StackRadar

CVE-2020-24370

Medium

Advisory

Published 26 Sept 2020In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.038
89th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
39
of 17,781 indexed, latest versions
Container images
47
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: lua security update

Carried by container images the latest versions of 39 of 17,781 indexed charts deploy, on 47 images.

Affected packageAffected versionsFixed inImages
luarpm5.3.4-10.el8, 5.3.4-11.el80:5.3.4-12.el846
lua5.3deb5.3.3-15.3.3-1+deb9u11
OSV records
RHSA-2021:4510DLA-2381-1

Charts affected

39 by stars
ChartLatestAffected imagesRadar Score
scribebackube-helm-chartsVerified publisher0.2.01 of 2See more

scribe backube-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
quay.io/backube/scribe:0.2.0cdefc81c6b2e
lua@5.3.4-11.el8
0:5.3.4-12.el8

Open the chart page →

6,854
openshift-consoleav1o-chartsVerified publisher0.3.61 of 1See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
lua@5.3.4-11.el8
0:5.3.4-12.el8

Open the chart page →

9,052
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-oes-db:v3.0.089ee6493af89
lua@5.3.4-11.el8
0:5.3.4-12.el8

Open the chart page →

107,811
sops-operatorcraftypathVerified publisher0.8.01 of 1See more

sops-operator craftypath 0.8.0

1 of the 1 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
craftypath/sops-operator:v0.8.0402a0024c732
lua@5.3.4-11.el8
0:5.3.4-12.el8

Open the chart page →

6,473
enbuildenbuildVerified publisher0.0.501 of 6See more

enbuild enbuild 0.0.50

1 of the 6 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb:4.4.5cf72810d33f5
lua@5.3.4-11.el8
0:5.3.4-12.el8

Open the chart page →

31,510
helm-operatorhelm-operatorVerified publisher0.0.21 of 1See more

helm-operator helm-operator 0.0.2

1 of the 1 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
bsgrigorov/helm-operator:latest45ab095f09c8
lua@5.3.4-11.el8
0:5.3.4-12.el8

Open the chart page →

6,977
miniomilvus8.0.171 of 1See more

minio milvus 8.0.17

1 of the 1 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
lua@5.3.4-11.el8
0:5.3.4-12.el8

Open the chart page →

6,915
mongodb-operatorccowleyVerified publisher0.1.11 of 1See more

mongodb-operator ccowley 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-kubernetes-operator:0.3.0107a7c73af59
lua@5.3.4-11.el8
0:5.3.4-12.el8

Open the chart page →

6,389
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
lua@5.3.4-11.el8
0:5.3.4-12.el8

Open the chart page →

25,456
cp-helm-chartscp-helm-charts0.6.17 of 8See more

cp-helm-charts cp-helm-charts 0.6.1

7 of the 8 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
lua@5.3.4-11.el8
0:5.3.4-12.el8
confluentinc/cp-enterprise-kafka:6.1.08f1544df1f48
lua@5.3.4-11.el8
0:5.3.4-12.el8
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
lua@5.3.4-11.el8
0:5.3.4-12.el8
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
lua@5.3.4-11.el8
0:5.3.4-12.el8
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
lua@5.3.4-11.el8
0:5.3.4-12.el8
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
lua@5.3.4-11.el8
0:5.3.4-12.el8
confluentinc/cp-zookeeper:6.1.078c190f4472c
lua@5.3.4-11.el8
0:5.3.4-12.el8

Open the chart page →

58,857
ambassador-operatordatawire0.3.01 of 1See more

ambassador-operator datawire 0.3.0

1 of the 1 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
datawire/ambassador-operator:v1.3.0f95ae710d75c
lua@5.3.4-11.el8
0:5.3.4-12.el8

Open the chart page →

7,486
orionfiware1.6.111 of 2See more

orion fiware 1.6.11

1 of the 2 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
quay.io/opencloudio/ibm-mongodb:4.0.24d8c631a6dc43
lua@5.3.4-11.el8
0:5.3.4-12.el8

Open the chart page →

10,637
mimir-openshift-experimentalgrafana2.1.02 of 4See more

mimir-openshift-experimental grafana 2.1.0

2 of the 4 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2021-02-14T04-28-06Z2a374c124d44
lua@5.3.4-11.el8
0:5.3.4-12.el8
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
lua@5.3.4-11.el8
0:5.3.4-12.el8

Open the chart page →

17,759
hawkbit-operatorhelm-chartsVerified publisher0.1.41 of 1See more

hawkbit-operator helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
ctron/hawkbit-operator:0.1.48fdea8f76499
lua@5.3.4-11.el8
0:5.3.4-12.el8

