StackRadar

CVE-2020-36843

Medium

Advisory

Published 13 Mar 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.3
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
40
of 17,781 indexed, latest versions
Container images
42
deployed by those charts
Fix available
None
affected package

Ed25519 Signature Malleability in ed25519-java Due to Missing Scalar Range Check

Carried by container images the latest versions of 40 of 17,781 indexed charts deploy, on 42 images.

Affected packageAffected versionsFixed inImages
eddsamaven0.2.0, 0.3.0no fix listed42
OSV records
GHSA-p53j-g8pw-4w5f

Charts affected

40 by stars
ChartLatestAffected imagesRadar Score
sonarqubesonarqubeVerified publisher10.0.0+5211 of 3See more

sonarqube sonarqube 10.0.0+521

1 of the 3 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
library/sonarqube:10.0.0-communityef9723cf4fe4
eddsa@0.3.0
no fix listed

Open the chart page →

6,556
metabasedeliveryheroVerified publisher0.14.41 of 1See more

metabase deliveryhero 0.14.4

1 of the 1 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
metabase/metabase:v0.45.21fb334ce4820
eddsa@0.3.0
no fix listed

Open the chart page →

2,572
unifiunifiVerified publisher1.16.01 of 1See more

unifi unifi 1.16.0

1 of the 1 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
eddsa@0.3.0
no fix listed

Open the chart page →

7,268
hertzbeathertzbeatOfficialVerified publisher1.8.12 of 4See more

hertzbeat hertzbeat 1.8.1

2 of the 4 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
apache/hertzbeat:1.8.075d48a62748f
eddsa@0.3.0
no fix listed
apache/hertzbeat-collector:1.8.0a2bab1be574c
eddsa@0.3.0
no fix listed

Open the chart page →

14,000
unifi-controllerqonstruktVerified publisher2.6.11 of 1See more

unifi-controller qonstrukt 2.6.1

1 of the 1 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:8.0.240ae315a3a456
eddsa@0.2.0
no fix listed

Open the chart page →

10,469
thingsboardcetic0.1.21 of 2See more

thingsboard cetic 0.1.2

1 of the 2 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
thingsboard/tb-postgres:latest2d17e4e36edc
eddsa@0.3.0
no fix listed

Open the chart page →

5,235
unifigeek-cookbookVerified publisher5.1.31 of 1See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.4.162b3edc809a3ff
eddsa@0.2.0
no fix listed

Open the chart page →

11,839
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.261 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

1 of the 6 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
thingsboard/tb-node:3.6.0f40a542832c4
eddsa@0.3.0
no fix listed

Open the chart page →

14,566
nifid4nVerified publisher2.0.01 of 5See more

nifi d4n 2.0.0

1 of the 5 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
apache/nifi-registry:1.26.07cdfd8deec92
eddsa@0.3.0
no fix listed

Open the chart page →

5,398
nifi-registrydysnixVerified publisher1.1.51 of 2See more

nifi-registry dysnix 1.1.5

1 of the 2 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
apache/nifi-registry:0.8.0974efa2f21da
eddsa@0.3.0
no fix listed

Open the chart page →

6,531
featurehubfeaturehub4.1.63 of 7See more

featurehub featurehub 4.1.6

3 of the 7 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
featurehub/dacha2:1.9.1c8d5551b5e40
eddsa@0.3.0
no fix listed
featurehub/edge:1.9.198ad426737f6
eddsa@0.3.0
no fix listed
featurehub/mr:1.9.1477d8bf771a9
eddsa@0.3.0
no fix listed

Open the chart page →

8,240
jenkinsjkimVerified publisher5.5.141 of 2See more

jenkins jkim 5.5.14

1 of the 2 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
jenkins/jenkins:2.462.2-jdk1795313257a8cd
eddsa@0.3.0
no fix listed

Open the chart page →

7,387
metabasemetabase-helmVerified publisher2.7.11 of 1See more

metabase metabase-helm 2.7.1

1 of the 1 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
metabase/metabase:v0.46.09ebdc664a6b2
eddsa@0.3.0
no fix listed

Open the chart page →

2,221
nifi-registryprofyu1.14.0-r0011 of 1See more

nifi-registry profyu 1.14.0-r001

1 of the 1 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
apache/nifi-registry:1.14.0090b7f87ec7f
eddsa@0.3.0
no fix listed

Open the chart page →

4,621
jenkinstestchart0.1.91 of 2See more

jenkins testchart 0.1.9

1 of the 2 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
eddsa@0.3.0
no fix listed

Open the chart page →

9,102
jenkinstest-jenkins9.1.01 of 2See more

jenkins test-jenkins 9.1.0

1 of the 2 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
eddsa@0.3.0
no fix listed

Open the chart page →

9,102
jenkinsbook-k8sinfra-v25.1.121 of 2See more

jenkins book-k8sinfra-v2 5.1.12

1 of the 2 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
jenkins/jenkins:2.440.3-jdk17de4fea113221
eddsa@0.3.0
no fix listed

