StackRadar

CVE-2020-26939

Medium

Advisory

Published 22 Apr 2021In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.009
58th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
62
of 17,781 indexed, latest versions
Container images
58
deployed by those charts
Fix available
4 of 4
affected packages

Observable Differences in Behavior to Error Inputs in Bouncy Castle

Carried by container images the latest versions of 62 of 17,781 indexed charts deploy, on 58 images.

Affected packageAffected versionsFixed inImages
bcprov-jdk15onmaven1.50, 1.51, 1.52, 1.53+7 more1.6154
bcprov-ext-jdk15onmaven1.50, 1.59, 1.601.6113
bcprov-jdk16maven1.461.612
bc-fipsmaven1.0.11.0.21
OSV records
GHSA-72m5-fvvv-55m6

Charts affected

62 by stars
ChartLatestAffected imagesRadar Score
microcksmicrocksOfficialVerified publisher0.8.0-helm-3.kube-1.171 of 5See more

microcks microcks 0.8.0-helm-3.kube-1.17

1 of the 5 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
microcks/microcks:0.8.0e3a3e0c67b09
bcprov-jdk15on@1.56
1.61

Open the chart page →

10,732
sparkmicrosoft1.0.41 of 3See more

spark microsoft 1.0.4

1 of the 3 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
dbanda/livy:0.80ca125e68e53
bcprov-jdk15on@1.51
1.61

Open the chart page →

13,738
unifi-controllerqonstruktVerified publisher2.6.11 of 1See more

unifi-controller qonstrukt 2.6.1

1 of the 1 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:8.0.240ae315a3a456
bcprov-jdk15on@1.60
1.61

Open the chart page →

10,469
hivebigdata-chartsVerified publisher0.1.81 of 1See more

hive bigdata-charts 0.1.8

1 of the 1 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
bcprov-jdk15on@1.60
1.61

Open the chart page →

7,166
hdfsdmwm-bigdataVerified publisher1.0.11 of 2See more

hdfs dmwm-bigdata 1.0.1

1 of the 2 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
gradiant/hdfs:3.2.2e3bf364fe713
bcprov-jdk15on@1.60
1.61

Open the chart page →

7,948
unifigeek-cookbookVerified publisher5.1.31 of 1See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.4.162b3edc809a3ff
bcprov-jdk15on@1.60
1.61

Open the chart page →

11,839
skywalkingkubesphere-testVerified publisher3.1.01 of 4See more

skywalking kubesphere-test 3.1.0

1 of the 4 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
apache/skywalking-ui:8.1.067d50e4deff4
bcprov-jdk15on@1.55
1.61

Open the chart page →

18,042
hbasedmwm-bigdataVerified publisher0.1.61 of 5See more

hbase dmwm-bigdata 0.1.6

1 of the 5 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
bcprov-jdk15on@1.59
1.61

Open the chart page →

13,392
opentsdbdmwm-bigdataVerified publisher0.1.71 of 6See more

opentsdb dmwm-bigdata 0.1.7

1 of the 6 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
bcprov-jdk15on@1.59
1.61

Open the chart page →

17,511
elasticsearch-dataempathyco0.2.01 of 2See more

elasticsearch-data empathyco 0.2.0

1 of the 2 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
empathyco/elasticsearch:6.6.2-memlockbcf4365ee7ec
bcprov-jdk15on@1.59
1.61

Open the chart page →

3,703
elasticsearch-masterempathyco0.3.01 of 2See more

elasticsearch-master empathyco 0.3.0

1 of the 2 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
empathyco/elasticsearch:6.6.2-memlockbcf4365ee7ec
bcprov-jdk15on@1.59
1.61

Open the chart page →

3,703
omada-controllergeek-cookbookVerified publisher4.4.21 of 1See more

omada-controller geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
bcprov-ext-jdk15on@1.50
1.61

Open the chart page →

11,553
hbasegradiant-bigdataVerified publisher0.1.61 of 5See more

hbase gradiant-bigdata 0.1.6

1 of the 5 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
bcprov-jdk15on@1.59
1.61

Open the chart page →

13,392
seldon-coreseldon0.2.72 of 3See more

seldon-core seldon 0.2.7

2 of the 3 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
seldonio/apife:0.2.7ba81b17f00eb
bcprov-ext-jdk15on@1.59
bcprov-jdk15on@1.59
1.61
1.61
seldonio/cluster-manager:0.2.729e362bb1ba2
bcprov-ext-jdk15on@1.59
bcprov-jdk15on@1.59
1.61
1.61

Open the chart page →

13,798
akto-central-setupakto1.1.101 of 5See more

akto-central-setup akto 1.1.10

1 of the 5 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:1.66.9138c8b82c398
bcprov-jdk16@1.46
1.61

