StackRadar

CVE-2020-36327

High

Advisory

Published 24 May 2021In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.063
93rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
36
of 17,781 indexed, latest versions
Container images
44
deployed by those charts
Fix available
1 of 1
affected package

Dependency Confusion in Bundler

Carried by container images the latest versions of 36 of 17,781 indexed charts deploy, on 44 images.

Affected packageAffected versionsFixed inImages
bundlergem1.16.1, 1.16.2, 1.16.6, 1.17.2+4 more2.2.10, 2.2.1844
OSV records
GHSA-fp4w-jxhp-m23p

Charts affected

36 by stars
ChartLatestAffected imagesRadar Score
puppetserverpuppetserver9.5.22 of 5See more

puppetserver puppetserver 9.5.2

2 of the 5 container images this version deploys carry CVE-2020-36327.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
bundler@2.1.4
2.2.10
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
bundler@2.1.4
2.2.10

Open the chart page →

14,184
uffizzi-appuffizzi-app1.3.01 of 14See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2020-36327.

Container imageDigestPackageFixed in
uffizzi/app:latest66e9e3937c60
bundler@2.1.4
2.2.10

Open the chart page →

19,337
efkcryptexlabsVerified publisher7.17.31 of 3See more

efk cryptexlabs 7.17.3

1 of the 3 container images this version deploys carry CVE-2020-36327.

Container imageDigestPackageFixed in
fluent/fluentd-kubernetes-daemonset:v1.12.4-debian-elasticsearch7-1.0656423b5fabb
bundler@1.17.2
2.2.10

Open the chart page →

1,299
huginnutkuozdemirVerified publisher2.2.11 of 4See more

huginn utkuozdemir 2.2.1

1 of the 4 container images this version deploys carry CVE-2020-36327.

Container imageDigestPackageFixed in
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
bundler@1.17.3
2.2.10

Open the chart page →

18,137
pact-brokeralmorgvVerified publisher0.1.01 of 1See more

pact-broker almorgv 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-36327.

Container imageDigestPackageFixed in
pactfoundation/pact-broker:2.79.1.112861b0bd4d9
bundler@2.1.4
2.2.10

Open the chart page →

4,995
zammaddevplayer0Verified publisher4.0.51 of 4See more

zammad devplayer0 4.0.5

1 of the 4 container images this version deploys carry CVE-2020-36327.

Container imageDigestPackageFixed in
zammad/zammad-docker-compose:zammad-4.1.0-312808e2dfa810
bundler@1.17.2
2.2.10

Open the chart page →

6,110
gollumgeek-cookbookVerified publisher3.4.21 of 3See more

gollum geek-cookbook 3.4.2

1 of the 3 container images this version deploys carry CVE-2020-36327.

Container imageDigestPackageFixed in
gollumorg/gollum:latest7cd5305a3cf7
bundler@2.1.4
2.2.10

Open the chart page →

4,629
docker-registry-browsergmelilloVerified publisher0.1.21 of 1See more

docker-registry-browser gmelillo 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-36327.

Container imageDigestPackageFixed in
klausmeyer/docker-registry-browser:1.3.5430a440d95af
bundler@2.1.4
2.2.10

Open the chart page →

4,108
openprojecthomeenterpriseinc0.5.01 of 1See more

openproject homeenterpriseinc 0.5.0

1 of the 1 container images this version deploys carry CVE-2020-36327.

Container imageDigestPackageFixed in
openproject/community:12.0.2734743d11094
bundler@2.1.4
2.2.10

Open the chart page →

6,810
opennebulakvaps2.1.15 of 9See more

opennebula kvaps 2.1.1

5 of the 9 container images this version deploys carry CVE-2020-36327.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
bundler@2.1.2
2.2.10
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
bundler@2.1.2
2.2.10
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
bundler@2.1.2
2.2.10
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
bundler@2.1.2
2.2.10
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
bundler@2.1.2
2.2.10

Open the chart page →

113,791
bookinfobasictechno0.1.01 of 6See more

bookinfo basictechno 0.1.0

1 of the 6 container images this version deploys carry CVE-2020-36327.

Container imageDigestPackageFixed in
istio/examples-bookinfo-details-v1:1.17.02b081e3c86dd
bundler@2.1.4
2.2.10

Open the chart page →

20,671
istio-bookinfobookinfo1.2.21 of 6See more

istio-bookinfo bookinfo 1.2.2

1 of the 6 container images this version deploys carry CVE-2020-36327.

Container imageDigestPackageFixed in
istio/examples-bookinfo-details-v1:1.15.0fce0bcbff0be
bundler@1.17.2
2.2.10

Open the chart page →

18,980
honeywell-exporterbryanalves0.1.11 of 1See more

honeywell-exporter bryanalves 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-36327.

