CVE-2020-8184

High

Advisory

Published 24 Jun 2020In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.029; 86th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 8; of 17,781 indexed, latest versions
Container images: 15; deployed by those charts
Fix available: 1 of 1; affected package

Rack allows Percent-encoded cookies to overwrite existing prefixed cookie names

Carried by container images the latest versions of 8 of 17,781 indexed charts deploy, on 15 images.

Affected package	Affected versions	Fixed in	Images
rackgem	1.5.5, 1.6.13, 2.0.5, 2.0.6+4 more	2.1.4, 2.2.3	15

OSV records: GHSA-j6w9-fv6q-3q52

Charts affected

8 by stars

Chart

Latest

Affected images

Radar Score

huginnutkuozdemir

2.2.1

1 of 4 See more

huginn utkuozdemir 2.2.1

1 of the 4 container images this version deploys carry CVE-2020-8184.

Container image	Digest	Package	Fixed in
huginn/huginn-single-process :4d17829cf6b15b004ad3f4be196303dca4944810	c794eddc7b47	rack@2.2.2	2.2.3

Open the chart page →

18,137

opennebulakvaps

2.1.1

5 of 9 See more

opennebula kvaps 2.1.1

5 of the 9 container images this version deploys carry CVE-2020-8184.

Container image	Digest	Package	Fixed in
ghcr.io/kvaps/opennebula :v5.12.0.4-1	e28e0e7de11b	rack@2.2.2	2.2.3
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4	01563adc95fd	rack@2.2.2	2.2.3
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4-1	2b92df1143b9	rack@2.2.2	2.2.3
ghcr.io/kvaps/opennebula-flow :v5.12.0.4-1	600221f0f43f	rack@2.2.2	2.2.3
ghcr.io/kvaps/opennebula-gate :v5.12.0.4-1	a85e03d8bc1d	rack@2.2.2	2.2.3

Open the chart page →

113,791

honeywell-exporterbryanalves

0.1.1

1 of 1 See more

honeywell-exporter bryanalves 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-8184.

Container image	Digest	Package	Fixed in
bryanalves/honeywell_exporter :0.0.11	95f73dce8b21	rack@2.0.5	2.1.4

Open the chart page →

5,437

smart-exporterbryanalves

0.2.2

1 of 1 See more

smart-exporter bryanalves 0.2.2

1 of the 1 container images this version deploys carry CVE-2020-8184.

Container image	Digest	Package	Fixed in
bryanalves/smart_exporter :0.2	af47dfbb9413	rack@2.0.6	2.1.4

Open the chart page →

4,131

showoffcamptocamp3

1.0.0

1 of 1 See more

showoff camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-8184.

Container image	Digest	Package	Fixed in
binford2k/showoff :0.20.2	a64937052ce7	rack@1.6.13	2.1.4

Open the chart page →

1,584

puppet-forgecloudnativeapp

0.1.8

1 of 2 See more

puppet-forge cloudnativeapp 0.1.8

1 of the 2 container images this version deploys carry CVE-2020-8184.

Container image	Digest	Package	Fixed in
hickey/puppet_forge :1.10.0	c1148a09ef20	rack@1.5.5	2.1.4

Open the chart page →

4,086

gitlabkubesphere

4.2.3

4 of 17 See more

gitlab kubesphere 4.2.3

4 of the 17 container images this version deploys carry CVE-2020-8184.

Container image	Digest	Package	Fixed in
mirrorgitlabcontainers/gitaly :v13.2.2	83599461ef8b	rack@2.1.2	2.1.4
mirrorgitlabcontainers/gitlab-sidekiq-ce :v13.2.2	94d1431683fa	rack@2.0.9	2.1.4
mirrorgitlabcontainers/gitlab-task-runner-ce :v13.2.2	9efd73993c34	rack@2.0.9	2.1.4
mirrorgitlabcontainers/gitlab-webservice-ce :v13.2.2	30393f990f5c	rack@2.0.9	2.1.4

Open the chart page →

38,133

pact-brokerqamatic

0.1.0

1 of 2 See more

pact-broker qamatic 0.1.0

1 of the 2 container images this version deploys carry CVE-2020-8184.

Container image	Digest	Package	Fixed in
pactfoundation/pact-broker :2.32.0-2	062d6c710099	rack@2.0.7	2.1.4

Open the chart page →

3,533

Container images carrying it

15 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
binford2k/showoff :0.20.2	a64937052ce7	rack@1.6.13	2.1.4	1
bryanalves/honeywell_exporter :0.0.11	95f73dce8b21	rack@2.0.5	2.1.4	1
bryanalves/smart_exporter :0.2	af47dfbb9413	rack@2.0.6	2.1.4	1
hickey/puppet_forge :1.10.0	c1148a09ef20	rack@1.5.5	2.1.4	1
huginn/huginn-single-process :4d17829cf6b15b004ad3f4be196303dca4944810	c794eddc7b47	rack@2.2.2	2.2.3	1
mirrorgitlabcontainers/gitaly :v13.2.2	83599461ef8b	rack@2.1.2	2.1.4	1
mirrorgitlabcontainers/gitlab-sidekiq-ce :v13.2.2	94d1431683fa	rack@2.0.9	2.1.4	1
mirrorgitlabcontainers/gitlab-task-runner-ce :v13.2.2	9efd73993c34	rack@2.0.9	2.1.4	1
mirrorgitlabcontainers/gitlab-webservice-ce :v13.2.2	30393f990f5c	rack@2.0.9	2.1.4	1
pactfoundation/pact-broker :2.32.0-2	062d6c710099	rack@2.0.7	2.1.4	1
ghcr.io/kvaps/opennebula :v5.12.0.4-1	e28e0e7de11b	rack@2.2.2	2.2.3	1
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4	01563adc95fd	rack@2.2.2	2.2.3	1
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4-1	2b92df1143b9	rack@2.2.2	2.2.3	1
ghcr.io/kvaps/opennebula-flow :v5.12.0.4-1	600221f0f43f	rack@2.2.2	2.2.3	1
ghcr.io/kvaps/opennebula-gate :v5.12.0.4-1	a85e03d8bc1d	rack@2.2.2	2.2.3	1