StackRadar

CVE-2020-7919

High

Advisory

Published 23 Jun 2021In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.026
85th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
153
of 17,781 indexed, latest versions
Container images
130
deployed by those charts
Fix available
3 of 3
affected packages

Helm uses crypto package vulnerable to panic from malformed X.509 certificate

Carried by container images the latest versions of 153 of 17,781 indexed charts deploy, on 130 images.

Affected packageAffected versionsFixed inImages
golang.org/x/cryptogolangv0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+27 more0.0.0-20200124225646-8b5121be2f68107
helm.sh/helm/v3golangv3.0.2, v3.0.33.1.03
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+2 more1.12.1654
OSV records
GHSA-cjjc-xp8v-855wGO-2022-0229
Also known as
BIT-golang-2020-7919

Charts affected

153 by stars
ChartLatestAffected imagesRadar Score
prometheusleechistest11.6.01 of 6See more

prometheus leechistest 11.6.0

1 of the 6 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
prom/alertmanager:v0.20.07e4e9f7a0954
golang.org/x/crypto@v0.0.0-20190617133340-57b3e21c3d56
stdlib@go1.13.5
0.0.0-20200124225646-8b5121be2f68
1.12.16

Open the chart page →

8,484
devspace-cloudloftVerified publisher0.3.31 of 8See more

devspace-cloud loft 0.3.3

1 of the 8 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
devspacecloud/manager:0.3.349c397413f7b
golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586
0.0.0-20200124225646-8b5121be2f68

Open the chart page →

9,880
squash-apilsst-sqre0.1.61 of 3See more

squash-api lsst-sqre 0.1.6

1 of the 3 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
gcr.io/cloudsql-docker/gce-proxy:1.17a85176b8e7cc
stdlib@go1.13.5
1.12.16

Open the chart page →

6,611
flaggermesosphere0.21.02 of 2See more

flagger mesosphere 0.21.0

2 of the 2 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
weaveworks/flagger:0.19.0a9c2e9df4227
golang.org/x/crypto@v0.0.0-20181025213731-e84da0312774
stdlib@go1.13.1
0.0.0-20200124225646-8b5121be2f68
1.12.16
weaveworks/flagger-loadtester:0.9.03cdac6928a63
stdlib@go1.13.1
1.12.16

Open the chart page →

6,048
karmamesosphere1.3.01 of 1See more

karma mesosphere 1.3.0

1 of the 1 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
lmierzwa/karma:v0.503751e5eed656
stdlib@go1.13.4
1.12.16

Open the chart page →

2,111
kudomesosphere0.1.41 of 1See more

kudo mesosphere 0.1.4

1 of the 1 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
kudobuilder/controller:v0.9.069072d979708
golang.org/x/crypto@v0.0.0-20190923035154-9ee001bba392
stdlib@go1.13
0.0.0-20200124225646-8b5121be2f68
1.12.16

Open the chart page →

5,682
nfs-server-provisionermesosphere0.6.11 of 1See more

nfs-server-provisioner mesosphere 0.6.1

1 of the 1 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4
stdlib@go1.13.4
0.0.0-20200124225646-8b5121be2f68
1.12.16

Open the chart page →

2,806
azuredisk-csi-drivermesosphere-stable0.8.12 of 6See more

azuredisk-csi-driver mesosphere-stable 0.8.1

2 of the 6 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
mcr.microsoft.com/oss/kubernetes-csi/csi-attacher:v2.2.0f55f30876129
golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586
0.0.0-20200124225646-8b5121be2f68
mcr.microsoft.com/oss/kubernetes-csi/csi-provisioner:v1.6.1667b1b1ea1e4
golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550
0.0.0-20200124225646-8b5121be2f68

Open the chart page →

14,065
gcpdisk-csi-drivermesosphere-stable0.7.31 of 7See more

gcpdisk-csi-driver mesosphere-stable 0.7.3

1 of the 7 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
stdlib@go1.13.3
1.12.16