Open the chart page →

8,323
metabasecasemark2.16.111 of 1See more

metabase casemark 2.16.11

1 of the 1 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
cmosborn/metabase-arm64:0.50.286ec0a8878ad2
eddsa@0.3.0
no fix listed

Open the chart page →

1,215
unificloudnativeapp0.4.21 of 1See more

unifi cloudnativeapp 0.4.2

1 of the 1 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
jacobalberty/unifi:5.10.19c409924e2463
eddsa@0.3.0
no fix listed

Open the chart page →

22,442
nifi-registryd4nVerified publisher1.0.01 of 2See more

nifi-registry d4n 1.0.0

1 of the 2 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
apache/nifi-registry:1.26.07cdfd8deec92
eddsa@0.3.0
no fix listed

Open the chart page →

5,398
unifiegebackVerified publisher2.1.61 of 1See more

unifi egeback 2.1.6

1 of the 1 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
eddsa@0.3.0
no fix listed

Open the chart page →

7,268
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.81 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
jingking/geonetwork-hnap:4.2.843e74ab234e1
eddsa@0.3.0
no fix listed

Open the chart page →

34,754
metabasehelm-charts-nr0.14.41 of 1See more

metabase helm-charts-nr 0.14.4

1 of the 1 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
metabase/metabase:v0.45.21fb334ce4820
eddsa@0.3.0
no fix listed

Open the chart page →

2,572
nifi-registryimprowisedVerified publisher1.0.01 of 2See more

nifi-registry improwised 1.0.0

1 of the 2 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
apache/nifi-registry:1.27.063b8e3e40742
eddsa@0.3.0
no fix listed

Open the chart page →

5,320
jenkinsjenkins-x0.10.381 of 2See more

jenkins jenkins-x 0.10.38

1 of the 2 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
jenkinsci/jenkins:2.67a1f33f004659
eddsa@0.2.0
no fix listed

Open the chart page →

10,682
unifik8sonlabVerified publisher0.3.71 of 1See more

unifi k8sonlab 0.3.7

1 of the 1 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
eddsa@0.3.0
no fix listed

Open the chart page →

7,268
metabase-k8smetabase-k8s1.0.01 of 1See more

metabase-k8s metabase-k8s 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
metabase/metabase:v0.53.4.17807bc5cad17
eddsa@0.3.0
no fix listed

Open the chart page →

2,589
unifimidokura-communityVerified publisher0.0.61 of 1See more

unifi midokura-community 0.0.6

1 of the 1 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:7.3.83ab105cc50322
eddsa@0.2.0
no fix listed

Open the chart page →

11,188
ma1sdnetsocVerified publisher0.2.11 of 1See more

ma1sd netsoc 0.2.1

1 of the 1 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
ma1uta/ma1sd:2.5.0ee2a56d8b8ca
eddsa@0.3.0
no fix listed

Open the chart page →

3,582
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
eddsa@0.3.0
no fix listed

Open the chart page →

5,826
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
eddsa@0.3.0
no fix listed

Open the chart page →

6,037
sentinelopennms-helm-chartsVerified publisher0.4.01 of 2See more

sentinel opennms-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
opennms/sentinel:36.0.288869082a14f
eddsa@0.3.0
no fix listed

Open the chart page →

2,024
sonarquberedhat-cop0.1.131 of 1See more

sonarqube redhat-cop 0.1.13

1 of the 1 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
library/sonarqube:10.7.0-community0842dcd4c8f8
eddsa@0.3.0
no fix listed

Open the chart page →

4,203
routr-connectroutr0.4.32 of 10See more

routr-connect routr 0.4.3

2 of the 10 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
fonoster/routr-edgeport:2.13.6d08a8a574a50
eddsa@0.3.0
no fix listed
fonoster/routr-requester:2.13.6e0c823506eb2
eddsa@0.3.0
no fix listed

Open the chart page →

11,021
sistas-chatbotsistas-chatbot5.0.21 of 6See more

sistas-chatbot sistas-chatbot 5.0.2

1 of the 6 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
jhipster/jhipster-registry:latest7184525acd4d
eddsa@0.3.0
no fix listed

Open the chart page →

5,856
unifistartechnicaVerified publisher0.1.31 of 2See more

unifi startechnica 0.1.3

1 of the 2 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.1.664a3616625dda
eddsa@0.2.0
no fix listed

Open the chart page →

14,493
netforge-besvtechVerified publisher0.0.21 of 3See more

netforge-be svtech 0.0.2

1 of the 3 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
conductoross/conductor:3.31.09fba127693e6
eddsa@0.3.0
no fix listed

Open the chart page →

4,674
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
eddsa@0.3.0
no fix listed

Open the chart page →

18,756
thingsboardthingsboardVerified publisher0.1.34 of 12See more

thingsboard thingsboard 0.1.3

4 of the 12 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
thingsboard/tb-coap-transport:3.4.1bd45a09d85d9
eddsa@0.3.0
no fix listed
thingsboard/tb-http-transport:3.4.1a06f53c5e2da
eddsa@0.3.0
no fix listed
thingsboard/tb-mqtt-transport:3.4.1030f316ce301
eddsa@0.3.0
no fix listed
thingsboard/tb-node:3.4.1645f43b688f7
eddsa@0.3.0
no fix listed

Open the chart page →

25,394
configservertwomartensVerified publisher0.2.01 of 1See more

configserver twomartens 0.2.0

1 of the 1 container images this version deploys carry CVE-2020-36843.

