StackRadar

CVE-2020-28928

Medium

Advisory

Published 24 Nov 2020In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.007
49th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
411
of 17,781 indexed, latest versions
Container images
368
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 411 of 17,781 indexed charts deploy, on 368 images.

Affected packageAffected versionsFixed inImages
muslapk1.1.20-r3, 1.1.20-r4, 1.1.20-r5, 1.1.22-r2+6 more1.1.20-r6, 1.1.22-r4, 1.1.24-r3, 1.1.24-r10368
OSV records
ALPINE-CVE-2020-28928

Charts affected

411 by stars
ChartLatestAffected imagesRadar Score
athens-proxywenerme0.5.21 of 2See more

athens-proxy wenerme 0.5.2

1 of the 2 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
gomods/athens:v0.11.0efb811df7844
musl@1.1.24-r2
1.1.24-r3

Open the chart page →

4,984
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
ghcr.io/banzaicloud/tcheck:latest0147d87c2019
musl@1.1.24-r8
1.1.24-r10

Open the chart page →

10,127
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
curlimages/curl:7.68.099a8e9629b3a
musl@1.1.22-r3
1.1.22-r4

Open the chart page →

22,665
traefikwenerme9.1.11 of 1See more

traefik wenerme 9.1.1

1 of the 1 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
library/traefik:2.2.8f5af5a5ce17f
musl@1.1.24-r2
1.1.24-r3

Open the chart page →

3,369
wireguardwireguard-bananas1.5.01 of 1See more

wireguard wireguard-bananas 1.5.0

1 of the 1 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
place1/wg-access-server:v0.4.62b2f3ea80ed6
musl@1.1.22-r3
1.1.22-r4

Open the chart page →

2,745
dex-k8s-authenticatorwiremindVerified publisher1.7.01 of 1See more

dex-k8s-authenticator wiremind 1.7.0

1 of the 1 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
mintel/dex-k8s-authenticator:1.4.0caf71cee7b9a
musl@1.1.22-r3
1.1.22-r4

Open the chart page →

2,791
nginxwiremindVerified publisher2.1.11 of 1See more

nginx wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
library/nginx:1.17-alpine763e7f0188e3
musl@1.1.24-r2
1.1.24-r3

Open the chart page →

966
apicurio-registry-sqlwitcom-gmbh0.1.01 of 1See more

apicurio-registry-sql witcom-gmbh 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-jpa:1.3.2.Final44eeddd3562c
musl@1.1.24-r2
1.1.24-r3

Open the chart page →

3,424
kafka-connect-uiwitcom-gmbh0.5.01 of 2See more

kafka-connect-ui witcom-gmbh 0.5.0

1 of the 2 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
landoop/kafka-connect-ui:0.9.738d9d628cd88
musl@1.1.20-r3
1.1.20-r6

Open the chart page →

2,506
rcloneymrs0.1.41 of 2See more

rclone ymrs 0.1.4

1 of the 2 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
quay.io/simplyzee/kube-rclone:v1.52.389a0c23d5ad3
musl@1.1.24-r8
1.1.24-r10

Open the chart page →

1,198
version-checkerymrs0.2.31 of 1See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry CVE-2020-28928.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
musl@1.1.24-r8
1.1.24-r10

