StackRadar

CVE-2020-27534

Medium

Advisory

Published 31 Jan 2024In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.017
77th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
109
of 17,781 indexed, latest versions
Container images
102
deployed by those charts
Fix available
2 of 2
affected packages

Path Traversal in Moby builder

Carried by container images the latest versions of 109 of 17,781 indexed charts deploy, on 102 images.

Affected packageAffected versionsFixed inImages
github.com/docker/dockergolangv0.0.0-20180620051407-e2593239d949, v0.7.3-0.20190327010347-be7ac8be2ae0, v1.4.2-0.20190924003213-a8608b5b67c7, v1.4.2-0.20191121165722-d1d5f6476656+10 more19.03.990
github.com/moby/mobygolangv0.7.3-0.20190826074503-38ab9da00309, v1.4.2-0.20170731201646-1009e6a40b29, v1.13.1, v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible19.03.917
OSV records
GHSA-6hwg-w5jg-9c6x

Charts affected

109 by stars
ChartLatestAffected imagesRadar Score
helm-exportersstarcher0.5.01 of 1See more

helm-exporter sstarcher 0.5.0

1 of the 1 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
sstarcher/helm-exporter:0.5.011769d01ba35
github.com/moby/moby@v0.7.3-0.20190826074503-38ab9da00309
19.03.9

Open the chart page →

4,154
missing-container-metricsmissing-container-metrics0.1.11 of 1See more

missing-container-metrics missing-container-metrics 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
dmilhdef/missing-container-metrics:v0.21.0fada1a6e7638
github.com/docker/docker@v1.13.1
19.03.9

Open the chart page →

2,409
fadicetic0.3.11 of 25See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
library/traefik:2.5.47d0228d19042
github.com/docker/docker@v17.12.0-ce-rc1.0.20200204220554-5f6d6f3f2203+incompatible
19.03.9

Open the chart page →

52,919
openelbkubesphere-stable0.5.01 of 2See more

openelb kubesphere-stable 0.5.0

1 of the 2 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
kubesphere/openelb:v0.5.0b5b665c4672c
github.com/docker/docker@v0.7.3-0.20190327010347-be7ac8be2ae0
19.03.9

Open the chart page →

4,329
openshift-consoleav1o-chartsVerified publisher0.3.61 of 1See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
github.com/moby/moby@v0.7.3-0.20190826074503-38ab9da00309
19.03.9

Open the chart page →

9,052
dapr-dashboarddapr0.15.01 of 1See more

dapr-dashboard dapr 0.15.0

1 of the 1 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
daprio/dashboard:0.15.04be696707bd1
github.com/moby/moby@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
19.03.9

Open the chart page →

1,301
knative-servingsoftonic3.0.01 of 5See more

knative-serving softonic 3.0.0

1 of the 5 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned30ce73388ae5
github.com/docker/docker@v1.13.1
19.03.9

Open the chart page →

12,502
minio-operatorwenerme4.3.71 of 2See more

minio-operator wenerme 4.3.7

1 of the 2 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
minio/operator:v4.3.754393e03f3b2
github.com/docker/docker@v1.4.2-0.20190924003213-a8608b5b67c7
19.03.9

Open the chart page →

6,085
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
github.com/docker/docker@v1.13.1
19.03.9

Open the chart page →

10,730
brpservicebrpservice1.1.01 of 4See more

brpservice brpservice 1.1.0

1 of the 4 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/brpservice-php:latestc17f1ba17d36
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
19.03.9

Open the chart page →

7,830
cloudflow-enterprise-componentscloudflow-helm-charts0.0.0-NIGHTLY011220201 of 9See more

cloudflow-enterprise-components cloudflow-helm-charts 0.0.0-NIGHTLY01122020

1 of the 9 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
prom/prometheus:v2.21.0d43417c260e5
github.com/docker/docker@v17.12.0-ce-rc1.0.20200706150819-a40b877fbb9e+incompatible
19.03.9

Open the chart page →

4,256
contactcataloguscontact-catalogus1.0.01 of 3See more

contactcatalogus contact-catalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/contactcatalogus-php:latesteeb625bd660c
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
19.03.9

Open the chart page →

7,303
datadogdatadog-test2.4.231 of 2See more

datadog datadog-test 2.4.23

1 of the 2 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
datadog/agent:7.22.08f20e56b5311
github.com/docker/docker@v17.12.0-ce-rc1.0.20200309214505-aa6a9891b09c+incompatible
19.03.9

Open the chart page →

4,568
digispoof-interfacedigispoof-interface1.0.01 of 3See more

digispoof-interface digispoof-interface 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/digispoof-interface-php:latest03aba499950f
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
19.03.9

