StackRadar

CVE-2020-8131

High

Advisory

Published 9 Feb 2022In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.052
92nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
31
of 17,781 indexed, latest versions
Container images
30
deployed by those charts
Fix available
1 of 1
affected package

Path Traversal in Yarn

Carried by container images the latest versions of 31 of 17,781 indexed charts deploy, on 30 images.

Affected packageAffected versionsFixed inImages
yarnnpm0.27.5, 1.3.2, 1.5.1, 1.7.0+7 more1.22.030
OSV records
GHSA-8mfc-v7wv-p62g

Charts affected

31 by stars
ChartLatestAffected imagesRadar Score
microcksmicrocksOfficialVerified publisher0.8.0-helm-3.kube-1.171 of 5See more

microcks microcks 0.8.0-helm-3.kube-1.17

1 of the 5 container images this version deploys carry CVE-2020-8131.

Container imageDigestPackageFixed in
microcks/microcks-postman-runtime:latestcb72e46a1b3c
yarn@1.12.3
1.22.0

Open the chart page →

10,732
hubotdecayofmind1.0.21 of 3See more

hubot decayofmind 1.0.2

1 of the 3 container images this version deploys carry CVE-2020-8131.

Container imageDigestPackageFixed in
decayofmind/hubot:3.3.21e18e92fe694
yarn@1.16.0
1.22.0

Open the chart page →

2,513
data-fairdata354-helmVerified publisher1.1.22 of 12See more

data-fair data354-helm 1.1.2

2 of the 12 container images this version deploys carry CVE-2020-8131.

Container imageDigestPackageFixed in
koumoul/capture:17108d47be3b2
yarn@1.19.1
1.22.0
koumoul/openapi-viewer:18eeca2e8285b
yarn@1.3.2
1.22.0

Open the chart page →

38,346
uptimerobotgeek-cookbookVerified publisher3.0.41 of 1See more

uptimerobot geek-cookbook 3.0.4

1 of the 1 container images this version deploys carry CVE-2020-8131.

Container imageDigestPackageFixed in
billimek/node-influx-uptimerobot:latest5814f0bcf5ba
yarn@1.7.0
1.22.0

Open the chart page →

1,669
splice-helmsplice-helm0.1.71 of 13See more

splice-helm splice-helm 0.1.7

1 of the 13 container images this version deploys carry CVE-2020-8131.

Container imageDigestPackageFixed in
jupyterhub/configurable-http-proxy:3.0.0c36cf3cc1c99
yarn@0.27.5
1.22.0

Open the chart page →

1,477
statsdstatsd-airflow-smd0.1.191 of 1See more

statsd statsd-airflow-smd 0.1.19

1 of the 1 container images this version deploys carry CVE-2020-8131.

Container imageDigestPackageFixed in
statsd/statsd:v0.8.6dab129e74c25
yarn@1.13.0
1.22.0

Open the chart page →

4,185
open5gsadaptivenetlabVerified publisher1.0.31 of 3See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2020-8131.

Container imageDigestPackageFixed in
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
yarn@1.21.1
1.22.0

Open the chart page →

25,443
istio-bookinfobookinfo1.2.21 of 6See more

istio-bookinfo bookinfo 1.2.2

1 of the 6 container images this version deploys carry CVE-2020-8131.

Container imageDigestPackageFixed in
istio/examples-bookinfo-ratings-v1:1.15.009b9d6958a13
yarn@1.16.0
1.22.0

Open the chart page →

18,980
hubotcloudnativeapp0.0.11 of 1See more

hubot cloudnativeapp 0.0.1

1 of the 1 container images this version deploys carry CVE-2020-8131.

Container imageDigestPackageFixed in
minddocdev/hubot:0.1.96c60b11a4fa7
yarn@1.9.4
1.22.0

Open the chart page →

2,580
kube-slackcloudnativeapp1.0.01 of 1See more

kube-slack cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-8131.

Container imageDigestPackageFixed in
willwill/kube-slack:v4.1.1d443017aae98
yarn@1.13.0
1.22.0

Open the chart page →

1,937
node-redcloudnativeapp1.2.21 of 1See more

node-red cloudnativeapp 1.2.2

1 of the 1 container images this version deploys carry CVE-2020-8131.

Container imageDigestPackageFixed in
nodered/node-red-docker:0.19.6-v8070643219ea2
yarn@1.12.3
1.22.0

Open the chart page →

4,790
iotagent-ulfiware0.1.21 of 1See more

iotagent-ul fiware 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-8131.

Container imageDigestPackageFixed in
fiware/iotagent-ul:1.14.0fe11f55a926d
yarn@1.21.1
1.22.0

Open the chart page →

3,337
irslackdhalkeye0.1.01 of 1See more

irslackd halkeye 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-8131.

