CVE-2020-8286

High

Advisory

Published 9 Dec 2020In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.046; 91st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 258; of 17,781 indexed, latest versions
Container images: 162; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 258 of 17,781 indexed charts deploy, on 162 images.

Affected package	Affected versions	Fixed in	Images
curlapk	7.65.1-r0, 7.66.0-r0, 7.67.0-r0, 7.67.0-r1+2 more	7.66.0-r3, 7.67.0-r3, 7.69.1-r3	91
curldeb	7.47.0-1ubuntu2.2, 7.47.0-1ubuntu2.5, 7.47.0-1ubuntu2.6, 7.47.0-1ubuntu2.7+15 more	7.47.0-1ubuntu2.18, 7.58.0-2ubuntu3.12, 7.68.0-1ubuntu2.4	71

OSV records: ALPINE-CVE-2020-8286 UBUNTU-CVE-2020-8286
Also known as: USN-4665-1

Charts affected

258 by stars

Chart

Latest

Affected images

Radar Score

procestypecatalogusprocestypecatalogus

1.1.0

1 of 4 See more

procestypecatalogus procestypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/procestypecatalogus-php :latest	956c4fb64796	curl@7.69.1-r0	7.69.1-r3

Open the chart page →

7,429

productenendienstencatalogusproductenendienstencatalogus

1.0.0

1 of 3 See more

productenendienstencatalogus productenendienstencatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/productenendienstencatalogus-php :latest	7242da105081	curl@7.69.1-r0	7.69.1-r3

Open the chart page →

7,510

panproto-application-nldesign

0.1.0

1 of 5 See more

pan proto-application-nldesign 0.1.0

1 of the 5 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
conduction/pan-php :dev	24f03c57568f	curl@7.69.1-r0	7.69.1-r3

Open the chart page →

8,725

proto-component-commongroundproto-component-commonground

1.0.0

1 of 3 See more

proto-component-commonground proto-component-commonground 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/proto-component-commonground-php :latest	eb36ead1954e	curl@7.69.1-r0	7.69.1-r3

Open the chart page →

7,510

pagesranjinigogga

1.0.0

1 of 3 See more

pages ranjinigogga 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.12

Open the chart page →

20,190

pagesrebecca-pages

1.0.0

1 of 3 See more

pages rebecca-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.12

Open the chart page →

20,190

static-siteredhat-cop

0.0.24

1 of 2 See more

static-site redhat-cop 0.0.24

1 of the 2 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
jijiechen/alpine-curl-git :v2.24.1	0ee39a17903f	curl@7.67.0-r0	7.67.0-r3

Open the chart page →

1,726

review-componentreview-component

1.0.0

1 of 3 See more

review-component review-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/review-component-php :latest	afe623824b82	curl@7.69.1-r0	7.69.1-r3

Open the chart page →

7,491

pagesroccohiggins-pages

1.0.0

1 of 3 See more

pages roccohiggins-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.12

Open the chart page →

20,190

pagesronan-pages

1.0.0

1 of 3 See more

pages ronan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.12

Open the chart page →

20,190

pagessamanvithkaranth

1.0.0

1 of 3 See more

pages samanvithkaranth 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.12

Open the chart page →

20,190

pagessarubits-pages

1.0.0

1 of 3 See more

pages sarubits-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.12

Open the chart page →

20,190

pagessekharpkube

1.0.0

1 of 3 See more

pages sekharpkube 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.12

Open the chart page →

20,190

seldon-core-loadtestingseldon

0.2.0

1 of 1 See more

seldon-core-loadtesting seldon 0.2.0

1 of the 1 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
seldonio/locust-core :0.8	1d0da98a2d76	curl@7.47.0-1ubuntu2.13	7.47.0-1ubuntu2.18

Open the chart page →

23,007

pagesshrutiujlan-pages

1.0.0

1 of 3 See more

pages shrutiujlan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.12

Open the chart page →

20,190

aafsmo-helm-chart

6.0.0

1 of 14 See more

aaf smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	curl@7.47.0-1ubuntu2.12	7.47.0-1ubuntu2.18

Open the chart page →

25,769

aaismo-helm-chart

6.0.0

1 of 14 See more

aai smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	curl@7.47.0-1ubuntu2.12	7.47.0-1ubuntu2.18

Open the chart page →

25,803

dgbuildersmo-helm-chart

6.0.0

1 of 3 See more

dgbuilder smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.0	7daa08b81954	curl@7.47.0-1ubuntu2.7	7.47.0-1ubuntu2.18