Open the chart page →

7,779
dnation-pingdnationcloud0.1.91 of 5See more

dnation-ping dnationcloud 0.1.9

1 of the 5 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
prom/prometheus:v2.21.0d43417c260e5
github.com/docker/docker@v17.12.0-ce-rc1.0.20200706150819-a40b877fbb9e+incompatible
19.03.9

Open the chart page →

10,454
helm-operatorhelm-operatorVerified publisher0.0.21 of 1See more

helm-operator helm-operator 0.0.2

1 of the 1 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
bsgrigorov/helm-operator:latest45ab095f09c8
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
19.03.9

Open the chart page →

6,977
jetic-operatorjetic-operatorVerified publisher2.0.21 of 1See more

jetic-operator jetic-operator 2.0.2

1 of the 1 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
apache/camel-k:1.10.43bb13d14f64a
github.com/moby/moby@v0.7.3-0.20190826074503-38ab9da00309
19.03.9

Open the chart page →

9,318
mesherykubesphere-stable0.5.01 of 13See more

meshery kubesphere-stable 0.5.0

1 of the 13 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
layer5/meshery-nsm:stable-latestebd6a8faf21f
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
19.03.9

Open the chart page →

24,690
landelijketabellencataloguslandelijketabellencatalogus1.0.01 of 3See more

landelijketabellencatalogus landelijketabellencatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/landelijketabellencatalogus-php:latest26d91dcbba56
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
19.03.9

Open the chart page →

7,510
traefik-forward-authmesosphere0.3.101 of 2See more

traefik-forward-auth mesosphere 0.3.10

1 of the 2 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
mesosphere/kubeaddons-addon-initializer:v0.5.15efa21defcbc
github.com/docker/docker@v1.13.1
github.com/moby/moby@v1.13.1
19.03.9
19.03.9

Open the chart page →

5,308
hlf-peerowkin5.1.01 of 1See more

hlf-peer owkin 5.1.0

1 of the 1 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
hyperledger/fabric-peer:2.2.1bf4995c86af6
github.com/docker/docker@v17.12.0-ce-rc1.0.20190628135806-70f67c6240bb+incompatible
19.03.9

Open the chart page →

3,688
prometheusprometheus-worawutchan13.0.01 of 6See more

prometheus prometheus-worawutchan 13.0.0

1 of the 6 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.22.1b899dbd1b901
github.com/docker/docker@v17.12.0-ce-rc1.0.20200706150819-a40b877fbb9e+incompatible
19.03.9

Open the chart page →

9,939
atlantistrozz3.12.111 of 1See more

atlantis trozz 3.12.11

1 of the 1 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
runatlantis/atlantis:v0.16.145fbaf7e207c
github.com/docker/docker@v0.0.0-20180620051407-e2593239d949
19.03.9

Open the chart page →

5,280
user-componentuser-component1.2.01 of 4See more

user-component user-component 1.2.0

1 of the 4 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/user-component-php:latest198db44fabb5
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
19.03.9

Open the chart page →

7,303
waardepapierenwaardepapieren1.0.01 of 3See more

waardepapieren waardepapieren 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/waardepapieren-php:latestb2666ffcbad8
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
19.03.9

Open the chart page →

8,079
waardepapieren-baliewaardepapieren-balie1.0.01 of 3See more

waardepapieren-balie waardepapieren-balie 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/waardepapieren-balie-php:latestf36c423cd259
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
19.03.9

Open the chart page →

7,871
waardepapieren-registerwaardepapieren-register1.1.01 of 4See more

waardepapieren-register waardepapieren-register 1.1.0

1 of the 4 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/waardepapieren-register-php:latest9affab218351
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
19.03.9

Open the chart page →

7,429
adresserviceadresservice1.1.01 of 5See more

adresservice adresservice 1.1.0

1 of the 5 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/adresservice-php:latestc5075f0320cd
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
19.03.9

Open the chart page →

7,447
agendaserviceagendaservice1.0.01 of 3See more

agendaservice agendaservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
conduction/agendaservice-php:latest9cfeeb6c7c20
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
19.03.9

Open the chart page →

7,209
amorphieamorphie0.1.21 of 18See more

amorphie amorphie 0.1.2

1 of the 18 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
daprio/dashboard:0.14.07ba5d51e5b97
github.com/moby/moby@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
19.03.9

Open the chart page →

28,131
docker-machine-operatorappscodeVerified publisher2024.7.91 of 1See more

docker-machine-operator appscode 2024.7.9

1 of the 1 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
ghcr.io/appscode/docker-machine-operator:v0.0.481f6007abb4e
github.com/moby/moby@v1.4.2-0.20170731201646-1009e6a40b29
19.03.9