Container imageDigestPackageFixed in
halkeye/irslackd:latest7638bfba70b0
yarn@1.12.3
1.22.0

Open the chart page →

2,064
http-folderhttp-folder2.0.01 of 1See more

http-folder http-folder 2.0.0

1 of the 1 container images this version deploys carry CVE-2020-8131.

Container imageDigestPackageFixed in
aureliengasser/http-folder:1.1.111c4318c2571
yarn@1.21.1
1.22.0

Open the chart page →

1,847
crypto-watchdoghuseyinnurbaki0.1.01 of 1See more

crypto-watchdog huseyinnurbaki 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-8131.

Container imageDigestPackageFixed in
hhaluk/crypto-watchdog:0.4.0a6555953d941
yarn@1.21.1
1.22.0

Open the chart page →

2,656
ibm-microclimateibm-charts0.1.03 of 8See more

ibm-microclimate ibm-charts 0.1.0

3 of the 8 container images this version deploys carry CVE-2020-8131.

Container imageDigestPackageFixed in
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
yarn@1.5.1
1.22.0
ibmcom/microclimate-portal:latested5505e5c7ec
yarn@1.5.1
1.22.0
ibmcom/microclimate-theia:lateste17bdccc5030
yarn@1.5.1
1.22.0

Open the chart page →

57,669
indexer-chartindexer-application0.1.01 of 1See more

indexer-chart indexer-application 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-8131.

Container imageDigestPackageFixed in
ibarreche/cloud-indexer-ci:latestb7a08274e69f
yarn@1.13.0
1.22.0

Open the chart page →

3,289
istio-bookinfoistio-bookinfo1.2.21 of 6See more

istio-bookinfo istio-bookinfo 1.2.2

1 of the 6 container images this version deploys carry CVE-2020-8131.

Container imageDigestPackageFixed in
istio/examples-bookinfo-ratings-v1:1.15.009b9d6958a13
yarn@1.16.0
1.22.0

Open the chart page →

18,980
statsdkeyporttech0.1.191 of 1See more

statsd keyporttech 0.1.19

1 of the 1 container images this version deploys carry CVE-2020-8131.

Container imageDigestPackageFixed in
statsd/statsd:v0.8.6dab129e74c25
yarn@1.13.0
1.22.0

Open the chart page →

4,185
sample-bookinfokubesphere-testVerified publisher1.0.01 of 4See more

sample-bookinfo kubesphere-test 1.0.0

1 of the 4 container images this version deploys carry CVE-2020-8131.

Container imageDigestPackageFixed in
kubesphere/examples-bookinfo-ratings-v1:1.13.0f1b5bf878196
yarn@1.15.2
1.22.0

Open the chart page →

9,378
devspace-cloudloftVerified publisher0.3.31 of 8See more

devspace-cloud loft 0.3.3

1 of the 8 container images this version deploys carry CVE-2020-8131.

Container imageDigestPackageFixed in
devspacecloud/ui:0.3.3deef55ff29a7
yarn@1.15.2
1.22.0

Open the chart page →

9,880
frontendluiscajl0.1.71 of 1See more

frontend luiscajl 0.1.7

1 of the 1 container images this version deploys carry CVE-2020-8131.

Container imageDigestPackageFixed in
lavandadelpatio/frontend:latest501c3f31e0bc
yarn@1.15.2
1.22.0

Open the chart page →

3,651
kubevismario-fVerified publisher2.0.11 of 1See more

kubevis mario-f 2.0.1

1 of the 1 container images this version deploys carry CVE-2020-8131.

Container imageDigestPackageFixed in
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
yarn@1.21.1
1.22.0

Open the chart page →

5,287
hive-selfservice-ui-nodeory0.1.01 of 1See more

hive-selfservice-ui-node ory 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-8131.

Container imageDigestPackageFixed in
oryd/hive-selfservice-ui-node:v0.0.426347ef0a2de
yarn@1.19.1
1.22.0

Open the chart page →

1,986
bookinforgnu1.0.01 of 7See more

bookinfo rgnu 1.0.0

1 of the 7 container images this version deploys carry CVE-2020-8131.

Container imageDigestPackageFixed in
istio/examples-bookinfo-ratings-v1:1.14.0eb0f1a725ca8
yarn@1.15.2
1.22.0

Open the chart page →

20,462
istio-bookinforgnu1.0.21 of 7See more

istio-bookinfo rgnu 1.0.2

1 of the 7 container images this version deploys carry CVE-2020-8131.

Container imageDigestPackageFixed in
istio/examples-bookinfo-ratings-v1:1.14.0eb0f1a725ca8
yarn@1.15.2
1.22.0

Open the chart page →

20,462
logsmo-helm-chart6.0.01 of 6See more

log smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2020-8131.