Open the chart page →

3,603
kommandermesosphere-stable0.39.24 of 29See more

kommander mesosphere-stable 0.39.2

4 of the 29 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
grafana/grafana:6.6.0052147d7e0ec
golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550
stdlib@go1.13.4
0.0.0-20200124225646-8b5121be2f68
1.12.16
mesosphere/kubeaddons-addon-initializer:v0.2.8c10011f866f2
golang.org/x/crypto@v0.0.0-20191122220453-ac88ee75c92c
0.0.0-20200124225646-8b5121be2f68
gcr.io/kubecost1/server:prod-1.81.0a348db3e4d74
golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2
0.0.0-20200124225646-8b5121be2f68
quay.io/prometheus/alertmanager:v0.21.024a5204b418e
golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550
0.0.0-20200124225646-8b5121be2f68

Open the chart page →

68,284
opsportalmesosphere-stable0.9.51 of 3See more

opsportal mesosphere-stable 0.9.5

1 of the 3 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
mesosphere/kubeaddons-addon-initializer:v0.2.09f863160127b
golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4
0.0.0-20200124225646-8b5121be2f68

Open the chart page →

7,027
pulsarv2milvus-helm2.7.82 of 4See more

pulsarv2 milvus-helm 2.7.8

2 of the 4 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
prom/prometheus:v2.17.242d2395cd719
golang.org/x/crypto@v0.0.0-20191206172530-e9b2fee46413
0.0.0-20200124225646-8b5121be2f68
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.10ebcf7f033b54
golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550
stdlib@go1.13.4
0.0.0-20200124225646-8b5121be2f68
1.12.16

Open the chart page →

15,855
authmyaVerified publisher22.4.31 of 1See more

auth mya 22.4.3

1 of the 1 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
cesanta/docker_auth:1.6.04d16885f3d4c
golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586
0.0.0-20200124225646-8b5121be2f68

Open the chart page →

2,374
traefik-forward-auth-openidnas-helm-chartsVerified publisher1.0.11 of 1See more

traefik-forward-auth-openid nas-helm-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
thomseddon/traefik-forward-auth:latestb364aa6a4117
golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4
0.0.0-20200124225646-8b5121be2f68

Open the chart page →

2,197
incorencsaVerified publisher1.38.01 of 29See more

incore ncsa 1.38.0

1 of the 29 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:4.4.5e3c9d6b4bc92
golang.org/x/crypto@v0.0.0-20190530122614-20be4c3c3ed5
0.0.0-20200124225646-8b5121be2f68

Open the chart page →

15,369
nfs-server-provisionernovum-rgi-charts1.1.21 of 1See more

nfs-server-provisioner novum-rgi-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4
stdlib@go1.13.4
0.0.0-20200124225646-8b5121be2f68
1.12.16

Open the chart page →

2,806
hive-metastoreolehrgfVerified publisher0.1.01 of 1See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
golang.org/x/crypto@v0.0.0-20191112222119-e1110fd1c708
stdlib@go1.13.4
0.0.0-20200124225646-8b5121be2f68
1.12.16

Open the chart page →

8,540
exposecontrollerolli-aiVerified publisher1.0.51 of 1See more

exposecontroller olli-ai 1.0.5

1 of the 1 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
olliai/exposecontroller:1.0.5a470d96525e4
golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586
0.0.0-20200124225646-8b5121be2f68

Open the chart page →

2,861
k8s-replicatorolli-aiVerified publisher1.3.01 of 1See more

k8s-replicator olli-ai 1.3.0

1 of the 1 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
olliai/k8s-replicator:1.3.05716f2a8bd4c
golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586
0.0.0-20200124225646-8b5121be2f68

Open the chart page →

2,825
nem-monitoringopencord1.3.221 of 9See more

nem-monitoring opencord 1.3.22

1 of the 9 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4
stdlib@go1.13.1
0.0.0-20200124225646-8b5121be2f68
1.12.16

