StackRadar

CVE-2020-1967

High

Advisory

Published 21 Apr 2020In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.533
99th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
120
of 17,781 indexed, latest versions
Container images
101
deployed by those charts
Fix available
2 of 2
affected packages

openssl - security update

Carried by container images the latest versions of 120 of 17,781 indexed charts deploy, on 101 images.

Affected packageAffected versionsFixed inImages
opensslapk1.1.1d-r0, 1.1.1d-r2, 1.1.1d-r3, 1.1.1d-r4+1 more1.1.1g-r069
openssldeb1.1.1c-1, 1.1.1d-0+deb10u21.1.1d-0+deb10u332
OSV records
ALPINE-CVE-2020-1967DSA-4661-1

Charts affected

120 by stars
ChartLatestAffected imagesRadar Score
prometheus-cloudwatch-exporterprometheus-worawutchan0.12.01 of 1See more

prometheus-cloudwatch-exporter prometheus-worawutchan 0.12.0

1 of the 1 container images this version deploys carry CVE-2020-1967.

Container imageDigestPackageFixed in
prom/cloudwatch-exporter:cloudwatch_exporter-0.8.0fc4b9b9f5e15
openssl@1.1.1d-0+deb10u2
1.1.1d-0+deb10u3

Open the chart page →

2,831
static-siteredhat-cop0.0.242 of 2See more

static-site redhat-cop 0.0.24

2 of the 2 container images this version deploys carry CVE-2020-1967.

Container imageDigestPackageFixed in
jijiechen/alpine-curl-git:v2.24.10ee39a17903f
openssl@1.1.1d-r3
1.1.1g-r0
library/nginx:1.17.9-alpineabe5ce652eb7
openssl@1.1.1d-r2
1.1.1g-r0

Open the chart page →

1,726
sentry-dbsentry0.9.41 of 10See more

sentry-db sentry 0.9.4

1 of the 10 container images this version deploys carry CVE-2020-1967.

Container imageDigestPackageFixed in
library/rabbitmq:3.8.0-alpine72ff40a31dc4
openssl@1.1.1d-r0
1.1.1g-r0

Open the chart page →

10,967
site-usbsite-usb0.1.01 of 1See more

site-usb site-usb 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-1967.

Container imageDigestPackageFixed in
norskel/site-usb:id45fd6798558d
openssl@1.1.1d-0+deb10u2
1.1.1d-0+deb10u3

Open the chart page →

1,695
weblateslamdev0.0.111 of 2See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry CVE-2020-1967.

Container imageDigestPackageFixed in
weblate/weblate:3.11.3-182848df56ecd
openssl@1.1.1d-0+deb10u2
1.1.1d-0+deb10u3

Open the chart page →

8,694
statsd-proxysomeblackmagic0.1.21 of 1See more

statsd-proxy someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-1967.

Container imageDigestPackageFixed in
adgoal/statsd-proxy:latest75ed282ad613
openssl@1.1.1d-r3
1.1.1g-r0

Open the chart page →

682
ecr-cleanersstarcher0.1.1+d13a1ab1 of 1See more

ecr-cleaner sstarcher 0.1.1+d13a1ab

1 of the 1 container images this version deploys carry CVE-2020-1967.

Container imageDigestPackageFixed in
sstarcher/ecr-cleaner:0.1.12d43c390cb19
openssl@1.1.1d-r3
1.1.1g-r0

Open the chart page →

2,575
kube-ebs-taggersstarcher0.1.0+7abf4f71 of 1See more

kube-ebs-tagger sstarcher 0.1.0+7abf4f7

1 of the 1 container images this version deploys carry CVE-2020-1967.

Container imageDigestPackageFixed in
sstarcher/kube-ebs-tagger:0.1.01f8cae8cfa80
openssl@1.1.1d-r3
1.1.1g-r0

Open the chart page →

3,096
newrelic-private-minionsstarcher0.1.21 of 1See more

newrelic-private-minion sstarcher 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-1967.

Container imageDigestPackageFixed in
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
openssl@1.1.1d-r2
1.1.1g-r0

Open the chart page →

3,164
xposerstakaterVerified publisher0.0.201 of 1See more

xposer stakater 0.0.20

1 of the 1 container images this version deploys carry CVE-2020-1967.

Container imageDigestPackageFixed in
stakater/xposer:v0.0.2082b839b4517d
openssl@1.1.1d-r2
1.1.1g-r0

Open the chart page →

242
prometheus-operatorstatcan0.2.21 of 7See more

prometheus-operator statcan 0.2.2

1 of the 7 container images this version deploys carry CVE-2020-1967.

Container imageDigestPackageFixed in
squareup/ghostunnel:v1.5.270f4cf270425
openssl@1.1.1d-r0
1.1.1g-r0

Open the chart page →

12,237
solrstatcan1.5.101 of 3See more

solr statcan 1.5.10

1 of the 3 container images this version deploys carry CVE-2020-1967.

