StackRadar

CVE-2020-35492

High

Advisory

Published 6 Jan 2021In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.011
64th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
90
of 17,781 indexed, latest versions
Container images
92
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: cairo and pixman security and bug fix update

Carried by container images the latest versions of 90 of 17,781 indexed charts deploy, on 92 images.

Affected packageAffected versionsFixed inImages
cairodeb1.14.6-1, 1.14.8-1, 1.15.10-2, 1.15.10-2ubuntu0.1+1 more1.14.6-1ubuntu0.1~esm1, 1.14.8-1+deb9u1, 1.15.10-2ubuntu0.1+esm1, 1.16.0-4ubuntu1+esm187
cairoapk1.16.0-r21.16.0-r32
cairorpm1.15.12-3.el80:1.15.12-6.el83
OSV records
ALPINE-CVE-2020-35492UBUNTU-CVE-2020-35492RHSA-2022:1961DLA-2518-1
Also known as
USN-5407-1, USN-8140-1

Charts affected

90 by stars
ChartLatestAffected imagesRadar Score
double-takegeek-cookbookVerified publisher2.3.21 of 1See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
jakowenko/double-take:1.6.0b858bac9e32a
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1

Open the chart page →

12,222
lidarrgeek-cookbookVerified publisher14.2.21 of 1See more

lidarr geek-cookbook 14.2.2

1 of the 1 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1

Open the chart page →

14,283
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1

Open the chart page →

27,949
puppeteergeek-cookbookVerified publisher1.2.21 of 1See more

puppeteer geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1

Open the chart page →

15,730
teedygeek-cookbookVerified publisher6.2.01 of 1See more

teedy geek-cookbook 6.2.0

1 of the 1 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
sismics/docs:v1.10f4b0ef019cf1
cairo@1.15.10-2ubuntu0.1
1.15.10-2ubuntu0.1+esm1

Open the chart page →

26,944
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1

Open the chart page →

17,929
gitter-irc-bridgehalkeye0.1.11 of 1See more

gitter-irc-bridge halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
halkeye/gitter-slack-bridge:v2.0.153eb2b3cd4cb
cairo@1.14.8-1
1.14.8-1+deb9u1

Open the chart page →

3,642
resurrectbothalkeye0.1.51 of 1See more

resurrectbot halkeye 0.1.5

1 of the 1 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
halkeye/slack-resurrect:v0.1.477b05e95fdb5
cairo@1.14.8-1
1.14.8-1+deb9u1

Open the chart page →

3,809
7dtdhelm-7dtd0.1.01 of 1See more

7dtd helm-7dtd 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
vinanrra/7dtd-server:v0.4.4f9534490bd2b
cairo@1.15.10-2ubuntu0.1
1.15.10-2ubuntu0.1+esm1

Open the chart page →

10,627
prometheus-aws-costs-exporterhelm-charts-nr0.1.51 of 1See more

prometheus-aws-costs-exporter helm-charts-nr 0.1.5

1 of the 1 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
nachomillangarcia/prometheus_aws_cost_exporter:lateste4ce056f2d6d
cairo@1.14.8-1
1.14.8-1+deb9u1

Open the chart page →

3,553
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1

Open the chart page →

18,813
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1

Open the chart page →

18,066
jenkinsjenkins-x0.10.381 of 2See more

jenkins jenkins-x 0.10.38

1 of the 2 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
jenkinsci/jenkins:2.67a1f33f004659
cairo@1.14.8-1
1.14.8-1+deb9u1

Open the chart page →

10,682
nexusjenkins-x0.1.371 of 1See more

nexus jenkins-x 0.1.37

1 of the 1 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
cairo@1.15.12-3.el8
0:1.15.12-6.el8

Open the chart page →

12,856
statsdkeyporttech0.1.191 of 1See more

statsd keyporttech 0.1.19

1 of the 1 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
statsd/statsd:v0.8.6dab129e74c25
cairo@1.14.8-1
1.14.8-1+deb9u1

Open the chart page →

4,185
elastictranscoderluiscajl0.46.02 of 4See more

elastictranscoder luiscajl 0.46.0

2 of the 4 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
elastictranscoder/transcoder:627e21dcb4a0327029e6
cairo@1.15.10-2ubuntu0.1
1.15.10-2ubuntu0.1+esm1
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
cairo@1.15.10-2ubuntu0.1
1.15.10-2ubuntu0.1+esm1