Open the chart page →

4,612
gitlab-runner-operatorpnnl-miscscripts0.1.61 of 1See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
golang.org/x/crypto@v0.0.0-20191028145041-f83a4685e152
helm.sh/helm/v3@v3.0.2
0.0.0-20200124225646-8b5121be2f68
3.1.0

Open the chart page →

11,151
liftbridgepozetron0.1.11 of 1See more

liftbridge pozetron 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
pozetroninc/liftbridge:v1.1.079fd6b9d93e6
stdlib@go1.13.3
1.12.16

Open the chart page →

3,167
hive-metastorepresto-loadbalancer0.2.31 of 1See more

hive-metastore presto-loadbalancer 0.2.3

1 of the 1 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
datappeal/hive-metastore:lateste38c085a3567
golang.org/x/crypto@v0.0.0-20191112222119-e1110fd1c708
stdlib@go1.13.4
0.0.0-20200124225646-8b5121be2f68
1.12.16

Open the chart page →

9,606
oauth2-proxypresto-loadbalancer4.3.181 of 2See more

oauth2-proxy presto-loadbalancer 4.3.18

1 of the 2 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v6.1.1791aef35b8d1
golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2
0.0.0-20200124225646-8b5121be2f68

Open the chart page →

3,958
alertmanagerprometheus-worawutchan0.3.01 of 1See more

alertmanager prometheus-worawutchan 0.3.0

1 of the 1 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.21.024a5204b418e
golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550
0.0.0-20200124225646-8b5121be2f68

Open the chart page →

2,305
prometheus-blackbox-exporterprometheus-worawutchan4.10.11 of 1See more

prometheus-blackbox-exporter prometheus-worawutchan 4.10.1

1 of the 1 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
prom/blackbox-exporter:v0.18.01ffc3f109eb3
golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550
0.0.0-20200124225646-8b5121be2f68

Open the chart page →

2,250
cf-operatorquarks2.3.0+0.g27a91cdf2 of 2See more

cf-operator quarks 2.3.0+0.g27a91cdf

2 of the 2 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
cfcontainerization/cf-operator:v2.3.0-0.g27a91cdf82fa261c18a8
golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586
stdlib@go1.13.3
0.0.0-20200124225646-8b5121be2f68
1.12.16
cfcontainerization/quarks-job:v0.0.0-0.g70ae34b58fb1c173a46
golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586
stdlib@go1.13.4
0.0.0-20200124225646-8b5121be2f68
1.12.16

Open the chart page →

11,942
reportportalreportportal5.7.22 of 8See more

reportportal reportportal 5.7.2

2 of the 8 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
reportportal/migrations:5.7.0da5d8e1395fe
golang.org/x/crypto@v0.0.0-20190426145343-a29dc8fdc734
stdlib@go1.13.6
0.0.0-20200124225646-8b5121be2f68
1.12.16
reportportal/service-index:5.0.112b27a2d7a87d
golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2
0.0.0-20200124225646-8b5121be2f68

Open the chart page →

25,737
rke2-canal-1.19-1.20rke2-charts3.13.3-build20211022021 of 2See more

rke2-canal-1.19-1.20 rke2-charts 3.13.3-build2021102202

1 of the 2 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
rancher/hardened-calico:v3.13.3-build20210223c678c25d47c8
golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8
0.0.0-20200124225646-8b5121be2f68

Open the chart page →

5,942
argocdromholdings1.8.12 of 3See more

argocd romholdings 1.8.1

2 of the 3 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550
0.0.0-20200124225646-8b5121be2f68
quay.io/dexidp/dex:v2.25.07bcf286807b8
golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4
0.0.0-20200124225646-8b5121be2f68