Open the chart page →

3,023

Container images carrying it

368 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
dibi/envsubst:latestfc2d92db8024
musl@1.1.24-r9
1.1.24-r10
7
grafana/grafana:7.0.3d72946c8e5d5
musl@1.1.24-r2
1.1.24-r3
6
mailhog/mailhog:v1.0.18d76a3d4ffa3
musl@1.1.24-r9
1.1.24-r10
5
mojaloop/event-sidecar:v11.0.189b8ab71b74b
musl@1.1.24-r2
1.1.24-r3
5
coralogixrepo/fluentd-coralogix-image:1.1.6b976e0412424
musl@1.1.20-r5
1.1.20-r6
4
curlimages/curl:7.68.099a8e9629b3a
musl@1.1.22-r3
1.1.22-r4
4
opencord/sadis-server:1.1.08a006550274b
musl@1.1.20-r4
1.1.20-r6
4
apache/shenyu-admin:2.4.2e8b7c4ddd069
musl@1.1.20-r4
1.1.20-r6
3
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
musl@1.1.20-r4
1.1.20-r6
3
buddy/repman:1.4.0097c897f8b54
musl@1.1.24-r2
1.1.24-r3
3
cankush625/webpage:latest9479f73bab03
musl@1.1.24-r2
1.1.24-r3
3
kiwigrid/k8s-sidecar:0.1.193170069ff0976
musl@1.1.24-r9
1.1.24-r10
3
kiwigrid/k8s-sidecar:0.1.1517b98eecdf6d1
musl@1.1.24-r2
1.1.24-r3
3
landoop/kafka-connect-ui:0.9.738d9d628cd88
musl@1.1.20-r3
1.1.20-r6
3
library/alpine:3.10.272c42ed48c3a
musl@1.1.22-r3
1.1.22-r4
3
library/consul:1.6.194cdbd83f24e
musl@1.1.20-r4
1.1.20-r6
3
library/postgres:9.6.11-alpine83bc87df343f
musl@1.1.20-r3
1.1.20-r6
3
library/rabbitmq:3.8.0-alpine72ff40a31dc4
musl@1.1.22-r3
1.1.22-r4
3
mintel/dex-k8s-authenticator:1.4.0caf71cee7b9a
musl@1.1.22-r3
1.1.22-r4
3
mojaloop/account-lookup-service:v11.8.0b06d3287ea82
musl@1.1.24-r2
1.1.24-r3
3
omecproject/pod-init:1.0.016c14327ce4a
musl@1.1.22-r3
1.1.22-r4
3
pantsel/konga:latestc8172b75607d
musl@1.1.24-r2
1.1.24-r3
3
stakater/proxyinjector:v0.0.2383fef483d497
musl@1.1.20-r4
1.1.20-r6
3
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
musl@1.1.20-r5
1.1.20-r6
3
quay.io/dexidp/dex:v2.25.07bcf286807b8
musl@1.1.24-r8
1.1.24-r10
3
quay.io/sighup/permission-manager:v1.7.1-rc1f5e6a5dcee33
musl@1.1.20-r5
1.1.20-r6
3
abutaha/aws-es-proxy:v1.1190ed2d1dfc8
musl@1.1.24-r2
1.1.24-r3
2
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
musl@1.1.20-r4
1.1.20-r6
2
architectminds/aws-kubectl:1.19735e59a1085
musl@1.1.22-r2
1.1.22-r4
2
caicloud/event-exporter:v0.2.01c853be4662e
musl@1.1.20-r4
1.1.20-r6
2
curlimages/curl:7.73.05329ee280d3d
musl@1.1.24-r2
1.1.24-r3
2
curlimages/curl:7.67.0533cc13b5e39
musl@1.1.22-r3
1.1.22-r4
2
fjvela/urjc-fjvela-rabbitmq:1.0.085727d4079d6
musl@1.1.24-r0
1.1.24-r3
2
giantswarm/docker-kubectl:1.18.858a9d175cdb7
musl@1.1.24-r8
1.1.24-r10
2
governify/assets-manager:v1.4.12987672448c7
musl@1.1.24-r2
1.1.24-r3
2
governify/director:v1.4.0608c6940bb98
musl@1.1.24-r2
1.1.24-r3
2
governify/registry:v3.4.0d3f37f4f8168
musl@1.1.24-r2
1.1.24-r3
2
governify/render:v2.2.0daeca1ce28e6
musl@1.1.24-r2
1.1.24-r3
2
governify/reporter:v2.2.038595913458f
musl@1.1.24-r2
1.1.24-r3
2
gradiant/opentsdb:2.4.0c33d53913869
musl@1.1.20-r4
1.1.20-r6
2
gradiant/spark:2.4.4-python-alpine97657d56e927
musl@1.1.22-r3
1.1.22-r4
2
grafana/grafana:7.3.5511bc20bfcd1
musl@1.1.24-r9
1.1.24-r10
2
grafana/loki:1.5.0922b3f412fdd
musl@1.1.20-r5
1.1.20-r6
2
kubesphere/etcd:v3.3.1271b85abfd057
musl@1.1.20-r3
1.1.20-r6
2
library/alpine:3.9.2644fcb1a676b
musl@1.1.20-r3
1.1.20-r6
2
library/eclipse-mosquitto:1.6.106ba79811d478
musl@1.1.24-r8
1.1.24-r10
2
library/memcached:1.5.19-alpine37c28f53d30d
musl@1.1.22-r3
1.1.22-r4
2
library/postgres:12.4-alpinee27594243877
musl@1.1.24-r9
1.1.24-r10
2
maxrocketinternet/soti-mobicontrol-exporter:0.61a281b76efa3
musl@1.1.20-r4
1.1.20-r6
2
minio/mc:RELEASE.2020-11-25T23-04-07Zbf85c57cdfcc
musl@1.1.24-r8
1.1.24-r10
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.