Open the chart page →

58,160
kubevismario-fVerified publisher2.0.11 of 1See more

kubevis mario-f 2.0.1

1 of the 1 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
cairo@1.14.8-1
1.14.8-1+deb9u1

Open the chart page →

5,287
cameramedia-streaming-meshVerified publisher0.2.52 of 3See more

camera media-streaming-mesh 0.2.5

2 of the 3 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
ciscolabs/rtsp-client:latesta7b60ec88285
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1
ciscolabs/rtsp-server:latestb59fc10bb821
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1

Open the chart page →

18,608
msm-rtspmedia-streaming-meshVerified publisher0.0.22 of 2See more

msm-rtsp media-streaming-mesh 0.0.2

2 of the 2 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
ciscolabs/rtsp-client:latesta7b60ec88285
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1
ciscolabs/rtsp-server:latestb59fc10bb821
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1

Open the chart page →

18,608
rtspmedia-streaming-meshVerified publisher0.0.142 of 2See more

rtsp media-streaming-mesh 0.0.14

2 of the 2 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
ciscolabs/rtsp-client:latesta7b60ec88285
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1
ciscolabs/rtsp-server:latestb59fc10bb821
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1

Open the chart page →

18,608
o1-botminaVerified publisher0.0.31 of 1See more

o1-bot mina 0.0.3

1 of the 1 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
codaprotocol/coda-user-agent:0.1.54ba4dd3a041f
cairo@1.14.8-1
1.14.8-1+deb9u1

Open the chart page →

2,655
elasticsearch2ncsaVerified publisher0.2.21 of 2See more

elasticsearch2 ncsa 0.2.2

1 of the 2 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
library/elasticsearch:2.4.641ed3a1a16b6
cairo@1.14.8-1
1.14.8-1+deb9u1

Open the chart page →

4,911
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
ncsapolyglot/converters-avconv:latestc44b22eb58bb
cairo@1.14.8-1
1.14.8-1+deb9u1

Open the chart page →

55,726
smilencsaVerified publisher1.1.01 of 23See more

smile ncsa 1.1.0

1 of the 23 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
socialmediamacroscope/autophrase:0.1.570fb11d4f531
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1

Open the chart page →

109,294
splashntppoolVerified publisher1.0.41 of 1See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
scrapinghub/splash:3.4.1a5f89bc84606
cairo@1.15.10-2ubuntu0.1
1.15.10-2ubuntu0.1+esm1

Open the chart page →

27,633
cdn-remoteopencord0.2.42 of 3See more

cdn-remote opencord 0.2.4

2 of the 3 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
cairo@1.15.10-2ubuntu0.1
1.15.10-2ubuntu0.1+esm1
omecproject/cdn-video-repo:1.0.0d59ccb138ffb
cairo@1.14.6-1
1.14.6-1ubuntu0.1~esm1

Open the chart page →

63,223
mcord-cdn-remoteopencord0.1.61 of 2See more

mcord-cdn-remote opencord 0.1.6

1 of the 2 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
cairo@1.14.6-1
1.14.6-1ubuntu0.1~esm1

Open the chart page →

42,614
mcord-cdn-remote-freeopencord0.1.31 of 1See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
cairo@1.14.6-1
1.14.6-1ubuntu0.1~esm1

Open the chart page →

29,124
omec-control-planeopencord0.1.311 of 8See more

omec-control-plane opencord 0.1.31

1 of the 8 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
library/cassandra:2.1.20cb079c0d7a57
cairo@1.14.8-1
1.14.8-1+deb9u1

Open the chart page →

40,715
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
openwhisk/alarmprovider:2.2.0b695a6ceb406
cairo@1.14.8-1
1.14.8-1+deb9u1

Open the chart page →

36,215
myappp4-helm0.1.02 of 6See more

myapp p4-helm 0.1.0

2 of the 6 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
fjvela/urjc-fjvela-external-service:1.0.1a8ebe5ca13fc
cairo@1.14.8-1
1.14.8-1+deb9u1
fjvela/urjc-fjvela-server:1.0.53c840aebce22
cairo@1.14.8-1
1.14.8-1+deb9u1

Open the chart page →

19,720
javareact-java0.1.01 of 1See more

java react-java 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
project2team4/react:latest3ff031a08887
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1

