CVE-2020-24553

Unscored

Advisory

Published 13 Jan 2022In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.036; 89th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 306; of 17,781 indexed, latest versions
Container images: 288; deployed by those charts
Fix available: 1 of 1; affected package

Cross-site scripting in net/http/cgi and net/http/fcgi

Carried by container images the latest versions of 306 of 17,781 indexed charts deploy, on 288 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+19 more	1.14.8	288

OSV records: GO-2021-0226
Also known as: BIT-golang-2020-24553

Charts affected

306 by stars

Chart

Latest

Affected images

Radar Score

nfs-subdir-external-provisionerwenerme

4.0.18

1 of 1 See more

nfs-subdir-external-provisioner wenerme 4.0.18

1 of the 1 container images this version deploys carry CVE-2020-24553.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner :v4.0.2	63d5e04551ec	stdlib@go1.15	1.14.8

Open the chart page →

2,743

temporalwenerme

0.15.1

4 of 13 See more

temporal wenerme 0.15.1

4 of the 13 container images this version deploys carry CVE-2020-24553.

Container image	Digest	Package	Fixed in
grafana/grafana :6.7.1	1ff3999e0fc0	stdlib@go1.13.4	1.14.8
prom/alertmanager :v0.20.0	7e4e9f7a0954	stdlib@go1.13.5	1.14.8
prom/prometheus :v2.16.0	e4ca62c0d62f	stdlib@go1.13.8	1.14.8
prom/pushgateway :v1.0.1	a5df60347882	stdlib@go1.13.5	1.14.8

Open the chart page →

22,665

traefikwenerme

9.1.1

1 of 1 See more

traefik wenerme 9.1.1

1 of the 1 container images this version deploys carry CVE-2020-24553.

Container image	Digest	Package	Fixed in
library/traefik :2.2.8	f5af5a5ce17f	stdlib@go1.14.6	1.14.8

Open the chart page →

3,369

wireguardwireguard-bananas

1.5.0

1 of 1 See more

wireguard wireguard-bananas 1.5.0

1 of the 1 container images this version deploys carry CVE-2020-24553.

Container image	Digest	Package	Fixed in
place1/wg-access-server :v0.4.6	2b2f3ea80ed6	stdlib@go1.13.8	1.14.8

Open the chart page →

2,745

dex-k8s-authenticatorwiremind

1.7.0

1 of 1 See more

dex-k8s-authenticator wiremind 1.7.0

1 of the 1 container images this version deploys carry CVE-2020-24553.

Container image	Digest	Package	Fixed in
mintel/dex-k8s-authenticator :1.4.0	caf71cee7b9a	stdlib@go1.13.11	1.14.8

Open the chart page →

2,791

nginx-vts-exporterymrs

0.1.2

1 of 1 See more

nginx-vts-exporter ymrs 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-24553.

Container image	Digest	Package	Fixed in
sophos/nginx-vts-exporter :latest	f1073556b29b	stdlib@go1.13.6	1.14.8

