StackRadar

CVE-2020-8177

High

Advisory

Published 24 Jun 2020In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.013
68th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
341
of 17,781 indexed, latest versions
Container images
265
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: curl security and bug fix update

Carried by container images the latest versions of 341 of 17,781 indexed charts deploy, on 265 images.

Affected packageAffected versionsFixed inImages
curldeb7.35.0-1ubuntu2.1, 7.35.0-1ubuntu2.3, 7.35.0-1ubuntu2.16, 7.35.0-1ubuntu2.19+25 more7.35.0-1ubuntu2.20+esm4, 7.47.0-1ubuntu2.15, 7.52.1-5+deb9u11, 7.58.0-2ubuntu3.9137
curlapk7.63.0-r0, 7.64.0-r1, 7.64.0-r2, 7.64.0-r3+4 more7.64.0-r4, 7.66.0-r1, 7.67.0-r1, 7.69.1-r196
curlrpm7.29.0-51.el7, 7.29.0-51.el7_6.3, 7.29.0-54.el7, 7.29.0-54.el7_7.2+7 more0:7.29.0-59.el7_9.1, 0:7.61.1-14.el8, 7.60.0-lp151.5.12.132
OSV records
ALPINE-CVE-2020-8177UBUNTU-CVE-2020-8177RHSA-2020:4599RHSA-2020:5002DLA-2295-1openSUSE-SU-2020:0908-1
Also known as
RHSA-2020:5417, USN-4402-1

Charts affected

341 by stars
ChartLatestAffected imagesRadar Score
get-cloudflare-logsanapsixVerified publisher0.6.01 of 1See more

get-cloudflare-logs anapsix 0.6.0

1 of the 1 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
anapsix/get-cloudflare-logs:0.6.07cf7deb20399
curl@7.67.0-r0
7.67.0-r1

Open the chart page →

956
pagesandrei-pages1.0.01 of 3See more

pages andrei-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.9

Open the chart page →

20,190
d.vazquezm.2021_helmapphelmVerified publisher1.0.02 of 6See more

d.vazquezm.2021_helm apphelm 1.0.0

2 of the 6 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
davidvmar/urjc-davidvmar-external-service:1.0.02a68e9ac7f09
curl@7.52.1-5+deb9u10
7.52.1-5+deb9u11
davidvmar/urjc-davidvmar-server:1.0.05663f5b24615
curl@7.52.1-5+deb9u10
7.52.1-5+deb9u11

Open the chart page →

19,745
argocd-ecr-updaterargocd-ecr-updater4.1.01 of 1See more

argocd-ecr-updater argocd-ecr-updater 4.1.0

1 of the 1 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
odaniait/aws-kubectl:latest3fff8a8570ec
curl@7.67.0-r0
7.67.0-r1

Open the chart page →

1,511
dltkvassist-iot-data-integrity-verification0.2.02 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

2 of the 9 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
curl@7.47.0-1ubuntu2.8
7.47.0-1ubuntu2.15
hyperledger/fabric-couchdb:0.4.15f6c724592abf
curl@7.47.0-1ubuntu2.12
7.47.0-1ubuntu2.15

Open the chart page →

77,706
dltflassist-iot-dlt-based-fl0.2.02 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

2 of the 9 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
curl@7.47.0-1ubuntu2.8
7.47.0-1ubuntu2.15
hyperledger/fabric-couchdb:0.4.15f6c724592abf
curl@7.47.0-1ubuntu2.12
7.47.0-1ubuntu2.15

Open the chart page →

77,706
edgedatabrokerx64assist-iot-edbe-x641.0.01 of 3See more

edgedatabrokerx64 assist-iot-edbe-x64 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
erlio/docker-vernemq:latestdcdaf720107c
curl@7.52.1-5+deb9u9
7.52.1-5+deb9u11

Open the chart page →

933
authorization-componentauthorization-component1.0.01 of 3See more

authorization-component authorization-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/authorization-component-php:latest94a749392fcf
curl@7.69.1-r0
7.69.1-r1

Open the chart page →

7,561
aws-ecr-credentialaws-ecr-credentialVerified publisher1.5.21 of 1See more

aws-ecr-credential aws-ecr-credential 1.5.2

1 of the 1 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
architectminds/aws-kubectl:1.19735e59a1085
curl@7.65.1-r0
7.66.0-r1

