StackRadar

CVE-2020-8555

Medium

Advisory

Published 15 Feb 2022In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.3
base score, highest
EPSS
0.037
89th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
84
of 17,781 indexed, latest versions
Container images
72
deployed by those charts
Fix available
1 of 1
affected package

Server Side Request Forgery (SSRF) in Kubernetes

Carried by container images the latest versions of 84 of 17,781 indexed charts deploy, on 72 images.

Affected packageAffected versionsFixed inImages
k8s.io/kubernetesgolangv0.0.0-20240417172702-7c48c2bd72b9, v0.0.0-20240514104202-6911225c3f74, v0.0.0-20240611201126-f25b321b9ae4, v0.0.0-20240611201706-062798d53d83+35 more1.15.12, 1.16.9, 1.17.4, 1.18.172
OSV records
GHSA-x6mj-w4jf-jmgw
Also known as
GO-2022-0890

Charts affected

84 by stars
ChartLatestAffected imagesRadar Score
k8s-dev-podk8s-dev-pod0.3.11 of 1See more

k8s-dev-pod k8s-dev-pod 0.3.1

1 of the 1 container images this version deploys carry CVE-2020-8555.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
k8s.io/kubernetes@v0.0.0-20250515091041-8f3800390d48
1.15.12

Open the chart page →

8,811
k8s-ssh-bastionk8s-ssh-bastion0.5.41 of 1See more

k8s-ssh-bastion k8s-ssh-bastion 0.5.4

1 of the 1 container images this version deploys carry CVE-2020-8555.

Container imageDigestPackageFixed in
ghcr.io/nefelim4ag/k8s-ssh-bastion:0.5.04d337e14c80b
k8s.io/kubernetes@v0.0.0-20240611201706-062798d53d83
1.15.12

Open the chart page →

3,281
kubeflowkromanow94-kubeflow0.5.14 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

4 of the 30 container images this version deploys carry CVE-2020-8555.

Container imageDigestPackageFixed in
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
k8s.io/kubernetes@v1.11.1
1.15.12
gcr.io/ml-pipeline/cache-server:2.3.0293941ee4f65
k8s.io/kubernetes@v1.11.1
1.15.12
gcr.io/ml-pipeline/persistenceagent:2.3.0109ac1b38c41
k8s.io/kubernetes@v1.11.1
1.15.12
gcr.io/ml-pipeline/scheduledworkflow:2.3.0f7e67e0bc071
k8s.io/kubernetes@v1.11.1
1.15.12

Open the chart page →

70,530
listener-operatorkubedoopVerified publisher0.4.01 of 6See more

listener-operator kubedoop 0.4.0

1 of the 6 container images this version deploys carry CVE-2020-8555.

Container imageDigestPackageFixed in
quay.io/zncdatadev/tools:1.0.0-kubedoop0.0.0-dev382fca2054c9
k8s.io/kubernetes@v0.0.0-20240911212207-948afe5ca072
1.15.12

Open the chart page →

4,373
secret-operatorkubedoopVerified publisher0.4.01 of 5See more

secret-operator kubedoop 0.4.0

1 of the 5 container images this version deploys carry CVE-2020-8555.

Container imageDigestPackageFixed in
quay.io/zncdatadev/tools:1.0.0-kubedoop0.0.0-dev382fca2054c9
k8s.io/kubernetes@v0.0.0-20240911212207-948afe5ca072
1.15.12

Open the chart page →

4,341
kubeintellectkubeintellectVerified publisher2.5.01 of 2See more

kubeintellect kubeintellect 2.5.0

1 of the 2 container images this version deploys carry CVE-2020-8555.

Container imageDigestPackageFixed in
ghcr.io/mskazemi/kubeintellect:2.5.0b5d7681d1b9d
k8s.io/kubernetes@v0.0.0-20250422155613-59526cd48674
1.15.12

Open the chart page →

1,859
csi-qingcloudkubesphere-stable1.4.01 of 6See more

csi-qingcloud kubesphere-stable 1.4.0

1 of the 6 container images this version deploys carry CVE-2020-8555.

Container imageDigestPackageFixed in
csiplugin/csi-qingcloud:v1.4.00766163dc046
k8s.io/kubernetes@v1.14.1
1.15.12

Open the chart page →

12,402
curvefs-csikubesphere-stable0.1.01 of 3See more

curvefs-csi kubesphere-stable 0.1.0

1 of the 3 container images this version deploys carry CVE-2020-8555.

Container imageDigestPackageFixed in
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
k8s.io/kubernetes@v1.11.0-beta.2
1.15.12

Open the chart page →

2,822
csi-qingcloudkubesphere-testVerified publisher1.4.01 of 6See more

csi-qingcloud kubesphere-test 1.4.0

1 of the 6 container images this version deploys carry CVE-2020-8555.

Container imageDigestPackageFixed in
csiplugin/csi-qingcloud:v1.4.00766163dc046
k8s.io/kubernetes@v1.14.1
1.15.12

Open the chart page →

12,402
curvefs-csikubesphere-testVerified publisher0.1.01 of 3See more

curvefs-csi kubesphere-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2020-8555.

