CVE-2020-26160
HighAdvisory
Published 14 Apr 2021In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.022
- 81st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 175
- of 17,781 indexed, latest versions
- Container images
- 163
- deployed by those charts
- Fix available
- None
- affected package
Authorization bypass in github.com/dgrijalva/jwt-go
Carried by container images the latest versions of 175 of 17,781 indexed charts deploy, on 163 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v0.0.0-20160705203006-01aeca54ebda, v3.0.1-0.20170104182250-a601269ab70c+incompatible, v3.2.0+incompatible, v3.2.1-0.20190620180102-5e25c22bd5d6+incompatible+1 more | no fix listed | 163 |
- OSV records
- GHSA-w73w-5m7g-f7qcGO-2020-0017
- Also known as
- SNYK-GOLANG-GITHUBCOMDGRIJALVAJWTGO-596515
Charts affected
175 by stars
Container images carrying it
163 by charts deploying them
A fixed version is listed for 0 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| etejeda/ | 737d58183abc | github.com/ | no fix listed | 1 |
| filebrowser/ | 4fcd47af573c | github.com/ | no fix listed | 1 |
| filebrowser/ | c5d0a75a0041 | github.com/ | no fix listed | 1 |
| flashcatcloud/ | 421acb36181b | github.com/ | no fix listed | 1 |
| gitea/ | 85416d6f65fe | github.com/ | no fix listed | 1 |
| gitea/ | d5ab14cd29af | github.com/ | no fix listed | 1 |
| gitlab/ | fd7e5dfb9f30 | github.com/ | no fix listed | 1 |
| grafana/ | 77e138f81a8e | github.com/ | no fix listed | 1 |
| grafana/ | 5fd12edcc694 | github.com/ | no fix listed | 1 |
| igrantio/ | 2d2ea6546ffe | github.com/ | no fix listed | 1 |
| iotaledger/ | b02a8f77474f | github.com/ | no fix listed | 1 |
| jmferrer/ | 030f68ec6998 | github.com/ | no fix listed | 1 |
| keptncontrib/ | 29969dd547de | github.com/ | no fix listed | 1 |
| kubeoperator/ | be8f0d624640 | github.com/ | no fix listed | 1 |
| layer5/ | 8c20a8a1d6a4 | github.com/ | no fix listed | 1 |
| library/ | ba10ac9ba17a | github.com/ | no fix listed | 1 |
| library/ | f5af5a5ce17f | github.com/ | no fix listed | 1 |
| logiqai/ | f5b551bca98e | github.com/ | no fix listed | 1 |
| mattermost/ | 6268954edd67 | github.com/ | no fix listed | 1 |
| mesosphere/ | 8e18bbe407f7 | github.com/ | no fix listed | 1 |
| mesosphere/ | 265edcd2a1ca | github.com/ | no fix listed | 1 |
| mesosphere/ | 4fd8889195fe | github.com/ | no fix listed | 1 |
| minio/ | 1806872732e1 | github.com/ | no fix listed | 1 |
| minio/ | 2a374c124d44 | github.com/ | no fix listed | 1 |
| minio/ | 571feb124476 | github.com/ | no fix listed | 1 |
| minio/ | 053f103f4894 | github.com/ | no fix listed | 1 |
| minio/ | e2b7b633c250 | github.com/ | no fix listed | 1 |
| minio/ | f00aa6ef2b72 | github.com/ | no fix listed | 1 |
| minio/ | 2adc5be088f5 | github.com/ | no fix listed | 1 |
| mirrorgitlabcontainers/ | 06b19a4bc805 | github.com/ | no fix listed | 1 |
| mirrorgitlabcontainers/ | a6d7bf42805a | github.com/ | no fix listed | 1 |
| monitoror/ | 4b88edcf51ff | github.com/ | no fix listed | 1 |
| nerzhul/ | 4215df511f31 | github.com/ | no fix listed | 1 |
| owncloud/ | d2efcae92c84 | github.com/ | no fix listed | 1 |
| pnnlmiscscripts/ | 155131891741 | github.com/ | no fix listed | 1 |
| prom/ | 5880ec936055 | github.com/ | no fix listed | 1 |
| prom/ | cd134bd4fca0 | github.com/ | no fix listed | 1 |
| prom/ | e4ca62c0d62f | github.com/ | no fix listed | 1 |
| rancher/ | 6d2cd61a338b | github.com/ | no fix listed | 1 |
| rancher/ | c678c25d47c8 | github.com/ | no fix listed | 1 |
| reportportal/ | 2b27a2d7a87d | github.com/ | no fix listed | 1 |
| rookout/ | 0d083f3ef1a7 | github.com/ | no fix listed | 1 |
| runatlantis/ | 45fbaf7e207c | github.com/ | no fix listed | 1 |
| seafileltd/ | 70628f29c663 | github.com/ | no fix listed | 1 |
| seafileltd/ | d0c66e4621bd | github.com/ | no fix listed | 1 |
| sorintlab/ | 36b45c0f97fc | github.com/ | no fix listed | 1 |
| sstarcher/ | 11769d01ba35 | github.com/ | no fix listed | 1 |
| sstarcher/ | 1f8cae8cfa80 | github.com/ | no fix listed | 1 |
| stakkato95/ | 456049efee9a | github.com/ | no fix listed | 1 |
| subspacecommunity/ | e2042b63fb35 | github.com/ | no fix listed | 1 |