StackRadar

CVE-2020-28928

Medium

Advisory

Published 24 Nov 2020In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.007
49th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
411
of 17,781 indexed, latest versions
Container images
368
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 411 of 17,781 indexed charts deploy, on 368 images.

Affected packageAffected versionsFixed inImages
muslapk1.1.20-r3, 1.1.20-r4, 1.1.20-r5, 1.1.22-r2+6 more1.1.20-r6, 1.1.22-r4, 1.1.24-r3, 1.1.24-r10368
OSV records
ALPINE-CVE-2020-28928

Charts affected

411 by stars
ChartLatestAffected imagesRadar Score
athens-proxywenerme0.5.21 of 2See more

athens-proxy wenerme 0.5.2

1 of the 2 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
gomods/athens:v0.11.0efb811df7844
musl@1.1.24-r2
1.1.24-r3

Open the chart page →

4,984
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
ghcr.io/banzaicloud/tcheck:latest0147d87c2019
musl@1.1.24-r8
1.1.24-r10

Open the chart page →

10,127
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
curlimages/curl:7.68.099a8e9629b3a
musl@1.1.22-r3
1.1.22-r4

Open the chart page →

22,665
traefikwenerme9.1.11 of 1See more

traefik wenerme 9.1.1

1 of the 1 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
library/traefik:2.2.8f5af5a5ce17f
musl@1.1.24-r2
1.1.24-r3

Open the chart page →

3,369
wireguardwireguard-bananas1.5.01 of 1See more

wireguard wireguard-bananas 1.5.0

1 of the 1 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
place1/wg-access-server:v0.4.62b2f3ea80ed6
musl@1.1.22-r3
1.1.22-r4

Open the chart page →

2,745
dex-k8s-authenticatorwiremindVerified publisher1.7.01 of 1See more

dex-k8s-authenticator wiremind 1.7.0

1 of the 1 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
mintel/dex-k8s-authenticator:1.4.0caf71cee7b9a
musl@1.1.22-r3
1.1.22-r4

Open the chart page →

2,791
nginxwiremindVerified publisher2.1.11 of 1See more

nginx wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
library/nginx:1.17-alpine763e7f0188e3
musl@1.1.24-r2
1.1.24-r3

Open the chart page →

966
apicurio-registry-sqlwitcom-gmbh0.1.01 of 1See more

apicurio-registry-sql witcom-gmbh 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-jpa:1.3.2.Final44eeddd3562c
musl@1.1.24-r2
1.1.24-r3

Open the chart page →

3,424
kafka-connect-uiwitcom-gmbh0.5.01 of 2See more

kafka-connect-ui witcom-gmbh 0.5.0

1 of the 2 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
landoop/kafka-connect-ui:0.9.738d9d628cd88
musl@1.1.20-r3
1.1.20-r6

Open the chart page →

2,506
rcloneymrs0.1.41 of 2See more

rclone ymrs 0.1.4

1 of the 2 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
quay.io/simplyzee/kube-rclone:v1.52.389a0c23d5ad3
musl@1.1.24-r8
1.1.24-r10

Open the chart page →

1,198
version-checkerymrs0.2.31 of 1See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
musl@1.1.24-r8
1.1.24-r10

