CVE-2020-5415

High

Advisory

Published 20 Dec 2021In the index since 29 Sept 2026

GitLab auth uses full name instead of username as user ID, allowing impersonation

Carried by container images the latest versions of 2 of 18,137 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
github.com/concourse/dexgolang	v1.14.0	6.3.1	2

2 by stars

Chart

Latest

Affected images

Radar Score

1 of the 2 container images this version deploys carry CVE-2020-5415.

Container image	Digest	Package	Fixed in
concourse/concourse :8.3.1	c9d48dfbf4f9	github.com/concourse/dex@v1.14.0	6.3.1

2,241

concoursequench-concourse

1 of the 3 container images this version deploys carry CVE-2020-5415.

Container image	Digest	Package	Fixed in
ghcr.io/quenchworks/images/concoursedigest-pinned	755461ea934b	github.com/concourse/dex@v1.14.0	6.3.1

348

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
concourse/concourse :8.3.1	c9d48dfbf4f9	github.com/concourse/dex@v1.14.0	6.3.1	1
ghcr.io/quenchworks/images/concourse	755461ea934b	github.com/concourse/dex@v1.14.0	6.3.1	1