StackRadar

CVE-2020-28168

Medium

Advisory

Published 4 Jan 2021In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.024
83rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
20
of 17,781 indexed, latest versions
Container images
19
deployed by those charts
Fix available
1 of 1
affected package

Axios vulnerable to Server-Side Request Forgery

Carried by container images the latest versions of 20 of 17,781 indexed charts deploy, on 19 images.

Affected packageAffected versionsFixed inImages
axiosnpm0.15.3, 0.16.2, 0.18.0, 0.18.1+3 more0.21.119
OSV records
GHSA-4w2v-q235-vp99

Charts affected

20 by stars
ChartLatestAffected imagesRadar Score
backstagedeliveryheroVerified publisher0.1.151 of 2See more

backstage deliveryhero 0.1.15

1 of the 2 container images this version deploys carry CVE-2020-28168.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
axios@0.20.0
0.21.1

Open the chart page →

8,213
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2020-28168.

Container imageDigestPackageFixed in
ghcr.io/data-fair/data-fair:3cc9498b64b5b
axios@0.19.2
0.21.1

Open the chart page →

38,346
open5gsadaptivenetlabVerified publisher1.0.31 of 3See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2020-28168.

Container imageDigestPackageFixed in
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
axios@0.16.2
0.21.1

Open the chart page →

25,443
fl-orchestrator-guiassist-iot-fl-orchestrator0.1.01 of 3See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2020-28168.

Container imageDigestPackageFixed in
assistiot/fl_orchestrator:api-latest7473d77448e1
axios@0.19.2
0.21.1

Open the chart page →

9,369
authfcryptexlabsVerified publisher0.12.131 of 4See more

authf cryptexlabs 0.12.13

1 of the 4 container images this version deploys carry CVE-2020-28168.

Container imageDigestPackageFixed in
cryptexlabs/authf:0.12.11189c07411d7c
axios@0.19.0
0.21.1

Open the chart page →

3,769
amundsenduyet1.1.01 of 7See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2020-28168.

Container imageDigestPackageFixed in
amundsendev/amundsen-frontend:2.1.169e7915e61c1
axios@0.19.0
0.21.1

Open the chart page →

11,174
iotagent-ulfiware0.1.21 of 1See more

iotagent-ul fiware 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-28168.

Container imageDigestPackageFixed in
fiware/iotagent-ul:1.14.0fe11f55a926d
axios@0.19.2
0.21.1

Open the chart page →

3,337
nightscoutgeek-cookbookVerified publisher1.2.21 of 1See more

nightscout geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2020-28168.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
axios@0.19.2
0.21.1

Open the chart page →

4,043
irslackdhalkeye0.1.01 of 1See more

irslackd halkeye 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-28168.

Container imageDigestPackageFixed in
halkeye/irslackd:latest7638bfba70b0
axios@0.18.1
0.21.1

Open the chart page →

2,064
backstagehelm-charts-nr0.1.151 of 2See more

backstage helm-charts-nr 0.1.15

1 of the 2 container images this version deploys carry CVE-2020-28168.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
axios@0.20.0
0.21.1

Open the chart page →

8,213
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2020-28168.

Container imageDigestPackageFixed in
ibmcom/microclimate-portal:latested5505e5c7ec
axios@0.15.3
0.21.1

Open the chart page →

57,669
ibm-voice-gateway-devibm-charts3.1.01 of 2See more

ibm-voice-gateway-dev ibm-charts 3.1.0

1 of the 2 container images this version deploys carry CVE-2020-28168.

Container imageDigestPackageFixed in
ibmcom/voice-gateway-mr:1.0.5.00762ab1df6c1
axios@0.19.0
0.21.1

Open the chart page →

4,505
yapijoelee2012Verified publisher0.2.01 of 1See more

yapi joelee2012 0.2.0

1 of the 1 container images this version deploys carry CVE-2020-28168.

