StackRadar

CVE-2020-28928

Medium

Advisory

Published 24 Nov 2020In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.007
49th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
411
of 17,781 indexed, latest versions
Container images
368
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 411 of 17,781 indexed charts deploy, on 368 images.

Affected packageAffected versionsFixed inImages
muslapk1.1.20-r3, 1.1.20-r4, 1.1.20-r5, 1.1.22-r2+6 more1.1.20-r6, 1.1.22-r4, 1.1.24-r3, 1.1.24-r10368
OSV records
ALPINE-CVE-2020-28928

Charts affected

411 by stars
ChartLatestAffected imagesRadar Score
athens-proxywenerme0.5.21 of 2See more

athens-proxy wenerme 0.5.2

1 of the 2 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
gomods/athens:v0.11.0efb811df7844
musl@1.1.24-r2
1.1.24-r3

Open the chart page →

4,984
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
ghcr.io/banzaicloud/tcheck:latest0147d87c2019
musl@1.1.24-r8
1.1.24-r10

Open the chart page →

10,127
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
curlimages/curl:7.68.099a8e9629b3a
musl@1.1.22-r3
1.1.22-r4

Open the chart page →

22,665
traefikwenerme9.1.11 of 1See more

traefik wenerme 9.1.1

1 of the 1 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
library/traefik:2.2.8f5af5a5ce17f
musl@1.1.24-r2
1.1.24-r3

Open the chart page →

3,369
wireguardwireguard-bananas1.5.01 of 1See more

wireguard wireguard-bananas 1.5.0

1 of the 1 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
place1/wg-access-server:v0.4.62b2f3ea80ed6
musl@1.1.22-r3
1.1.22-r4

Open the chart page →

2,745
dex-k8s-authenticatorwiremindVerified publisher1.7.01 of 1See more

dex-k8s-authenticator wiremind 1.7.0

1 of the 1 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
mintel/dex-k8s-authenticator:1.4.0caf71cee7b9a
musl@1.1.22-r3
1.1.22-r4

Open the chart page →

2,791
nginxwiremindVerified publisher2.1.11 of 1See more

nginx wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
library/nginx:1.17-alpine763e7f0188e3
musl@1.1.24-r2
1.1.24-r3

Open the chart page →

966
apicurio-registry-sqlwitcom-gmbh0.1.01 of 1See more

apicurio-registry-sql witcom-gmbh 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-jpa:1.3.2.Final44eeddd3562c
musl@1.1.24-r2
1.1.24-r3

Open the chart page →

3,424
kafka-connect-uiwitcom-gmbh0.5.01 of 2See more

kafka-connect-ui witcom-gmbh 0.5.0

1 of the 2 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
landoop/kafka-connect-ui:0.9.738d9d628cd88
musl@1.1.20-r3
1.1.20-r6

Open the chart page →

2,506
rcloneymrs0.1.41 of 2See more

rclone ymrs 0.1.4

1 of the 2 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
quay.io/simplyzee/kube-rclone:v1.52.389a0c23d5ad3
musl@1.1.24-r8
1.1.24-r10

Open the chart page →

1,198
version-checkerymrs0.2.31 of 1See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
musl@1.1.24-r8
1.1.24-r10

