StackRadar

CVE-2020-8285

High

Advisory

Published 9 Dec 2020In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.098
95th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
264
of 17,787 indexed, latest versions
Container images
169
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 264 of 17,787 indexed charts deploy, on 169 images.

Affected packageAffected versionsFixed inImages
curlapk7.65.1-r0, 7.66.0-r0, 7.67.0-r0, 7.67.0-r1+2 more7.66.0-r3, 7.67.0-r3, 7.69.1-r391
curldeb7.35.0-1ubuntu2.1, 7.35.0-1ubuntu2.3, 7.35.0-1ubuntu2.16, 7.35.0-1ubuntu2.19+20 more7.35.0-1ubuntu2.20+esm6, 7.47.0-1ubuntu2.18, 7.58.0-2ubuntu3.12, 7.68.0-1ubuntu2.478
OSV records
ALPINE-CVE-2020-8285UBUNTU-CVE-2020-8285
Also known as
USN-4665-1, USN-4665-2

Charts affected

264 by stars
ChartLatestAffected imagesRadar Score
pagesthuy-pages1.0.01 of 3See more

pages thuy-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8285.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.12

Open the chart page →

20,233
trouw-servicetrouw-service1.0.01 of 3See more

trouw-service trouw-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8285.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/trouw-service-php:latestf745e2870692
curl@7.69.1-r0
7.69.1-r3

Open the chart page →

7,510
lightstepupdater-lightstep-satellite1.2.21 of 1See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2020-8285.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
curl@7.47.0-1ubuntu2.12
7.47.0-1ubuntu2.18

Open the chart page →

15,345
verhuis-serviceverhuis-service1.0.01 of 3See more

verhuis-service verhuis-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8285.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verhuis-service-php:latest66bbaf95a123
curl@7.69.1-r0
7.69.1-r3

Open the chart page →

7,510
verzoekconversieserviceverzoekconversieservice1.0.01 of 3See more

verzoekconversieservice verzoekconversieservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8285.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekconversieservice-php:lateste918014fb8d3
curl@7.69.1-r0
7.69.1-r3

Open the chart page →

7,527
verzoekregistratiecomponentverzoekregistratiecomponent1.1.01 of 4See more

verzoekregistratiecomponent verzoekregistratiecomponent 1.1.0

1 of the 4 container images this version deploys carry CVE-2020-8285.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekregistratiecomponent-php:latestc4f6c03af5d3
curl@7.69.1-r0
7.69.1-r3

Open the chart page →

7,429
verzoektypecatalogusverzoektypecatalogus1.1.01 of 4See more

verzoektypecatalogus verzoektypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2020-8285.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoektypecatalogus-php:latest64f5eb7a398b
curl@7.69.1-r0
7.69.1-r3

Open the chart page →

7,429
pagesvictor-pages1.0.01 of 3See more

pages victor-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8285.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.12

Open the chart page →

20,233
pageswalter1.0.01 of 3See more

pages walter 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8285.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.12

Open the chart page →

20,233
alpinewenerme1.0.01 of 1See more

alpine wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-8285.

Container imageDigestPackageFixed in
wener/base:3.12.0ef3bd19da190
curl@7.69.1-r0
7.69.1-r3

Open the chart page →

1,263
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2020-8285.

Container imageDigestPackageFixed in
ghcr.io/banzaicloud/tcheck:latest0147d87c2019
curl@7.69.1-r1
7.69.1-r3

Open the chart page →

10,127
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2020-8285.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
curl@7.58.0-2ubuntu3.9
7.58.0-2ubuntu3.12

Open the chart page →

10,857
apicurio-registry-sqlwitcom-gmbh0.1.01 of 1See more

apicurio-registry-sql witcom-gmbh 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-8285.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-jpa:1.3.2.Final44eeddd3562c
curl@7.67.0-r0
7.67.0-r3

Open the chart page →

3,424
rcloneymrs0.1.41 of 2See more

rclone ymrs 0.1.4

1 of the 2 container images this version deploys carry CVE-2020-8285.

Container imageDigestPackageFixed in
quay.io/simplyzee/kube-rclone:v1.52.389a0c23d5ad3
curl@7.69.1-r0
7.69.1-r3