Container imageDigestPackageFixed in
2martens/configserver:latestbf1cdb80239d
eddsa@0.3.0
no fix listed

Open the chart page →

2,144

Container images carrying it

42 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
jacobalberty/unifi:v10.0.162896c0ab82d33
eddsa@0.3.0
no fix listed
3
apache/nifi-registry:1.26.07cdfd8deec92
eddsa@0.3.0
no fix listed
2
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
eddsa@0.3.0
no fix listed
2
metabase/metabase:v0.45.21fb334ce4820
eddsa@0.3.0
no fix listed
2
1dev/server:11.9.0cd5b12fe5471
eddsa@0.3.0
no fix listed
1
2martens/configserver:latestbf1cdb80239d
eddsa@0.3.0
no fix listed
1
apache/hertzbeat:1.8.075d48a62748f
eddsa@0.3.0
no fix listed
1
apache/hertzbeat-collector:1.8.0a2bab1be574c
eddsa@0.3.0
no fix listed
1
apache/nifi-registry:1.14.0090b7f87ec7f
eddsa@0.3.0
no fix listed
1
apache/nifi-registry:1.27.063b8e3e40742
eddsa@0.3.0
no fix listed
1
apache/nifi-registry:0.8.0974efa2f21da
eddsa@0.3.0
no fix listed
1
cmosborn/metabase-arm64:0.50.286ec0a8878ad2
eddsa@0.3.0
no fix listed
1
conductoross/conductor:3.31.09fba127693e6
eddsa@0.3.0
no fix listed
1
featurehub/dacha2:1.9.1c8d5551b5e40
eddsa@0.3.0
no fix listed
1
featurehub/edge:1.9.198ad426737f6
eddsa@0.3.0
no fix listed
1
featurehub/mr:1.9.1477d8bf771a9
eddsa@0.3.0
no fix listed
1
fonoster/routr-edgeport:2.13.6d08a8a574a50
eddsa@0.3.0
no fix listed
1
fonoster/routr-requester:2.13.6e0c823506eb2
eddsa@0.3.0
no fix listed
1
jacobalberty/unifi:v7.1.664a3616625dda
eddsa@0.2.0
no fix listed
1
jacobalberty/unifi:v7.4.162b3edc809a3ff
eddsa@0.2.0
no fix listed
1
jacobalberty/unifi:5.10.19c409924e2463
eddsa@0.3.0
no fix listed
1
jenkinsci/jenkins:2.67a1f33f004659
eddsa@0.2.0
no fix listed
1
jenkins/jenkins:2.462.2-jdk1795313257a8cd
eddsa@0.3.0
no fix listed
1
jenkins/jenkins:2.440.3-jdk17de4fea113221
eddsa@0.3.0
no fix listed
1
jhipster/jhipster-registry:latest7184525acd4d
eddsa@0.3.0
no fix listed
1
jingking/geonetwork-hnap:4.2.843e74ab234e1
eddsa@0.3.0
no fix listed
1
library/sonarqube:10.7.0-community0842dcd4c8f8
eddsa@0.3.0
no fix listed
1
library/sonarqube:10.0.0-communityef9723cf4fe4
eddsa@0.3.0
no fix listed
1
linuxserver/unifi-controller:8.0.240ae315a3a456
eddsa@0.2.0
no fix listed
1
linuxserver/unifi-controller:7.3.83ab105cc50322
eddsa@0.2.0
no fix listed
1
ma1uta/ma1sd:2.5.0ee2a56d8b8ca
eddsa@0.3.0
no fix listed
1
metabase/metabase:v0.53.4.17807bc5cad17
eddsa@0.3.0
no fix listed
1
metabase/metabase:v0.46.09ebdc664a6b2
eddsa@0.3.0
no fix listed
1
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
eddsa@0.3.0
no fix listed
1
opennms/sentinel:36.0.288869082a14f
eddsa@0.3.0
no fix listed
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
eddsa@0.3.0
no fix listed
1
thingsboard/tb-coap-transport:3.4.1bd45a09d85d9
eddsa@0.3.0
no fix listed
1
thingsboard/tb-http-transport:3.4.1a06f53c5e2da
eddsa@0.3.0
no fix listed
1
thingsboard/tb-mqtt-transport:3.4.1030f316ce301
eddsa@0.3.0
no fix listed
1
thingsboard/tb-node:3.4.1645f43b688f7
eddsa@0.3.0
no fix listed
1
thingsboard/tb-node:3.6.0f40a542832c4
eddsa@0.3.0
no fix listed
1
thingsboard/tb-postgres:latest2d17e4e36edc
eddsa@0.3.0
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.