Container imageDigestPackageFixed in
bryanalves/honeywell_exporter:0.0.1195f73dce8b21
bundler@1.16.1
2.2.10

Open the chart page →

5,437
smart-exporterbryanalves0.2.21 of 1See more

smart-exporter bryanalves 0.2.2

1 of the 1 container images this version deploys carry CVE-2020-36327.

Container imageDigestPackageFixed in
bryanalves/smart_exporter:0.2af47dfbb9413
bundler@1.16.6
2.2.10

Open the chart page →

4,131
prometheus-puppetdb-sdcamptocamp38.0.21 of 2See more

prometheus-puppetdb-sd camptocamp3 8.0.2

1 of the 2 container images this version deploys carry CVE-2020-36327.

Container imageDigestPackageFixed in
puppet/puppet-agent:7.14.00b6fd9a6b7da
bundler@2.1.4
2.2.10

Open the chart page →

6,143
fluentd-cloudwatchcloudnativeapp0.9.01 of 2See more

fluentd-cloudwatch cloudnativeapp 0.9.0

1 of the 2 container images this version deploys carry CVE-2020-36327.

Container imageDigestPackageFixed in
fluent/fluentd-kubernetes-daemonset:v1.3.3-debian-cloudwatch-1.017398121d3cc
bundler@1.16.2
2.2.10

Open the chart page →

1,342
pact-brokercloud-native-toolkit0.3.01 of 1See more

pact-broker cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2020-36327.

Container imageDigestPackageFixed in
pactfoundation/pact-broker:2.101.0.0a3021fc42834
bundler@2.1.4
2.2.10

Open the chart page →

2,814
fluentd-kubernetes-awscloudposse0.2.11 of 2See more

fluentd-kubernetes-aws cloudposse 0.2.1

1 of the 2 container images this version deploys carry CVE-2020-36327.

Container imageDigestPackageFixed in
fluent/fluentd-kubernetes-daemonset:v1.4.2-debian-elasticsearch-1.1ce4885865850
bundler@1.17.2
2.2.10

Open the chart page →

1,305
icinga2g0dscookie0.2.01 of 1See more

icinga2 g0dscookie 0.2.0

1 of the 1 container images this version deploys carry CVE-2020-36327.

Container imageDigestPackageFixed in
ghcr.io/g0dscookie/icinga2:2.13.5da81246ccfc9
bundler@2.1.4
2.2.10

Open the chart page →

4,428
docker-registry-browsergtaylor0.4.41 of 1See more

docker-registry-browser gtaylor 0.4.4

1 of the 1 container images this version deploys carry CVE-2020-36327.

Container imageDigestPackageFixed in
klausmeyer/docker-registry-browser:1.4.0bdc4c6b8595b
bundler@2.2.15
2.2.18

Open the chart page →

3,564
gwangju_2-3gwangju2-30.1.01 of 5See more

gwangju_2-3 gwangju2-3 0.1.0

1 of the 5 container images this version deploys carry CVE-2020-36327.

Container imageDigestPackageFixed in
fluent/fluentd-kubernetes-daemonset:v1.10.3-debian-cloudwatch-1.019a8f0662241
bundler@2.1.4
2.2.10

Open the chart page →

6,491
fluentdhelm0.2.161 of 1See more

fluentd helm 0.2.16

1 of the 1 container images this version deploys carry CVE-2020-36327.

Container imageDigestPackageFixed in
fluent/fluentd-kubernetes-daemonset:v1.14.0-debian-elasticsearch7-1.03933cae61054
bundler@1.17.2
2.2.10

Open the chart page →

1,217
istio-bookinfoistio-bookinfo1.2.21 of 6See more

istio-bookinfo istio-bookinfo 1.2.2

1 of the 6 container images this version deploys carry CVE-2020-36327.

Container imageDigestPackageFixed in
istio/examples-bookinfo-details-v1:1.15.0fce0bcbff0be
bundler@1.17.2
2.2.10

Open the chart page →

18,980
gitlabkubesphereVerified publisher4.2.36 of 17See more

gitlab kubesphere 4.2.3

6 of the 17 container images this version deploys carry CVE-2020-36327.

Container imageDigestPackageFixed in
mirrorgitlabcontainers/gitaly:v13.2.283599461ef8b
bundler@1.16.6
2.2.10
mirrorgitlabcontainers/gitlab-shell:v13.3.09f3654f1eafc
bundler@1.17.3
2.2.10
mirrorgitlabcontainers/gitlab-sidekiq-ce:v13.2.294d1431683fa
bundler@1.16.6
2.2.10
mirrorgitlabcontainers/gitlab-task-runner-ce:v13.2.29efd73993c34
bundler@1.16.6
2.2.10
mirrorgitlabcontainers/gitlab-webservice-ce:v13.2.230393f990f5c
bundler@1.16.6
2.2.10
mirrorgitlabcontainers/gitlab-workhorse-ce:v13.2.2a6d7bf42805a
bundler@1.16.6
2.2.10

Open the chart page →

38,133
sample-bookinfokubesphere-testVerified publisher1.0.01 of 4See more

sample-bookinfo kubesphere-test 1.0.0

1 of the 4 container images this version deploys carry CVE-2020-36327.