Open the chart page →

1,198

Container images carrying it

169 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
flyway/flyway:6.4.422d97ceb0c47
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.12
79
oomk8s/readiness-check:2.0.2875814cc853d
curl@7.47.0-1ubuntu2.12
7.47.0-1ubuntu2.18
11
oomk8s/readiness-check:2.0.07daa08b81954
curl@7.47.0-1ubuntu2.7
7.47.0-1ubuntu2.18
6
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
curl@7.47.0-1ubuntu2.8
7.47.0-1ubuntu2.18
4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
curl@7.47.0-1ubuntu2.12
7.47.0-1ubuntu2.18
4
buddy/repman:1.4.0097c897f8b54
curl@7.67.0-r0
7.67.0-r3
3
architectminds/aws-kubectl:1.19735e59a1085
curl@7.65.1-r0
7.66.0-r3
2
freeradius/freeradius-server:3.0.2121c8bfa904d8
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.12
2
giantswarm/docker-kubectl:1.18.858a9d175cdb7
curl@7.69.1-r0
7.69.1-r3
2
istio/kubectl:1.5.10dbb7726d1bf0
curl@7.58.0-2ubuntu3.9
7.58.0-2ubuntu3.12
2
library/cassandra:3.11.65aa8400b4b3b
curl@7.58.0-2ubuntu3.9
7.58.0-2ubuntu3.12
2
library/mongo:4.2.358b25d51baa1
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.12
2
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
curl@7.47.0-1ubuntu2.12
7.47.0-1ubuntu2.18
2
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
curl@7.68.0-1ubuntu2.2
7.68.0-1ubuntu2.4
2
minio/mc:RELEASE.2020-11-25T23-04-07Zbf85c57cdfcc
curl@7.69.1-r1
7.69.1-r3
2
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
curl@7.47.0-1ubuntu2.12
7.47.0-1ubuntu2.18
2
squareup/ghostunnel:v1.5.270f4cf270425
curl@7.66.0-r0
7.66.0-r3
2
wurstmeister/zookeeper:latest7a7fd44a7210
curl@7.35.0-1ubuntu2.1
7.35.0-1ubuntu2.20+esm6
2
gcr.io/google_containers/kubernetes-dashboard-init-amd64:v1.0.0fbe12aa24de6
curl@7.47.0-1ubuntu2.2
7.47.0-1ubuntu2.18
2
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
curl@7.58.0-2ubuntu3.10
7.58.0-2ubuntu3.12
2
quay.io/ibmgaragecloud/alpine-curl:latestead845a9d8e2
curl@7.66.0-r0
7.66.0-r3
2
anapsix/get-cloudflare-logs:0.6.07cf7deb20399
curl@7.67.0-r0
7.67.0-r3
1
apache/apisix:1.5-alpine228eb0edf44b
curl@7.67.0-r0
7.67.0-r3
1
apicurio/apicurio-registry-jpa:1.3.2.Final44eeddd3562c
curl@7.67.0-r0
7.67.0-r3
1
billimek/prometheus-uptimerobot-exporter:0.0.1f14ccd7aad0e
curl@7.69.1-r0
7.69.1-r3
1
bootc/puppetboard:1.1.0f1383295e7be
curl@7.66.0-r0
7.66.0-r3
1
chetangautamm/repo:Opensips_Buildb4b94155ff5a
curl@7.35.0-1ubuntu2.20
7.35.0-1ubuntu2.20+esm6
1
cheyang/distributed-tf:1.6.046cc34755493
curl@7.47.0-1ubuntu2.6
7.47.0-1ubuntu2.18
1
cloudve/ttyd:latestd79c1c5881c0
curl@7.58.0-2ubuntu3.9
7.58.0-2ubuntu3.12
1
conduction/agendaservice-php:latest9cfeeb6c7c20
curl@7.69.1-r0
7.69.1-r3
1
conduction/balance-registration-php:devc36094a41369
curl@7.69.1-r0
7.69.1-r3
1
conduction/betaalservice-php:latestece1ab544c57
curl@7.69.1-r0
7.69.1-r3
1
conduction/cgrc-php:dev25415534d245
curl@7.67.0-r0
7.67.0-r3
1
conduction/checkin-component-php:dev3423845692c1
curl@7.69.1-r0
7.69.1-r3
1
conduction/conduction-ui-php:dev2744565516e8
curl@7.69.1-r0
7.69.1-r3
1
conduction/contactmoment-component-php:deve1d4ad1e22a8
curl@7.69.1-r0
7.69.1-r3
1
conduction/docparser-php:devb6f95c8ead7d
curl@7.69.1-r0
7.69.1-r3
1
conduction/kvk-php:dev8f177f9f8a7b
curl@7.69.1-r0
7.69.1-r3
1
conduction/pan-php:dev24f03c57568f
curl@7.69.1-r0
7.69.1-r3
1
daskdev/dask-notebook:1.1.0052630f5ca04
curl@7.58.0-2ubuntu3.5
7.58.0-2ubuntu3.12
1
datalust/seq:5.0.832-pre9c731bb207a6
curl@7.47.0-1ubuntu2.6
7.47.0-1ubuntu2.18
1
devspacecloud/auth:0.3.39ccfe38b31b5
curl@7.67.0-r0
7.67.0-r3
1
devspacecloud/manager:0.3.349c397413f7b
curl@7.67.0-r0
7.67.0-r3
1
dniel/api-posts:master45a667852f2a
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.12
1
elastictranscoder/media:627e21dc963ab3858c6b
curl@7.58.0-2ubuntu3.10
7.58.0-2ubuntu3.12
1
elastictranscoder/media-storage:f6d861a026208b8c2359
curl@7.58.0-2ubuntu3.10
7.58.0-2ubuntu3.12
1
elastictranscoder/transcoder:627e21dcb4a0327029e6
curl@7.58.0-2ubuntu3.9
7.58.0-2ubuntu3.12
1
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
curl@7.58.0-2ubuntu3.9
7.58.0-2ubuntu3.12
1
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
curl@7.47.0-1ubuntu2.5
7.47.0-1ubuntu2.18
1
folioci/mod-marccat:latest1b57d690d568
curl@7.66.0-r0
7.66.0-r3
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.