StackRadar

CVE-2020-28928

Medium

Advisory

Published 24 Nov 2020In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.007
49th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
411
of 17,781 indexed, latest versions
Container images
368
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 411 of 17,781 indexed charts deploy, on 368 images.

Affected packageAffected versionsFixed inImages
muslapk1.1.20-r3, 1.1.20-r4, 1.1.20-r5, 1.1.22-r2+6 more1.1.20-r6, 1.1.22-r4, 1.1.24-r3, 1.1.24-r10368
OSV records
ALPINE-CVE-2020-28928

Charts affected

411 by stars
ChartLatestAffected imagesRadar Score
athens-proxywenerme0.5.21 of 2See more

athens-proxy wenerme 0.5.2

1 of the 2 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
gomods/athens:v0.11.0efb811df7844
musl@1.1.24-r2
1.1.24-r3

Open the chart page →

4,984
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
ghcr.io/banzaicloud/tcheck:latest0147d87c2019
musl@1.1.24-r8
1.1.24-r10

Open the chart page →

10,127
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
curlimages/curl:7.68.099a8e9629b3a
musl@1.1.22-r3
1.1.22-r4

Open the chart page →

22,665
traefikwenerme9.1.11 of 1See more

traefik wenerme 9.1.1

1 of the 1 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
library/traefik:2.2.8f5af5a5ce17f
musl@1.1.24-r2
1.1.24-r3

Open the chart page →

3,369
wireguardwireguard-bananas1.5.01 of 1See more

wireguard wireguard-bananas 1.5.0

1 of the 1 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
place1/wg-access-server:v0.4.62b2f3ea80ed6
musl@1.1.22-r3
1.1.22-r4

Open the chart page →

2,745
dex-k8s-authenticatorwiremindVerified publisher1.7.01 of 1See more

dex-k8s-authenticator wiremind 1.7.0

1 of the 1 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
mintel/dex-k8s-authenticator:1.4.0caf71cee7b9a
musl@1.1.22-r3
1.1.22-r4

Open the chart page →

2,791
nginxwiremindVerified publisher2.1.11 of 1See more

nginx wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
library/nginx:1.17-alpine763e7f0188e3
musl@1.1.24-r2
1.1.24-r3

Open the chart page →

966
apicurio-registry-sqlwitcom-gmbh0.1.01 of 1See more

apicurio-registry-sql witcom-gmbh 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-jpa:1.3.2.Final44eeddd3562c
musl@1.1.24-r2
1.1.24-r3

Open the chart page →

3,424
kafka-connect-uiwitcom-gmbh0.5.01 of 2See more

kafka-connect-ui witcom-gmbh 0.5.0

1 of the 2 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
landoop/kafka-connect-ui:0.9.738d9d628cd88
musl@1.1.20-r3
1.1.20-r6

Open the chart page →

2,506
rcloneymrs0.1.41 of 2See more

rclone ymrs 0.1.4

1 of the 2 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
quay.io/simplyzee/kube-rclone:v1.52.389a0c23d5ad3
musl@1.1.24-r8
1.1.24-r10

Open the chart page →

1,198
version-checkerymrs0.2.31 of 1See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
musl@1.1.24-r8
1.1.24-r10

