StackRadar

CVE-2020-15999

CriticalKEV

Advisory

Published 20 Oct 2020In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.6
base score, highest
EPSS
0.443
99th percentile
CISA KEV
Listed
since 3 Nov 2021
Charts affected
417
of 17,781 indexed, latest versions
Container images
208
deployed by those charts
Fix available
4 of 4
affected packages

Red Hat Security Advisory: freetype security update

Carried by container images the latest versions of 417 of 17,781 indexed charts deploy, on 208 images.

Affected packageAffected versionsFixed inImages
freetypedeb2.5.2-1ubuntu2.2, 2.5.2-1ubuntu2.8, 2.6.1-0.1ubuntu2.3, 2.6.1-0.1ubuntu2.4+5 more2.5.2-1ubuntu2.8+esm2, 2.6.1-0.1ubuntu2.5, 2.6.3-3.2+deb9u2, 2.8.1-2ubuntu2.1+1 more135
freetypeapk2.9.1-r2, 2.10.0-r0, 2.10.1-r0, 2.10.2-r02.9.1-r3, 2.10.0-r1, 2.10.1-r1, 2.10.4-r066
chromium-browserdeb63.0.3239.84-0ubuntu0.16.04.186.0.4240.198-0ubuntu0.16.04.11
freetyperpm2.8-12.el7_6.1, 2.8-14.el7, 2.9.1-4.el80:2.8-14.el7_9.1, 0:2.9.1-4.el8_2.17
OSV records
ALPINE-CVE-2020-15999UBUNTU-CVE-2020-15999RHSA-2020:4907RHSA-2020:4951DLA-2415-1DSA-4777-1
Also known as
RHSA-2020:4952, USN-4593-1, USN-4593-2

Charts affected

417 by stars
ChartLatestAffected imagesRadar Score
helmexampletomsuehelmexample0.1.01 of 1See more

helmexample tomsuehelmexample 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

702
pagesvictor-pages1.0.01 of 3See more

pages victor-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.1

Open the chart page →

20,190
pageswalter1.0.01 of 3See more

pages walter 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.1

Open the chart page →

20,190
nginx-file-browserwarjiang0.1.21 of 1See more

nginx-file-browser warjiang 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

702
queryservicewbstack0.2.11 of 1See more

queryservice wbstack 0.2.1

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
ghcr.io/wbstack/queryservice:0.3.6_0.6b83b5b81d4b6
freetype@2.9.1-r2
2.9.1-r3

Open the chart page →

4,649
queryservice-updaterwbstack0.3.01 of 1See more

queryservice-updater wbstack 0.3.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
ghcr.io/wbstack/queryservice-updater:0.3.84_3.97525a57ac3f1
freetype@2.9.1-r2
2.9.1-r3

Open the chart page →

3,176
sonarqubewebencryptor6.7.31 of 3See more

sonarqube webencryptor 6.7.3

1 of the 3 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/sonarqube:8.2-communitya246bc64207e
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2

Open the chart page →

5,460
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

10,127
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

22,665
nginxwiremindVerified publisher2.1.11 of 1See more

nginx wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.17-alpine763e7f0188e3
freetype@2.10.1-r0
2.10.1-r1

Open the chart page →

966
apicurio-registry-sqlwitcom-gmbh0.1.01 of 1See more

apicurio-registry-sql witcom-gmbh 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-jpa:1.3.2.Final44eeddd3562c
freetype@2.10.1-r0
2.10.1-r1

Open the chart page →

3,424
myfirstchartww-helm-charts-repo0.1.01 of 1See more

myfirstchart ww-helm-charts-repo 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kubenginx:0.1.0205961b09a80
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2

Open the chart page →

1,138
upsourcexykongVerified publisher0.1.11 of 1See more

upsource xykong 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

702
helmexampleycztest0.1.01 of 1See more

helmexample ycztest 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

702
mychartyi-test-chart0.1.01 of 1See more

mychart yi-test-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

702
helmexampleyunpeng-helmexample0.1.01 of 1See more

helmexample yunpeng-helmexample 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2

Open the chart page →

702
myfirstchartzikilabVerified publisher0.2.01 of 1See more

myfirstchart zikilab 0.2.0

1 of the 1 container images this version deploys carry CVE-2020-15999.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kubenginxhelm:0.2.0ae2268dcc930
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2