Open the chart page →

4,905
akto-dbabsakto0.1.91 of 1See more

akto-dbabs akto 0.1.9

1 of the 1 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:latestf669a6eacf8c
bcprov-jdk16@1.46
1.61

Open the chart page →

1,125
omada-controllerandrelote-k8sVerified publisher4.5.01 of 1See more

omada-controller andrelote-k8s 4.5.0

1 of the 1 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
bcprov-ext-jdk15on@1.50
1.61

Open the chart page →

11,553
event-store-servicechoerodon0.8.01 of 2See more

event-store-service choerodon 0.8.0

1 of the 2 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
choerodon/event-store-service:0.8.03c94c97f6f69
bcprov-jdk15on@1.55
1.61

Open the chart page →

9,808
gocdcloudnativeapp1.9.21 of 2See more

gocd cloudnativeapp 1.9.2

1 of the 2 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
gocd/gocd-server:v19.3.02da45cb09d57
bcprov-jdk15on@1.59
1.61

Open the chart page →

9,144
neo4jcloudnativeapp1.0.01 of 1See more

neo4j cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
library/neo4j:3.4.5-enterprisea1ba477fa412
bcprov-jdk15on@1.59
1.61

Open the chart page →

2,837
prestocloudnativeapp0.1.11 of 1See more

presto cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
bivas/presto:0.19605545994f806
bcprov-jdk15on@1.51
1.61

Open the chart page →

7,226
rundeckcloudnativeapp0.1.01 of 2See more

rundeck cloudnativeapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
rundeck/rundeck:3.0.16b13e8059ad72
bcprov-jdk15on@1.51
1.61

Open the chart page →

23,665
unificloudnativeapp0.4.21 of 1See more

unifi cloudnativeapp 0.4.2

1 of the 1 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
jacobalberty/unifi:5.10.19c409924e2463
bcprov-jdk15on@1.60
1.61

Open the chart page →

22,442
pulsarcnieg1.0.81 of 2See more

pulsar cnieg 1.0.8

1 of the 2 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
bcprov-ext-jdk15on@1.59
bcprov-jdk15on@1.60
1.61
1.61

Open the chart page →

16,860
amundsenduyet1.1.01 of 7See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
library/neo4j:3.3.0d4eaa8484246
bcprov-jdk15on@1.53
1.61

Open the chart page →

11,174
spark-shuffleduyet0.2.01 of 1See more

spark-shuffle duyet 0.2.0

1 of the 1 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
snappydatainc/spark-shuffle:v2.2.0-kubernetes-0.5.1fd4b2070466f
bcprov-jdk15on@1.54
1.61

Open the chart page →

5,639
scorpio-brokerfiware0.3.31 of 10See more

scorpio-broker fiware 0.3.3

1 of the 10 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:config-server_1.1.0c46c1517e523
bcprov-jdk15on@1.60
1.61

Open the chart page →

55,600
scorpiobrokerfiware0.1.21 of 10See more

scorpiobroker fiware 0.1.2

1 of the 10 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:config-server_1.1.0c46c1517e523
bcprov-jdk15on@1.60
1.61

Open the chart page →

55,600
my-chartfleet-web-app0.1.01 of 6See more

my-chart fleet-web-app 0.1.0

1 of the 6 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
richardchesterwood/k8s-fleetman-api-gateway:release2518f946b9f05
bcprov-jdk15on@1.55
1.61

Open the chart page →

24,296
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
bcprov-jdk15on@1.52
1.61

Open the chart page →

27,949
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.81 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
jingking/geonetwork-hnap:4.2.843e74ab234e1
bcprov-ext-jdk15on@1.60
1.61

Open the chart page →

34,754
video-analytics-demogpu-operator0.1.91 of 3See more

video-analytics-demo gpu-operator 0.1.9

1 of the 3 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
anguda/ant-media:2.5c435285fc241
bcprov-jdk15on@1.60
1.61

Open the chart page →

15,722
opentsdbgradiant-bigdataVerified publisher0.1.71 of 6See more

opentsdb gradiant-bigdata 0.1.7

1 of the 6 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
bcprov-jdk15on@1.59
1.61

Open the chart page →

17,511
ubooquityhalkeye0.1.11 of 1See more

ubooquity halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
linuxserver/ubooquity:2.1.2-ls369932d6759112
bcprov-jdk15on@1.53
1.61

Open the chart page →

4,303
hbasehbase0.1.72 of 4See more

hbase hbase 0.1.7

2 of the 4 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
ghcr.io/fleeksoft/hbase/hbase-base:2.4.13.2c144bdd688d7
bcprov-jdk15on@1.59
1.61
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
bcprov-jdk15on@1.60
1.61

