StackRadar

CVE-2020-1971

Medium

Advisory

Published 8 Dec 2020In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.071
94th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
954
of 17,787 indexed, latest versions
Container images
780
deployed by those charts
Fix available
5 of 5
affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 954 of 17,787 indexed charts deploy, on 780 images.

Affected packageAffected versionsFixed inImages
opensslapk1.1.1a-r1, 1.1.1b-r1, 1.1.1c-r0, 1.1.1d-r0+5 more1.1.1i-r0379
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+27 more1.0.1f-1ubuntu2.27+esm2, 1.0.2g-1ubuntu4.18, 1.1.0l-1~deb9u2, 1.1.1-1ubuntu2.1~18.04.7+2 more361
openssl1.0deb1.0.2l-2, 1.0.2l-2+deb9u1, 1.0.2l-2+deb9u2, 1.0.2l-2+deb9u3+8 more1.0.2n-1ubuntu5.5, 1.0.2u-1~deb9u390
opensslrpm1:1.0.2k-16.el7_6.1, 1:1.0.2k-19.el7, 1:1.1.1-8.el8, 1:1.1.1c-2.el8_1.1+4 more1:1.0.2k-21.el7_9, 1:1.1.1c-16.el8_2, 1:1.1.1g-12.el8_330
openssl-1_1rpm1.1.0i-14.6.1, 1.1.0i-lp151.8.3.1, 1.1.1d-11.6.11.1.0i-14.12.1, 1.1.0i-lp151.8.12.2, 1.1.1d-11.12.110
OSV records
ALPINE-CVE-2020-1971RHSA-2020:5422RHSA-2020:5476RHSA-2020:5566UBUNTU-CVE-2020-1971DLA-2492-1DLA-2493-1DSA-4807-1openSUSE-SU-2020:2245-1SUSE-SU-2020:3720-1SUSE-SU-2020:3721-1
Also known as
RHSA-2020:5588, RHSA-2020:5623, RHSA-2020:5637, RHSA-2020:5642, USN-4662-1, USN-4745-1

Charts affected

954 by stars
ChartLatestAffected imagesRadar Score
rcloneymrs0.1.41 of 2See more

rclone ymrs 0.1.4

1 of the 2 container images this version deploys carry CVE-2020-1971.

Container imageDigestPackageFixed in
quay.io/simplyzee/kube-rclone:v1.52.389a0c23d5ad3
openssl@1.1.1g-r0
1.1.1i-r0

Open the chart page →

1,198
version-checkerymrs0.2.31 of 1See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry CVE-2020-1971.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
openssl@1.1.1g-r0
1.1.1i-r0

Open the chart page →

3,023
helmexampleyunpeng-helmexample0.1.01 of 1See more

helmexample yunpeng-helmexample 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-1971.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
openssl@1.1.0k-1~deb9u1
1.1.0l-1~deb9u2

Open the chart page →

702
myfirstchartzikilabVerified publisher0.2.01 of 1See more

myfirstchart zikilab 0.2.0

1 of the 1 container images this version deploys carry CVE-2020-1971.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kubenginxhelm:0.2.0ae2268dcc930
openssl@1.1.1d-0+deb10u3
1.1.1d-0+deb10u4