Open the chart page →

1,437
aks-helloworldazure-sample0.1.11 of 1See more

aks-helloworld azure-sample 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
neilpeterson/aks-helloworld:v1fb47732ef36b
curl@7.52.1-5+deb9u3
7.52.1-5+deb9u11

Open the chart page →

4,269
azure-voteazure-sample0.1.11 of 2See more

azure-vote azure-sample 0.1.1

1 of the 2 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
neilpeterson/azure-vote-front:v384062718347c
curl@7.52.1-5+deb9u3
7.52.1-5+deb9u11

Open the chart page →

5,224
azure-vote-osbaazure-sample0.1.01 of 1See more

azure-vote-osba azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
neilpeterson/azure-vote-front:v384062718347c
curl@7.52.1-5+deb9u3
7.52.1-5+deb9u11

Open the chart page →

4,269
burst-schedulerazure-sample0.1.01 of 1See more

burst-scheduler azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
neilpeterson/burst-scheduler:v1.23a8877032972
curl@7.52.1-5+deb9u3
7.52.1-5+deb9u11

Open the chart page →

2,408
twitter-sentimentazure-sample0.1.02 of 3See more

twitter-sentiment azure-sample 0.1.0

2 of the 3 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
neilpeterson/chart-tweet:latest64fd8dab075f
curl@7.52.1-5+deb9u3
7.52.1-5+deb9u11
neilpeterson/process-tweet:latest39ce9f92e899
curl@7.52.1-5+deb9u5
7.52.1-5+deb9u11

Open the chart page →

11,833
balance-registrationbalance-registration0.1.02 of 4See more

balance-registration balance-registration 0.1.0

2 of the 4 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
conduction/balance-registration-php:devc36094a41369
curl@7.69.1-r0
7.69.1-r1
conduction/balance-registration-varnish:dev07c44005da9d
curl@7.52.1-5+deb9u9
7.52.1-5+deb9u11

Open the chart page →

8,408
pagesberrutig-pages1.0.01 of 3See more

pages berrutig-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.9

Open the chart page →

20,190
istio-bookinfobookinfo1.2.21 of 6See more

istio-bookinfo bookinfo 1.2.2

1 of the 6 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
istio/examples-bookinfo-ratings-v1:1.15.009b9d6958a13
curl@7.52.1-5+deb9u9
7.52.1-5+deb9u11

Open the chart page →

18,980
puppetboardbootcVerified publisher0.1.41 of 1See more

puppetboard bootc 0.1.4

1 of the 1 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
bootc/puppetboard:1.1.0f1383295e7be
curl@7.66.0-r0
7.66.0-r1

Open the chart page →

1,292
pagesbrian-pages1.0.01 of 3See more

pages brian-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.9

Open the chart page →

20,190
pagesbrixton-mayuribhavsar23-pages1.0.01 of 3See more

pages brixton-mayuribhavsar23-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.9

Open the chart page →

20,190
pagesbrixton-pages1.0.01 of 3See more

pages brixton-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.9

Open the chart page →

20,190
honeywell-exporterbryanalves0.1.11 of 1See more

honeywell-exporter bryanalves 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
bryanalves/honeywell_exporter:0.0.1195f73dce8b21
curl@7.52.1-5+deb9u4
7.52.1-5+deb9u11

Open the chart page →

5,437
ombibryanalves0.4.01 of 1See more

ombi bryanalves 0.4.0

1 of the 1 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
linuxserver/ombi:3.0.4572-ls452fbb21fb4903
curl@7.58.0-2ubuntu3.6
7.58.0-2ubuntu3.9

Open the chart page →

10,776
smart-exporterbryanalves0.2.21 of 1See more

smart-exporter bryanalves 0.2.2

1 of the 1 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
bryanalves/smart_exporter:0.2af47dfbb9413
curl@7.52.1-5+deb9u7
7.52.1-5+deb9u11

Open the chart page →

4,131
pagescamden-pages1.0.01 of 3See more

pages camden-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.9

Open the chart page →

20,190
gitlab-runnercamptocamp30.9.0+mr391 of 1See more

gitlab-runner camptocamp3 0.9.0+mr39

1 of the 1 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
gitlab/gitlab-runner:alpine-v12.3.0a83c15bda342
curl@7.64.0-r3
7.64.0-r4

