StackRadar

CVE-2020-17525

High

Advisory

Published 10 Feb 2021In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.401
99th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
65
of 17,781 indexed, latest versions
Container images
56
deployed by those charts
Fix available
2 of 2
affected packages

subversion - security update

Carried by container images the latest versions of 65 of 17,781 indexed charts deploy, on 56 images.

Affected packageAffected versionsFixed inImages
subversiondeb1.9.5-1+deb9u1, 1.9.5-1+deb9u2, 1.9.5-1+deb9u3, 1.9.5-1+deb9u4+4 more1.9.5-1+deb9u6, 1.10.4-1+deb10u2, 1.13.0-3ubuntu0.255
subversionapk1.12.2-r11.12.2-r21
OSV records
ALPINE-CVE-2020-17525UBUNTU-CVE-2020-17525DLA-2646-1DSA-4851-1
Also known as
USN-5445-1

Charts affected

65 by stars
ChartLatestAffected imagesRadar Score
o1-botminaVerified publisher0.0.31 of 1See more

o1-bot mina 0.0.3

1 of the 1 container images this version deploys carry CVE-2020-17525.

Container imageDigestPackageFixed in
codaprotocol/coda-user-agent:0.1.54ba4dd3a041f
subversion@1.9.5-1+deb9u5
1.9.5-1+deb9u6

Open the chart page →

2,655
mozalert-controllermozilla0.4.01 of 1See more

mozalert-controller mozilla 0.4.0

1 of the 1 container images this version deploys carry CVE-2020-17525.

Container imageDigestPackageFixed in
afrank/mozalert-controller:latestd463c37b08d7
subversion@1.10.4-1+deb10u1
1.10.4-1+deb10u2

Open the chart page →

2,969
sentence-collectormozilla0.1.21 of 2See more

sentence-collector mozilla 0.1.2

1 of the 2 container images this version deploys carry CVE-2020-17525.

Container imageDigestPackageFixed in
mozilla/sentencecollector:2.0.91da6ff5c4895
subversion@1.10.4-1+deb10u1
1.10.4-1+deb10u2

Open the chart page →

6,684
pecanncsaVerified publisher0.6.21 of 15See more

pecan ncsa 0.6.2

1 of the 15 container images this version deploys carry CVE-2020-17525.

Container imageDigestPackageFixed in
pecan/monitor:1.7.273b2074f3fec
subversion@1.10.4-1+deb10u1
1.10.4-1+deb10u2

Open the chart page →

14,154
openwhiskopenwhisk1.0.02 of 10See more

openwhisk openwhisk 1.0.0

2 of the 10 container images this version deploys carry CVE-2020-17525.

Container imageDigestPackageFixed in
openwhisk/alarmprovider:2.2.0b695a6ceb406
subversion@1.9.5-1+deb9u5
1.9.5-1+deb9u6
openwhisk/kafkaprovider:2.1.063dc3d2a0904
subversion@1.10.4-1+deb10u1
1.10.4-1+deb10u2

Open the chart page →

36,215
myappp4-helm0.1.02 of 6See more

myapp p4-helm 0.1.0

2 of the 6 container images this version deploys carry CVE-2020-17525.

Container imageDigestPackageFixed in
fjvela/urjc-fjvela-external-service:1.0.1a8ebe5ca13fc
subversion@1.9.5-1+deb9u5
1.9.5-1+deb9u6
fjvela/urjc-fjvela-server:1.0.53c840aebce22
subversion@1.9.5-1+deb9u5
1.9.5-1+deb9u6

Open the chart page →

19,720
practica-helmpractica-helm0.1.01 of 7See more

practica-helm practica-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2020-17525.

Container imageDigestPackageFixed in
slagattollas/server-practica:latest6dd8ead8e2b1
subversion@1.9.5-1+deb9u5
1.9.5-1+deb9u6

Open the chart page →

28,484
test-helm-app2saam-helm-test0.1.01 of 1See more

test-helm-app2 saam-helm-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-17525.

Container imageDigestPackageFixed in
asdkant/fastapi-hello-world:latesta23d8bf7c885
subversion@1.10.4-1+deb10u1
1.10.4-1+deb10u2

Open the chart page →

2,770
weblateslamdev0.0.111 of 2See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry CVE-2020-17525.

Container imageDigestPackageFixed in
weblate/weblate:3.11.3-182848df56ecd
subversion@1.10.4-1+deb10u1
1.10.4-1+deb10u2

Open the chart page →

8,694
sonarqubestakaterVerified publisher0.10.31 of 2See more

sonarqube stakater 0.10.3

1 of the 2 container images this version deploys carry CVE-2020-17525.

