CVE-2020-35538

Medium

Advisory

Published 31 Aug 2022In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.003; 21st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 58; of 17,781 indexed, latest versions
Container images: 61; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 58 of 17,781 indexed charts deploy, on 61 images.

Affected package	Affected versions	Fixed in	Images
libjpeg-turbodeb	1.5.2-0ubuntu5.18.04.1, 1.5.2-0ubuntu5.18.04.3, 1.5.2-0ubuntu5.18.04.4, 2.0.3-0ubuntu1.20.04.1	1.5.2-0ubuntu5.18.04.6, 2.0.3-0ubuntu1.20.04.3	61

OSV records: UBUNTU-CVE-2020-35538
Also known as: USN-5631-1

Charts affected

58 by stars

Chart

Latest

Affected images

Radar Score

oaisimopencord

0.1.7

2 of 3 See more

oaisim opencord 0.1.7

2 of the 3 container images this version deploys carry CVE-2020-35538.

Container image	Digest	Package	Fixed in
omecproject/lte-softmodem :1.1.0	b5ddd36ec20c	libjpeg-turbo@1.5.2-0ubuntu5.18.04.4	1.5.2-0ubuntu5.18.04.6
omecproject/lte-uesoftmodem :1.1.0	686f8bc37d8c	libjpeg-turbo@1.5.2-0ubuntu5.18.04.4	1.5.2-0ubuntu5.18.04.6

Open the chart page →

14,536

seafilephybros-helm-charts

4.0.1

1 of 1 See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2020-35538.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :9.0.9	7ac833196f60	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	2.0.3-0ubuntu1.20.04.3

Open the chart page →

22,084

podnat-state-storepodnat-controller

0.3.2

1 of 1 See more

podnat-state-store podnat-controller 0.3.2

1 of the 1 container images this version deploys carry CVE-2020-35538.

Container image	Digest	Package	Fixed in
dgraziotin/nginx-webdav-nononsense :1.23.1	38f2de42bed0	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	2.0.3-0ubuntu1.20.04.3

Open the chart page →

9,167

javareact-java

0.1.0

1 of 1 See more

java react-java 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-35538.

Container image	Digest	Package	Fixed in
project2team4/react :latest	3ff031a08887	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	2.0.3-0ubuntu1.20.04.3

Open the chart page →

15,520

testing-multitoolsomeblackmagic

0.1.2

1 of 1 See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-35538.

Container image	Digest	Package	Fixed in
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	2.0.3-0ubuntu1.20.04.3

Open the chart page →

30,687

unifistartechnica

0.1.3

1 of 2 See more

unifi startechnica 0.1.3

1 of the 2 container images this version deploys carry CVE-2020-35538.

Container image	Digest	Package	Fixed in
jacobalberty/unifi :v7.1.66	4a3616625dda	libjpeg-turbo@1.5.2-0ubuntu5.18.04.4	1.5.2-0ubuntu5.18.04.6

Open the chart page →

14,493

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-35538.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	2.0.3-0ubuntu1.20.04.3

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2020-35538.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	2.0.3-0ubuntu1.20.04.3

