StackRadar

CVE-2020-28975

Unscored

Advisory

Published 21 Nov 2020In the index since 8 Sept 2026
Severity
Unscored
worst across findings
CVSS
base score, highest
EPSS
0.035
88th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
9
of 17,781 indexed, latest versions
Container images
7
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 9 of 17,781 indexed charts deploy, on 7 images.

Affected packageAffected versionsFixed inImages
scikit-learnpypi0.19.1, 0.19.2, 0.21.3, 0.23.10.24.dev07
OSV records
PYSEC-2020-108
Also known as
GHSA-jxfp-4rvq-9h9m

Charts affected

9 by stars
ChartLatestAffected imagesRadar Score
tensorflow-notebookcloudnativeapp0.1.21 of 1See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-28975.

Container imageDigestPackageFixed in
tensorflow/tensorflow:1.6.0-devel1e3172090703
scikit-learn@0.19.1
0.24.dev0

Open the chart page →

36,094
distributed-tensorflowcloudnativeapp0.1.11 of 1See more

distributed-tensorflow cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-28975.

Container imageDigestPackageFixed in
cheyang/distributed-tf:1.6.046cc34755493
scikit-learn@0.19.1
0.24.dev0

Open the chart page →

36,094
mlflowdeliveryheroVerified publisher1.0.101 of 1See more

mlflow deliveryhero 1.0.10

1 of the 1 container images this version deploys carry CVE-2020-28975.

Container imageDigestPackageFixed in
larribas/mlflow:1.9.105ccb0b46bfb
scikit-learn@0.23.1
0.24.dev0

Open the chart page →

4,422
spark-standalonedmwm-bigdataVerified publisher0.1.01 of 2See more

spark-standalone dmwm-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2020-28975.

Container imageDigestPackageFixed in
gradiant/spark:2.4.4-python-alpine97657d56e927
scikit-learn@0.21.3
0.24.dev0

Open the chart page →

6,147
spark-standalonegradiant-bigdataVerified publisher0.1.01 of 2See more

spark-standalone gradiant-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2020-28975.

Container imageDigestPackageFixed in
gradiant/spark:2.4.4-python-alpine97657d56e927
scikit-learn@0.21.3
0.24.dev0

Open the chart page →

6,147
mlflowhelm-charts-nr1.0.101 of 1See more

mlflow helm-charts-nr 1.0.10

1 of the 1 container images this version deploys carry CVE-2020-28975.

Container imageDigestPackageFixed in
larribas/mlflow:1.9.105ccb0b46bfb
scikit-learn@0.23.1
0.24.dev0

Open the chart page →

4,422
reportportalreportportal5.7.22 of 8See more

reportportal reportportal 5.7.2

2 of the 8 container images this version deploys carry CVE-2020-28975.

Container imageDigestPackageFixed in
reportportal/service-auto-analyzer:5.7.295ada4a216ce
scikit-learn@0.19.2
0.24.dev0
reportportal/service-metrics-gatherer:1.1.202a0e6dc11161
scikit-learn@0.19.2
0.24.dev0

Open the chart page →

25,737
ceph-csi-cephfswikimedia0.1.81 of 5See more

ceph-csi-cephfs wikimedia 0.1.8

1 of the 5 container images this version deploys carry CVE-2020-28975.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
scikit-learn@0.19.1
0.24.dev0

Open the chart page →

10,285
ceph-csi-rbdwikimedia0.1.131 of 6See more

ceph-csi-rbd wikimedia 0.1.13

1 of the 6 container images this version deploys carry CVE-2020-28975.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
scikit-learn@0.19.1
0.24.dev0

Open the chart page →

11,784

Container images carrying it

7 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
gradiant/spark:2.4.4-python-alpine97657d56e927
scikit-learn@0.21.3
0.24.dev0
2
larribas/mlflow:1.9.105ccb0b46bfb
scikit-learn@0.23.1
0.24.dev0
2
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
scikit-learn@0.19.1
0.24.dev0
2
cheyang/distributed-tf:1.6.046cc34755493
scikit-learn@0.19.1
0.24.dev0
1
reportportal/service-auto-analyzer:5.7.295ada4a216ce
scikit-learn@0.19.2
0.24.dev0
1
reportportal/service-metrics-gatherer:1.1.202a0e6dc11161
scikit-learn@0.19.2
0.24.dev0
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
scikit-learn@0.19.1
0.24.dev0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.