Container imageDigestPackageFixed in
library/sonarqube:6.7.6-community0ae5169e3d0f
subversion@1.9.5-1+deb9u3
1.9.5-1+deb9u6

Open the chart page →

11,841
pachydermstatcan0.5.11 of 4See more

pachyderm statcan 0.5.1

1 of the 4 container images this version deploys carry CVE-2020-17525.

Container imageDigestPackageFixed in
pachyderm/grpc-proxy:0.4.92b27f41d4d02
subversion@1.9.5-1+deb9u4
1.9.5-1+deb9u6

Open the chart page →

4,967
voteappvoting-app-helm-charts-repoVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo 1.0.0

1 of the 5 container images this version deploys carry CVE-2020-17525.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
subversion@1.9.5-1+deb9u1
1.9.5-1+deb9u6

Open the chart page →

8,262
workerappvoting-app-helm-charts-repoVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-17525.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
subversion@1.9.5-1+deb9u1
1.9.5-1+deb9u6

Open the chart page →

3,329
voteappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 5 container images this version deploys carry CVE-2020-17525.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
subversion@1.9.5-1+deb9u1
1.9.5-1+deb9u6

Open the chart page →

8,262
workerappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-17525.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
subversion@1.9.5-1+deb9u1
1.9.5-1+deb9u6