Container imageDigestPackageFixed in
library/zookeeper:3.5.5b7a76ec06f68
openssl@1.1.1d-0+deb10u2
1.1.1d-0+deb10u3

Open the chart page →

8,806
thruksvtech-public-helm-charts1.0.01 of 1See more

thruk svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-1967.

Container imageDigestPackageFixed in
svtechnmaa/svtech_http_thruk:v1.0.2e19aba397c1f
openssl@1.1.1d-0+deb10u2
1.1.1d-0+deb10u3

Open the chart page →

1,781
dashkioskt3n2.0.01 of 1See more

dashkiosk t3n 2.0.0

1 of the 1 container images this version deploys carry CVE-2020-1967.

Container imageDigestPackageFixed in
quay.io/t3n/dashkiosk:v2.7.8c973e166a5dc
openssl@1.1.1d-r3
1.1.1g-r0

Open the chart page →

3,827
temporaltemporal0.28.92 of 13See more

temporal temporal 0.28.9

2 of the 13 container images this version deploys carry CVE-2020-1967.

Container imageDigestPackageFixed in
curlimages/curl:7.68.099a8e9629b3a
openssl@1.1.1d-r0
1.1.1g-r0
grafana/grafana:6.7.11ff3999e0fc0
openssl@1.1.1d-r5
1.1.1g-r0

Open the chart page →

21,005
openldap-havcnngrVerified publisher1.0.01 of 3See more

openldap-ha vcnngr 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-1967.

Container imageDigestPackageFixed in
osixia/phpldapadmin:0.9.0d112b82be133
openssl@1.1.1c-1
1.1.1d-0+deb10u3

Open the chart page →

5,514
volantmqvolantmq0.1.21 of 1See more

volantmq volantmq 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-1967.

Container imageDigestPackageFixed in
volantmq/volantmq:v0.4.0-rc.69bfe7857ebc3
openssl@1.1.1d-r3
1.1.1g-r0

Open the chart page →

2,550
athens-proxywenerme0.5.21 of 2See more

athens-proxy wenerme 0.5.2

1 of the 2 container images this version deploys carry CVE-2020-1967.

Container imageDigestPackageFixed in
gomods/athens:v0.11.0efb811df7844
openssl@1.1.1d-r3
1.1.1g-r0

Open the chart page →

4,984
temporalwenerme0.15.12 of 13See more

temporal wenerme 0.15.1

2 of the 13 container images this version deploys carry CVE-2020-1967.

Container imageDigestPackageFixed in
curlimages/curl:7.68.099a8e9629b3a
openssl@1.1.1d-r0
1.1.1g-r0
grafana/grafana:6.7.11ff3999e0fc0
openssl@1.1.1d-r5
1.1.1g-r0

Open the chart page →

22,665
dex-k8s-authenticatorwiremindVerified publisher1.7.01 of 1See more

dex-k8s-authenticator wiremind 1.7.0

1 of the 1 container images this version deploys carry CVE-2020-1967.

Container imageDigestPackageFixed in
mintel/dex-k8s-authenticator:1.4.0caf71cee7b9a
openssl@1.1.1d-r0
1.1.1g-r0