Container imageDigestPackageFixed in
kubesphere/examples-bookinfo-details-v1:1.13.0108d022f64f0
bundler@1.17.2
2.2.10

Open the chart page →

9,378
lm-logslogicmonitorVerified publisher0.3.51 of 1See more

lm-logs logicmonitor 0.3.5

1 of the 1 container images this version deploys carry CVE-2020-36327.

Container imageDigestPackageFixed in
logicmonitor/lm-logs-k8s-fluentd:1.0.55ac21b3f1572
bundler@2.2.15
2.2.18

Open the chart page →

1,029
fluentd-papertrailmozilla0.2.21 of 1See more

fluentd-papertrail mozilla 0.2.2

1 of the 1 container images this version deploys carry CVE-2020-36327.

Container imageDigestPackageFixed in
fluent/fluentd-kubernetes-daemonset:papertrail9c209835eea1
bundler@1.16.2
2.2.10

Open the chart page →

1,001
betydbncsaVerified publisher0.6.11 of 4See more

betydb ncsa 0.6.1

1 of the 4 container images this version deploys carry CVE-2020-36327.

Container imageDigestPackageFixed in
pecan/bety:5.4.1f825d480cd62
bundler@1.17.2
2.2.10

Open the chart page →

9,542
pecanncsaVerified publisher0.6.21 of 15See more

pecan ncsa 0.6.2

1 of the 15 container images this version deploys carry CVE-2020-36327.

Container imageDigestPackageFixed in
pecan/bety:5.4.1f825d480cd62
bundler@1.17.2
2.2.10

Open the chart page →

14,154
pact-brokerqamatic0.1.01 of 2See more

pact-broker qamatic 0.1.0

1 of the 2 container images this version deploys carry CVE-2020-36327.

Container imageDigestPackageFixed in
pactfoundation/pact-broker:2.32.0-2062d6c710099
bundler@1.17.2
2.2.10

Open the chart page →

3,533
bookinforgnu1.0.01 of 7See more

bookinfo rgnu 1.0.0

1 of the 7 container images this version deploys carry CVE-2020-36327.

Container imageDigestPackageFixed in
istio/examples-bookinfo-details-v1:1.14.04c3379923c8a
bundler@1.17.2
2.2.10

Open the chart page →

20,462
istio-bookinforgnu1.0.21 of 7See more

istio-bookinfo rgnu 1.0.2

1 of the 7 container images this version deploys carry CVE-2020-36327.

Container imageDigestPackageFixed in
istio/examples-bookinfo-details-v1:1.14.04c3379923c8a
bundler@1.17.2
2.2.10

Open the chart page →

20,462
fluentdslamdev0.0.61 of 1See more

fluentd slamdev 0.0.6

1 of the 1 container images this version deploys carry CVE-2020-36327.

Container imageDigestPackageFixed in
fluent/fluentd-kubernetes-daemonset:v1.11.5-debian-forward-1.00717111a3362
bundler@2.1.4
2.2.10

Open the chart page →

1,384
velero-notificationsvelero-notifications1.1.01 of 1See more

velero-notifications velero-notifications 1.1.0

1 of the 1 container images this version deploys carry CVE-2020-36327.

Container imageDigestPackageFixed in
ghcr.io/simoncaron/velero-notifications:1.0.0d058963d4de7
bundler@2.1.4
2.2.10

Open the chart page →

1,285
kongwallarmVerified publisher4.6.32 of 7See more

kong wallarm 4.6.3

2 of the 7 container images this version deploys carry CVE-2020-36327.

Container imageDigestPackageFixed in
wallarm/ingress-ruby:4.6.0-1aecdb35c4def
bundler@2.1.4
2.2.10
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
bundler@2.1.2
2.2.10

Open the chart page →

11,405
kong-previewwallarmVerified publisher4.2.31 of 5See more

kong-preview wallarm 4.2.3

1 of the 5 container images this version deploys carry CVE-2020-36327.

