
86.0.4240.198-0ubuntu0.16.04.1
2.6.1-0.1ubuntu2.5

Open the chart page →

77,758

Container images carrying it

208 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/wbstack/queryservice:0.3.6_0.6b83b5b81d4b6
freetype@2.9.1-r2
2.9.1-r3
1
ghcr.io/wbstack/queryservice-updater:0.3.84_3.97525a57ac3f1
freetype@2.9.1-r2
2.9.1-r3
1
quay.io/apicurio/apicurio-registry-kube-sync:1.0.170ef31840269
freetype@2.10.1-r0
2.10.1-r1
1
quay.io/fairwinds/yelb-ui:v0.1.05ac114e567ed
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
freetype@2.9.1-4.el8
0:2.9.1-4.el8_2.1
1
quay.io/ibmgaragecloud/nodejs:latest01c3b7acb301
freetype@2.6.3-3.2+deb9u1
2.6.3-3.2+deb9u2
1
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
freetype@2.9.1-r2
2.9.1-r3
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
freetype@2.6.1-0.1ubuntu2.3
2.6.1-0.1ubuntu2.5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.