CVE-2020-29362

Medium

Advisory

Published 16 Dec 2020In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.023; 82nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 206; of 17,781 indexed, latest versions
Container images: 109; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 206 of 17,781 indexed charts deploy, on 109 images.

Affected package	Affected versions	Fixed in	Images
p11-kitdeb	0.23.2-5~ubuntu16.04.1, 0.23.9-2, 0.23.20-1build1	0.23.2-5~ubuntu16.04.2, 0.23.9-2ubuntu0.1, 0.23.20-1ubuntu0.1	99
p11-kitapk	0.23.16.1-r0, 0.23.18.1-r0, 0.23.20-r5	0.23.16.1-r1, 0.23.18.1-r1, 0.23.22-r0	10

OSV records: ALPINE-CVE-2020-29362 UBUNTU-CVE-2020-29362
Also known as: USN-4677-1

Charts affected

206 by stars

Chart

Latest

Affected images

Radar Score

pagesthuy-pages

1.0.0

1 of 3 See more

pages thuy-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-29362.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	p11-kit@0.23.9-2	0.23.9-2ubuntu0.1

Open the chart page →

20,190

lightstepupdater-lightstep-satellite

1.2.2

1 of 1 See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2020-29362.

Container image	Digest	Package	Fixed in
lightstep/collector :2021-01-26_23-02-36Z	11c5569aaf3b	p11-kit@0.23.2-5~ubuntu16.04.1	0.23.2-5~ubuntu16.04.2

Open the chart page →

15,330

pagesvictor-pages

1.0.0

1 of 3 See more

pages victor-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-29362.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	p11-kit@0.23.9-2	0.23.9-2ubuntu0.1

Open the chart page →

20,190

pageswalter

1.0.0

1 of 3 See more

pages walter 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-29362.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	p11-kit@0.23.9-2	0.23.9-2ubuntu0.1

Open the chart page →

20,190

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2020-29362.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	p11-kit@0.23.9-2	0.23.9-2ubuntu0.1

Open the chart page →

10,843

apicurio-registry-sqlwitcom-gmbh

0.1.0

1 of 1 See more

apicurio-registry-sql witcom-gmbh 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-29362.

Container image	Digest	Package	Fixed in
apicurio/apicurio-registry-jpa :1.3.2.Final	44eeddd3562c	p11-kit@0.23.18.1-r0	0.23.18.1-r1

Open the chart page →

3,424

Container images carrying it

109 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
gcr.io/flink-operator/deployer :webhook-cert	809338a69bd5	p11-kit@0.23.9-2	0.23.9-2ubuntu0.1	1
gcr.io/google-containers/echoserver :1.9	10f4dbc8eeeb	p11-kit@0.23.2-5~ubuntu16.04.1	0.23.2-5~ubuntu16.04.2	1
gcr.io/google_containers/echoserver :1.10	cb5c1bddd1b5	p11-kit@0.23.2-5~ubuntu16.04.1	0.23.2-5~ubuntu16.04.2	1
gcr.io/istio-release/pilot :release-1.0-latest-daily	5ea7b7f3632a	p11-kit@0.23.2-5~ubuntu16.04.1	0.23.2-5~ubuntu16.04.2	1
gcr.io/istio-release/proxyv2 :release-1.0-latest-daily	8f9ff98fdbef	p11-kit@0.23.2-5~ubuntu16.04.1	0.23.2-5~ubuntu16.04.2	1
gcr.io/spinnaker-marketplace/halyard :1.32.0	0ee5f968d2ab	p11-kit@0.23.18.1-r0	0.23.18.1-r1	1
quay.io/apicurio/apicurio-registry-kube-sync :1.0.1	70ef31840269	p11-kit@0.23.18.1-r0	0.23.18.1-r1	1
quay.io/mongodb/mongodb-enterprise-operator :1.8.2	a1c3843b03bc	p11-kit@0.23.2-5~ubuntu16.04.1	0.23.2-5~ubuntu16.04.2	1
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	p11-kit@0.23.2-5~ubuntu16.04.1	0.23.2-5~ubuntu16.04.2	1