CVE-2020-28928
MediumAdvisory
Published 24 Nov 2020In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.5
- base score, highest
- EPSS
- 0.007
- 49th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 411
- of 17,781 indexed, latest versions
- Container images
- 368
- deployed by those charts
- Fix available
- 1 of 1
- affected package
The matching OSV records carry no description.
Carried by container images the latest versions of 411 of 17,781 indexed charts deploy, on 368 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| muslapk | 1.1.20-r3, 1.1.20-r4, 1.1.20-r5, 1.1.22-r2+6 more | 1.1.20-r6, 1.1.22-r4, 1.1.24-r3, 1.1.24-r10 | 368 |
- OSV records
- ALPINE-CVE-2020-28928
Charts affected
411 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| athens-proxywenerme | 0.5.2 | 1 of 2See more | 4,984 |
| cadencewenerme | 0.23.0 | 1 of 5See more | 10,127 |
| temporalwenerme | 0.15.1 | 1 of 13See more | 22,665 |
| traefikwenerme | 9.1.1 | 1 of 1See more | 3,369 |
| wireguardwireguard-bananas | 1.5.0 | 1 of 1See more | 2,745 |
| dex-k8s-authenticatorwiremindVerified publisher | 1.7.0 | 1 of 1See more | 2,791 |
| nginxwiremindVerified publisher | 2.1.1 | 1 of 1See more | 966 |
| apicurio-registry-sqlwitcom-gmbh | 0.1.0 | 1 of 1See more | 3,424 |
| kafka-connect-uiwitcom-gmbh | 0.5.0 | 1 of 2See more | 2,506 |
| rcloneymrs | 0.1.4 | 1 of 2See more | 1,198 |
| version-checkerymrs | 0.2.3 | 1 of 1See more | 3,023 |
Container images carrying it
368 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| chaostoolkit/ | 7f4a7eb9f7df | musl | 1.1.24-r10 | 1 |
| chaostoolkit/ | b95ba4961cfc | musl | 1.1.24-r10 | 1 |
| chorss/ | 5c549cacb8ab | musl | 1.1.20-r6 | 1 |
| cnieg/ | 98ee05668915 | musl | 1.1.24-r3 | 1 |
| conduction/ | 9cfeeb6c7c20 | musl | 1.1.24-r10 | 1 |
| conduction/ | c36094a41369 | musl | 1.1.24-r10 | 1 |
| conduction/ | ece1ab544c57 | musl | 1.1.24-r10 | 1 |
| conduction/ | 25415534d245 | musl | 1.1.24-r3 | 1 |
| conduction/ | 3423845692c1 | musl | 1.1.24-r10 | 1 |
| conduction/ | d591f5e6f2a9 | musl | 1.1.24-r3 | 1 |
| conduction/ | 2744565516e8 | musl | 1.1.24-r10 | 1 |
| conduction/ | e1d4ad1e22a8 | musl | 1.1.24-r10 | 1 |
| conduction/ | b6f95c8ead7d | musl | 1.1.24-r10 | 1 |
| conduction/ | 8f177f9f8a7b | musl | 1.1.24-r10 | 1 |
| conduction/ | 24f03c57568f | musl | 1.1.24-r10 | 1 |
| containous/ | 587162516502 | musl | 1.1.22-r4 | 1 |
| dbanda/ | 0ca125e68e53 | musl | 1.1.20-r6 | 1 |
| dbanda/ | d0e6367876ae | musl | 1.1.20-r6 | 1 |
| decayofmind/ | 1e18e92fe694 | musl | 1.1.20-r6 | 1 |
| devspacecloud/ | 9ccfe38b31b5 | musl | 1.1.24-r3 | 1 |
| devspacecloud/ | 49c397413f7b | musl | 1.1.24-r3 | 1 |
| devspacecloud/ | deef55ff29a7 | musl | 1.1.20-r6 | 1 |
| dniel/ | a8d3cb14f4f6 | musl | 1.1.24-r3 | 1 |
| dniel/ | f67129ea1c64 | musl | 1.1.22-r4 | 1 |
| dniel/ | 8519808fba22 | musl | 1.1.20-r6 | 1 |
| dpage/ | a5a656e1d5fd | musl | 1.1.20-r6 | 1 |
| dpage/ | b1f00b8163cf | musl | 1.1.24-r3 | 1 |
| drone/ | 206df2280ecf | musl | 1.1.20-r6 | 1 |
| duyetdev/ | 25e59d223eaa | musl | 1.1.24-r10 | 1 |
| ealen/ | 3cb01dcbf652 | musl | 1.1.20-r6 | 1 |
| envoyproxy/ | bf862e5f5eca | musl | 1.1.24-r10 | 1 |
| envoyproxy/ | 71081616da3e | musl | 1.1.24-r3 | 1 |
| factly/ | 87064eb0463c | musl | 1.1.20-r6 | 1 |
| folioci/ | 1b57d690d568 | musl | 1.1.22-r4 | 1 |
| foomo/ | b21330d692e3 | musl | 1.1.24-r10 | 1 |
| gabekangas/ | 97461aedb580 | musl | 1.1.24-r10 | 1 |
| garugaru/ | 89d66d117029 | musl | 1.1.24-r10 | 1 |
| gitea/ | 85416d6f65fe | musl | 1.1.24-r3 | 1 |
| gitea/ | d5ab14cd29af | musl | 1.1.24-r10 | 1 |
| gitlab/ | a83c15bda342 | musl | 1.1.20-r6 | 1 |
| gitlab/ | fd7e5dfb9f30 | musl | 1.1.24-r10 | 1 |
| gocd/ | 53588bd3221f | musl | 1.1.20-r6 | 1 |
| gocd/ | 2da45cb09d57 | musl | 1.1.20-r6 | 1 |
| gogs/ | 0195b095d0b2 | musl | 1.1.24-r3 | 1 |
| gogs/ | 420d53bb7277 | musl | 1.1.24-r3 | 1 |
| golenski/ | 48cfd60b8413 | musl | 1.1.24-r10 | 1 |
| gomods/ | d714c7ff0231 | musl | 1.1.24-r3 | 1 |
| gomods/ | efb811df7844 | musl | 1.1.24-r3 | 1 |
| grafana/ | 15b977f5207d | musl | 1.1.24-r10 | 1 |
| grafana/ | 6d42886b3ebe | musl | 1.1.24-r10 | 1 |