Open the chart page →

5,792
iofoghelm-chartsVerified publisher0.1.11 of 3See more

iofog helm-charts 0.1.1

1 of the 3 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
quay.io/ctrontesting/iofog-controller:latest10df27bc5560
lua@5.3.4-11.el8
0:5.3.4-12.el8

Open the chart page →

24,161
streamsheetshelm-chartsVerified publisher0.2.35 of 8See more

streamsheets helm-charts 0.2.3

5 of the 8 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
ghcr.io/ctron/streamsheets-base:2.4.00cf25ed621e2
lua@5.3.4-11.el8
0:5.3.4-12.el8
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
lua@5.3.4-11.el8
0:5.3.4-12.el8
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
lua@5.3.4-11.el8
0:5.3.4-12.el8
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
lua@5.3.4-11.el8
0:5.3.4-12.el8
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
lua@5.3.4-11.el8
0:5.3.4-12.el8

Open the chart page →

89,959
ibm-object-storage-pluginibm-charts1.1.52 of 2See more

ibm-object-storage-plugin ibm-charts 1.1.5

2 of the 2 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
ibmcom/ibmcloud-object-storage-driver:1.8.16c796a4c693b4
lua@5.3.4-11.el8
0:5.3.4-12.el8
ibmcom/ibmcloud-object-storage-plugin:1.8.169c73804b37a3
lua@5.3.4-11.el8
0:5.3.4-12.el8

Open the chart page →

12,461
ibm-ucv-prodibm-helm5.2.61 of 16See more

ibm-ucv-prod ibm-helm 5.2.6

1 of the 16 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
ibmcom/opencontent-common-utils:1.1.2cd5065df7304
lua@5.3.4-10.el8
0:5.3.4-12.el8

Open the chart page →

12,105
jx-app-anchorejenkins-x0.0.41 of 2See more

jx-app-anchore jenkins-x 0.0.4

1 of the 2 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.7.1ed9b3badd17c
lua@5.3.4-11.el8
0:5.3.4-12.el8

Open the chart page →

9,854
nexusjenkins-x0.1.371 of 1See more

nexus jenkins-x 0.1.37

1 of the 1 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
lua@5.3.4-11.el8
0:5.3.4-12.el8

Open the chart page →

12,856
cloud-native-javamcouliba0.1.01 of 1See more

cloud-native-java mcouliba 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
quay.io/mcouliba/quarkus-serverless:1.0c2851757eca4
lua@5.3.4-11.el8
0:5.3.4-12.el8

Open the chart page →

4,979
cockroachdb-operatormmontesVerified publisher0.1.01 of 1See more

cockroachdb-operator mmontes 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
cockroachdb/cockroach-operator:v2.1.0983312754620
lua@5.3.4-11.el8
0:5.3.4-12.el8

Open the chart page →

7,775
anchore-engineopencloudcx1.13.01 of 2See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.10.0bde9eedf639d
lua@5.3.4-11.el8
0:5.3.4-12.el8

Open the chart page →

18,023
orion-ldopenshift1.0.32 of 2See more

orion-ld openshift 1.0.3

2 of the 2 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
quay.io/fiware/orion-ld:1.0.1ea838e5b4051
lua@5.3.4-11.el8
0:5.3.4-12.el8
quay.io/opencloudio/ibm-mongodb:4.0.24d8c631a6dc43
lua@5.3.4-11.el8
0:5.3.4-12.el8

Open the chart page →

14,727
pet-battle-infrapetbattle1.0.321 of 2See more

pet-battle-infra petbattle 1.0.32

1 of the 2 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.8bb5e052770e5
lua@5.3.4-11.el8
0:5.3.4-12.el8

Open the chart page →

15,466
pet-battle-tournamentpetbattle1.0.401 of 3See more

pet-battle-tournament petbattle 1.0.40

1 of the 3 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.8bb5e052770e5
lua@5.3.4-11.el8
0:5.3.4-12.el8

Open the chart page →

15,466
gitlab-runner-operatorpnnl-miscscripts0.1.61 of 1See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
lua@5.3.4-11.el8
0:5.3.4-12.el8

Open the chart page →

11,151
ibm-mongodb-enterprise-helmredhat0.3.01 of 1See more

ibm-mongodb-enterprise-helm redhat 0.3.0

1 of the 1 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
ibmcom/ibm-enterprise-mongodb-ppc64le:4.4d28bf361327a
lua@5.3.4-11.el8
0:5.3.4-12.el8

Open the chart page →

12,248
ansible-automation-platformredhat-cop0.0.91 of 1See more

ansible-automation-platform redhat-cop 0.0.9

1 of the 1 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.7464a3af4dfe0
lua@5.3.4-11.el8
0:5.3.4-12.el8

Open the chart page →

15,291
argocd-operatorredhat-cop1.2.21 of 1See more

argocd-operator redhat-cop 1.2.2

1 of the 1 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.7464a3af4dfe0
lua@5.3.4-11.el8
0:5.3.4-12.el8