Open the chart page →

10,466
seldon-core-analyticsseldon1.17.12 of 8See more

seldon-core-analytics seldon 1.17.1

2 of the 8 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
prom/alertmanager:v0.20.07e4e9f7a0954
golang.org/x/crypto@v0.0.0-20190617133340-57b3e21c3d56
stdlib@go1.13.5
0.0.0-20200124225646-8b5121be2f68
1.12.16
prom/pushgateway:v1.0.1a5df60347882
stdlib@go1.13.5
1.12.16

Open the chart page →

10,733
weblateslamdev0.0.111 of 2See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
weblate/weblate:3.11.3-182848df56ecd
golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2
stdlib@go1.13.5
0.0.0-20200124225646-8b5121be2f68
1.12.16

Open the chart page →

8,694
spinnakerspinnakerVerified publisher2.2.131 of 4See more

spinnaker spinnaker 2.2.13

1 of the 4 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2020-01-03T19-12-21Zf00aa6ef2b72
golang.org/x/crypto@v0.0.0-20191117063200-497ca9f6d64f
stdlib@go1.13.5
0.0.0-20200124225646-8b5121be2f68
1.12.16

Open the chart page →

6,836
ecr-cleanersstarcher0.1.1+d13a1ab1 of 1See more

ecr-cleaner sstarcher 0.1.1+d13a1ab

1 of the 1 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
sstarcher/ecr-cleaner:0.1.12d43c390cb19
golang.org/x/crypto@v0.0.0-20190426145343-a29dc8fdc734
0.0.0-20200124225646-8b5121be2f68

Open the chart page →

2,575
kube-ebs-taggersstarcher0.1.0+7abf4f71 of 1See more

kube-ebs-tagger sstarcher 0.1.0+7abf4f7

1 of the 1 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
sstarcher/kube-ebs-tagger:0.1.01f8cae8cfa80
golang.org/x/crypto@v0.0.0-20191028145041-f83a4685e152
0.0.0-20200124225646-8b5121be2f68

Open the chart page →

3,096
proxyinjectorstakaterVerified publisher0.0.231 of 1See more

proxyinjector stakater 0.0.23

1 of the 1 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
stakater/proxyinjector:v0.0.2383fef483d497
golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8
stdlib@go1.13.1
0.0.0-20200124225646-8b5121be2f68
1.12.16

Open the chart page →

2,853
whitelisterstakaterVerified publisher0.0.161 of 1See more

whitelister stakater 0.0.16

1 of the 1 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
stakater/whitelister:v0.0.1639107924063e
stdlib@go1.13.1
1.12.16

Open the chart page →

2,564
cost-analyzerstatcan1.82.21 of 9See more

cost-analyzer statcan 1.82.2

1 of the 9 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
gcr.io/kubecost1/server:prod-1.82.22b1a3d08caac
golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2
0.0.0-20200124225646-8b5121be2f68

Open the chart page →

16,506
prometheus-operatorstatcan0.2.22 of 7See more

prometheus-operator statcan 0.2.2

2 of the 7 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
jettech/kube-webhook-certgen:v1.2.1c42098c8d855
golang.org/x/crypto@v0.0.0-20181203042331-505ab145d0a9
0.0.0-20200124225646-8b5121be2f68
squareup/ghostunnel:v1.5.270f4cf270425
golang.org/x/crypto@v0.0.0-20191002192127-34f69633bfdc
stdlib@go1.13.4
0.0.0-20200124225646-8b5121be2f68
1.12.16

Open the chart page →

12,237
vaultstatcan0.1.81 of 2See more

vault statcan 0.1.8

1 of the 2 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
hashicorp/vault-k8s:0.6.05697b85bc69a
golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4
stdlib@go1.13.5
0.0.0-20200124225646-8b5121be2f68
1.12.16

Open the chart page →

4,222
lokit3n1.0.01 of 1See more

loki t3n 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
grafana/loki:1.5.0922b3f412fdd
golang.org/x/crypto@v0.0.0-20191112222119-e1110fd1c708
0.0.0-20200124225646-8b5121be2f68