Container imageDigestPackageFixed in
jayfong/yapi:1.10.2163e5d621910
axios@0.18.1
0.21.1

Open the chart page →

6,454
tooljetkrzwiatrzyk1.1.11 of 2See more

tooljet krzwiatrzyk 1.1.1

1 of the 2 container images this version deploys carry CVE-2020-28168.

Container imageDigestPackageFixed in
tooljet/tooljet-ce:v1.18.0c85a4720e42e
axios@0.19.2
0.21.1

Open the chart page →

5,410
frontendluiscajl0.1.71 of 1See more

frontend luiscajl 0.1.7

1 of the 1 container images this version deploys carry CVE-2020-28168.

Container imageDigestPackageFixed in
lavandadelpatio/frontend:latest501c3f31e0bc
axios@0.19.2
0.21.1

Open the chart page →

3,651
sentence-collectormozilla0.1.21 of 2See more

sentence-collector mozilla 0.1.2

1 of the 2 container images this version deploys carry CVE-2020-28168.

Container imageDigestPackageFixed in
mozilla/sentencecollector:2.0.91da6ff5c4895
axios@0.19.2
0.21.1

Open the chart page →

6,684
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2020-28168.

Container imageDigestPackageFixed in
linuxserver/codimd:latestb801bbcf6386
axios@0.19.2
0.21.1

Open the chart page →

27,465
gristrlex0.1.01 of 1See more

grist rlex 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-28168.

Container imageDigestPackageFixed in
gristlabs/grist:0.7.96e71b1914a7e
axios@0.18.0
0.21.1

Open the chart page →

5,215
fdi-dotstatsuite-dlmstatcan0.3.11 of 1See more

fdi-dotstatsuite-dlm statcan 0.3.1

1 of the 1 container images this version deploys carry CVE-2020-28168.

Container imageDigestPackageFixed in
siscc/dotstatsuite-data-lifecycle-manager:v14.0.0b6f9a7c888fc
axios@0.18.1
0.21.1

Open the chart page →

3,881
workadventureworkadventure1.1.01 of 9See more

workadventure workadventure 1.1.0

1 of the 9 container images this version deploys carry CVE-2020-28168.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-back:v1.17.764001369dad5
axios@0.19.2
0.21.1

Open the chart page →

16,083

Container images carrying it

19 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
axios@0.20.0
0.21.1
2
amundsendev/amundsen-frontend:2.1.169e7915e61c1
axios@0.19.0
0.21.1
1
assistiot/fl_orchestrator:api-latest7473d77448e1
axios@0.19.2
0.21.1
1
cryptexlabs/authf:0.12.11189c07411d7c
axios@0.19.0
0.21.1
1
fiware/iotagent-ul:1.14.0fe11f55a926d
axios@0.19.2
0.21.1
1
gristlabs/grist:0.7.96e71b1914a7e
axios@0.18.0
0.21.1
1
halkeye/irslackd:latest7638bfba70b0
axios@0.18.1
0.21.1
1
ibmcom/microclimate-portal:latested5505e5c7ec
axios@0.15.3
0.21.1
1
ibmcom/voice-gateway-mr:1.0.5.00762ab1df6c1
axios@0.19.0
0.21.1
1
jayfong/yapi:1.10.2163e5d621910
axios@0.18.1
0.21.1
1
lavandadelpatio/frontend:latest501c3f31e0bc
axios@0.19.2
0.21.1
1
linuxserver/codimd:latestb801bbcf6386
axios@0.19.2
0.21.1
1
mozilla/sentencecollector:2.0.91da6ff5c4895
axios@0.19.2
0.21.1
1
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
axios@0.19.2
0.21.1
1
siscc/dotstatsuite-data-lifecycle-manager:v14.0.0b6f9a7c888fc
axios@0.18.1
0.21.1
1
thecodingmachine/workadventure-back:v1.17.764001369dad5
axios@0.19.2
0.21.1
1
tooljet/tooljet-ce:v1.18.0c85a4720e42e
axios@0.19.2
0.21.1
1
ghcr.io/data-fair/data-fair:3cc9498b64b5b
axios@0.19.2
0.21.1
1
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
axios@0.16.2
0.21.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.