Open the chart page →

3,023

Container images carrying it

368 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
grafana/grafana:7.2.1733842cca5bd
musl@1.1.24-r8
1.1.24-r10
1
grafana/loki:2.0.077e138f81a8e
musl@1.1.20-r5
1.1.20-r6
1
graphiteapp/graphite-statsd:1.1.7-604a0037cc2ae
musl@1.1.24-r8
1.1.24-r10
1
halkeye/hubot:latest9764d2202130
musl@1.1.24-r2
1.1.24-r3
1
hashicorp/vault-k8s:0.6.05697b85bc69a
musl@1.1.24-r8
1.1.24-r10
1
hazelcast/hazelcast-jet:3.0df495e64ea65
musl@1.1.20-r4
1.1.20-r6
1
hetznercloud/hcloud-csi-driver:1.5.141dce5b33644
musl@1.1.24-r8
1.1.24-r10
1
hhaluk/crypto-watchdog:0.4.0a6555953d941
musl@1.1.24-r0
1.1.24-r3
1
hmdmph/mongo-pod-labeler:1.0.1-alpine79e4a170f3dc
musl@1.1.20-r3
1.1.20-r6
1
hmdmph/redis-pod-labeler:1.0.0-alpine7f1381fe0f3b
musl@1.1.24-r8
1.1.24-r10
1
hyperledger/burrow:0.25.184c869c596bb
musl@1.1.20-r4
1.1.20-r6
1
hyperledger/fabric-orderer:2.2.137294e05209b
musl@1.1.24-r8
1.1.24-r10
1
hyperledger/fabric-peer:2.2.1bf4995c86af6
musl@1.1.24-r8
1.1.24-r10
1
ibarreche/cloud-indexer-ci:latestb7a08274e69f
musl@1.1.20-r4
1.1.20-r6
1
ibmcom/icp-sert-bats:3.2.0b558f2b444ae
musl@1.1.20-r4
1.1.20-r6
1
ibmcom/icp-storage-util:3.2.0c44e1ef21075
musl@1.1.20-r4
1.1.20-r6
1
igrantio/bb-consent-admin-dashboard:2023.11.6852574120a1e
musl@1.1.20-r3
1.1.20-r6
1
igrantio/bb-consent-privacy-dashboard:2023.11.6c12f80997b0f
musl@1.1.20-r4
1.1.20-r6
1
jayfong/yapi:1.10.2163e5d621910
musl@1.1.24-r2
1.1.24-r3
1
jenkinsxio/jx-app-test-lifecycle:0.0.46421ebbc8120
musl@1.1.20-r3
1.1.20-r6
1
jijiechen/alpine-curl-git:v2.24.10ee39a17903f
musl@1.1.24-r0
1.1.24-r3
1
julb/http-reqtrace:1.1.00806409af397
musl@1.1.24-r9
1.1.24-r10
1
julb/kubernetes-configmap-sync:1.1.0d7d8836366ad
musl@1.1.24-r9
1.1.24-r10
1
jupyterhub/configurable-http-proxy:4.2.281bd96729c14
musl@1.1.24-r9
1.1.24-r10
1
jvstein/bitcoin-prometheus-exporter:v0.5.07cc385d038b1
musl@1.1.24-r0
1.1.24-r3
1
keitaro/ckan-datapusher:0.0.175bf1a45f45c1
musl@1.1.24-r8
1.1.24-r10
1
keyporttech/csi-driver-nfs:2.0.05bd7955ea2f1
musl@1.1.24-r8
1.1.24-r10
1
kfirfer/percona-xtradb-healthcheck:0.0.1ef7b909a8e6b
musl@1.1.24-r9
1.1.24-r10
1
kiwigrid/k8s-sidecar:1.1.03e86186656d3
musl@1.1.24-r9
1.1.24-r10
1
kiwigrid/k8s-sidecar:1.3.065095a82d4a1
musl@1.1.24-r9
1.1.24-r10
1
klausmeyer/docker-registry-browser:1.3.5430a440d95af
musl@1.1.24-r9
1.1.24-r10
1
kodgruvan/rsyslog-server:0.1.0ea16adc68593
musl@1.1.24-r8
1.1.24-r10
1
kubeaws/kube-spot-termination-notice-handler:1.13.0-1c9cd2ba4373a
musl@1.1.20-r3
1.1.20-r6
1
kubesphere/openelb:v0.5.0b5b665c4672c
musl@1.1.20-r5
1.1.20-r6
1
kubesphere/openelb:v0.4.4ed7311a0f9e4
musl@1.1.20-r5
1.1.20-r6
1
kubesphere/porter:v0.4.38d1ed5ee1d2e
musl@1.1.20-r5
1.1.20-r6
1
kvalitetsit/nsp-prometheus-exporter:1.0.190b397ff954ec
musl@1.1.24-r8
1.1.24-r10
1
kylemanna/openvpn:2.44de5e6690818
musl@1.1.24-r9
1.1.24-r10
1
lastops/clamav:latest97a8ccc3ec21
musl@1.1.22-r3
1.1.22-r4
1
lavandadelpatio/frontend:latest501c3f31e0bc
musl@1.1.20-r5
1.1.20-r6
1
layer5/meshery-cpx:stable-latest8c20a8a1d6a4
musl@1.1.24-r8
1.1.24-r10
1
library/adminer:4.7.5-standalonef42d935fec5a
musl@1.1.24-r0
1.1.24-r3
1
library/alpine:3.9.328ef97b8686a
musl@1.1.20-r4
1.1.20-r6
1
library/alpine:3.9414e0518bb92
musl@1.1.20-r5
1.1.20-r6
1
library/caddy:2.2.0-alpine7367adca165f
musl@1.1.24-r8
1.1.24-r10
1
library/neo4j:3.4.5-enterprisea1ba477fa412
musl@1.1.20-r4
1.1.20-r6
1
library/neo4j:3.3.0d4eaa8484246
musl@1.1.20-r4
1.1.20-r6
1
library/nginx:1.17.4-alpine0649f548ea26
musl@1.1.22-r3
1.1.22-r4
1
library/nginx:1.19.0-alpine17ba9c1ca3db
musl@1.1.24-r2
1.1.24-r3
1
library/nginx:1.16.0-alpine270bea203d2f
musl@1.1.20-r4
1.1.20-r6
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.