Open the chart page →

2,791

Container images carrying it

101 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
grafana/grafana:6.6.0052147d7e0ec
openssl@1.1.1d-r4
1.1.1g-r0
1
grafana/grafana:6.4.28c2238eea9d3
openssl@1.1.1d-r2
1.1.1g-r0
1
grafana/grafana:6.4.3bd55ea2bad17
openssl@1.1.1d-r2
1.1.1g-r0
1
grafana/grafana:6.5.1befcd84da2c1
openssl@1.1.1d-r2
1.1.1g-r0
1
guacamole/guacd:1.1.02288530a4d1c
openssl@1.1.1d-0+deb10u2
1.1.1d-0+deb10u3
1
halkeye/matrix-ircd:latest1ddae9d0f1c7
openssl@1.1.1d-0+deb10u2
1.1.1d-0+deb10u3
1
hhaluk/crypto-watchdog:0.4.0a6555953d941
openssl@1.1.1d-r3
1.1.1g-r0
1
jijiechen/alpine-curl-git:v2.24.10ee39a17903f
openssl@1.1.1d-r3
1.1.1g-r0
1
jvstein/bitcoin-prometheus-exporter:v0.5.07cc385d038b1
openssl@1.1.1d-r3
1.1.1g-r0
1
kiwigrid/k8s-sidecar:0.1.20af151f677a63
openssl@1.1.1c-1
1.1.1d-0+deb10u3
1
library/adminer:4.7.5-standalonef42d935fec5a
openssl@1.1.1d-r3
1.1.1g-r0
1
library/nextcloud:17.0.0-apache96104cb965fc
openssl@1.1.1d-0+deb10u2
1.1.1d-0+deb10u3
1
library/nginx:1.17.4-alpine0649f548ea26
openssl@1.1.1d-r0
1.1.1g-r0
1
library/nginx:1.17.9-alpineabe5ce652eb7
openssl@1.1.1d-r2
1.1.1g-r0
1
library/nginx:1.17.6b2d89d0a2103
openssl@1.1.1d-0+deb10u2
1.1.1d-0+deb10u3
1
library/rabbitmq:3.8.1-alpine7e0b62800e5e
openssl@1.1.1d-r0
1.1.1g-r0
1
library/redis:5.0.6-alpine3.1027e139dd0476
openssl@1.1.1d-r0
1.1.1g-r0
1
logiqai/toolbox:2.0.155a574ec5b64
openssl@1.1.1d-r3
1.1.1g-r0
1
machinebox/facebox:latestbd9f5e069566
openssl@1.1.1d-0+deb10u2
1.1.1d-0+deb10u3
1
mesosphere/grafana-plugins:v0.0.19a5e8e7ed587
openssl@1.1.1d-r0
1.1.1g-r0
1
minio/mc:RELEASE.2020-03-14T01-23-37Z571feb124476
openssl@1.1.1d-r2
1.1.1g-r0
1
nfvpe/sriov-device-plugin:v3.1518499ed631f
openssl@1.1.1d-r0
1.1.1g-r0
1
nmalhotr/webserver:v1.0.03419361fb0dd
openssl@1.1.1d-0+deb10u2
1.1.1d-0+deb10u3
1
norskel/site-usb:id45fd6798558d
openssl@1.1.1d-0+deb10u2
1.1.1d-0+deb10u3
1
odaniait/aws-kubectl:latest3fff8a8570ec
openssl@1.1.1d-r3
1.1.1g-r0
1
openwhisk/apigateway:1.0.0df52384d7f92
openssl@1.1.1d-r2
1.1.1g-r0
1
openzipkin/zipkin-ui:2.21.0672cbc94256b
openssl@1.1.1d-r2
1.1.1g-r0
1
pe46dro/xbackbone-docker:3.3.309dfe3aa10f6
openssl@1.1.1d-r2
1.1.1g-r0
1
prom/cloudwatch-exporter:cloudwatch_exporter-0.8.0fc4b9b9f5e15
openssl@1.1.1d-0+deb10u2
1.1.1d-0+deb10u3
1
refar/apm-api:v5.7.1241373fa2972
openssl@1.1.1d-r0
1.1.1g-r0
1
refar/apm-operator-server:v5.7.1e5490f050f9f
openssl@1.1.1d-r0
1.1.1g-r0
1
samueldg/snappass:latest3987195edbe6
openssl@1.1.1d-0+deb10u2
1.1.1d-0+deb10u3
1
sorintlab/stolon:v0.16.0-pg1236b45c0f97fc
openssl@1.1.1d-0+deb10u2
1.1.1d-0+deb10u3
1
sstarcher/ecr-cleaner:0.1.12d43c390cb19
openssl@1.1.1d-r3
1.1.1g-r0
1
sstarcher/helm-exporter:0.5.011769d01ba35
openssl@1.1.1d-r3
1.1.1g-r0
1
sstarcher/kube-ebs-tagger:0.1.01f8cae8cfa80
openssl@1.1.1d-r3
1.1.1g-r0
1
stakater/xposer:v0.0.2082b839b4517d
openssl@1.1.1d-r2
1.1.1g-r0
1
svtechnmaa/svtech_http_thruk:v1.0.2e19aba397c1f
openssl@1.1.1d-0+deb10u2
1.1.1d-0+deb10u3
1
swaggerapi/swagger-ui:v3.24.3d434cac93813
openssl@1.1.1d-r0
1.1.1g-r0
1
volantmq/volantmq:v0.4.0-rc.69bfe7857ebc3
openssl@1.1.1d-r3
1.1.1g-r0
1
weblate/weblate:3.11.3-182848df56ecd
openssl@1.1.1d-0+deb10u2
1.1.1d-0+deb10u3
1
wiremind/pghoard:12-2019-11-264dea42c8166c
openssl@1.1.1d-0+deb10u2
1.1.1d-0+deb10u3
1
gcr.io/gke-release/gcp-compute-persistent-disk-csi-driver:v0.6.2-gke.0cf3c3af0187e
openssl@1.1.1d-0+deb10u2
1.1.1d-0+deb10u3
1
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
openssl@1.1.1d-r3
1.1.1g-r0
1
quay.io/fairwinds/clamav:v0.0.3e12bdddaa81d
openssl@1.1.1d-r3
1.1.1g-r0
1
quay.io/jetstack/kube-oidc-proxy:v0.3.0e045b26eb6df
openssl@1.1.1d-r2
1.1.1g-r0
1
quay.io/kubernetes-ingress-controller/nginx-ingress-controller:0.30.0b312c91d0de6
openssl@1.1.1d-r3
1.1.1g-r0
1
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
openssl@1.1.1d-r2
1.1.1g-r0
1
quay.io/opsmxpublic/bitnami-redis:5.0.7-debian-10-r09a8d95ca0bd9
openssl@1.1.1d-0+deb10u2
1.1.1d-0+deb10u3
1
quay.io/t3n/dashkiosk:v2.7.8c973e166a5dc
openssl@1.1.1d-r3
1.1.1g-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.