StackRadarChart IndexLive demo

CVE-2020-7788

High

Advisory

Published 10 Dec 2020In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.3; base score, highest
EPSS: 0.037; 89th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 123; of 17,781 indexed, latest versions
Container images: 122; deployed by those charts
Fix available: 1 of 2; affected packages

ini before 1.3.6 vulnerable to Prototype Pollution via ini.parse

Carried by container images the latest versions of 123 of 17,781 indexed charts deploy, on 122 images.

Affected package	Affected versions	Fixed in	Images
ininpm	1.0.0, 1.3.4, 1.3.5	1.3.6	121
node-inideb	1.1.0-1, 1.3.4-1, 1.3.5-1, 3.0.1-2	no fix listed	6

OSV records: GHSA-qqgx-2p2h-9c37 UBUNTU-CVE-2020-7788
Also known as: SNYK-JS-INI-1048974

Charts affected

123 by stars

Chart

Latest

Affected images

Radar Score

1 of 23 See more

smile ncsa 1.1.0

1 of the 23 container images this version deploys carry CVE-2020-7788.

Container image	Digest	Package	Fixed in
socialmediamacroscope/smile_graphql :0.3.1	c5095e94bc65	ini@1.3.5	1.3.6

Open the chart page →

109,294

example-dev-toolsnoygal

2 of 3 See more

example-dev-tools noygal 0.2.8

2 of the 3 container images this version deploys carry CVE-2020-7788.

Container image	Digest	Package	Fixed in
linuxserver/cloud9 :latest	45c5fe102ff3	ini@1.3.4	1.3.6
linuxserver/codimd :latest	b801bbcf6386	ini@1.3.5	1.3.6

Open the chart page →

27,465

comacopencord

1 of 9 See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2020-7788.

Container image	Digest	Package	Fixed in
omecproject/onos-progran :1.0.0	5715e5648aa0	ini@1.3.4	1.3.6

Open the chart page →

88,546

onos-progranopencord

1 of 2 See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2020-7788.

Container image	Digest	Package	Fixed in
muluder/prograncontrollermcord :0.1.8	43b597a93da7	ini@1.3.4	1.3.6

Open the chart page →

38,865

openwhiskopenwhisk

2 of 10 See more

openwhisk openwhisk 1.0.0

2 of the 10 container images this version deploys carry CVE-2020-7788.

Container image	Digest	Package	Fixed in
openwhisk/alarmprovider :2.2.0	b695a6ceb406	ini@1.3.5	1.3.6
openwhisk/ow-utils :1.0.0	c80dba0de3aa	ini@1.3.4 node-ini@1.3.4-1	1.3.6 no fix listed

Open the chart page →

36,215

hive-selfservice-ui-nodeory

1 of 1 See more

hive-selfservice-ui-node ory 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-7788.

Container image	Digest	Package	Fixed in
oryd/hive-selfservice-ui-node :v0.0.4	26347ef0a2de	ini@1.3.5	1.3.6

Open the chart page →

1,986

myappp4-helm

2 of 6 See more

myapp p4-helm 0.1.0

2 of the 6 container images this version deploys carry CVE-2020-7788.

Container image	Digest	Package	Fixed in
fjvela/urjc-fjvela-external-service :1.0.1	a8ebe5ca13fc	ini@1.3.5	1.3.6
fjvela/urjc-fjvela-server :1.0.5	3c840aebce22	ini@1.3.5	1.3.6

Open the chart page →

19,720

practica-helmpractica-helm

1 of 7 See more

practica-helm practica-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2020-7788.

Container image	Digest	Package	Fixed in
slagattollas/weatherservice-practica :latest	68e7f56393fc	ini@1.3.5	1.3.6

Open the chart page →

28,484

stackrox-chartredhat-cop

1 of 1 See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2020-7788.

Container image	Digest	Package	Fixed in
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	ini@1.3.5	1.3.6

Open the chart page →

29,227

1 of 7 See more

bookinfo rgnu 1.0.0

1 of the 7 container images this version deploys carry CVE-2020-7788.

Container image	Digest	Package	Fixed in
istio/examples-bookinfo-ratings-v1 :1.14.0	eb0f1a725ca8	ini@1.3.5	1.3.6

Open the chart page →

20,462

istio-bookinforgnu

1 of 7 See more

istio-bookinfo rgnu 1.0.2

1 of the 7 container images this version deploys carry CVE-2020-7788.

Container image	Digest	Package	Fixed in
istio/examples-bookinfo-ratings-v1 :1.14.0	eb0f1a725ca8	ini@1.3.5	1.3.6

Open the chart page →

20,462

1 of 1 See more

5,215

unifi-protectschichtel

1 of 1 See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry CVE-2020-7788.

Container image	Digest	Package	Fixed in
markdegroot/unifi-protect-arm64 :latest	d8445f2a0de6	ini@1.3.5	1.3.6

Open the chart page →

5,582

wekanschmitzis

1 of 1 See more

wekan schmitzis 1.1.1

1 of the 1 container images this version deploys carry CVE-2020-7788.