Open the chart page →

1,138

Container images carrying it

208 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
library/nginx:1.16.03e373fd5b8d4
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2
86
flyway/flyway:6.4.422d97ceb0c47
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.1
79
ghcr.io/stacksimplify/kubenginxhelm:0.2.0ae2268dcc930
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2
33
library/cassandra:3.11.3ce85468c5bad
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2
7
ghcr.io/stacksimplify/kubenginx:0.1.0:1.0.0205961b09a80
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2
5
grafana/grafana:6.2.5ab415470454b
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2
4
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
freetype@2.6.1-0.1ubuntu2.3
2.6.1-0.1ubuntu2.5
4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
freetype@2.6.1-0.1ubuntu2.3
2.6.1-0.1ubuntu2.5
4
apache/shenyu-admin:2.4.2e8b7c4ddd069
freetype@2.9.1-r2
2.9.1-r3
3
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
freetype@2.9.1-r2
2.9.1-r3
3
cankush625/webpage:latest9479f73bab03
freetype@2.10.1-r0
2.10.1-r1
3
omecproject/cdn-video-repo:1.0.0:remote-v3d59ccb138ffb
freetype@2.6.1-0.1ubuntu2.3
2.6.1-0.1ubuntu2.5
3
ghcr.io/stacksimplify/kubenginx:0.4.0:4.0.0279eb855e6c7
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2
3
amancevice/superset:0.35.212a0a9e66550
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2
2
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
freetype@2.9.1-r2
2.9.1-r3
2
fjvela/urjc-fjvela-external-service:1.0.1a8ebe5ca13fc
freetype@2.6.3-3.2+deb9u1
2.6.3-3.2+deb9u2
2
fjvela/urjc-fjvela-server:1.0.53c840aebce22
freetype@2.6.3-3.2+deb9u1
2.6.3-3.2+deb9u2
2
gradiant/opentsdb:2.4.0c33d53913869
freetype@2.9.1-r2
2.9.1-r3
2
gradiant/spark:2.4.4-python-alpine97657d56e927
freetype@2.10.0-r0
2.10.0-r1
2
grafana/grafana:6.1.6d66b41cf7e05
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2
2
library/cassandra:3.11.65aa8400b4b3b
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.1
2
library/nginx:1.176fff55753e3b
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2
2
library/nginx:1.13.12b1d09e971889
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2
2
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2
2
martinaif/backstage-k8s-demo-frontend:test1f07fbe15e5b5
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2
2
mojaloop/reporting-hub-bop-role-ui:v1.5.55f025fe3554b
freetype@2.9.1-r2
2.9.1-r3
2
mojaloop/reporting-hub-bop-shell:v2.3.3c338940807c9
freetype@2.9.1-r2
2.9.1-r3
2
mojaloop/reporting-hub-bop-trx-ui:v2.0.289cb2e16a2a3
freetype@2.9.1-r2
2.9.1-r3
2
nachomillangarcia/prometheus_aws_cost_exporter:lateste4ce056f2d6d
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2
2
neilpeterson/azure-vote-front:v384062718347c
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2
2
neuvector/manager:3.2.1f1b7d666eae0
freetype@2.10.1-r0
2.10.1-r1
2
openmf/community-app:latest496b60a51f28
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2
2
rodolpheche/wiremock:2.26.03be08a386092
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2
2
solsson/kafka-prometheus-jmx-exporter6f82e2b0464f
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2
2
statsd/statsd:v0.8.6dab129e74c25
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2
2
weblate/weblate:4.2.2-169c160d37a3c
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2
2
wurstmeister/zookeeper:latest7a7fd44a7210
freetype@2.5.2-1ubuntu2.2
2.5.2-1ubuntu2.8+esm2
2
adferrand/backuppc:4.4.06fea97b02758
freetype@2.10.2-r0
2.10.4-r0
1
afrank/mozalert-controller:latestd463c37b08d7
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2
1
amancevice/superset:0.28.1c8c04bfe3d66
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2
1
apachepulsar/pulsar:2.6.14db6ff0b4045
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2
1
apache/shenyu-admin:2.5.1e2be712fc4f4
freetype@2.9.1-r2
2.9.1-r3
1
apache/shenyu-bootstrap:2.5.11bd5756f6273
freetype@2.9.1-r2
2.9.1-r3
1
apache/skywalking-oap-server:8.1.0-es7641237e0299b
freetype@2.9.1-r2
2.9.1-r3
1
apache/skywalking-ui:8.1.067d50e4deff4
freetype@2.9.1-r2
2.9.1-r3
1
apicurio/apicurio-registry-jpa:1.3.2.Final44eeddd3562c
freetype@2.10.1-r0
2.10.1-r1
1
bivas/presto:0.19605545994f806
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2
1
bryanalves/honeywell_exporter:0.0.1195f73dce8b21
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2
1
bryanalves/smart_exporter:0.2af47dfbb9413
freetype@2.6.3-3.2
2.6.3-3.2+deb9u2
1
camptocamp/ekorre:0.1.035c91d5fda04
freetype@2.9.1-3+deb10u1
2.9.1-3+deb10u2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.