StackRadar

CVE-2020-15999

CriticalKEV

Advisory

Published 20 Oct 2020In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.6
base score, highest
EPSS
0.443
99th percentile
CISA KEV
Listed
since 3 Nov 2021
Charts affected
417
of 17,781 indexed, latest versions
Container images
208
deployed by those charts
Fix available
4 of 4
affected packages

Red Hat Security Advisory: freetype security update

Carried by container images the latest versions of 417 of 17,781 indexed charts deploy, on 208 images.

Affected packageAffected versionsFixed inImages
freetypedeb2.5.2-1ubuntu2.2, 2.5.2-1ubuntu2.8, 2.6.1-0.1ubuntu2.3, 2.6.1-0.1ubuntu2.4+5 more2.5.2-1ubuntu2.8+esm2, 2.6.1-0.1ubuntu2.5, 2.6.3-3.2+deb9u2, 2.8.1-2ubuntu2.1+1 more135
freetypeapk2.9.1-r2, 2.10.0-r0, 2.10.1-r0, 2.10.2-r02.9.1-r3, 2.10.0-r1, 2.10.1-r1, 2.10.4-r066
chromium-browserdeb63.0.3239.84-0ubuntu0.16.04.186.0.4240.198-0ubuntu0.16.04.11
freetyperpm2.8-12.el7_6.1, 2.8-14.el7, 2.9.1-4.el80:2.8-14.el7_9.1, 0:2.9.1-4.el8_2.17
OSV records
ALPINE-CVE-2020-15999UBUNTU-CVE-2020-15999RHSA-2020:4907RHSA-2020:4951DLA-2415-1DSA-4777-1
Also known as
RHSA-2020:4952, USN-4593-1, USN-4593-2

Charts affected

417 by stars
ChartLatestAffected imagesRadar Score
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
freetype@2.9.1-4.el8
0:2.9.1-4.el8_2.1

Open the chart page →

25,456
setup-jobcloud-native-toolkit0.3.01 of 2See more

setup-job cloud-native-toolkit 0.3.0

1 of the 2 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/nodejs:latest01c3b7acb301
freetype@2.6.3-3.2+deb9u1
2.6.3-3.2+deb9u2

Open the chart page →

2,792
galaxy-stablecloudve2.0.01 of 5See more

galaxy-stable cloudve 2.0.0

1 of the 5 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
galaxy/galaxy-stable:v18.018e577a626dfd
freetype@2.5.2-1ubuntu2.8
2.5.2-1ubuntu2.8+esm2

Open the chart page →

70,895
nextcloudcloudve1.13.01 of 2See more

nextcloud cloudve 1.13.0

1 of the 2 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nextcloud:17.0.0-apache96104cb965fc
freetype@2.9.1-3
2.9.1-3+deb10u2

Open the chart page →

3,016
public-htmlcloudve0.1.01 of 1See more

public-html cloudve 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.19.0-alpine17ba9c1ca3db
freetype@2.10.1-r0
2.10.1-r1

Open the chart page →

1,271
pulsarcnieg1.0.82 of 2See more

pulsar cnieg 1.0.8

2 of the 2 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.6.14db6ff0b4045
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
freetype@2.9.1-r2
2.9.1-r3

Open the chart page →

16,860
mychartcodebee-charts0.1.01 of 1See more

mychart codebee-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

702
examplecolearendt0.1.21 of 1See more

example colearendt 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.16.1d20aa6d1cae5
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2

Open the chart page →

1,147
cgrccommongroundregistratiecomponent0.1.01 of 3See more

cgrc commongroundregistratiecomponent 0.1.0

1 of the 3 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
conduction/cgrc-nginx:devd8e23f10e882
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

7,572
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
conduction/conduction-ui-nginx:devd9b38e234de9
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

12,907
consentbbconsentbbVerified publisher2023.12.42 of 5See more

consentbb consentbb 2023.12.4

2 of the 5 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
igrantio/bb-consent-admin-dashboard:2023.11.6852574120a1e
freetype@2.9.1-r2
2.9.1-r3
igrantio/bb-consent-privacy-dashboard:2023.11.6c12f80997b0f
freetype@2.9.1-r2
2.9.1-r3

Open the chart page →

3,181
betaalservicecontacten-catalog1.0.01 of 3See more

betaalservice contacten-catalog 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
conduction/betaalservice-nginx:latestd3577ddd5c67
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

7,209
contactmoment-componentcontactmoment-component0.1.01 of 4See more

contactmoment-component contactmoment-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
conduction/contactmoment-component-nginx:dev353dc46303ac
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

8,408
cp-helm-chartscp-helm-charts0.6.11 of 8See more

cp-helm-charts cp-helm-charts 0.6.1

1 of the 8 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
solsson/kafka-prometheus-jmx-exporterdigest-pinned6f82e2b0464f
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

58,857
app01create-databases0.1.01 of 1See more

app01 create-databases 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

702
pagescrypticcode-helmchart1.0.01 of 3See more

pages crypticcode-helmchart 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.1

Open the chart page →

20,190
myfirstchartcsp-helm-charts-repo0.2.01 of 1See more

myfirstchart csp-helm-charts-repo 0.2.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kubenginxhelm:0.2.0ae2268dcc930
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2

Open the chart page →

1,138
node-web-appcustom-charts0.1.01 of 1See more

node-web-app custom-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

702
pagesdalston-pages1.0.01 of 3See more

pages dalston-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.1

Open the chart page →

20,190
pagesdaman-dell-kuber1.0.01 of 3See more

pages daman-dell-kuber 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.1

Open the chart page →

20,190
myfirstchartdaryakap-helm-charts-repo0.2.01 of 1See more

myfirstchart daryakap-helm-charts-repo 0.2.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kubenginxhelm:0.2.0ae2268dcc930
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2

