StackRadar

CVE-2020-28928

Medium

Advisory

Published 24 Nov 2020In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.007
49th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
411
of 17,781 indexed, latest versions
Container images
368
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 411 of 17,781 indexed charts deploy, on 368 images.

Affected packageAffected versionsFixed inImages
muslapk1.1.20-r3, 1.1.20-r4, 1.1.20-r5, 1.1.22-r2+6 more1.1.20-r6, 1.1.22-r4, 1.1.24-r3, 1.1.24-r10368
OSV records
ALPINE-CVE-2020-28928

Charts affected

411 by stars
ChartLatestAffected imagesRadar Score
athens-proxywenerme0.5.21 of 2See more

athens-proxy wenerme 0.5.2

1 of the 2 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
gomods/athens:v0.11.0efb811df7844
musl@1.1.24-r2
1.1.24-r3

Open the chart page →

4,984
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
ghcr.io/banzaicloud/tcheck:latest0147d87c2019
musl@1.1.24-r8
1.1.24-r10

Open the chart page →

10,127
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
curlimages/curl:7.68.099a8e9629b3a
musl@1.1.22-r3
1.1.22-r4

Open the chart page →

22,665
traefikwenerme9.1.11 of 1See more

traefik wenerme 9.1.1

1 of the 1 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
library/traefik:2.2.8f5af5a5ce17f
musl@1.1.24-r2
1.1.24-r3

Open the chart page →

3,369
wireguardwireguard-bananas1.5.01 of 1See more

wireguard wireguard-bananas 1.5.0

1 of the 1 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
place1/wg-access-server:v0.4.62b2f3ea80ed6
musl@1.1.22-r3
1.1.22-r4

Open the chart page →

2,745
dex-k8s-authenticatorwiremindVerified publisher1.7.01 of 1See more

dex-k8s-authenticator wiremind 1.7.0

1 of the 1 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
mintel/dex-k8s-authenticator:1.4.0caf71cee7b9a
musl@1.1.22-r3
1.1.22-r4

Open the chart page →

2,791
nginxwiremindVerified publisher2.1.11 of 1See more

nginx wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
library/nginx:1.17-alpine763e7f0188e3
musl@1.1.24-r2
1.1.24-r3

Open the chart page →

966
apicurio-registry-sqlwitcom-gmbh0.1.01 of 1See more

apicurio-registry-sql witcom-gmbh 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-jpa:1.3.2.Final44eeddd3562c
musl@1.1.24-r2
1.1.24-r3

Open the chart page →

3,424
kafka-connect-uiwitcom-gmbh0.5.01 of 2See more

kafka-connect-ui witcom-gmbh 0.5.0

1 of the 2 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
landoop/kafka-connect-ui:0.9.738d9d628cd88
musl@1.1.20-r3
1.1.20-r6

Open the chart page →

2,506
rcloneymrs0.1.41 of 2See more

rclone ymrs 0.1.4

1 of the 2 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
quay.io/simplyzee/kube-rclone:v1.52.389a0c23d5ad3
musl@1.1.24-r8
1.1.24-r10

Open the chart page →

1,198
version-checkerymrs0.2.31 of 1See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
musl@1.1.24-r8
1.1.24-r10

