CVE-2020-28362
UnscoredAdvisory
Published 14 Apr 2021In the index since 5 Sept 2026
- Severity
- Unscored
- worst across findings
- CVSS
- —
- base score, highest
- EPSS
- 0.039
- 90th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 185
- of 17,781 indexed, latest versions
- Container images
- 187
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Panic during division of very large numbers in math/big
Carried by container images the latest versions of 185 of 17,781 indexed charts deploy, on 187 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| stdlibgolang | go1.14, go1.14.1, go1.14.2, go1.14.3+13 more | 1.14.12 | 187 |
- OSV records
- GO-2021-0069
- Also known as
- BIT-golang-2020-28362
Charts affected
185 by stars
Container images carrying it
187 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| containous/ | 587162516502 | stdlib | 1.14.12 | 1 |
| coredns/ | 73ca82b4ce82 | stdlib | 1.14.12 | 1 |
| crossplane/ | 66666e6963af | stdlib | 1.14.12 | 1 |
| crowdfox/ | 6fa7e8063d27 | stdlib | 1.14.12 | 1 |
| csiplugin/ | 1fa83d45417f | stdlib | 1.14.12 | 1 |
| csiplugin/ | 00fcc441ea9f | stdlib | 1.14.12 | 1 |
| datadog/ | 17f08a860090 | stdlib | 1.14.12 | 1 |
| datawire/ | 07f8fe4f4f8e | stdlib | 1.14.12 | 1 |
| datawire/ | 2beb65062c8b | stdlib | 1.14.12 | 1 |
| datawire/ | 9716efbdd24b | stdlib | 1.14.12 | 1 |
| douz/ | f2bc7fc068c1 | stdlib | 1.14.12 | 1 |
| duplicati/ | 8660f0eda7c9 | stdlib | 1.14.12 | 1 |
| duyetdev/ | 25e59d223eaa | stdlib | 1.14.12 | 1 |
| ekofr/ | 9fdad6f352e0 | stdlib | 1.14.12 | 1 |
| envoyproxy/ | 71081616da3e | stdlib | 1.14.12 | 1 |
| factly/ | 87064eb0463c | stdlib | 1.14.12 | 1 |
| gabekangas/ | 97461aedb580 | stdlib | 1.14.12 | 1 |
| garugaru/ | 89d66d117029 | stdlib | 1.14.12 | 1 |
| gitea/ | 85416d6f65fe | stdlib | 1.14.12 | 1 |
| gitlab/ | fd7e5dfb9f30 | stdlib | 1.14.12 | 1 |
| gkarthics/ | 6799af333e8a | stdlib | 1.14.12 | 1 |
| gogs/ | 0195b095d0b2 | stdlib | 1.14.12 | 1 |
| gogs/ | 420d53bb7277 | stdlib | 1.14.12 | 1 |
| gomods/ | d714c7ff0231 | stdlib | 1.14.12 | 1 |
| gophish/ | 8a57cd171999 | stdlib | 1.14.12 | 1 |
| grafana/ | 15b977f5207d | stdlib | 1.14.12 | 1 |
| grafana/ | 733842cca5bd | stdlib | 1.14.12 | 1 |
| grafana/ | 77e138f81a8e | stdlib | 1.14.12 | 1 |
| grafana/ | 5fd12edcc694 | stdlib | 1.14.12 | 1 |
| hetznercloud/ | 41dce5b33644 | stdlib | 1.14.12 | 1 |
| hyperledger/ | 37294e05209b | stdlib | 1.14.12 | 1 |
| hyperledger/ | bf4995c86af6 | stdlib | 1.14.12 | 1 |
| iofog/ | 7260cf861479 | stdlib | 1.14.12 | 1 |
| iomesh/ | 002c4b92fd34 | stdlib | 1.14.12 | 1 |
| iomesh/ | 292ad270082e | stdlib | 1.14.12 | 1 |
| iomesh/ | de4aa40684ad | stdlib | 1.14.12 | 1 |
| iomesh/ | f6c76380db34 | stdlib | 1.14.12 | 1 |
| jaegertracing/ | db45c07f2e1b | stdlib | 1.14.12 | 1 |
| jfwenisch/ | 9e6c229f953c | stdlib | 1.14.12 | 1 |
| k8scloudprovider/ | 6ddf80b34265 | stdlib | 1.14.12 | 1 |
| keyporttech/ | 5bd7955ea2f1 | stdlib | 1.14.12 | 1 |
| kubemod/ | cadca39288ad | stdlib | 1.14.12 | 1 |
| kubeoperator/ | be8f0d624640 | stdlib | 1.14.12 | 1 |
| kvalitetsit/ | 0b397ff954ec | stdlib | 1.14.12 | 1 |
| library/ | 7367adca165f | stdlib | 1.14.12 | 1 |
| library/ | f5af5a5ce17f | stdlib | 1.14.12 | 1 |
| lmierzwa/ | d417abe7ddb5 | stdlib | 1.14.12 | 1 |
| longhornio/ | dca34321452c | stdlib | 1.14.12 | 1 |
| longhornio/ | ede61fe2a472 | stdlib | 1.14.12 | 1 |
| macropower/ | dbb05debb785 | stdlib | 1.14.12 | 1 |