Open the chart page →

1,138

Container images carrying it

780 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
gcr.io/cloudsql-docker/gce-proxy:1.17a85176b8e7cc
openssl@1.1.1d-0+deb10u3
1.1.1d-0+deb10u4
1
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
openssl@1.1.1-1ubuntu2.1~18.04.5
openssl1.0@1.0.2n-1ubuntu5.3
1.1.1-1ubuntu2.1~18.04.7
1.0.2n-1ubuntu5.5
1
gcr.io/gke-release/gcp-compute-persistent-disk-csi-driver:v0.6.2-gke.0cf3c3af0187e
openssl@1.1.1d-0+deb10u2
1.1.1d-0+deb10u4
1
gcr.io/google-containers/echoserver:1.910f4dbc8eeeb
openssl@1.0.2g-1ubuntu4.8
1.0.2g-1ubuntu4.18
1
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
openssl@1.0.2g-1ubuntu4.8
1.0.2g-1ubuntu4.18
1
gcr.io/google-containers/startup-script:v29d0006c93668
openssl@1.1.0j-1~deb9u1
1.1.0l-1~deb9u2
1
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.18
1
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.18
1
gcr.io/ml-pipeline/metadata-envoy:2.0.0-alpha.5e8bc6cf08613
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.18
1
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
openssl@1.1.1d-r3
1.1.1i-r0
1
ghcr.io/banzaicloud/tcheck:latest0147d87c2019
openssl@1.1.1g-r0
1.1.1i-r0
1
ghcr.io/cfcontainerizationbot/kubecf-kubectl:v1.19.261daa1bba5cb
openssl-1_1@1.1.1d-11.6.1
1.1.1d-11.12.1
1
ghcr.io/cloudfoundry-incubator/quarks-job:v1.0.213760eee87f839
openssl-1_1@1.1.0i-14.6.1
1.1.0i-14.12.1
1
ghcr.io/cloudfoundry-incubator/quarks-operator:v7.0.1-0.g5396b116a1432b0d503
openssl-1_1@1.1.0i-14.6.1
1.1.0i-14.12.1
1
ghcr.io/cloudfoundry-incubator/quarks-secret:v1.0.754f059af4de8ed
openssl-1_1@1.1.0i-14.6.1
1.1.0i-14.12.1
1
ghcr.io/cloudfoundry-incubator/quarks-statefulset:v0.0.1304-g4b4f2ac5c7c70b527255
openssl-1_1@1.1.0i-14.6.1
1.1.0i-14.12.1
1
ghcr.io/cloudfoundry-incubator/quarks-statefulset:v0.0.1308-g6a8b2220e24a9e0a21b6
openssl-1_1@1.1.0i-14.6.1
1.1.0i-14.12.1
1
ghcr.io/conductionnl/adresservice-php:latestc5075f0320cd
openssl@1.1.1g-r0
1.1.1i-r0
1
ghcr.io/conductionnl/authorization-component-php:latest94a749392fcf
openssl@1.1.1g-r0
1.1.1i-r0
1
ghcr.io/conductionnl/bisc-frontend:latestd8a0334cddfc
openssl@1.1.1d-0+deb10u3
1.1.1d-0+deb10u4
1
ghcr.io/conductionnl/brpservice-php:latestc17f1ba17d36
openssl@1.1.1g-r0
1.1.1i-r0
1
ghcr.io/conductionnl/digispoof-interface-php:latest03aba499950f
openssl@1.1.1g-r0
1.1.1i-r0
1
ghcr.io/conductionnl/eherkenning-ui-php:latestdeed102b4255
openssl@1.1.1g-r0
1.1.1i-r0
1
ghcr.io/conductionnl/grafregistratiecomponent-php:latest35225eaa87ab
openssl@1.1.1g-r0
1.1.1i-r0
1
ghcr.io/conductionnl/instemmingservice-php:latest4ffe222b3e3a
openssl@1.1.1g-r0
1.1.1i-r0
1
ghcr.io/conductionnl/landelijketabellencatalogus-php:latest26d91dcbba56
openssl@1.1.1g-r0
1.1.1i-r0
1
ghcr.io/conductionnl/loggingcomponent-php:latest834b8e1af290
openssl@1.1.1g-r0
1.1.1i-r0
1
ghcr.io/conductionnl/logicservice-php:latest72aae2080595
openssl@1.1.1g-r0
1.1.1i-r0
1
ghcr.io/conductionnl/memo-component-php:latestef77f4c089a1
openssl@1.1.1g-r0
1.1.1i-r0
1
ghcr.io/conductionnl/notification-component-php:latestcd9656e6bc2c
openssl@1.1.1g-r0
1.1.1i-r0
1
ghcr.io/conductionnl/ocatiecatalogus-php:latestc22764cbfa97
openssl@1.1.1g-r0
1.1.1i-r0
1
ghcr.io/conductionnl/orderregistratiecomponent-php:latestd17257e4fa27
openssl@1.1.1g-r0
1.1.1i-r0
1
ghcr.io/conductionnl/procestypecatalogus-php:latest956c4fb64796
openssl@1.1.1g-r0
1.1.1i-r0
1
ghcr.io/conductionnl/productenendienstencatalogus-php:latest7242da105081
openssl@1.1.1g-r0
1.1.1i-r0
1
ghcr.io/conductionnl/proto-component-commonground-php:latesteb36ead1954e
openssl@1.1.1g-r0
1.1.1i-r0
1
ghcr.io/conductionnl/review-component-php:latestafe623824b82
openssl@1.1.1g-r0
1.1.1i-r0
1
ghcr.io/conductionnl/taalhuizen-service-php:latest04f1b7f0d573
openssl@1.1.1g-r0
1.1.1i-r0
1
ghcr.io/conductionnl/trouw-service-php:latestf745e2870692
openssl@1.1.1g-r0
1.1.1i-r0
1
ghcr.io/conductionnl/verhuis-service-php:latest66bbaf95a123
openssl@1.1.1g-r0
1.1.1i-r0
1
ghcr.io/conductionnl/verzoekconversieservice-php:lateste918014fb8d3
openssl@1.1.1g-r0
1.1.1i-r0
1
ghcr.io/conductionnl/verzoekregistratiecomponent-php:latestc4f6c03af5d3
openssl@1.1.1g-r0
1.1.1i-r0
1
ghcr.io/conductionnl/verzoektypecatalogus-php:latest64f5eb7a398b
openssl@1.1.1g-r0
1.1.1i-r0
1
ghcr.io/conductionnl/waardepapieren-balie-php:latestf36c423cd259
openssl@1.1.1g-r0
1.1.1i-r0
1
ghcr.io/conductionnl/waardepapieren-php:latestb2666ffcbad8
openssl@1.1.1g-r0
1.1.1i-r0
1
ghcr.io/conductionnl/waardepapieren-register-php:latest9affab218351
openssl@1.1.1g-r0
1.1.1i-r0
1
ghcr.io/external-secrets/kubernetes-external-secrets:6.3.0eab9bd0b6986
openssl@1.1.1g-r0
1.1.1i-r0
1
ghcr.io/flaresolverr/flaresolverr:v1.2.896f8c08c0c1b
openssl@1.1.1g-r0
1.1.1i-r0
1
ghcr.io/fleeksoft/hbase/hbase-base:2.4.13.2c144bdd688d7
openssl@1.1.1b-r1
1.1.1i-r0
1
ghcr.io/grofers/legend:0.1d6e901ad0ebd
openssl@1.1.1d-0+deb10u3
1.1.1d-0+deb10u4
1
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
openssl@1:1.1.1c-15.el8
1:1.1.1c-16.el8_2
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.