Open the chart page →

2,869
promtailt3n1.0.01 of 1See more

promtail t3n 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
grafana/promtail:1.5.046e88d390cd6
golang.org/x/crypto@v0.0.0-20191112222119-e1110fd1c708
0.0.0-20200124225646-8b5121be2f68

Open the chart page →

2,821
temporaltemporal0.28.91 of 13See more

temporal temporal 0.28.9

1 of the 13 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550
stdlib@go1.13.4
0.0.0-20200124225646-8b5121be2f68
1.12.16

Open the chart page →

21,005
prometheustnh11.6.01 of 6See more

prometheus tnh 11.6.0

1 of the 6 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
prom/alertmanager:v0.20.07e4e9f7a0954
golang.org/x/crypto@v0.0.0-20190617133340-57b3e21c3d56
stdlib@go1.13.5
0.0.0-20200124225646-8b5121be2f68
1.12.16

Open the chart page →

8,484
monitorortrozz0.0.11 of 1See more

monitoror trozz 0.0.1

1 of the 1 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
monitoror/monitoror:44b88edcf51ff
golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4
0.0.0-20200124225646-8b5121be2f68

Open the chart page →

3,109
transmission-exporterutkuozdemirVerified publisher1.1.01 of 1See more

transmission-exporter utkuozdemir 1.1.0

1 of the 1 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
metalmatze/transmission-exporter:0.3.090d6acb6d47d
stdlib@go1.13
1.12.16

Open the chart page →

1,646
volantmqvolantmq0.1.21 of 1See more

volantmq volantmq 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
volantmq/volantmq:v0.4.0-rc.69bfe7857ebc3
golang.org/x/crypto@v0.0.0-20190927123631-a832865fa7ad
stdlib@go1.13.6
0.0.0-20200124225646-8b5121be2f68
1.12.16

Open the chart page →

2,550
athens-proxywenerme0.5.21 of 2See more

athens-proxy wenerme 0.5.2

1 of the 2 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
gomods/athens:v0.11.0efb811df7844
golang.org/x/crypto@v0.0.0-20191206172530-e9b2fee46413
0.0.0-20200124225646-8b5121be2f68

Open the chart page →

4,984
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
ubercadence/server:0.23.22ac5491d13bb
stdlib@go1.13.6
1.12.16

Open the chart page →

10,127
frpcwenerme1.0.11 of 1See more

frpc wenerme 1.0.1

1 of the 1 container images this version deploys carry CVE-2020-7919.

Container imageDigestPackageFixed in
wener/frpc:v0.37.0cc9fd4da44c0
golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2
0.0.0-20200124225646-8b5121be2f68