Container imageDigestPackageFixed in
taskrabbit/elasticsearch-dump:latestc967fe68b9c7
yarn@1.19.1
1.22.0

Open the chart page →

29,220
pombasmo-helm-chart6.0.01 of 17See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2020-8131.

Container imageDigestPackageFixed in
taskrabbit/elasticsearch-dump:latestc967fe68b9c7
yarn@1.19.1
1.22.0

Open the chart page →

29,220
pachydermstatcan0.5.11 of 4See more

pachyderm statcan 0.5.1

1 of the 4 container images this version deploys carry CVE-2020-8131.

Container imageDigestPackageFixed in
pachyderm/grpc-proxy:0.4.92b27f41d4d02
yarn@1.15.2
1.22.0

Open the chart page →

4,967
dashkioskt3n2.0.01 of 1See more

dashkiosk t3n 2.0.0

1 of the 1 container images this version deploys carry CVE-2020-8131.

Container imageDigestPackageFixed in
quay.io/t3n/dashkiosk:v2.7.8c973e166a5dc
yarn@1.21.1
1.22.0

Open the chart page →

3,827
helloworldyotron-helm-charts0.1.01 of 1See more

helloworld yotron-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-8131.

Container imageDigestPackageFixed in
a5hut0sh/helloworld:1.02ae77620e616
yarn@1.12.3
1.22.0

Open the chart page →

1,309

Container images carrying it

30 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
istio/examples-bookinfo-ratings-v1:1.15.009b9d6958a13
yarn@1.16.0
1.22.0
2
istio/examples-bookinfo-ratings-v1:1.14.0eb0f1a725ca8
yarn@1.15.2
1.22.0
2
statsd/statsd:v0.8.6dab129e74c25
yarn@1.13.0
1.22.0
2
taskrabbit/elasticsearch-dump:latestc967fe68b9c7
yarn@1.19.1
1.22.0
2
a5hut0sh/helloworld:1.02ae77620e616
yarn@1.12.3
1.22.0
1
aureliengasser/http-folder:1.1.111c4318c2571
yarn@1.21.1
1.22.0
1
billimek/node-influx-uptimerobot:latest5814f0bcf5ba
yarn@1.7.0
1.22.0
1
decayofmind/hubot:3.3.21e18e92fe694
yarn@1.16.0
1.22.0
1
devspacecloud/ui:0.3.3deef55ff29a7
yarn@1.15.2
1.22.0
1
fiware/iotagent-ul:1.14.0fe11f55a926d
yarn@1.21.1
1.22.0
1
halkeye/irslackd:latest7638bfba70b0
yarn@1.12.3
1.22.0
1
hhaluk/crypto-watchdog:0.4.0a6555953d941
yarn@1.21.1
1.22.0
1
ibarreche/cloud-indexer-ci:latestb7a08274e69f
yarn@1.13.0
1.22.0
1
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
yarn@1.5.1
1.22.0
1
ibmcom/microclimate-portal:latested5505e5c7ec
yarn@1.5.1
1.22.0
1
ibmcom/microclimate-theia:lateste17bdccc5030
yarn@1.5.1
1.22.0
1
jupyterhub/configurable-http-proxy:3.0.0c36cf3cc1c99
yarn@0.27.5
1.22.0
1
koumoul/capture:17108d47be3b2
yarn@1.19.1
1.22.0
1
koumoul/openapi-viewer:18eeca2e8285b
yarn@1.3.2
1.22.0
1
kubesphere/examples-bookinfo-ratings-v1:1.13.0f1b5bf878196
yarn@1.15.2
1.22.0
1
lavandadelpatio/frontend:latest501c3f31e0bc
yarn@1.15.2
1.22.0
1
microcks/microcks-postman-runtime:latestcb72e46a1b3c
yarn@1.12.3
1.22.0
1
minddocdev/hubot:0.1.96c60b11a4fa7
yarn@1.9.4
1.22.0
1
nodered/node-red-docker:0.19.6-v8070643219ea2
yarn@1.12.3
1.22.0
1
oryd/hive-selfservice-ui-node:v0.0.426347ef0a2de
yarn@1.19.1
1.22.0
1
pachyderm/grpc-proxy:0.4.92b27f41d4d02
yarn@1.15.2
1.22.0
1
willwill/kube-slack:v4.1.1d443017aae98
yarn@1.13.0
1.22.0
1
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
yarn@1.21.1
1.22.0
1
quay.io/t3n/dashkiosk:v2.7.8c973e166a5dc
yarn@1.21.1
1.22.0
1
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
yarn@1.21.1
1.22.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.