Open the chart page →

3,023

Container images carrying it

368 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/nginx:1.15.9-alpine55390addbb1a
musl@1.1.20-r3
1.1.20-r6
1
library/nginx:1.15-alpine57a226fb6ab6
musl@1.1.20-r4
1.1.20-r6
1
library/nginx:1.19.3-alpine5aa44b407756
musl@1.1.24-r9
1.1.24-r10
1
library/nginx:1.17-alpine763e7f0188e3
musl@1.1.24-r2
1.1.24-r3
1
library/nginx:1.17.9-alpineabe5ce652eb7
musl@1.1.22-r3
1.1.22-r4
1
library/orientdb:3.0.1318a6c004398f
musl@1.1.20-r3
1.1.20-r6
1
library/postgres:12.3-alpine7693f2082c68
musl@1.1.24-r9
1.1.24-r10
1
library/rabbitmq:3.8.1-alpine7e0b62800e5e
musl@1.1.22-r3
1.1.22-r4
1
library/rabbitmq:3.7-management-alpinee97f6bb68aab
musl@1.1.24-r9
1.1.24-r10
1
library/redis:5.0.6-alpine3.1027e139dd0476
musl@1.1.22-r3
1.1.22-r4
1
library/redis:6.0.7-alpine5326e0af4341
musl@1.1.24-r9
1.1.24-r10
1
library/redis:4.0.12-alpine99c3c1e02e5e
musl@1.1.20-r3
1.1.20-r6
1
library/redis:5.0.5-alpine3.9dca057ffa233
musl@1.1.20-r4
1.1.20-r6
1
library/redis:5.0.3-alpinef8c22abc77f3
musl@1.1.20-r3
1.1.20-r6
1
library/telegraf:1.9-alpine4239108fd464
musl@1.1.20-r4
1.1.20-r6
1
library/tomcat:8.5.41-alpine04feaf74f8bb
musl@1.1.20-r4
1.1.20-r6
1
library/traefik:2.2.8f5af5a5ce17f
musl@1.1.24-r2
1.1.24-r3
1
library/vault:1.5.4121c1eb16a47
musl@1.1.22-r3
1.1.22-r4
1
lightbend/cloudflow-operator:0.0.0-NIGHTLY011220202647f396de23
musl@1.1.24-r9
1.1.24-r10
1
litmuschaos/mysql-client:latest251afd8fc039
musl@1.1.24-r8
1.1.24-r10
1
lmenezes/cerebro:0.8.13e860068e403
musl@1.1.20-r3
1.1.20-r6
1
logiqai/logiqctl:2.0.4798306811f2d
musl@1.1.24-r2
1.1.24-r3
1
logiqai/toolbox:2.0.155a574ec5b64
musl@1.1.24-r0
1.1.24-r3
1
lsmaster/kafka-connect-wrapper:6.1.0-0.1061eb5fbfa00
musl@1.1.22-r2
1.1.22-r4
1
lsstsqre/lsp-landing-page:latest4653f18b5418
musl@1.1.22-r2
1.1.22-r4
1
lsstsqre/lsp-postgres:latest54283318b16b
musl@1.1.24-r9
1.1.24-r10
1
ma1uta/ma1sd:2.5.0ee2a56d8b8ca
musl@1.1.20-r4
1.1.20-r6
1
maelvls/users-grpc:1.1.1c375ab9b48dd
musl@1.1.24-r9
1.1.24-r10
1
marcelmay/hadoop-hdfs-fsimage-exporter:1.3abeccb740ef7
musl@1.1.20-r4
1.1.20-r6
1
matrixdotorg/matrix-appservice-gitter:latest0d37b4d42b47
musl@1.1.24-r2
1.1.24-r3
1
mesosphere/grafana-plugins:v0.0.19a5e8e7ed587
musl@1.1.22-r3
1.1.22-r4
1
metalmatze/transmission-exporter:0.3.090d6acb6d47d
musl@1.1.22-r3
1.1.22-r4
1
minio/mc:RELEASE.2020-04-25T00-43-23Z1806872732e1
musl@1.1.22-r3
1.1.22-r4
1
minio/mc:RELEASE.2020-03-14T01-23-37Z571feb124476
musl@1.1.22-r3
1.1.22-r4
1
minio/minio:RELEASE.2020-12-03T05-49-24Z053f103f4894
musl@1.1.24-r9
1.1.24-r10
1
minio/minio:RELEASE.2020-09-17T04-49-20Ze2b7b633c250
musl@1.1.24-r8
1.1.24-r10
1
minio/minio:RELEASE.2020-01-03T19-12-21Zf00aa6ef2b72
musl@1.1.20-r4
1.1.20-r6
1
mintel/dex-k8s-authenticator:1.2.0a3789f95d734
musl@1.1.22-r2
1.1.22-r4
1
mintproject/model-catalog-endpoint:29256555a6fbaefae4729d5cd259564708a4ab04ffbb13f20465
musl@1.1.20-r4
1.1.20-r6
1
moikot/basic-git-server:0.0.20d941bd30ffa
musl@1.1.24-r8
1.1.24-r10
1
mojaloop/reporting-hub-bop-positions-ui:v0.0.93b44828feea8
musl@1.1.20-r4
1.1.20-r6
1
mojaloop/reporting-hub-bop-settlements-ui:v0.0.25058eab56ed1a
musl@1.1.20-r4
1.1.20-r6
1
monitoror/monitoror:44b88edcf51ff
musl@1.1.24-r8
1.1.24-r10
1
mozilla/syncserver:latest016162bf39d8
musl@1.1.24-r2
1.1.24-r3
1
ncsa/datawolf:4.7.0af6649d59150
musl@1.1.20-r4
1.1.20-r6
1
nerzhul/mc-arm64:2020.10.034215df511f31
musl@1.1.24-r8
1.1.24-r10
1
nfvpe/sriov-device-plugin:v3.1518499ed631f
musl@1.1.22-r3
1.1.22-r4
1
nfvpe/sriov-device-plugin:v3.0.0f26e07fe7d7c
musl@1.1.20-r4
1.1.20-r6
1
ngoduykhanh/powerdns-admin:0.2.3099371dd9ba6
musl@1.1.24-r8
1.1.24-r10
1
odaniait/aws-kubectl:latest3fff8a8570ec
musl@1.1.24-r2
1.1.24-r3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.