Open the chart page →

794
pghoardcamptocamp35.8.11 of 1See more

pghoard camptocamp3 5.8.1

1 of the 1 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
camptocamp/pghoard:10bff736b15623
curl@7.52.1-5+deb9u8
7.52.1-5+deb9u11

Open the chart page →

2,813
prometheus-operatorcamptocamp35.15.11 of 5See more

prometheus-operator camptocamp3 5.15.1

1 of the 5 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
grafana/grafana:6.2.09e7fe9c7903a
curl@7.52.1-5+deb9u9
7.52.1-5+deb9u11

Open the chart page →

2,490
showoffcamptocamp31.0.01 of 1See more

showoff camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
binford2k/showoff:0.20.2a64937052ce7
curl@7.64.0-r3
7.64.0-r4

Open the chart page →

1,584
pagescarina-pages1.0.01 of 3See more

pages carina-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.9

Open the chart page →

20,190
pagescarmel-pages-dell1.0.01 of 3See more

pages carmel-pages-dell 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.9

Open the chart page →

20,190
checkin-componentcheckin-component0.1.02 of 4See more

checkin-component checkin-component 0.1.0

2 of the 4 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
conduction/checkin-component-php:dev3423845692c1
curl@7.69.1-r0
7.69.1-r1
conduction/checkin-component-varnish:devef3a3fb0ad47
curl@7.52.1-5+deb9u9
7.52.1-5+deb9u11

Open the chart page →

8,408
opensipschetan-opensips0.1.01 of 1See more

opensips chetan-opensips 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
chetangautamm/repo:Opensips_Buildb4b94155ff5a
curl@7.35.0-1ubuntu2.20
7.35.0-1ubuntu2.20+esm4

Open the chart page →

30,140
dex-k8s-authenticatorchoerodon1.2.01 of 1See more

dex-k8s-authenticator choerodon 1.2.0

1 of the 1 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
mintel/dex-k8s-authenticator:1.2.0a3789f95d734
curl@7.65.1-r0
7.66.0-r1

Open the chart page →

708
chubaofschubaofs1.5.11 of 6See more

chubaofs chubaofs 1.5.1

1 of the 6 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
library/consul:1.6.194cdbd83f24e
curl@7.64.0-r2
7.64.0-r4

Open the chart page →

3,595
atlantiscloudnativeapp3.3.11 of 1See more

atlantis cloudnativeapp 3.3.1

1 of the 1 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
runatlantis/atlantis:v0.7.168fa470d1416
curl@7.64.0-r1
7.64.0-r4

Open the chart page →

1,512
couchdbcloudnativeapp1.1.31 of 3See more

couchdb cloudnativeapp 1.1.3

1 of the 3 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
library/couchdb:2.3.0ee75c9a737e7
curl@7.52.1-5+deb9u10
7.52.1-5+deb9u11

Open the chart page →

2,110
daskcloudnativeapp2.2.12 of 2See more

dask cloudnativeapp 2.2.1

2 of the 2 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
daskdev/dask:1.1.04ecd7bc35500
curl@7.52.1-5+deb9u7
7.52.1-5+deb9u11
daskdev/dask-notebook:1.1.0052630f5ca04
curl@7.58.0-2ubuntu3.5
7.58.0-2ubuntu3.9

Open the chart page →

29,901
distributed-tensorflowcloudnativeapp0.1.11 of 1See more

distributed-tensorflow cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
cheyang/distributed-tf:1.6.046cc34755493
curl@7.47.0-1ubuntu2.6
7.47.0-1ubuntu2.15

Open the chart page →

36,094
ethereumcloudnativeapp1.0.01 of 3See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
curl@7.47.0-1ubuntu2.5
7.47.0-1ubuntu2.15

Open the chart page →

27,417
gocdcloudnativeapp1.9.22 of 2See more

gocd cloudnativeapp 1.9.2

2 of the 2 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
gocd/gocd-agent-alpine-3.9:v19.3.053588bd3221f
curl@7.64.0-r1
7.64.0-r4
gocd/gocd-server:v19.3.02da45cb09d57
curl@7.64.0-r1
7.64.0-r4

Open the chart page →

9,144
grafanacloudnativeapp3.3.81 of 1See more

grafana cloudnativeapp 3.3.8

1 of the 1 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
grafana/grafana:6.1.6d66b41cf7e05
curl@7.52.1-5+deb9u9
7.52.1-5+deb9u11