Open the chart page →

3,023

Container images carrying it

368 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
mojaloop/central-ledger:v13.14.01abc8a7aa71c
musl@1.1.24-r2
1.1.24-r3
2
mojaloop/ml-api-adapter:v11.1.6fb71d233c742
musl@1.1.24-r0
1.1.24-r3
2
mojaloop/reporting-hub-bop-role-ui:v1.5.55f025fe3554b
musl@1.1.20-r4
1.1.20-r6
2
mojaloop/reporting-hub-bop-shell:v2.3.3c338940807c9
musl@1.1.20-r4
1.1.20-r6
2
mojaloop/reporting-hub-bop-trx-ui:v2.0.289cb2e16a2a3
musl@1.1.20-r4
1.1.20-r6
2
neuvector/controller:3.2.1dc3140b998c7
musl@1.1.24-r0
1.1.24-r3
2
neuvector/enforcer:3.2.122ce2230b414
musl@1.1.24-r0
1.1.24-r3
2
neuvector/manager:3.2.1f1b7d666eae0
musl@1.1.24-r0
1.1.24-r3
2
omecproject/kubernetes-synchronizer:comac-1.0.07c17a7b1d1ef
musl@1.1.20-r4
1.1.20-r6
2
phntom/kochi:1.1.33b82358bd56e
musl@1.1.24-r9
1.1.24-r10
2
place1/wg-access-server:v0.4.62b2f3ea80ed6
musl@1.1.22-r3
1.1.22-r4
2
pypiserver/pypiserver:v1.3.2303ac89b2aa2
musl@1.1.22-r3
1.1.22-r4
2
spotify/docker-gc:latest0fc5d80c1190
musl@1.1.22-r2
1.1.22-r4
2
squareup/ghostunnel:v1.5.270f4cf270425
musl@1.1.22-r3
1.1.22-r4
2
taskrabbit/elasticsearch-dump:latestc967fe68b9c7
musl@1.1.20-r5
1.1.20-r6
2
thesisrobot/loop:v0.11.1-beta89ae07e787ca
musl@1.1.24-r8
1.1.24-r10
2
thesisrobot/pool:v0.3.3-alpha2d1c388a4bda
musl@1.1.24-r8
1.1.24-r10
2
tkpd/gripmock:1.10.174441dadcfbd
musl@1.1.24-r9
1.1.24-r10
2
quay.io/devtron/git-sensor:5d527335-200-4349b00b0629b1ff
musl@1.1.20-r5
1.1.20-r6
2
quay.io/dexidp/dex:v2.24.0c9b7f6d0d953
musl@1.1.22-r3
1.1.22-r4
2
quay.io/ibmgaragecloud/alpine-curl:latestead845a9d8e2
musl@1.1.22-r3
1.1.22-r4
2
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
musl@1.1.24-r8
1.1.24-r10
2
quay.io/metallb/controller:v0.8.25c050e59074e
musl@1.1.22-r3
1.1.22-r4
2
quay.io/metallb/speaker:v0.8.2f1941498a28c
musl@1.1.22-r3
1.1.22-r4
2
adferrand/backuppc:4.4.06fea97b02758
musl@1.1.24-r9
1.1.24-r10
1
adgoal/statsd-proxy:latest75ed282ad613
musl@1.1.24-r2
1.1.24-r3
1
alex6021710/ai-scale-provider:latest5837d9b30cc7
musl@1.1.20-r5
1.1.20-r6
1
alex6021710/ai-scale-saver:latestf73e8d60fd03
musl@1.1.20-r5
1.1.20-r6
1
almir/webhook:2.8.01698346f6077
musl@1.1.24-r2
1.1.24-r3
1
anapsix/get-cloudflare-logs:0.6.07cf7deb20399
musl@1.1.24-r2
1.1.24-r3
1
apache/apisix:1.5-alpine228eb0edf44b
musl@1.1.24-r2
1.1.24-r3
1
apache/shenyu-admin:2.5.1e2be712fc4f4
musl@1.1.20-r4
1.1.20-r6
1
apache/shenyu-bootstrap:2.5.11bd5756f6273
musl@1.1.20-r4
1.1.20-r6
1
apache/skywalking-oap-server:8.1.0-es7641237e0299b
musl@1.1.20-r4
1.1.20-r6
1
apache/skywalking-ui:8.1.067d50e4deff4
musl@1.1.20-r4
1.1.20-r6
1
apicurio/apicurio-registry-jpa:1.3.2.Final44eeddd3562c
musl@1.1.24-r2
1.1.24-r3
1
appscode/searchlight:8.0.09062caa3af66
musl@1.1.20-r4
1.1.20-r6
1
appscode/service-broker:0.3.1a29ee2123a74
musl@1.1.20-r3
1.1.20-r6
1
appscode/swift:v0.12.11d462f76eec0
musl@1.1.22-r3
1.1.22-r4
1
audig/clamapi:2.1.62c3fe34ee430
musl@1.1.22-r3
1.1.22-r4
1
aureliengasser/http-folder:1.1.111c4318c2571
musl@1.1.24-r0
1.1.24-r3
1
banzaicloud/vault-operator:0.4.16db7223cb9183
musl@1.1.20-r4
1.1.20-r6
1
billimek/prometheus-uptimerobot-exporter:0.0.1f14ccd7aad0e
musl@1.1.24-r8
1.1.24-r10
1
binford2k/showoff:0.20.2a64937052ce7
musl@1.1.20-r5
1.1.20-r6
1
blacktop/httpie:latestfc5e68e2f5ab
musl@1.1.20-r4
1.1.20-r6
1
bootc/puppetboard:1.1.0f1383295e7be
musl@1.1.22-r3
1.1.22-r4
1
brannondorsey/alpine-xmrig:v5.8.242d01bbe307f
musl@1.1.24-r1
1.1.24-r3
1
brodul/response-hostname:0.1.0ad1c00a491ad
musl@1.1.24-r9
1.1.24-r10
1
cbeneke/hcloud-fip-controller:v0.4.1dc658078d7ba
musl@1.1.24-r8
1.1.24-r10
1
chaostoolkit/back:latest734f3af86125
musl@1.1.24-r9
1.1.24-r10
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.