Open the chart page →

3,329

Container images carrying it

56 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
kodekloud/examplevotingapp_worker:v1741e3aaaa812
subversion@1.9.5-1+deb9u1
1.9.5-1+deb9u6
4
oscarsotosanchez/server:v1.06e2e1279126b
subversion@1.9.5-1+deb9u5
1.9.5-1+deb9u6
4
amancevice/superset:0.35.212a0a9e66550
subversion@1.10.4-1+deb10u1
1.10.4-1+deb10u2
2
fjvela/urjc-fjvela-external-service:1.0.1a8ebe5ca13fc
subversion@1.9.5-1+deb9u5
1.9.5-1+deb9u6
2
fjvela/urjc-fjvela-server:1.0.53c840aebce22
subversion@1.9.5-1+deb9u5
1.9.5-1+deb9u6
2
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
subversion@1.10.4-1+deb10u1
1.10.4-1+deb10u2
2
nachomillangarcia/prometheus_aws_cost_exporter:lateste4ce056f2d6d
subversion@1.9.5-1+deb9u2
1.9.5-1+deb9u6
2
neilpeterson/azure-vote-front:v384062718347c
subversion@1.9.5-1+deb9u1
1.9.5-1+deb9u6
2
statsd/statsd:v0.8.6dab129e74c25
subversion@1.9.5-1+deb9u3
1.9.5-1+deb9u6
2
weblate/weblate:4.2.2-169c160d37a3c
subversion@1.10.4-1+deb10u1
1.10.4-1+deb10u2
2
afrank/mozalert-controller:latestd463c37b08d7
subversion@1.10.4-1+deb10u1
1.10.4-1+deb10u2
1
amancevice/superset:0.28.1c8c04bfe3d66
subversion@1.9.5-1+deb9u3
1.9.5-1+deb9u6
1
asdkant/fastapi-hello-world:latesta23d8bf7c885
subversion@1.10.4-1+deb10u1
1.10.4-1+deb10u2
1
bryanalves/honeywell_exporter:0.0.1195f73dce8b21
subversion@1.9.5-1+deb9u1
1.9.5-1+deb9u6
1
bryanalves/smart_exporter:0.2af47dfbb9413
subversion@1.9.5-1+deb9u2
1.9.5-1+deb9u6
1
camptocamp/ekorre:0.1.035c91d5fda04
subversion@1.10.4-1+deb10u1
1.10.4-1+deb10u2
1
cdignam/kodiak:v0.54.05a6a55b39cee
subversion@1.10.4-1
1.10.4-1+deb10u2
1
ceticasbl/tsimulus-saas:0.1.18bc34ce180d0c
subversion@1.10.4-1+deb10u1
1.10.4-1+deb10u2
1
codaprotocol/buildkite-exporter:0.2.137c68e67a401
subversion@1.9.5-1+deb9u5
1.9.5-1+deb9u6
1
codaprotocol/coda-user-agent:0.1.54ba4dd3a041f
subversion@1.9.5-1+deb9u5
1.9.5-1+deb9u6
1
davidvmar/urjc-davidvmar-external-service:1.0.02a68e9ac7f09
subversion@1.9.5-1+deb9u5
1.9.5-1+deb9u6
1
davidvmar/urjc-davidvmar-server:1.0.05663f5b24615
subversion@1.9.5-1+deb9u5
1.9.5-1+deb9u6
1
dnationcloud/kubernetes-linter:0.2.1dee6376560f5
subversion@1.10.4-1+deb10u1
1.10.4-1+deb10u2
1
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
subversion@1.9.5-1+deb9u5
1.9.5-1+deb9u6
1
gollumorg/gollum:latest7cd5305a3cf7
subversion@1.10.4-1+deb10u1
1.10.4-1+deb10u2
1
gomods/athens:v0.8.1d714c7ff0231
subversion@1.12.2-r1
1.12.2-r2
1
guacamole/guacamole:1.3.0739cb6820ae8
subversion@1.10.4-1+deb10u1
1.10.4-1+deb10u2
1
halkeye/gitter-slack-bridge:v2.0.153eb2b3cd4cb
subversion@1.9.5-1+deb9u5
1.9.5-1+deb9u6
1
halkeye/slack-resurrect:v0.1.477b05e95fdb5
subversion@1.9.5-1+deb9u3
1.9.5-1+deb9u6
1
haveagitgat/tdarr_node:2.00.101e3f9328327d
subversion@1.13.0-3
1.13.0-3ubuntu0.2
1
i4trust/pdc-portal:2.0.03e77858e1219
subversion@1.9.5-1+deb9u5
1.9.5-1+deb9u6
1
jenkinsci/jenkins:2.67a1f33f004659
subversion@1.9.5-1+deb9u1
1.9.5-1+deb9u6
1
ladeit/ladeit:latest962b665ffe82
subversion@1.10.4-1+deb10u1
1.10.4-1+deb10u2
1
library/sonarqube:6.7.6-community0ae5169e3d0f
subversion@1.9.5-1+deb9u3
1.9.5-1+deb9u6
1
lsstsqre/squash-api:0.5.34879415ec6ac
subversion@1.10.4-1+deb10u1
1.10.4-1+deb10u2
1
mozilla/sentencecollector:2.0.91da6ff5c4895
subversion@1.10.4-1+deb10u1
1.10.4-1+deb10u2
1
mvitale1989/docker-taiga:20191031-4.2.141504ccda06df
subversion@1.9.5-1+deb9u5
1.9.5-1+deb9u6
1
neilpeterson/aks-helloworld:v1fb47732ef36b
subversion@1.9.5-1+deb9u1
1.9.5-1+deb9u6
1
neilpeterson/burst-scheduler:v1.23a8877032972
subversion@1.9.5-1+deb9u1
1.9.5-1+deb9u6
1
neilpeterson/chart-tweet:latest64fd8dab075f
subversion@1.9.5-1+deb9u1
1.9.5-1+deb9u6
1
neilpeterson/process-tweet:latest39ce9f92e899
subversion@1.9.5-1+deb9u1
1.9.5-1+deb9u6
1
nmalhotr/webserver:v1.0.03419361fb0dd
subversion@1.10.4-1+deb10u1
1.10.4-1+deb10u2
1
nodered/node-red-docker:0.19.6-v8070643219ea2
subversion@1.9.5-1+deb9u3
1.9.5-1+deb9u6
1
openwhisk/alarmprovider:2.2.0b695a6ceb406
subversion@1.9.5-1+deb9u5
1.9.5-1+deb9u6
1
openwhisk/kafkaprovider:2.1.063dc3d2a0904
subversion@1.10.4-1+deb10u1
1.10.4-1+deb10u2
1
pachyderm/grpc-proxy:0.4.92b27f41d4d02
subversion@1.9.5-1+deb9u4
1.9.5-1+deb9u6
1
pecan/monitor:1.7.273b2074f3fec
subversion@1.10.4-1+deb10u1
1.10.4-1+deb10u2
1
rakii8585/angular-node-webapp:latest026082a515ac
subversion@1.9.5-1+deb9u5
1.9.5-1+deb9u6
1
raykrueger/riemann:0.2.14c8baf3de57bb
subversion@1.9.5-1+deb9u1
1.9.5-1+deb9u6
1
royalwang/sentinel-dashboard:1.8.4df99e2499f91
subversion@1.9.5-1+deb9u3
1.9.5-1+deb9u6
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.