StackRadarChart IndexLive demo

CVE-2020-16251

High

Advisory

Published 31 Jan 2024In the index since 8 Sept 2026

Severity: High; worst across findings
CVSS: 8.2; base score, highest
EPSS: 0.030; 86th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3; of 17,781 indexed, latest versions
Container images: 2; deployed by those charts
Fix available: 1 of 1; affected package

HashiCorp Vault Authentication bypass

Carried by container images the latest versions of 3 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
github.com/hashicorp/vaultgolang	v1.1.0, v1.4.2	1.2.5, 1.4.4	2

OSV records: GHSA-4mp7-2m29-gqxf
Also known as: BIT-vault-2020-16251, GO-2024-2488

Charts affected

3 by stars

Chart

Latest

Affected images

Radar Score

flaggermesosphere

1 of 2 See more

flagger mesosphere 0.21.0

1 of the 2 container images this version deploys carry CVE-2020-16251.

Container image	Digest	Package	Fixed in
weaveworks/flagger :0.19.0	a9c2e9df4227	github.com/hashicorp/vault@v1.1.0	1.2.5

Open the chart page →

6,048

ceph-csi-cephfswikimedia

1 of 5 See more

ceph-csi-cephfs wikimedia 0.1.8

1 of the 5 container images this version deploys carry CVE-2020-16251.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	github.com/hashicorp/vault@v1.4.2	1.4.4

Open the chart page →

10,285

ceph-csi-rbdwikimedia

1 of 6 See more

ceph-csi-rbd wikimedia 0.1.13

1 of the 6 container images this version deploys carry CVE-2020-16251.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	github.com/hashicorp/vault@v1.4.2	1.4.4

Open the chart page →

11,784

Container images carrying it

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	github.com/hashicorp/vault@v1.4.2	1.4.4	2
weaveworks/flagger :0.19.0	a9c2e9df4227	github.com/hashicorp/vault@v1.1.0	1.2.5	1