StackRadar

CVE-2020-28469

High

Advisory

Published 7 Jun 2021In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.046
91st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
28
of 17,781 indexed, latest versions
Container images
29
deployed by those charts
Fix available
1 of 1
affected package

glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex

Carried by container images the latest versions of 28 of 17,781 indexed charts deploy, on 29 images.

Affected packageAffected versionsFixed inImages
glob-parentnpm5.1.0, 5.1.15.1.229
OSV records
GHSA-ww39-953v-wcq6
Also known as
BIT-gulp-2020-28469

Charts affected

28 by stars
ChartLatestAffected imagesRadar Score
misskeyalytiVerified publisher1.0.01 of 1See more

misskey alyti 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-28469.

Container imageDigestPackageFixed in
misskey/misskey:12.110.1e08b7c478093
glob-parent@5.1.1
5.1.2

Open the chart page →

5,251
backstagedeliveryheroVerified publisher0.1.151 of 2See more

backstage deliveryhero 0.1.15

1 of the 2 container images this version deploys carry CVE-2020-28469.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
glob-parent@5.1.1
5.1.2

Open the chart page →

8,213
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2020-28469.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-kbn:latest0570b27bb7c2
glob-parent@5.1.1
5.1.2

Open the chart page →

17,896
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2020-28469.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-kbn:latest2297b4350211
glob-parent@5.1.1
5.1.2

Open the chart page →

10,730
ranetogabisonfire0.1.21 of 1See more

raneto gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-28469.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/raneto:version-0.16.6ef768f3df5d0
glob-parent@5.1.1
5.1.2

Open the chart page →

2,519
magic-mirrorgeek-cookbookVerified publisher4.4.21 of 1See more

magic-mirror geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2020-28469.

Container imageDigestPackageFixed in
bastilimbach/docker-magicmirror:v2.15.041b0835ab31e
glob-parent@5.1.1
5.1.2

Open the chart page →

4,405
overseerrgeek-cookbookVerified publisher5.4.21 of 1See more

overseerr geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2020-28469.

Container imageDigestPackageFixed in
ghcr.io/sct/overseerr:1.26.1254d16af8f71
glob-parent@5.1.1
5.1.2

Open the chart page →

3,444
youtubedl-materialgeek-cookbookVerified publisher4.4.21 of 1See more

youtubedl-material geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2020-28469.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:4.23720b856bd2f
glob-parent@5.1.1
5.1.2

Open the chart page →

4,410
testhubteshubVerified publisher0.1.41 of 3See more

testhub teshub 0.1.4

1 of the 3 container images this version deploys carry CVE-2020-28469.

Container imageDigestPackageFixed in
testhubio/testhub-frontend:on-preme86c2db53be8
glob-parent@5.1.1
5.1.2

Open the chart page →

7,517
nas-appsawesomeVerified publisher2.0.01 of 8See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2020-28469.

Container imageDigestPackageFixed in
ltdstudio/terraforming-mars:latest0e76c6f4eac0
glob-parent@5.1.0
5.1.2

Open the chart page →

7,152
opendistro-esbeeinventor1.15.11 of 3See more

opendistro-es beeinventor 1.15.1

1 of the 3 container images this version deploys carry CVE-2020-28469.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch-kibana:1.13.2c740d7a89475
glob-parent@5.1.1
5.1.2

Open the chart page →

5,806
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2020-28469.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
glob-parent@5.1.0
5.1.2

Open the chart page →

25,456
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2020-28469.

Container imageDigestPackageFixed in
conduction/conduction-ui-app:devd591f5e6f2a9
glob-parent@5.1.1
5.1.2

Open the chart page →

12,907
haste-servergeek-cookbookVerified publisher3.4.21 of 1See more

haste-server geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2020-28469.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
glob-parent@5.1.1
5.1.2

Open the chart page →

10,994
nightscoutgeek-cookbookVerified publisher1.2.21 of 1See more

nightscout geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2020-28469.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
glob-parent@5.1.1
5.1.2

Open the chart page →

4,043
streamsheetshelm-chartsVerified publisher0.2.34 of 8See more

streamsheets helm-charts 0.2.3

4 of the 8 container images this version deploys carry CVE-2020-28469.

Container imageDigestPackageFixed in
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
glob-parent@5.1.1
5.1.2
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
glob-parent@5.1.1
5.1.2
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
glob-parent@5.1.1
5.1.2
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
glob-parent@5.1.1
5.1.2

Open the chart page →

89,959
backstagehelm-charts-nr0.1.151 of 2See more

backstage helm-charts-nr 0.1.15

1 of the 2 container images this version deploys carry CVE-2020-28469.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
glob-parent@5.1.1
5.1.2

Open the chart page →

8,213
frontendluiscajl0.1.71 of 1See more

frontend luiscajl 0.1.7

1 of the 1 container images this version deploys carry CVE-2020-28469.

Container imageDigestPackageFixed in
lavandadelpatio/frontend:latest501c3f31e0bc
glob-parent@5.1.1
5.1.2

Open the chart page →

3,651
sample-appmongodb-helm-charts0.1.01 of 2See more

sample-app mongodb-helm-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2020-28469.