Open the chart page →

15,291
ploigosredhat-cop0.0.91 of 2See more

ploigos redhat-cop 0.0.9

1 of the 2 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.66722d5041b47
lua@5.3.4-11.el8
0:5.3.4-12.el8

Open the chart page →

11,437
stackrox-chartredhat-cop0.0.101 of 1See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
lua@5.3.4-11.el8
0:5.3.4-12.el8

Open the chart page →

29,227
seldon-deployseldon1.4.01 of 2See more

seldon-deploy seldon 1.4.0

1 of the 2 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
seldonio/seldon-request-logger:1.11.24e985d2006a8
lua@5.3.4-11.el8
0:5.3.4-12.el8

Open the chart page →

21,997
aaismo-helm-chart6.0.01 of 14See more

aai smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
aaionap/haproxy:1.4.089c1078a1b23
lua5.3@5.3.3-1
5.3.3-1+deb9u1

Open the chart page →

25,803
allurestakaterVerified publisher1.0.11 of 1See more

allure stakater 1.0.1

1 of the 1 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
lua@5.3.4-11.el8
0:5.3.4-12.el8

Open the chart page →

28,165
minio-operatorstatcan4.1.01 of 2See more

minio-operator statcan 4.1.0

1 of the 2 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
minio/operator:v4.1.02adc5be088f5
lua@5.3.4-11.el8
0:5.3.4-12.el8

Open the chart page →

6,596
hermestoukVerified publisher0.6.01 of 3See more

hermes touk 0.6.0

1 of the 3 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
lua@5.3.4-11.el8
0:5.3.4-12.el8

Open the chart page →

12,455
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
lua@5.3.4-11.el8
0:5.3.4-12.el8

Open the chart page →

28,605
miniowenerme8.0.101 of 1See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2020-24370.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
lua@5.3.4-11.el8
0:5.3.4-12.el8

Open the chart page →

6,915

Container images carrying it

47 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
lua@5.3.4-11.el8
0:5.3.4-12.el8
3
quay.io/opencloudio/ibm-mongodb:4.0.24d8c631a6dc43
lua@5.3.4-11.el8
0:5.3.4-12.el8
2
quay.io/openshift/origin-cli:4.7464a3af4dfe0
lua@5.3.4-11.el8
0:5.3.4-12.el8
2
quay.io/openshift/origin-cli:4.8bb5e052770e5
lua@5.3.4-11.el8
0:5.3.4-12.el8
2
aaionap/haproxy:1.4.089c1078a1b23
lua5.3@5.3.3-1
5.3.3-1+deb9u1
1
anchore/anchore-engine:v0.10.0bde9eedf639d
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
anchore/anchore-engine:v0.7.1ed9b3badd17c
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
bsgrigorov/helm-operator:latest45ab095f09c8
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
cockroachdb/cockroach-operator:v2.1.0983312754620
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
confluentinc/cp-enterprise-kafka:6.1.08f1544df1f48
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
confluentinc/cp-zookeeper:6.1.078c190f4472c
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
craftypath/sops-operator:v0.8.0402a0024c732
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
ctron/hawkbit-operator:0.1.48fdea8f76499
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
datawire/ambassador-operator:v1.3.0f95ae710d75c
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
ibmcom/ibmcloud-object-storage-driver:1.8.16c796a4c693b4
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
ibmcom/ibmcloud-object-storage-plugin:1.8.169c73804b37a3
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
ibmcom/ibm-enterprise-mongodb-ppc64le:4.4d28bf361327a
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
ibmcom/opencontent-common-utils:1.1.2cd5065df7304
lua@5.3.4-10.el8
0:5.3.4-12.el8
1
minio/mc:RELEASE.2021-02-14T04-28-06Z2a374c124d44
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
minio/operator:v4.1.02adc5be088f5
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
seldonio/seldon-request-logger:1.11.24e985d2006a8
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
ghcr.io/ctron/streamsheets-base:2.4.00cf25ed621e2
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
quay.io/backube/scribe:0.2.0cdefc81c6b2e
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
quay.io/ctrontesting/iofog-controller:latest10df27bc5560
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
quay.io/fiware/orion-ld:1.0.1ea838e5b4051
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
quay.io/mcouliba/quarkus-serverless:1.0c2851757eca4
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
quay.io/mongodb/mongodb-kubernetes-operator:0.3.0107a7c73af59
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
quay.io/openshift/origin-cli:4.66722d5041b47
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
quay.io/opsmxpublic/ubi8-oes-db:v3.0.089ee6493af89
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
lua@5.3.4-11.el8
0:5.3.4-12.el8
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb:4.4.5cf72810d33f5
lua@5.3.4-11.el8
0:5.3.4-12.el8
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.