Container image	Digest	Package	Fixed in
quay.io/wekan/wekan :v5.65	cb17600883a3	ini@1.3.4	1.3.6

Open the chart page →

3,638

parkingsikalabs

1 of 1 See more

parking sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-7788.

Container image	Digest	Package	Fixed in
ondrejsika/parking :latest	b1fd497416c8	ini@1.3.5	1.3.6

Open the chart page →

3,696

logsmo-helm-chart

1 of 6 See more

log smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2020-7788.

Container image	Digest	Package	Fixed in
taskrabbit/elasticsearch-dump :latest	c967fe68b9c7	ini@1.3.5	1.3.6

Open the chart page →

29,220

pombasmo-helm-chart

1 of 17 See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2020-7788.

Container image	Digest	Package	Fixed in
taskrabbit/elasticsearch-dump :latest	c967fe68b9c7	ini@1.3.5	1.3.6

Open the chart page →

29,220

pachydermstatcan

1 of 4 See more

pachyderm statcan 0.5.1

1 of the 4 container images this version deploys carry CVE-2020-7788.

Container image	Digest	Package	Fixed in
pachyderm/grpc-proxy :0.4.9	2b27f41d4d02	ini@1.3.5	1.3.6

Open the chart page →

4,967

grafanasvtech-public-helm-charts

1 of 2 See more

grafana svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2020-7788.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_grafana :v1.2.2	1d71314424aa	ini@1.3.5 node-ini@1.3.5-1	1.3.6 no fix listed

Open the chart page →

10,902

1 of 1 See more

dashkiosk t3n 2.0.0

1 of the 1 container images this version deploys carry CVE-2020-7788.

Container image	Digest	Package	Fixed in
quay.io/t3n/dashkiosk :v2.7.8	c973e166a5dc	ini@1.3.5	1.3.6

Open the chart page →

3,827

trudesktechpreta

1 of 3 See more

4,017

kubernetes-external-secretstrozz

1 of 1 See more

kubernetes-external-secrets trozz 6.3.0

1 of the 1 container images this version deploys carry CVE-2020-7788.

Container image	Digest	Package	Fixed in
ghcr.io/external-secrets/kubernetes-external-secrets :6.3.0	eab9bd0b6986	ini@1.3.5	1.3.6

Open the chart page →

2,838

helloworldyotron-helm-charts

1 of 1 See more

helloworld yotron-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-7788.

Container image	Digest	Package	Fixed in
a5hut0sh/helloworld :1.0	2ae77620e616	ini@1.3.5	1.3.6

Open the chart page →

1,309

Container images carrying it

122 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
tzahi12345/youtubedl-material :4.2	3720b856bd2f	ini@1.3.5	1.3.6	1
wekanteam/wekan :v4.22	68a51f0327df	ini@1.3.5	1.3.6	1
willwill/kube-slack :v4.1.1	d443017aae98	ini@1.3.5	1.3.6	1
wiremind/scrapoxy :latest	e7048929a676	ini@1.3.5	1.3.6	1
zooz/predator :1.6	f491d1f7a865	ini@1.3.5	1.3.6	1
ghcr.io/cosmo-workspace/dev-code-server :v0.0.3	16fda01ae58a	ini@1.0.0	1.3.6	1
ghcr.io/ctron/streamsheets-gateway :2.4.0	0635f17c9d2c	ini@1.3.5	1.3.6	1
ghcr.io/ctron/streamsheets-service-graphs :2.4.0	e34964e336c1	ini@1.3.5	1.3.6	1
ghcr.io/ctron/streamsheets-service-machines :2.4.0	0c5a3398d1e4	ini@1.3.5	1.3.6	1
ghcr.io/ctron/streamsheets-service-streams :2.4.0	8ba040e79ca0	ini@1.3.5	1.3.6	1
ghcr.io/external-secrets/kubernetes-external-secrets :6.3.0	eab9bd0b6986	ini@1.3.5	1.3.6	1
ghcr.io/flaresolverr/flaresolverr :v1.2.8	96f8c08c0c1b	ini@1.3.5	1.3.6	1
ghcr.io/leoquote/mergeable :latest	451706815103	ini@1.3.5	1.3.6	1
ghcr.io/mario-f/kubevis :v1.4.0	763daf9caf8e	ini@1.3.5	1.3.6	1
quay.io/helmpack/monocular-ui :v1.10.0	86b71e90319f	ini@1.3.4	1.3.6	1
quay.io/ibmgaragecloud/developer-dashboard :v1.4.4	7a4b9fedc724	ini@1.3.5	1.3.6	1
quay.io/ibmgaragecloud/nodejs :latest	01c3b7acb301	ini@1.3.5	1.3.6	1
quay.io/mongodb/farm-intro-frontend :0.1	99ccdfd543e1	ini@1.3.5	1.3.6	1
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	ini@1.3.5	1.3.6	1
quay.io/t3n/dashkiosk :v2.7.8	c973e166a5dc	ini@1.3.5	1.3.6	1
quay.io/wekan/wekan :v5.65	cb17600883a3	ini@1.3.4	1.3.6	1
registry.gitlab.com/infinitydon/registry/open5gs-webui :v2.2.2	fda21b0a0344	ini@1.3.5	1.3.6	1