Open the chart page →

10,540
springboothelmcharts1.0.01 of 1See more

springboot helmcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
kimb88/hello-world-spring-boot:latest0639155241cb
bcprov-jdk15on@1.56
1.61

Open the chart page →

6,451
ibm-business-automation-insights-devibm-charts3.2.01 of 6See more

ibm-business-automation-insights-dev ibm-charts 3.2.0

1 of the 6 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
ibmcom/bai-elasticsearch-dev:19.0.25441dba2fa00
bcprov-jdk15on@1.60
1.61

Open the chart page →

39,349
ibm-microclimateibm-charts0.1.02 of 8See more

ibm-microclimate ibm-charts 0.1.0

2 of the 8 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
bcprov-jdk15on@1.55
1.61
ibmcom/microclimate-theia:lateste17bdccc5030
bcprov-jdk15on@1.55
1.61

Open the chart page →

57,669
jenkinsjenkins-x0.10.381 of 2See more

jenkins jenkins-x 0.10.38

1 of the 2 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
jenkinsci/jenkins:2.67a1f33f004659
bcprov-jdk15on@1.54
1.61

Open the chart page →

10,682
tdsfkubebb5.7.01 of 3See more

tdsf kubebb 5.7.0

1 of the 3 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
kubebb/mesh-api:v5.7.0a3879931dfa1
bcprov-jdk15on@1.58
1.61

Open the chart page →

6,490
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
ladeit/ladeit:latest962b665ffe82
bcprov-ext-jdk15on@1.59
bcprov-jdk15on@1.59
1.61
1.61

Open the chart page →

26,356
opendistro-eslsst-sqre1.4.11 of 3See more

opendistro-es lsst-sqre 1.4.1

1 of the 3 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.4.06df71eb04639
bc-fips@1.0.1
bcprov-jdk15on@1.60
1.0.2
1.61

Open the chart page →

7,929
unifimidokura-communityVerified publisher0.0.61 of 1See more

unifi midokura-community 0.0.6

1 of the 1 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:7.3.83ab105cc50322
bcprov-jdk15on@1.60
1.61

Open the chart page →

11,188
pulsarv2milvus-helm2.7.81 of 4See more

pulsarv2 milvus-helm 2.7.8

1 of the 4 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
bcprov-ext-jdk15on@1.59
bcprov-jdk15on@1.60
1.61
1.61

Open the chart page →

15,855
hive-metastoreolehrgfVerified publisher0.1.01 of 1See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
bcprov-jdk15on@1.60
1.61

Open the chart page →

8,540
cdn-remoteopencord0.2.41 of 3See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
bcprov-jdk15on@1.56
1.61

Open the chart page →

63,223
onosopencord3.0.21 of 1See more

onos opencord 3.0.2

1 of the 1 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
onosproject/onos:2.2.144914a8d4b3f
bcprov-jdk15on@1.59
1.61

Open the chart page →

12,927
bpjstk-serviceopenshift1.0.02 of 6See more

bpjstk-service openshift 1.0.0

2 of the 6 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
andrianrf/iso-client:latestba560086ce15
bcprov-jdk15on@1.51
1.61
andrianrf/iso-server:latest7da47f525c7d
bcprov-jdk15on@1.51
1.61

Open the chart page →

34,671
smsf-configurationopenshift1.0.41 of 1See more

smsf-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
gurolakman/smsf-configuration:1.0.49abb3882bcbd
bcprov-ext-jdk15on@1.50
bcprov-jdk15on@1.50
1.61
1.61

Open the chart page →

13,607
smsf-dispatcheropenshift1.0.41 of 1See more

smsf-dispatcher openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2020-26939.

Container imageDigestPackageFixed in
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
bcprov-ext-jdk15on@1.50
bcprov-jdk15on@1.50
1.61
1.61

Open the chart page →

11,738

Container images carrying it

58 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
seldonio/cluster-manager:0.2.729e362bb1ba2
bcprov-ext-jdk15on@1.59
bcprov-jdk15on@1.59
1.61
1.61
1
snappydatainc/spark-shuffle:v2.2.0-kubernetes-0.5.1fd4b2070466f
bcprov-jdk15on@1.54
1.61
1
zahoriaut/zahori-process:0.1.13351f8a220ed7
bcprov-jdk15on@1.58
1.61
1
ghcr.io/fleeksoft/hbase/hbase-base:2.4.13.2c144bdd688d7
bcprov-jdk15on@1.59
1.61
1
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
bcprov-jdk15on@1.60
1.61
1
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
bcprov-jdk15on@1.60
1.61
1
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:1.66.9138c8b82c398
bcprov-jdk16@1.46
1.61
1
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:latestf669a6eacf8c
bcprov-jdk16@1.46
1.61
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.