Open the chart page →

28,470

dmaap-listenersmo-helm-chart

6.0.0

1 of 3 See more

dmaap-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	curl@7.47.0-1ubuntu2.12	7.47.0-1ubuntu2.18

Open the chart page →

25,769

elasticsearchsmo-helm-chart

6.0.0

1 of 5 See more

elasticsearch smo-helm-chart 6.0.0

1 of the 5 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	curl@7.47.0-1ubuntu2.12	7.47.0-1ubuntu2.18

Open the chart page →

24,776

logsmo-helm-chart

6.0.0

1 of 6 See more

log smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.0	7daa08b81954	curl@7.47.0-1ubuntu2.7	7.47.0-1ubuntu2.18

Open the chart page →

29,220

mariadb-initsmo-helm-chart

6.0.0

1 of 2 See more

mariadb-init smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	curl@7.47.0-1ubuntu2.12	7.47.0-1ubuntu2.18

Open the chart page →

24,776

msbsmo-helm-chart

6.0.0

1 of 6 See more

msb smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.0	7daa08b81954	curl@7.47.0-1ubuntu2.7	7.47.0-1ubuntu2.18

Open the chart page →

27,477

pndasmo-helm-chart

6.0.0

1 of 3 See more

pnda smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.0	7daa08b81954	curl@7.47.0-1ubuntu2.7	7.47.0-1ubuntu2.18

Open the chart page →

27,477

pombasmo-helm-chart

6.0.0

1 of 17 See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.0	7daa08b81954	curl@7.47.0-1ubuntu2.7	7.47.0-1ubuntu2.18

Open the chart page →

29,220

portalsmo-helm-chart

6.0.0

1 of 8 See more

portal smo-helm-chart 6.0.0

1 of the 8 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.0	7daa08b81954	curl@7.47.0-1ubuntu2.7	7.47.0-1ubuntu2.18

Open the chart page →

27,477

sdcsmo-helm-chart

6.0.0

1 of 14 See more

sdc smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	curl@7.47.0-1ubuntu2.12	7.47.0-1ubuntu2.18

Open the chart page →

25,769

sdnc-ansible-serversmo-helm-chart

6.0.0

1 of 3 See more

sdnc-ansible-server smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	curl@7.47.0-1ubuntu2.12	7.47.0-1ubuntu2.18

Open the chart page →

25,769

sdnc-portalsmo-helm-chart

6.0.0

1 of 3 See more

sdnc-portal smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	curl@7.47.0-1ubuntu2.12	7.47.0-1ubuntu2.18

Open the chart page →

25,769

sdnc-promsmo-helm-chart

6.0.0

1 of 2 See more

sdnc-prom smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	curl@7.47.0-1ubuntu2.12	7.47.0-1ubuntu2.18

Open the chart page →

24,776

sdnc-websmo-helm-chart

6.0.0

1 of 3 See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	curl@7.47.0-1ubuntu2.12	7.47.0-1ubuntu2.18

Open the chart page →

24,776

ueb-listenersmo-helm-chart

6.0.0

1 of 3 See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	curl@7.47.0-1ubuntu2.12	7.47.0-1ubuntu2.18

Open the chart page →

25,769

spinnakerspinnaker

2.2.13

1 of 4 See more

spinnaker spinnaker 2.2.13

1 of the 4 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2020-11-25T23-04-07Z	bf85c57cdfcc	curl@7.69.1-r1	7.69.1-r3

Open the chart page →

6,836

pagessrinipages

1.0.0

1 of 3 See more

pages srinipages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.12

Open the chart page →

20,190

datapusherstatcan

1.0.0

1 of 1 See more

datapusher statcan 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
keitaro/ckan-datapusher :0.0.17	5bf1a45f45c1	curl@7.69.1-r1	7.69.1-r3

Open the chart page →

3,044

prometheus-operatorstatcan

0.2.2

1 of 7 See more

prometheus-operator statcan 0.2.2

1 of the 7 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
squareup/ghostunnel :v1.5.2	70f4cf270425	curl@7.66.0-r0	7.66.0-r3

Open the chart page →

12,237

vaultstatcan

0.1.8

1 of 2 See more

vault statcan 0.1.8

1 of the 2 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
hashicorp/vault-k8s :0.6.0	5697b85bc69a	curl@7.69.1-r1	7.69.1-r3