Open the chart page →

1,102
guestbookcloudnativeapp0.2.01 of 3See more

guestbook cloudnativeapp 0.2.0

1 of the 3 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
resouer/redis-slave:v2e2f198b49ba7
curl@7.35.0-1ubuntu2.3
7.35.0-1ubuntu2.20+esm4

Open the chart page →

36,839
hazelcast-jetcloudnativeapp1.1.01 of 1See more

hazelcast-jet cloudnativeapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
hazelcast/hazelcast-jet:3.0df495e64ea65
curl@7.64.0-r1
7.64.0-r4

Open the chart page →

5,326
hlf-couchdbcloudnativeapp1.0.61 of 1See more

hlf-couchdb cloudnativeapp 1.0.6

1 of the 1 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
hyperledger/fabric-couchdb:0.4.10c65891b6c237
curl@7.47.0-1ubuntu2.8
7.47.0-1ubuntu2.15

Open the chart page →

33,963
k8s-spot-termination-handlercloudnativeapp1.2.11 of 1See more

k8s-spot-termination-handler cloudnativeapp 1.2.1

1 of the 1 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
kubeaws/kube-spot-termination-notice-handler:1.13.0-1c9cd2ba4373a
curl@7.63.0-r0
7.64.0-r4

Open the chart page →

2,095
magic-ip-addresscloudnativeapp0.1.01 of 1See more

magic-ip-address cloudnativeapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
mumoshu/kube-magic-ip-assigner:0.9.0-1.9.802808a23186b
curl@7.52.1-5+deb9u6
7.52.1-5+deb9u11

Open the chart page →

1,342
node-redcloudnativeapp1.2.21 of 1See more

node-red cloudnativeapp 1.2.2

1 of the 1 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
nodered/node-red-docker:0.19.6-v8070643219ea2
curl@7.52.1-5+deb9u8
7.52.1-5+deb9u11

Open the chart page →

4,790
orientdbcloudnativeapp0.1.21 of 2See more

orientdb cloudnativeapp 0.1.2

1 of the 2 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
library/orientdb:3.0.1318a6c004398f
curl@7.63.0-r0
7.64.0-r4

Open the chart page →

1,822
prestocloudnativeapp0.1.11 of 1See more

presto cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-8177.

Container imageDigestPackageFixed in
bivas/presto:0.19605545994f806
curl@7.52.1-5+deb9u4
7.52.1-5+deb9u11

Open the chart page →

7,226

Container images carrying it

265 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/conductionnl/waardepapieren-php:latestb2666ffcbad8
curl@7.69.1-r0
7.69.1-r1
1
ghcr.io/conductionnl/waardepapieren-register-php:latest9affab218351
curl@7.69.1-r0
7.69.1-r1
1
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
curl@7.61.1-12.el8
0:7.61.1-14.el8
1
ghcr.io/leoquote/mergeable:latest451706815103
curl@7.52.1-5+deb9u9
7.52.1-5+deb9u11
1
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
curl@7.52.1-5+deb9u9
7.52.1-5+deb9u11
1
quay.io/apicurio/apicurio-registry-kube-sync:1.0.170ef31840269
curl@7.67.0-r0
7.67.0-r1
1
quay.io/eclipse/che-devfile-registry:nightly5d25d47d6e17
curl@7.69.1-r0
7.69.1-r1
1
quay.io/fairwinds/clamav:v0.0.3e12bdddaa81d
curl@7.67.0-r0
7.67.0-r1
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
curl@7.61.1-12.el8
0:7.61.1-14.el8
1
quay.io/kubernetes-ingress-controller/nginx-ingress-controller:0.32.0251e733bf41c
curl@7.67.0-r0
7.67.0-r1
1
quay.io/kubernetes-ingress-controller/nginx-ingress-controller:0.30.0b312c91d0de6
curl@7.67.0-r0
7.67.0-r1
1
quay.io/mcouliba/quarkus-serverless:1.0c2851757eca4
curl@7.61.1-11.el8
0:7.61.1-14.el8
1
quay.io/openshift/origin-cli:4.66722d5041b47
curl@7.61.1-12.el8_2.4
0:7.61.1-14.el8
1
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
curl@7.61.1-12.el8_2.4
0:7.61.1-14.el8
1
quay.io/simplyzee/kube-rclone:v1.52.389a0c23d5ad3
curl@7.69.1-r0
7.69.1-r1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.