Open the chart page →

28,605

Container images carrying it

61 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
selenium/hub :3.141.59	02f251d48d5f	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	2.0.3-0ubuntu1.20.04.3	3
hookiesolutions/webhookie :latest	0629694246ba	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	2.0.3-0ubuntu1.20.04.3	2
hyperledger/besu :22.4-openjdk-latest	a674d35eec9a	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	2.0.3-0ubuntu1.20.04.3	2
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	2.0.3-0ubuntu1.20.04.3	2
ghcr.io/games-on-whales/steam :1.0.0	9b6105be7ad0	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	2.0.3-0ubuntu1.20.04.3	2
airsonicadvanced/airsonic-advanced :latest	f7cbafac2806	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	2.0.3-0ubuntu1.20.04.3	1
apachepulsar/pulsar :2.10.0	3b262ab7a7d9	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	2.0.3-0ubuntu1.20.04.3	1
apachepulsar/pulsar :2.9.0	d056c89b7131	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	2.0.3-0ubuntu1.20.04.3	1
apachepulsar/pulsar :2.8.2	d538416d5afe	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	2.0.3-0ubuntu1.20.04.3	1
blakeblackshear/frigate :0.10.0-amd64	ae269270ad9e	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	2.0.3-0ubuntu1.20.04.3	1
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	2.0.3-0ubuntu1.20.04.3	1
daskdev/dask-notebook :1.1.0	052630f5ca04	libjpeg-turbo@1.5.2-0ubuntu5.18.04.1	1.5.2-0ubuntu5.18.04.6	1
dgraziotin/nginx-webdav-nononsense :1.23.1	38f2de42bed0	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	2.0.3-0ubuntu1.20.04.3	1
elastictranscoder/transcoder :627e21dc	b4a0327029e6	libjpeg-turbo@1.5.2-0ubuntu5.18.04.4	1.5.2-0ubuntu5.18.04.6	1
elastictranscoder/transcoder-handler :627e21dc	5b75d19e2733	libjpeg-turbo@1.5.2-0ubuntu5.18.04.4	1.5.2-0ubuntu5.18.04.6	1
geoscienceaustralia/dea-k8s-data :latest	f4039b45572a	libjpeg-turbo@1.5.2-0ubuntu5.18.04.4	1.5.2-0ubuntu5.18.04.6	1
haveagitgat/tdarr :2.00.18	1256348872ce	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	2.0.3-0ubuntu1.20.04.3	1
haveagitgat/tdarr_node :2.00.10	1e3f9328327d	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	2.0.3-0ubuntu1.20.04.3	1
huginn/huginn-single-process :4d17829cf6b15b004ad3f4be196303dca4944810	c794eddc7b47	libjpeg-turbo@1.5.2-0ubuntu5.18.04.4	1.5.2-0ubuntu5.18.04.6	1
intel/dlstreamer-pipeline-server :2022.1.1-ubuntu20	aa8f5483a2ef	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	2.0.3-0ubuntu1.20.04.3	1
intel/multimodal-data-visualization-streaming :3.0	1a89327e499b	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	2.0.3-0ubuntu1.20.04.3	1
jacobalberty/unifi :v7.1.66	4a3616625dda	libjpeg-turbo@1.5.2-0ubuntu5.18.04.4	1.5.2-0ubuntu5.18.04.6	1
jakowenko/double-take :1.6.0	b858bac9e32a	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	2.0.3-0ubuntu1.20.04.3	1
linuxserver/calibre :version-v5.21.0	a847b5b2d860	libjpeg-turbo@1.5.2-0ubuntu5.18.04.4	1.5.2-0ubuntu5.18.04.6	1
linuxserver/calibre-web :version-0.6.12	938810eca3d3	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	2.0.3-0ubuntu1.20.04.3	1
linuxserver/deluge :18.04.1	0ac871624394	libjpeg-turbo@1.5.2-0ubuntu5.18.04.4	1.5.2-0ubuntu5.18.04.6	1
linuxserver/deluge :version-2.0.3-2201906121747ubuntu18.04.1	2ce561a95e7b	libjpeg-turbo@1.5.2-0ubuntu5.18.04.4	1.5.2-0ubuntu5.18.04.6	1
linuxserver/lazylibrarian :version-1152df82	f93d2560e233	libjpeg-turbo@1.5.2-0ubuntu5.18.04.4	1.5.2-0ubuntu5.18.04.6	1
mediagis/nominatim :3.7	c15e941485ef	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	2.0.3-0ubuntu1.20.04.3	1
omecproject/cdn-antmedia :1.0.0	b4ae7d0d6b74	libjpeg-turbo@1.5.2-0ubuntu5.18.04.1	1.5.2-0ubuntu5.18.04.6	1
omecproject/lte-softmodem :1.1.0	b5ddd36ec20c	libjpeg-turbo@1.5.2-0ubuntu5.18.04.4	1.5.2-0ubuntu5.18.04.6	1
omecproject/lte-uesoftmodem :1.1.0	686f8bc37d8c	libjpeg-turbo@1.5.2-0ubuntu5.18.04.4	1.5.2-0ubuntu5.18.04.6	1
opendatacube/pipelines :wofs-1.22	5d810e8504b8	libjpeg-turbo@1.5.2-0ubuntu5.18.04.1	1.5.2-0ubuntu5.18.04.6	1
opendatacube/restcube :latest	91870111837c	libjpeg-turbo@1.5.2-0ubuntu5.18.04.1	1.5.2-0ubuntu5.18.04.6	1
opendatacube/wms :latest	1b90cdf68831	libjpeg-turbo@1.5.2-0ubuntu5.18.04.1	1.5.2-0ubuntu5.18.04.6	1
openelevation/open-elevation :latest	82fb21612e86	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	2.0.3-0ubuntu1.20.04.3	1
openkm/openkm-ce :6.3.11	3bc465a7461b	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	2.0.3-0ubuntu1.20.04.3	1
project2team4/react :latest	3ff031a08887	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	2.0.3-0ubuntu1.20.04.3	1
scrapinghub/splash :3.4.1	a5f89bc84606	libjpeg-turbo@1.5.2-0ubuntu5.18.04.3	1.5.2-0ubuntu5.18.04.6	1
seafileltd/seafile-mc :9.0.9	7ac833196f60	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	2.0.3-0ubuntu1.20.04.3	1
seafileltd/seafile-mc :8.0.7	ed0fcda5e6a9	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	2.0.3-0ubuntu1.20.04.3	1
sismics/docs :v1.10	f4b0ef019cf1	libjpeg-turbo@1.5.2-0ubuntu5.18.04.4	1.5.2-0ubuntu5.18.04.6	1
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	2.0.3-0ubuntu1.20.04.3	1
stashapp/stash :latest	24dbd7607174	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	2.0.3-0ubuntu1.20.04.3	1
wavefronthq/proxy :9.2	d1064d28f6eb	libjpeg-turbo@1.5.2-0ubuntu5.18.04.4	1.5.2-0ubuntu5.18.04.6	1
zabbix/zabbix-web-nginx-pgsql :ubuntu-5.4.6	01de79c31391	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	2.0.3-0ubuntu1.20.04.3	1
ghcr.io/haveagitgat/tdarr :2.00.18.2	3fbe4c29d14c	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	2.0.3-0ubuntu1.20.04.3	1
ghcr.io/jr0dd/puppeteer :v13.3.2	6047599cd78e	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	2.0.3-0ubuntu1.20.04.3	1
ghcr.io/k8s-at-home/bazarr :v1.0.3	fdb5501cdfb9	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	2.0.3-0ubuntu1.20.04.3	1
ghcr.io/k8s-at-home/lidarr :v1.0.0.2255	54ebc1f90963	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	2.0.3-0ubuntu1.20.04.3	1