Open the chart page →

4,222

pagesstephendillondell

1.0.0

1 of 3 See more

pages stephendillondell 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.12

Open the chart page →

20,190

pagessunilb2590-pages

1.0.0

1 of 3 See more

pages sunilb2590-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.12

Open the chart page →

20,190

taalhuizen-servicetaalhuizen-service

1.0.0

1 of 3 See more

taalhuizen-service taalhuizen-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/taalhuizen-service-php :latest	04f1b7f0d573	curl@7.69.1-r0	7.69.1-r3

Open the chart page →

7,480

repmanteam-blue

0.3.0

1 of 5 See more

repman team-blue 0.3.0

1 of the 5 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
buddy/repman :1.4.0	097c897f8b54	curl@7.67.0-r0	7.67.0-r3

Open the chart page →

3,993

pagestest4322

1.0.0

1 of 3 See more

pages test4322 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.12

Open the chart page →

20,190

standard-applicationthebitgram

1.0.12

1 of 1 See more

standard-application thebitgram 1.0.12

1 of the 1 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
gcr.io/google_containers/echoserver :1.10	cb5c1bddd1b5	curl@7.47.0-1ubuntu2.2	7.47.0-1ubuntu2.18

Open the chart page →

11,007

pagesthiru-pages

1.0.0

1 of 3 See more

pages thiru-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.12

Open the chart page →

20,190

pagesthuy-pages

1.0.0

1 of 3 See more

pages thuy-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.12

Open the chart page →

20,190

trouw-servicetrouw-service

1.0.0

1 of 3 See more

trouw-service trouw-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/trouw-service-php :latest	f745e2870692	curl@7.69.1-r0	7.69.1-r3

Open the chart page →

7,510

lightstepupdater-lightstep-satellite

1.2.2

1 of 1 See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
lightstep/collector :2021-01-26_23-02-36Z	11c5569aaf3b	curl@7.47.0-1ubuntu2.12	7.47.0-1ubuntu2.18

Open the chart page →

15,330

verhuis-serviceverhuis-service

1.0.0

1 of 3 See more

verhuis-service verhuis-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verhuis-service-php :latest	66bbaf95a123	curl@7.69.1-r0	7.69.1-r3

Open the chart page →

7,510

verzoekconversieserviceverzoekconversieservice

1.0.0

1 of 3 See more

verzoekconversieservice verzoekconversieservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoekconversieservice-php :latest	e918014fb8d3	curl@7.69.1-r0	7.69.1-r3

Open the chart page →

7,528

verzoekregistratiecomponentverzoekregistratiecomponent

1.1.0

1 of 4 See more

verzoekregistratiecomponent verzoekregistratiecomponent 1.1.0

1 of the 4 container images this version deploys carry CVE-2020-8286.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoekregistratiecomponent-php :latest	c4f6c03af5d3	curl@7.69.1-r0	7.69.1-r3

Open the chart page →

7,429

Container images carrying it

162 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/conductionnl/verzoekregistratiecomponent-php :latest	c4f6c03af5d3	curl@7.69.1-r0	7.69.1-r3	1
ghcr.io/conductionnl/verzoektypecatalogus-php :latest	64f5eb7a398b	curl@7.69.1-r0	7.69.1-r3	1
ghcr.io/conductionnl/waardepapieren-balie-php :latest	f36c423cd259	curl@7.69.1-r0	7.69.1-r3	1
ghcr.io/conductionnl/waardepapieren-php :latest	b2666ffcbad8	curl@7.69.1-r0	7.69.1-r3	1
ghcr.io/conductionnl/waardepapieren-register-php :latest	9affab218351	curl@7.69.1-r0	7.69.1-r3	1
quay.io/apicurio/apicurio-registry-kube-sync :1.0.1	70ef31840269	curl@7.67.0-r0	7.67.0-r3	1
quay.io/eclipse/che-devfile-registry :nightly	5d25d47d6e17	curl@7.69.1-r0	7.69.1-r3	1
quay.io/fairwinds/clamav :v0.0.3	e12bdddaa81d	curl@7.67.0-r0	7.67.0-r3	1
quay.io/kubernetes-ingress-controller/nginx-ingress-controller :0.32.0	251e733bf41c	curl@7.67.0-r0	7.67.0-r3	1
quay.io/kubernetes-ingress-controller/nginx-ingress-controller :0.30.0	b312c91d0de6	curl@7.67.0-r0	7.67.0-r3	1
quay.io/mongodb/mongodb-enterprise-operator :1.8.2	a1c3843b03bc	curl@7.47.0-1ubuntu2.16	7.47.0-1ubuntu2.18	1
quay.io/simplyzee/kube-rclone :v1.52.3	89a0c23d5ad3	curl@7.69.1-r0	7.69.1-r3	1