Open the chart page →

2,220
authorization-componentauthorization-component1.0.01 of 3See more

authorization-component authorization-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/authorization-component-php:latest94a749392fcf
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
19.03.9

Open the chart page →

7,561
helm-controllerazureorkestra0.1.12 of 2See more

helm-controller azureorkestra 0.1.1

2 of the 2 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
fluxcd/helm-controller:v0.9.092b891e495d8
github.com/moby/moby@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
19.03.9
fluxcd/source-controller:v0.10.031a8c79a6803
github.com/moby/moby@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
19.03.9

Open the chart page →

7,705
balance-registrationbalance-registration0.1.01 of 4See more

balance-registration balance-registration 0.1.0

1 of the 4 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
conduction/balance-registration-php:devc36094a41369
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
19.03.9

Open the chart page →

8,408
berichtserviceberichtservice1.0.01 of 3See more

berichtservice berichtservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/berichtservice-php:latestee6a21e66ff0
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
19.03.9

Open the chart page →

7,342
checkin-componentcheckin-component0.1.01 of 4See more

checkin-component checkin-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
conduction/checkin-component-php:dev3423845692c1
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
19.03.9

Open the chart page →

8,408
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
19.03.9

Open the chart page →

25,151
ibm-toolkit-installcloud-native-toolkit0.3.01 of 1See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
github.com/docker/docker@v1.4.2-0.20191121165722-d1d5f6476656
19.03.9

Open the chart page →

6,695
cgrccommongroundregistratiecomponent0.1.01 of 3See more

cgrc commongroundregistratiecomponent 0.1.0

1 of the 3 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
conduction/cgrc-php:dev25415534d245
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
19.03.9

Open the chart page →

7,572
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
conduction/conduction-ui-php:dev2744565516e8
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
19.03.9

Open the chart page →

12,907
betaalservicecontacten-catalog1.0.01 of 3See more

betaalservice contacten-catalog 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
conduction/betaalservice-php:latestece1ab544c57
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
19.03.9

Open the chart page →

7,209
contactmoment-componentcontactmoment-component0.1.01 of 4See more

contactmoment-component contactmoment-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
conduction/contactmoment-component-php:deve1d4ad1e22a8
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
19.03.9

Open the chart page →

8,408
katibcowboysysopVerified publisher2.4.21 of 4See more

katib cowboysysop 2.4.2

1 of the 4 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
kubeflowkatib/katib-controller:v0.12.012a28c8a0b41
github.com/docker/docker@v1.4.2-0.20190924003213-a8608b5b67c7
19.03.9

Open the chart page →

6,542
electric-mailcryptexlabsVerified publisher0.0.11 of 5See more

electric-mail cryptexlabs 0.0.1

1 of the 5 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.34db614d40d0e
github.com/docker/docker@v17.12.0-ce-rc1.0.20200309214505-aa6a9891b09c+incompatible
19.03.9

Open the chart page →

5,973
purple-piecryptexlabsVerified publisher0.0.11 of 4See more

purple-pie cryptexlabs 0.0.1

1 of the 4 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.34db614d40d0e
github.com/docker/docker@v17.12.0-ce-rc1.0.20200309214505-aa6a9891b09c+incompatible
19.03.9

Open the chart page →

5,973
cloudwatch-agent-prometheusdasmeta0.2.21 of 1See more

cloudwatch-agent-prometheus dasmeta 0.2.2

1 of the 1 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:1.247350.0b251780e745d1783c93
github.com/docker/docker@v1.13.1
19.03.9

Open the chart page →

2,977
ambassador-operatordatawire0.3.01 of 1See more

ambassador-operator datawire 0.3.0

1 of the 1 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
datawire/ambassador-operator:v1.3.0f95ae710d75c
github.com/moby/moby@v0.7.3-0.20190826074503-38ab9da00309
19.03.9

Open the chart page →

7,486
argocddevtron1.8.11 of 3See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/docker/docker@v0.7.3-0.20190327010347-be7ac8be2ae0
19.03.9

Open the chart page →

10,466
argocddevtron-labs1.8.11 of 3See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/docker/docker@v0.7.3-0.20190327010347-be7ac8be2ae0
19.03.9

Open the chart page →

10,466
docparserdocparser0.1.01 of 4See more

docparser docparser 0.1.0

1 of the 4 container images this version deploys carry CVE-2020-27534.

Container imageDigestPackageFixed in
conduction/docparser-php:devb6f95c8ead7d
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
19.03.9

Open the chart page →

8,408

Container images carrying it

102 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
github.com/docker/docker@v1.4.2-0.20200319182547-c7ad2b866182
github.com/moby/moby@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
19.03.9
19.03.9
1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
github.com/docker/docker@v17.12.1-ce+incompatible
19.03.9
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.