Open the chart page →

1,138
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.1

Open the chart page →

27,728
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.1

Open the chart page →

18,863
apache-ranger-admindata-platform-stableVerified publisher0.2.01 of 2See more

apache-ranger-admin data-platform-stable 0.2.0

1 of the 2 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

8,245
pagesdavid-pages1.0.01 of 3See more

pages david-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.1

Open the chart page →

20,190
pagesdebasish-pages1.0.01 of 3See more

pages debasish-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.1

Open the chart page →

20,190
prometheus-aws-costs-exporterdeliveryheroVerified publisher0.1.51 of 1See more

prometheus-aws-costs-exporter deliveryhero 0.1.5

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
nachomillangarcia/prometheus_aws_cost_exporter:lateste4ce056f2d6d
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

3,553
demodemo0.1.21 of 1See more

demo demo 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

702
myfirstchartdemostoles-helm-charts-repo0.2.01 of 1See more

myfirstchart demostoles-helm-charts-repo 0.2.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kubenginxhelm:0.2.0ae2268dcc930
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2

Open the chart page →

1,138
pagesdipak1.0.01 of 3See more

pages dipak 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.1

Open the chart page →

20,190
spark-standalonedmwm-bigdataVerified publisher0.1.01 of 2See more

spark-standalone dmwm-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
gradiant/spark:2.4.4-python-alpine97657d56e927
freetype@2.10.0-r0
2.10.0-r1

Open the chart page →

6,147
wwwdniel0.8.11 of 1See more

www dniel 0.8.1

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
dniel/www:master8519808fba22
freetype@2.9.1-r2
2.9.1-r3

Open the chart page →

627
docparserdocparser0.1.01 of 4See more

docparser docparser 0.1.0

1 of the 4 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
conduction/docparser-nginx:dev08524d8327b8
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

8,408
test-chartdossif0.1.51 of 1See more

test-chart dossif 0.1.5

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

702
helpdeskdoubanVerified publisher0.3.31 of 2See more

helpdesk douban 0.3.3

1 of the 2 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
douz/helpdesk-frontend:latestfa6a57de2b72
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

4,550
mergeabledoubanVerified publisher0.2.21 of 1See more

mergeable douban 0.2.2

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
ghcr.io/leoquote/mergeable:latest451706815103
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

4,223
nginxdoubanVerified publisher0.4.11 of 1See more

nginx douban 0.4.1

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

702
nonebotdoubanVerified publisher0.1.31 of 1See more

nonebot douban 0.1.3

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

702
overlorddoubanVerified publisher0.2.21 of 1See more

overlord douban 0.2.2

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
douz/overlord:latestf2bc7fc068c1
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2

Open the chart page →

3,693
probotdoubanVerified publisher0.1.21 of 1See more

probot douban 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

702
temporaldtrdnk-helm-chartsVerified publisher0.35.01 of 13See more

temporal dtrdnk-helm-charts 0.35.0

1 of the 13 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

20,205
amundsenduyet1.1.01 of 7See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/neo4j:3.3.0d4eaa8484246
freetype@2.9.1-r2
2.9.1-r3

Open the chart page →

11,174
rundeckdwardu-helm-charts0.3.41 of 2See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
rundeck/rundeck:3.2.74d64fe56f767
freetype@2.6.1-0.1ubuntu2.4
2.6.1-0.1ubuntu2.5

Open the chart page →

19,802
pagesedgwarepages1.0.01 of 3See more

pages edgwarepages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.1

Open the chart page →

20,190
myappeoc-chartsVerified publisher0.1.01 of 1See more

myapp eoc-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

702
shenyuerdeng2.4.212 of 2See more

shenyu erdeng 2.4.21

2 of the 2 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.4.2e8b7c4ddd069
freetype@2.9.1-r2
2.9.1-r3
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
freetype@2.9.1-r2
2.9.1-r3

Open the chart page →

12,513
escvmschedulerescvmscheduler1.0.71 of 3See more

escvmscheduler escvmscheduler 1.0.7

1 of the 3 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.17.4-alpine0649f548ea26
freetype@2.10.0-r0
2.10.0-r1

Open the chart page →

4,678
example-helm-chartexample-mycharts0.1.01 of 1See more

example-helm-chart example-mycharts 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

702
dega-serverfactlyVerified publisher0.1.01 of 1See more

dega-server factly 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

702
yelbfairwinds-incubator0.1.11 of 5See more

yelb fairwinds-incubator 0.1.1

1 of the 5 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
quay.io/fairwinds/yelb-ui:v0.1.05ac114e567ed
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2

Open the chart page →

5,089

Container images carrying it

208 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/wbstack/queryservice:0.3.6_0.6b83b5b81d4b6
freetype@2.9.1-r2
2.9.1-r3
1
ghcr.io/wbstack/queryservice-updater:0.3.84_3.97525a57ac3f1
freetype@2.9.1-r2
2.9.1-r3
1
quay.io/apicurio/apicurio-registry-kube-sync:1.0.170ef31840269
freetype@2.10.1-r0
2.10.1-r1
1
quay.io/fairwinds/yelb-ui:v0.1.05ac114e567ed
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
freetype@2.9.1-4.el8
0:2.9.1-4.el8_2.1
1
quay.io/ibmgaragecloud/nodejs:latest01c3b7acb301
freetype@2.6.3-3.2+deb9u1
2.6.3-3.2+deb9u2
1
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
freetype@2.9.1-r2
2.9.1-r3
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
freetype@2.6.1-0.1ubuntu2.3
2.6.1-0.1ubuntu2.5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.