Container imageDigestPackageFixed in
wallarm/ingress-ruby:4.2.1-195ea2632326c
bundler@2.1.4
2.2.10

Open the chart page →

2,905

Container images carrying it

44 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
istio/examples-bookinfo-details-v1:1.14.04c3379923c8a
bundler@1.17.2
2.2.10
2
istio/examples-bookinfo-details-v1:1.15.0fce0bcbff0be
bundler@1.17.2
2.2.10
2
pecan/bety:5.4.1f825d480cd62
bundler@1.17.2
2.2.10
2
bryanalves/honeywell_exporter:0.0.1195f73dce8b21
bundler@1.16.1
2.2.10
1
bryanalves/smart_exporter:0.2af47dfbb9413
bundler@1.16.6
2.2.10
1
fluent/fluentd-kubernetes-daemonset:v1.11.5-debian-forward-1.00717111a3362
bundler@2.1.4
2.2.10
1
fluent/fluentd-kubernetes-daemonset:v1.3.3-debian-cloudwatch-1.017398121d3cc
bundler@1.16.2
2.2.10
1
fluent/fluentd-kubernetes-daemonset:v1.10.3-debian-cloudwatch-1.019a8f0662241
bundler@2.1.4
2.2.10
1
fluent/fluentd-kubernetes-daemonset:v1.14.0-debian-elasticsearch7-1.03933cae61054
bundler@1.17.2
2.2.10
1
fluent/fluentd-kubernetes-daemonset:v1.12.4-debian-elasticsearch7-1.0656423b5fabb
bundler@1.17.2
2.2.10
1
fluent/fluentd-kubernetes-daemonset:papertrail9c209835eea1
bundler@1.16.2
2.2.10
1
fluent/fluentd-kubernetes-daemonset:v1.4.2-debian-elasticsearch-1.1ce4885865850
bundler@1.17.2
2.2.10
1
gollumorg/gollum:latest7cd5305a3cf7
bundler@2.1.4
2.2.10
1
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
bundler@1.17.3
2.2.10
1
istio/examples-bookinfo-details-v1:1.17.02b081e3c86dd
bundler@2.1.4
2.2.10
1
klausmeyer/docker-registry-browser:1.3.5430a440d95af
bundler@2.1.4
2.2.10
1
klausmeyer/docker-registry-browser:1.4.0bdc4c6b8595b
bundler@2.2.15
2.2.18
1
kubesphere/examples-bookinfo-details-v1:1.13.0108d022f64f0
bundler@1.17.2
2.2.10
1
logicmonitor/lm-logs-k8s-fluentd:1.0.55ac21b3f1572
bundler@2.2.15
2.2.18
1
mirrorgitlabcontainers/gitaly:v13.2.283599461ef8b
bundler@1.16.6
2.2.10
1
mirrorgitlabcontainers/gitlab-shell:v13.3.09f3654f1eafc
bundler@1.17.3
2.2.10
1
mirrorgitlabcontainers/gitlab-sidekiq-ce:v13.2.294d1431683fa
bundler@1.16.6
2.2.10
1
mirrorgitlabcontainers/gitlab-task-runner-ce:v13.2.29efd73993c34
bundler@1.16.6
2.2.10
1
mirrorgitlabcontainers/gitlab-webservice-ce:v13.2.230393f990f5c
bundler@1.16.6
2.2.10
1
mirrorgitlabcontainers/gitlab-workhorse-ce:v13.2.2a6d7bf42805a
bundler@1.16.6
2.2.10
1
openproject/community:12.0.2734743d11094
bundler@2.1.4
2.2.10
1
pactfoundation/pact-broker:2.32.0-2062d6c710099
bundler@1.17.2
2.2.10
1
pactfoundation/pact-broker:2.79.1.112861b0bd4d9
bundler@2.1.4
2.2.10
1
pactfoundation/pact-broker:2.101.0.0a3021fc42834
bundler@2.1.4
2.2.10
1
puppet/puppet-agent:7.14.00b6fd9a6b7da
bundler@2.1.4
2.2.10
1
uffizzi/app:latest66e9e3937c60
bundler@2.1.4
2.2.10
1
wallarm/ingress-ruby:4.2.1-195ea2632326c
bundler@2.1.4
2.2.10
1
wallarm/ingress-ruby:4.6.0-1aecdb35c4def
bundler@2.1.4
2.2.10
1
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
bundler@2.1.2
2.2.10
1
zammad/zammad-docker-compose:zammad-4.1.0-312808e2dfa810
bundler@1.17.2
2.2.10
1
ghcr.io/g0dscookie/icinga2:2.13.5da81246ccfc9
bundler@2.1.4
2.2.10
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
bundler@2.1.2
2.2.10
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
bundler@2.1.2
2.2.10
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
bundler@2.1.2
2.2.10
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
bundler@2.1.2
2.2.10
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
bundler@2.1.2
2.2.10
1
ghcr.io/simoncaron/velero-notifications:1.0.0d058963d4de7
bundler@2.1.4
2.2.10
1
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
bundler@2.1.4
2.2.10
1
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
bundler@2.1.4
2.2.10
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.