Open the chart page →

3,023

Container images carrying it

368 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
okgolove/asprom:1.10.1974d2e5eb150
musl@1.1.24-r2
1.1.24-r3
1
openebs/provisioner-nfs:0.11.04f41dd782761
musl@1.1.24-r8
1.1.24-r10
1
openpolicyagent/kube-mgmt:0.8a54693fd75f5
musl@1.1.20-r3
1.1.20-r6
1
openwhisk/apigateway:1.0.0df52384d7f92
musl@1.1.20-r5
1.1.20-r6
1
openwhisk/invoker:1.0.0f5831ec85525
musl@1.1.24-r9
1.1.24-r10
1
openzipkin/zipkin-dependencies:2.6.45ff2fa849a82
musl@1.1.24-r9
1.1.24-r10
1
openzipkin/zipkin-ui:2.21.0672cbc94256b
musl@1.1.22-r3
1.1.22-r4
1
oryd/hive-selfservice-ui-node:v0.0.426347ef0a2de
musl@1.1.20-r5
1.1.20-r6
1
owasp/dependency-track:3.8.0efc65e702ee1
musl@1.1.22-r3
1.1.22-r4
1
oxynozeta/kubernetes-tagger:1.3.0a153c386f5af
musl@1.1.20-r5
1.1.20-r6
1
oxynozeta/prometheus-cachethq:1.1.131f11669d597
musl@1.1.20-r4
1.1.20-r6
1
pactfoundation/pact-broker:2.32.0-2062d6c710099
musl@1.1.20-r4
1.1.20-r6
1
pe46dro/xbackbone-docker:3.3.309dfe3aa10f6
musl@1.1.20-r5
1.1.20-r6
1
pgbouncer/pgbouncer:1.15.0aa8a38b7b33e
musl@1.1.20-r5
1.1.20-r6
1
phntom/stocks-nasdaq-crawler:0.0.28d2b844700b57
musl@1.1.24-r9
1.1.24-r10
1
pnnlmiscscripts/anaconda:20181125-1500-nginx-74eafeb809124
musl@1.1.22-r3
1.1.22-r4
1
pnnlmiscscripts/anaconda:20200421-1700-nginx-1bbb6940d849f
musl@1.1.24-r2
1.1.24-r3
1
pnnlmiscscripts/chronyd:3.4-1c516c2485271
musl@1.1.20-r5
1.1.20-r6
1
pnnlmiscscripts/dhcpd:4.4.1-1393724518ff7
musl@1.1.20-r5
1.1.20-r6
1
pnnlmiscscripts/k8s-node-image:1.13.11-nginx-12648032cb498
musl@1.1.22-r3
1.1.22-r4
1
pnnlmiscscripts/k8s-node-image:1.14.10-nginx-78af4c559fff0
musl@1.1.24-r2
1.1.24-r3
1
pnnlmiscscripts/k8s-node-image:1.15.12-nginx-5d710d31000ce
musl@1.1.24-r2
1.1.24-r3
1
pozetroninc/liftbridge:v1.1.079fd6b9d93e6
musl@1.1.24-r8
1.1.24-r10
1
prompve/prometheus-pve-exporter:2.0.1ff6749eb03b0
musl@1.1.24-r9
1.1.24-r10
1
pypiserver/pypiserver:v1.4.2c9250d3c418d
musl@1.1.24-r9
1.1.24-r10
1
rancher/local-path-provisioner:v0.0.1440cb8c984c17
musl@1.1.24-r8
1.1.24-r10
1
rasooll/postfix:lateste731e21c3f67
musl@1.1.24-r8
1.1.24-r10
1
rasooll/stunnel:5.56-r18c8ca63cb92e
musl@1.1.24-r8
1.1.24-r10
1
rbino/mfpb:0.2.0cb7f0603ddfe
musl@1.1.22-r3
1.1.22-r4
1
refar/apm-api:v5.7.1241373fa2972
musl@1.1.22-r3
1.1.22-r4
1
refar/apm-operator-server:v5.7.1e5490f050f9f
musl@1.1.22-r3
1.1.22-r4
1
rpardini/docker-registry-proxy:0.6.383d5f6a96682
musl@1.1.24-r9
1.1.24-r10
1
runatlantis/atlantis:v0.16.145fbaf7e207c
musl@1.1.24-r8
1.1.24-r10
1
runatlantis/atlantis:v0.7.168fa470d1416
musl@1.1.20-r3
1.1.20-r6
1
sdandey/dandey-apps:kanban-board-kanban-ui04594ada18be
musl@1.1.20-r4
1.1.20-r6
1
sdandey/dandey-apps:kanban-board-kanban-appbef0f599737b
musl@1.1.20-r4
1.1.20-r6
1
seataio/seata-server:1.5.1ee1ed55f4144
musl@1.1.20-r4
1.1.20-r6
1
seldonio/apife:0.3.1eea0d3f578ca
musl@1.1.20-r4
1.1.20-r6
1
slamdev/flux-notifier:v0.0.8b173d809132d
musl@1.1.24-r2
1.1.24-r3
1
slamdev/gke-preemptible-notifier:v0.0.3d5d6430108a3
musl@1.1.24-r2
1.1.24-r3
1
slamdev/hetzner-irobo:0.0.13ca20c184c55
musl@1.1.24-r8
1.1.24-r10
1
snebel29/kwatchman:latest27600e17b5d7
musl@1.1.20-r4
1.1.20-r6
1
softonic/gar-exporter:0.2.1a64d6c0e0ae5
musl@1.1.24-r9
1.1.24-r10
1
sosedoff/pgweb:0.11.785e0132e0cce
musl@1.1.22-r3
1.1.22-r4
1
sstarcher/ecr-cleaner:0.1.12d43c390cb19
musl@1.1.24-r2
1.1.24-r3
1
sstarcher/helm-exporter:0.5.011769d01ba35
musl@1.1.24-r0
1.1.24-r3
1
sstarcher/kube-ebs-tagger:0.1.01f8cae8cfa80
musl@1.1.24-r2
1.1.24-r3
1
stakater/chowkidar:v0.0.351dae2b995d81
musl@1.1.20-r5
1.1.20-r6
1
stakater/gitwebhookproxy:v0.2.79c1226e5270cd
musl@1.1.20-r5
1.1.20-r6
1
stakater/jamadar:v0.0.174e130e265f87
musl@1.1.20-r5
1.1.20-r6
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.