Open the chart page →

3,359

Container images carrying it

130 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/prometheus/alertmanager:v0.21.024a5204b418e
golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550
0.0.0-20200124225646-8b5121be2f68
6
prom/alertmanager:v0.20.07e4e9f7a0954
golang.org/x/crypto@v0.0.0-20190617133340-57b3e21c3d56
stdlib@go1.13.5
0.0.0-20200124225646-8b5121be2f68
1.12.16
5
prom/prometheus:v2.13.10a8caa2e9f19
golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4
stdlib@go1.13.1
0.0.0-20200124225646-8b5121be2f68
1.12.16
5
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
stdlib@go1.13.3
1.12.16
5
grafana/grafana:6.7.11ff3999e0fc0
golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550
stdlib@go1.13.4
0.0.0-20200124225646-8b5121be2f68
1.12.16
4
argoproj/argocd:v1.8.1830e86cacefd
golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550
0.0.0-20200124225646-8b5121be2f68
3
mintel/dex-k8s-authenticator:1.4.0caf71cee7b9a
golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2
0.0.0-20200124225646-8b5121be2f68
3
stakater/proxyinjector:v0.0.2383fef483d497
golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8
stdlib@go1.13.1
0.0.0-20200124225646-8b5121be2f68
1.12.16
3
quay.io/dexidp/dex:v2.25.07bcf286807b8
golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4
0.0.0-20200124225646-8b5121be2f68
3
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4
stdlib@go1.13.4
0.0.0-20200124225646-8b5121be2f68
1.12.16
3
registry.k8s.io/sig-storage/nfs-provisioner:v4.0.8c825f3d5e28b
golang.org/x/crypto@v0.0.0-20190923035154-9ee001bba392
0.0.0-20200124225646-8b5121be2f68
3
cesanta/docker_auth:1.6.04d16885f3d4c
golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586
0.0.0-20200124225646-8b5121be2f68
2
csiplugin/csi-qingcloud:v1.4.00766163dc046
golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8
0.0.0-20200124225646-8b5121be2f68
2
grafana/loki:1.5.0922b3f412fdd
golang.org/x/crypto@v0.0.0-20191112222119-e1110fd1c708
0.0.0-20200124225646-8b5121be2f68
2
grafana/promtail:1.5.046e88d390cd6
golang.org/x/crypto@v0.0.0-20191112222119-e1110fd1c708
0.0.0-20200124225646-8b5121be2f68
2
iomesh/hostpath-provisioner:v0.5.1f4878c8ae53a
stdlib@go1.13.1
1.12.16
2
jettech/kube-webhook-certgen:v1.2.1c42098c8d855
golang.org/x/crypto@v0.0.0-20181203042331-505ab145d0a9
0.0.0-20200124225646-8b5121be2f68
2
osixia/openldap:1.4.0ccd95cc6e61e
golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4
stdlib@go1.13.4
0.0.0-20200124225646-8b5121be2f68
1.12.16
2
prom/blackbox-exporter:v0.18.01ffc3f109eb3
golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550
0.0.0-20200124225646-8b5121be2f68
2
prom/prometheus:v2.17.242d2395cd719
golang.org/x/crypto@v0.0.0-20191206172530-e9b2fee46413
0.0.0-20200124225646-8b5121be2f68
2
prom/pushgateway:v1.0.1a5df60347882
stdlib@go1.13.5
1.12.16
2
squareup/ghostunnel:v1.5.270f4cf270425
golang.org/x/crypto@v0.0.0-20191002192127-34f69633bfdc
stdlib@go1.13.4
0.0.0-20200124225646-8b5121be2f68
1.12.16
2
thomasnyambati/labelsmanager-controller:1.0.0148ae3f99fea
golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586
0.0.0-20200124225646-8b5121be2f68
2
weblate/weblate:4.2.2-169c160d37a3c
golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2
stdlib@go1.13.5
0.0.0-20200124225646-8b5121be2f68
1.12.16
2
gcr.io/k8s-staging-sig-storage/nfs-provisioner:v3.0.02de1d15fc1f2
golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4
0.0.0-20200124225646-8b5121be2f68
2
quay.io/dexidp/dex:v2.24.0c9b7f6d0d953
golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4
0.0.0-20200124225646-8b5121be2f68
2
alpine/k8s:1.18.16a41efe02a041
stdlib@go1.13.4
1.12.16
1
amazon/aws-efs-csi-driver:v0.3.0b55277652ea8
stdlib@go1.13.4
1.12.16
1
ansgroup/cert-manager-webhook-safedns:v1.0.1cd6b0ef2b309
golang.org/x/crypto@v0.0.0-20191202143827-86a70503ff7e
0.0.0-20200124225646-8b5121be2f68
1
apache/skywalking-oap-server:8.1.0-es7641237e0299b
golang.org/x/crypto@v0.0.0-20191122220453-ac88ee75c92c
stdlib@go1.13.3
0.0.0-20200124225646-8b5121be2f68
1.12.16
1
apache/skywalking-ui:8.1.067d50e4deff4
golang.org/x/crypto@v0.0.0-20191122220453-ac88ee75c92c
stdlib@go1.13.3
0.0.0-20200124225646-8b5121be2f68
1.12.16
1
assistiot/smart-orchestrator_helm:latest9bb46ea14e8e
stdlib@go1.13
1.12.16
1
bitnamilegacy/mongodb:4.4.5e3c9d6b4bc92
golang.org/x/crypto@v0.0.0-20190530122614-20be4c3c3ed5
0.0.0-20200124225646-8b5121be2f68
1
cfcontainerization/cf-operator:v2.3.0-0.g27a91cdf82fa261c18a8
golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586
stdlib@go1.13.3
0.0.0-20200124225646-8b5121be2f68
1.12.16
1
cfcontainerization/quarks-job:v0.0.0-0.g70ae34b58fb1c173a46
golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586
stdlib@go1.13.4
0.0.0-20200124225646-8b5121be2f68
1.12.16
1
chandanteekinavar/findery-market-payment-service:1.0c96f759b6ce4
stdlib@go1.13
1.12.16
1
cloudposse/bastion:latest0d9507e8a760
stdlib@go1.13.3
1.12.16
1
codercom/code-server:3.10.247605610ad8d
golang.org/x/crypto@v0.0.0-20191206172530-e9b2fee46413
0.0.0-20200124225646-8b5121be2f68
1
crowdfox/external-service-operator:v1.1.06fa7e8063d27
golang.org/x/crypto@v0.0.0-20190605123033-f99c8df09eb5
0.0.0-20200124225646-8b5121be2f68
1
dasmeta/mongodb-bi-connector:1.0.3fa657960dfec
golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2
0.0.0-20200124225646-8b5121be2f68
1
datappeal/hive-metastore:lateste38c085a3567
golang.org/x/crypto@v0.0.0-20191112222119-e1110fd1c708
stdlib@go1.13.4
0.0.0-20200124225646-8b5121be2f68
1.12.16
1
datawire/ambassador-operator:v1.3.0f95ae710d75c
golang.org/x/crypto@v0.0.0-20191028145041-f83a4685e152
helm.sh/helm/v3@v3.0.3
0.0.0-20200124225646-8b5121be2f68
3.1.0
1
devspacecloud/manager:0.3.349c397413f7b
golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586
0.0.0-20200124225646-8b5121be2f68
1
drone/drone-runner-docker:1.8.1137e79c5e23c
golang.org/x/crypto@v0.0.0-20190621222207-cc06ce4a13d4
0.0.0-20200124225646-8b5121be2f68
1
drone/kubernetes-secrets:latest206df2280ecf
golang.org/x/crypto@v0.0.0-20180808211826-de0752318171
0.0.0-20200124225646-8b5121be2f68
1
engrmth/bnkr:2.1.06d8464e6f0e8
golang.org/x/crypto@v0.0.0-20190530122614-20be4c3c3ed5
0.0.0-20200124225646-8b5121be2f68
1
envoyproxy/ratelimit:v1.4.071081616da3e
golang.org/x/crypto@v0.0.0-20191219195013-becbf705a915
0.0.0-20200124225646-8b5121be2f68
1
gitlab/gitlab-runner:alpine-v13.2.1fd7e5dfb9f30
golang.org/x/crypto@v0.0.0-20190426145343-a29dc8fdc734
0.0.0-20200124225646-8b5121be2f68
1
gomods/athens:v0.8.1d714c7ff0231
golang.org/x/crypto@v0.0.0-20190513172903-22d7a77e9e5f
stdlib@go1.13.4
0.0.0-20200124225646-8b5121be2f68
1.12.16
1
gomods/athens:v0.11.0efb811df7844
golang.org/x/crypto@v0.0.0-20191206172530-e9b2fee46413
0.0.0-20200124225646-8b5121be2f68
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.