CVE-2020-27842

Medium

Advisory

Published 5 Jan 2021In the index since 8 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.015; 73rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 13; of 17,781 indexed, latest versions
Container images: 13; deployed by those charts
Fix available: 2 of 3; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 13 of 17,781 indexed charts deploy, on 13 images.

Affected package	Affected versions	Fixed in	Images
openjpeg2deb	2.3.0-1, 2.3.0-2build0.18.04.1, 2.3.1-1ubuntu4	2.3.0-2+deb10u2build0.18.04.1, 2.3.1-1ubuntu4.20.04.1	11
openjpegdeb	1:1.5.2-3.1	no fix listed	2
ghostscriptdeb	9.18~dfsg~0-0ubuntu2.7	9.26~dfsg+0-0ubuntu0.16.04.14	1

OSV records: UBUNTU-CVE-2020-27842
Also known as: USN-4685-1, USN-4686-1, USN-5952-1

Charts affected

13 by stars

Chart

Latest

Affected images

Radar Score

tdarrgeek-cookbook

4.6.2

1 of 2 See more

tdarr geek-cookbook 4.6.2

1 of the 2 container images this version deploys carry CVE-2020-27842.

Container image	Digest	Package	Fixed in
haveagitgat/tdarr_node :2.00.10	1e3f9328327d	openjpeg2@2.3.1-1ubuntu4	2.3.1-1ubuntu4.20.04.1

Open the chart page →

31,000

webpagetest-agentcloudnativeapp

0.2.0

1 of 1 See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2020-27842.

Container image	Digest	Package	Fixed in
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	ghostscript@9.18~dfsg~0-0ubuntu2.7 openjpeg@1:1.5.2-3.1	9.26~dfsg+0-0ubuntu0.16.04.14 no fix listed

Open the chart page →

77,758

datacubedatacube-charts

0.18.2

1 of 1 See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2020-27842.

Container image	Digest	Package	Fixed in
opendatacube/wms :latest	1b90cdf68831	openjpeg2@2.3.0-1	2.3.0-2+deb10u2build0.18.04.1

Open the chart page →

27,728

datacube-datadatacube-charts

0.2.6

1 of 1 See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2020-27842.

Container image	Digest	Package	Fixed in
geoscienceaustralia/dea-k8s-data :latest	f4039b45572a	openjpeg2@2.3.0-2build0.18.04.1	2.3.0-2+deb10u2build0.18.04.1

Open the chart page →

18,863

datacube-processingdatacube-charts

0.1.1

1 of 2 See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2020-27842.

Container image	Digest	Package	Fixed in
opendatacube/pipelines :wofs-1.22	5d810e8504b8	openjpeg2@2.3.0-1	2.3.0-2+deb10u2build0.18.04.1

Open the chart page →

22,405

restcubedatacube-charts

0.2.9

1 of 1 See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2020-27842.

Container image	Digest	Package	Fixed in
opendatacube/restcube :latest	91870111837c	openjpeg2@2.3.0-1	2.3.0-2+deb10u2build0.18.04.1

Open the chart page →

24,335

booksonic-airgeek-cookbook

6.4.2

1 of 1 See more

booksonic-air geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2020-27842.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/booksonic-air :version-v2009.1.0	baa4fa9549dc	openjpeg2@2.3.0-2build0.18.04.1	2.3.0-2+deb10u2build0.18.04.1

Open the chart page →

19,215

teedygeek-cookbook

6.2.0

1 of 1 See more

teedy geek-cookbook 6.2.0

1 of the 1 container images this version deploys carry CVE-2020-27842.

Container image	Digest	Package	Fixed in
sismics/docs :v1.10	f4b0ef019cf1	openjpeg2@2.3.0-2build0.18.04.1	2.3.0-2+deb10u2build0.18.04.1

Open the chart page →

26,944

elastictranscoderluiscajl

0.46.0

2 of 4 See more

elastictranscoder luiscajl 0.46.0

2 of the 4 container images this version deploys carry CVE-2020-27842.

