CVE-2020-8265

High

Advisory

Published 6 Jan 2021In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 8.1; base score, highest
EPSS: 0.090; 95th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 7; of 17,781 indexed, latest versions
Container images: 7; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 7 of 17,781 indexed charts deploy, on 7 images.

Affected package	Affected versions	Fixed in	Images
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 8.10.0~dfsg-2ubuntu0.4, 10.19.0~dfsg-3ubuntu1	4.2.6~dfsg-1ubuntu4.2+esm2, 8.10.0~dfsg-2ubuntu0.4+esm2, 10.19.0~dfsg-3ubuntu1.1	5
nodejsapk	12.17.0-r0, 12.18.4-r0	12.20.1-r0	2

OSV records: ALPINE-CVE-2020-8265 UBUNTU-CVE-2020-8265
Also known as: USN-6380-1

Charts affected

7 by stars

Chart

Latest

Affected images

Radar Score

netris-controllernetrisai

2.8.2

1 of 14 See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2020-8265.

Container image	Digest	Package	Fixed in
graphiteapp/graphite-statsd :1.1.7-6	04a0037cc2ae	nodejs@12.17.0-r0	12.20.1-r0

Open the chart page →

30,326

docker-registry-browsergmelillo

0.1.2

1 of 1 See more

docker-registry-browser gmelillo 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-8265.

Container image	Digest	Package	Fixed in
klausmeyer/docker-registry-browser :1.3.5	430a440d95af	nodejs@12.18.4-r0	12.20.1-r0

Open the chart page →

4,108

otbrcharts-derwitt-dev

0.2.0

1 of 1 See more

otbr charts-derwitt-dev 0.2.0

1 of the 1 container images this version deploys carry CVE-2020-8265.

Container image	Digest	Package	Fixed in
openthread/otbr :latest	f307f59f6432	nodejs@8.10.0~dfsg-2ubuntu0.4	8.10.0~dfsg-2ubuntu0.4+esm2

Open the chart page →

12,779

ethereumcloudnativeapp

1.0.0

1 of 3 See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8265.

Container image	Digest	Package	Fixed in
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	nodejs@4.2.6~dfsg-1ubuntu4.1	4.2.6~dfsg-1ubuntu4.2+esm2

Open the chart page →

27,417

ibm-microclimateibm-charts

0.1.0

1 of 8 See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2020-8265.

Container image	Digest	Package	Fixed in
ibmcom/microclimate-theia :latest	e17bdccc5030	nodejs@4.2.6~dfsg-1ubuntu4.1	4.2.6~dfsg-1ubuntu4.2+esm2

Open the chart page →

57,669

nublado2lsst-sqre

0.8.5

1 of 2 See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2020-8265.

Container image	Digest	Package	Fixed in
lsstsqre/nublado2 :2.0.1	b75bf8aaafa4	nodejs@10.19.0~dfsg-3ubuntu1	10.19.0~dfsg-3ubuntu1.1

Open the chart page →

17,779

openwhiskopenwhisk

1.0.0

1 of 10 See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2020-8265.

Container image	Digest	Package	Fixed in
openwhisk/ow-utils :1.0.0	c80dba0de3aa	nodejs@8.10.0~dfsg-2ubuntu0.4	8.10.0~dfsg-2ubuntu0.4+esm2

Open the chart page →

36,215

Container images carrying it

7 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	nodejs@4.2.6~dfsg-1ubuntu4.1	4.2.6~dfsg-1ubuntu4.2+esm2	1
graphiteapp/graphite-statsd :1.1.7-6	04a0037cc2ae	nodejs@12.17.0-r0	12.20.1-r0	1
ibmcom/microclimate-theia :latest	e17bdccc5030	nodejs@4.2.6~dfsg-1ubuntu4.1	4.2.6~dfsg-1ubuntu4.2+esm2	1
klausmeyer/docker-registry-browser :1.3.5	430a440d95af	nodejs@12.18.4-r0	12.20.1-r0	1
lsstsqre/nublado2 :2.0.1	b75bf8aaafa4	nodejs@10.19.0~dfsg-3ubuntu1	10.19.0~dfsg-3ubuntu1.1	1
openthread/otbr :latest	f307f59f6432	nodejs@8.10.0~dfsg-2ubuntu0.4	8.10.0~dfsg-2ubuntu0.4+esm2	1
openwhisk/ow-utils :1.0.0	c80dba0de3aa	nodejs@8.10.0~dfsg-2ubuntu0.4	8.10.0~dfsg-2ubuntu0.4+esm2	1