Container imageDigestPackageFixed in
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
glob-parent@5.1.1
5.1.2

Open the chart page →

6,438
sentence-collectormozilla0.1.21 of 2See more

sentence-collector mozilla 0.1.2

1 of the 2 container images this version deploys carry CVE-2020-28469.

Container imageDigestPackageFixed in
mozilla/sentencecollector:2.0.91da6ff5c4895
glob-parent@5.1.1
5.1.2

Open the chart page →

6,684
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2020-28469.

Container imageDigestPackageFixed in
linuxserver/codimd:latestb801bbcf6386
glob-parent@5.1.1
5.1.2

Open the chart page →

27,465
stackrox-chartredhat-cop0.0.101 of 1See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2020-28469.

Container imageDigestPackageFixed in
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
glob-parent@5.1.0
5.1.2

Open the chart page →

29,227
gristrlex0.1.01 of 1See more

grist rlex 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-28469.

Container imageDigestPackageFixed in
gristlabs/grist:0.7.96e71b1914a7e
glob-parent@5.1.1
5.1.2

Open the chart page →

5,215
parkingsikalabs0.1.01 of 1See more

parking sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-28469.

Container imageDigestPackageFixed in
ondrejsika/parking:latestb1fd497416c8
glob-parent@5.1.0
5.1.2

Open the chart page →

3,696
thanhvt27-lab-k8sthanh-vtVerified publisher0.1.41 of 5See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2020-28469.

Container imageDigestPackageFixed in
pysga1996/python-redis-web:latestfdeec30ad482
glob-parent@5.1.1
5.1.2

Open the chart page →

4,661
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2020-28469.

Container imageDigestPackageFixed in
ubercadence/web:v3.29.58564a5b44a6d
glob-parent@5.1.1
5.1.2

Open the chart page →

10,127
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2020-28469.

Container imageDigestPackageFixed in
temporalio/web:1.14.033cfa863d8ce
glob-parent@5.1.1
5.1.2

Open the chart page →

22,665
opendistro-eswitcom-gmbh1.13.31 of 3See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry CVE-2020-28469.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch-kibana:1.13.2c740d7a89475
glob-parent@5.1.1
5.1.2

Open the chart page →

5,806

Container images carrying it

29 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
amazon/opendistro-for-elasticsearch-kibana:1.13.2c740d7a89475
glob-parent@5.1.1
5.1.2
2
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
glob-parent@5.1.1
5.1.2
2
assistiot/cybersecurity-monitoring_id-kbn:latest2297b4350211
glob-parent@5.1.1
5.1.2
1
assistiot/cybersecurity-monitoring_ir-kbn:latest0570b27bb7c2
glob-parent@5.1.1
5.1.2
1
bastilimbach/docker-magicmirror:v2.15.041b0835ab31e
glob-parent@5.1.1
5.1.2
1
conduction/conduction-ui-app:devd591f5e6f2a9
glob-parent@5.1.1
5.1.2
1
gristlabs/grist:0.7.96e71b1914a7e
glob-parent@5.1.1
5.1.2
1
lavandadelpatio/frontend:latest501c3f31e0bc
glob-parent@5.1.1
5.1.2
1
linuxserver/codimd:latestb801bbcf6386
glob-parent@5.1.1
5.1.2
1
ltdstudio/terraforming-mars:latest0e76c6f4eac0
glob-parent@5.1.0
5.1.2
1
misskey/misskey:12.110.1e08b7c478093
glob-parent@5.1.1
5.1.2
1
mozilla/sentencecollector:2.0.91da6ff5c4895
glob-parent@5.1.1
5.1.2
1
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
glob-parent@5.1.1
5.1.2
1
ondrejsika/parking:latestb1fd497416c8
glob-parent@5.1.0
5.1.2
1
pysga1996/python-redis-web:latestfdeec30ad482
glob-parent@5.1.1
5.1.2
1
temporalio/web:1.14.033cfa863d8ce
glob-parent@5.1.1
5.1.2
1
testhubio/testhub-frontend:on-preme86c2db53be8
glob-parent@5.1.1
5.1.2
1
tzahi12345/youtubedl-material:4.23720b856bd2f
glob-parent@5.1.1
5.1.2
1
ubercadence/web:v3.29.58564a5b44a6d
glob-parent@5.1.1
5.1.2
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
glob-parent@5.1.1
5.1.2
1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
glob-parent@5.1.1
5.1.2
1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
glob-parent@5.1.1
5.1.2
1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
glob-parent@5.1.1
5.1.2
1
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
glob-parent@5.1.1
5.1.2
1
ghcr.io/linuxserver/raneto:version-0.16.6ef768f3df5d0
glob-parent@5.1.1
5.1.2
1
ghcr.io/sct/overseerr:1.26.1254d16af8f71
glob-parent@5.1.1
5.1.2
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
glob-parent@5.1.0
5.1.2
1
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
glob-parent@5.1.1
5.1.2
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
glob-parent@5.1.0
5.1.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.