Container image	Digest	Package	Fixed in
elastictranscoder/transcoder :627e21dc	b4a0327029e6	openjpeg2@2.3.0-2build0.18.04.1	2.3.0-2+deb10u2build0.18.04.1
elastictranscoder/transcoder-handler :627e21dc	5b75d19e2733	openjpeg2@2.3.0-2build0.18.04.1	2.3.0-2+deb10u2build0.18.04.1

Open the chart page →

58,160

splashntppool

1.0.4

1 of 1 See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2020-27842.

Container image	Digest	Package	Fixed in
scrapinghub/splash :3.4.1	a5f89bc84606	openjpeg2@2.3.0-2build0.18.04.1	2.3.0-2+deb10u2build0.18.04.1

Open the chart page →

27,633

cdn-remoteopencord

0.2.4

2 of 3 See more

cdn-remote opencord 0.2.4

2 of the 3 container images this version deploys carry CVE-2020-27842.

Container image	Digest	Package	Fixed in
omecproject/cdn-antmedia :1.0.0	b4ae7d0d6b74	openjpeg2@2.3.0-1	2.3.0-2+deb10u2build0.18.04.1
omecproject/cdn-video-repo :1.0.0	d59ccb138ffb	openjpeg@1:1.5.2-3.1	no fix listed

Open the chart page →

63,223

mcord-cdn-remoteopencord

0.1.6

1 of 2 See more

mcord-cdn-remote opencord 0.1.6

1 of the 2 container images this version deploys carry CVE-2020-27842.

Container image	Digest	Package	Fixed in
omecproject/cdn-video-repo :remote-v3	d59ccb138ffb	openjpeg@1:1.5.2-3.1	no fix listed

Open the chart page →

42,614

mcord-cdn-remote-freeopencord

0.1.3

1 of 1 See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2020-27842.

Container image	Digest	Package	Fixed in
omecproject/cdn-video-repo :remote-v3	d59ccb138ffb	openjpeg@1:1.5.2-3.1	no fix listed

Open the chart page →

29,124

Container images carrying it

13 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
omecproject/cdn-video-repo :1.0.0 :remote-v3	d59ccb138ffb	openjpeg@1:1.5.2-3.1	no fix listed	3
elastictranscoder/transcoder :627e21dc	b4a0327029e6	openjpeg2@2.3.0-2build0.18.04.1	2.3.0-2+deb10u2build0.18.04.1	1
elastictranscoder/transcoder-handler :627e21dc	5b75d19e2733	openjpeg2@2.3.0-2build0.18.04.1	2.3.0-2+deb10u2build0.18.04.1	1
geoscienceaustralia/dea-k8s-data :latest	f4039b45572a	openjpeg2@2.3.0-2build0.18.04.1	2.3.0-2+deb10u2build0.18.04.1	1
haveagitgat/tdarr_node :2.00.10	1e3f9328327d	openjpeg2@2.3.1-1ubuntu4	2.3.1-1ubuntu4.20.04.1	1
omecproject/cdn-antmedia :1.0.0	b4ae7d0d6b74	openjpeg2@2.3.0-1	2.3.0-2+deb10u2build0.18.04.1	1
opendatacube/pipelines :wofs-1.22	5d810e8504b8	openjpeg2@2.3.0-1	2.3.0-2+deb10u2build0.18.04.1	1
opendatacube/restcube :latest	91870111837c	openjpeg2@2.3.0-1	2.3.0-2+deb10u2build0.18.04.1	1
opendatacube/wms :latest	1b90cdf68831	openjpeg2@2.3.0-1	2.3.0-2+deb10u2build0.18.04.1	1
scrapinghub/splash :3.4.1	a5f89bc84606	openjpeg2@2.3.0-2build0.18.04.1	2.3.0-2+deb10u2build0.18.04.1	1
sismics/docs :v1.10	f4b0ef019cf1	openjpeg2@2.3.0-2build0.18.04.1	2.3.0-2+deb10u2build0.18.04.1	1
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	ghostscript@9.18~dfsg~0-0ubuntu2.7 openjpeg@1:1.5.2-3.1	9.26~dfsg+0-0ubuntu0.16.04.14 no fix listed	1
ghcr.io/linuxserver/booksonic-air :version-v2009.1.0	baa4fa9549dc	openjpeg2@2.3.0-2build0.18.04.1	2.3.0-2+deb10u2build0.18.04.1	1