Open the chart page →

15,520
stackrox-chartredhat-cop0.0.101 of 1See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
cairo@1.15.12-3.el8
0:1.15.12-6.el8

Open the chart page →

29,227
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1

Open the chart page →

30,687
allurestakaterVerified publisher1.0.11 of 1See more

allure stakater 1.0.1

1 of the 1 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
cairo@1.15.12-3.el8
0:1.15.12-6.el8

Open the chart page →

28,165
sonarqubestakaterVerified publisher0.10.31 of 2See more

sonarqube stakater 0.10.3

1 of the 2 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
library/sonarqube:6.7.6-community0ae5169e3d0f
cairo@1.14.8-1
1.14.8-1+deb9u1

Open the chart page →

11,841
pachydermstatcan0.5.11 of 4See more

pachyderm statcan 0.5.1

1 of the 4 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
pachyderm/grpc-proxy:0.4.92b27f41d4d02
cairo@1.14.8-1
1.14.8-1+deb9u1

Open the chart page →

4,967
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1

Open the chart page →

18,756
owncloudth-chartsVerified publisher0.2.11 of 1See more

owncloud th-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
owncloud/server:10.15.051d9b74fc2a8
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1

Open the chart page →

10,006
kongwallarmVerified publisher4.6.31 of 7See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2020-35492.

Container imageDigestPackageFixed in
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1

Open the chart page →

11,405

Container images carrying it

92 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
neilpeterson/aks-helloworld:v1fb47732ef36b
cairo@1.14.8-1
1.14.8-1+deb9u1
1
neilpeterson/chart-tweet:latest64fd8dab075f
cairo@1.14.8-1
1.14.8-1+deb9u1
1
neilpeterson/process-tweet:latest39ce9f92e899
cairo@1.14.8-1
1.14.8-1+deb9u1
1
nodered/node-red-docker:0.19.6-v8070643219ea2
cairo@1.14.8-1
1.14.8-1+deb9u1
1
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
cairo@1.15.10-2ubuntu0.1
1.15.10-2ubuntu0.1+esm1
1
openkm/openkm-ce:6.3.113bc465a7461b
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1
1
openwhisk/alarmprovider:2.2.0b695a6ceb406
cairo@1.14.8-1
1.14.8-1+deb9u1
1
owncloud/server:10.15.051d9b74fc2a8
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1
1
pachyderm/grpc-proxy:0.4.92b27f41d4d02
cairo@1.14.8-1
1.14.8-1+deb9u1
1
project2team4/react:latest3ff031a08887
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1
1
raykrueger/riemann:0.2.14c8baf3de57bb
cairo@1.14.8-1
1.14.8-1+deb9u1
1
scrapinghub/splash:3.4.1a5f89bc84606
cairo@1.15.10-2ubuntu0.1
1.15.10-2ubuntu0.1+esm1
1
sismics/docs:v1.10f4b0ef019cf1
cairo@1.15.10-2ubuntu0.1
1.15.10-2ubuntu0.1+esm1
1
socialmediamacroscope/autophrase:0.1.570fb11d4f531
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1
1
stashapp/stash:latest24dbd7607174
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
cairo@1.14.6-1
1.14.6-1ubuntu0.1~esm1
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
cairo@1.14.6-1
1.14.6-1ubuntu0.1~esm1
1
vinanrra/7dtd-server:v0.4.4f9534490bd2b
cairo@1.15.10-2ubuntu0.1
1.15.10-2ubuntu0.1+esm1
1
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1
1
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
cairo@1.15.12-3.el8
0:1.15.12-6.el8
1
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1
1
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1
1
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1
1
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1
1
ghcr.io/leoquote/mergeable:latest451706815103
cairo@1.14.8-1
1.14.8-1+deb9u1
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
cairo@1.15.10-2ubuntu0.1
1.15.10-2ubuntu0.1+esm1
1
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
cairo@1.14.8-1
1.14.8-1+deb9u1
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
cairo@1.16.0-4ubuntu1
1.16.0-4ubuntu1+esm1
1
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
cairo@1.15.12-3.el8
0:1.15.12-6.el8
1
quay.io/ibmgaragecloud/nodejs:latest01c3b7acb301
cairo@1.14.8-1
1.14.8-1+deb9u1
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
cairo@1.14.6-1
1.14.6-1ubuntu0.1~esm1
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
cairo@1.15.12-3.el8
0:1.15.12-6.el8
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.