Open the chart page →

1,336

Container images carrying it

288 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	stdlib@go1.14.4	1.14.8	8
grafana/grafana :7.0.3	d72946c8e5d5	stdlib@go1.14.3	1.14.8	6
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	stdlib@go1.14.4	1.14.8	6
containous/whoami :latest :v1.5.0	7d6a3c8f9147	stdlib@go1.14	1.14.8	5
prom/alertmanager :v0.20.0	7e4e9f7a0954	stdlib@go1.13.5	1.14.8	5
prom/prometheus :v2.13.1	0a8caa2e9f19	stdlib@go1.13.1	1.14.8	5
quay.io/k8scsi/csi-node-driver-registrar :v1.3.0	e6df72478956	stdlib@go1.13.3	1.14.8	5
grafana/grafana :6.7.1	1ff3999e0fc0	stdlib@go1.13.4	1.14.8	4
jimmidyson/configmap-reload :v0.4.0	17d34fd73f9e	stdlib@go1.14.4	1.14.8	4
argoproj/argocd :v1.8.1	830e86cacefd	stdlib@go1.14.4	1.14.8	3
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	stdlib@go1.15	1.14.8	3
mintel/dex-k8s-authenticator :1.4.0	caf71cee7b9a	stdlib@go1.13.11	1.14.8	3
prom/prometheus :v2.19.0	bfad037f95e5	stdlib@go1.14.4	1.14.8	3
prom/pushgateway :v1.2.0	0a9031142481	stdlib@go1.13.8	1.14.8	3
prom/statsd-exporter :v0.18.0	d23aca343b86	stdlib@go1.14.7	1.14.8	3
stakater/proxyinjector :v0.0.23	83fef483d497	stdlib@go1.13.1	1.14.8	3
quay.io/kubernetes_incubator/nfs-provisioner :v2.3.0	f402e6039b3c	stdlib@go1.13.4	1.14.8	3
abutaha/aws-es-proxy :v1.1	190ed2d1dfc8	stdlib@go1.14.1	1.14.8	2
cesanta/docker_auth :1.6.0	4d16885f3d4c	stdlib@go1.13.7	1.14.8	2
chankh/k8s-cloudwatch-adapter :v0.9.0	963c44c7f8b1	stdlib@go1.14.5	1.14.8	2
datawire/aes :1.14.4	8588eafe6862	stdlib@go1.15	1.14.8	2
grafana/loki :1.5.0	922b3f412fdd	stdlib@go1.13.11	1.14.8	2
grafana/promtail :1.5.0	46e88d390cd6	stdlib@go1.13.11	1.14.8	2
honestica/kube-iptables-tailer :master-91	a393242fb939	stdlib@go1.13.8	1.14.8	2
iomesh/hostpath-provisioner :v0.5.1	f4878c8ae53a	stdlib@go1.13.1	1.14.8	2
iomesh/node-disk-exporter :1.8.0	f03148764f38	stdlib@go1.14.7	1.14.8	2
jettech/kube-webhook-certgen :v1.2.1	c42098c8d855	stdlib@go1.13.11	1.14.8	2
maxrocketinternet/soti-mobicontrol-exporter :0.6	1a281b76efa3	stdlib@go1.14	1.14.8	2
oliver006/redis_exporter :v1.9.0	4af75e9f16f6	stdlib@go1.14.4	1.14.8	2
osixia/openldap :1.4.0	ccd95cc6e61e	stdlib@go1.13.4	1.14.8	2
passbolt/passbolt :3.4.0-ce-non-root	655547e17263	stdlib@go1.14.4	1.14.8	2
place1/wg-access-server :v0.4.6	2b2f3ea80ed6	stdlib@go1.13.8	1.14.8	2
pottava/s3-proxy :2.0	20a0bcb15f76	stdlib@go1.13.7	1.14.8	2
prom/prometheus :v2.17.2	42d2395cd719	stdlib@go1.13.10	1.14.8	2
prom/pushgateway :v1.0.1	a5df60347882	stdlib@go1.13.5	1.14.8	2
squareup/ghostunnel :v1.5.2	70f4cf270425	stdlib@go1.13.4	1.14.8	2
thesisrobot/loop :v0.11.1-beta	89ae07e787ca	stdlib@go1.13.12	1.14.8	2
thomasnyambati/labelsmanager-controller :1.0.0	148ae3f99fea	stdlib@go1.13.15	1.14.8	2
tkpd/gripmock :1.10.1	74441dadcfbd	stdlib@go1.14.6	1.14.8	2
weblate/weblate :4.2.2-1	69c160d37a3c	stdlib@go1.13.5	1.14.8	2
gcr.io/k8s-staging-sig-storage/nfs-provisioner :v3.0.0	2de1d15fc1f2	stdlib@go1.15	1.14.8	2
ghcr.io/cubed-it/inlets :4.0.0	f02325f099bc	stdlib@go1.13.15	1.14.8	2
quay.io/dexidp/dex :v2.24.0	c9b7f6d0d953	stdlib@go1.13.10	1.14.8	2
quay.io/prometheus/node-exporter :v1.0.0	8a3a33cad0bd	stdlib@go1.14.3	1.14.8	2
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner :v4.0.2	63d5e04551ec	stdlib@go1.15	1.14.8	2
almir/webhook :2.8.0	1698346f6077	stdlib@go1.14.7	1.14.8	1
alpine/k8s :1.18.16	a41efe02a041	stdlib@go1.13.4	1.14.8	1
altinity/clickhouse-operator :0.16.1	db7dde971407	stdlib@go1.13.15	1.14.8	1
altinity/metrics-exporter :0.16.1	85b4fdbae053	stdlib@go1.13.15	1.14.8	1
amazon/aws-efs-csi-driver :v0.3.0	b55277652ea8	stdlib@go1.13.4	1.14.8	1