Container imageDigestPackageFixed in
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
k8s.io/kubernetes@v1.11.0-beta.2
1.15.12

Open the chart page →

2,822
kubestellar-consolekubestellar-consoleVerified publisher0.3.411 of 2See more

kubestellar-console kubestellar-console 0.3.41

1 of the 2 container images this version deploys carry CVE-2020-8555.

Container imageDigestPackageFixed in
alpine/k8s:1.32.47e1e7d5b7a96
k8s.io/kubernetes@v0.0.0-20250422155613-59526cd48674
1.15.12

Open the chart page →

4,439
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.41 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

1 of the 9 container images this version deploys carry CVE-2020-8555.

Container imageDigestPackageFixed in
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
k8s.io/kubernetes@v0.0.0-20241211175915-70d3cc986aa8
1.15.12

Open the chart page →

20,204
gcpdisk-csi-drivermesosphere-stable0.7.31 of 7See more

gcpdisk-csi-driver mesosphere-stable 0.7.3

1 of the 7 container images this version deploys carry CVE-2020-8555.

Container imageDigestPackageFixed in
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
k8s.io/kubernetes@v1.11.0-beta.2
1.15.12

Open the chart page →

3,603
kommandermesosphere-stable0.39.21 of 29See more

kommander mesosphere-stable 0.39.2

1 of the 29 container images this version deploys carry CVE-2020-8555.

Container imageDigestPackageFixed in
gcr.io/kubecost1/server:prod-1.81.0a348db3e4d74
k8s.io/kubernetes@v1.14.1
1.15.12

Open the chart page →

68,284
agent-control-cdnewrelic1.0.01 of 3See more

agent-control-cd newrelic 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8555.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/flux-cli:v2.5.1274a179fd402
k8s.io/kubernetes@v0.0.0-20250212211946-67a30c0adcf5
1.15.12

Open the chart page →

5,034
lensoci-ai-incubations0.1.141 of 16See more

lens oci-ai-incubations 0.1.14

1 of the 16 container images this version deploys carry CVE-2020-8555.

Container imageDigestPackageFixed in
alpine/k8s:1.31.106dbe6f391eda
k8s.io/kubernetes@v0.0.0-20250617183334-61183587c03f
1.15.12

Open the chart page →

17,070
cluster-proxyocm-helm-chartsVerified publisher0.12.01 of 1See more

cluster-proxy ocm-helm-charts 0.12.0

1 of the 1 container images this version deploys carry CVE-2020-8555.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/cluster-proxy:v0.12.035f9c3ad644a
k8s.io/kubernetes@v0.0.0-20240611202059-39683505b630
1.15.12

Open the chart page →

1,189
planectlplanectlVerified publisher0.7.01 of 10See more

planectl planectl 0.7.0

1 of the 10 container images this version deploys carry CVE-2020-8555.

Container imageDigestPackageFixed in
alpine/k8s:1.30.2cd560fce90f7
k8s.io/kubernetes@v0.0.0-20240611202059-39683505b630
1.15.12

Open the chart page →

25,934
gitlab-runner-operatorpnnl-miscscripts0.1.61 of 1See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2020-8555.

Container imageDigestPackageFixed in
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
k8s.io/kubernetes@v1.16.2
1.16.9

Open the chart page →

11,151
capsule-proxyprojectcapsuleOfficialVerified publisher0.14.11 of 2See more

capsule-proxy projectcapsule 0.14.1

1 of the 2 container images this version deploys carry CVE-2020-8555.

Container imageDigestPackageFixed in
clastix/kubectl:v1.3122918a06c253
k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559
1.15.12

Open the chart page →

1,222
rke2-canal-1.19-1.20rke2-charts3.13.3-build20211022021 of 2See more

rke2-canal-1.19-1.20 rke2-charts 3.13.3-build2021102202

1 of the 2 container images this version deploys carry CVE-2020-8555.

Container imageDigestPackageFixed in
rancher/hardened-calico:v3.13.3-build20210223c678c25d47c8
k8s.io/kubernetes@v1.16.2
1.16.9

Open the chart page →

5,942
krr-enforcerrobusta0.3.51 of 2See more

krr-enforcer robusta 0.3.5

1 of the 2 container images this version deploys carry CVE-2020-8555.

Container imageDigestPackageFixed in
alpine/k8s:1.30.0bd01dae02676
k8s.io/kubernetes@v0.0.0-20240417172702-7c48c2bd72b9
1.15.12

Open the chart page →

4,038
ai-agentromholdings0.0.11 of 1See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2020-8555.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
k8s.io/kubernetes@v0.0.0-20241022202705-f0c1ea863533
1.15.12

Open the chart page →

9,607
secret-managersecret-managerVerified publisher1.0.01 of 4See more

secret-manager secret-manager 1.0.0

1 of the 4 container images this version deploys carry CVE-2020-8555.

Container imageDigestPackageFixed in
leonardomulticloud/webhook:v1.0.0d119918900e8
k8s.io/kubernetes@v0.0.0-20240911212207-948afe5ca072
1.15.12

Open the chart page →

5,497
kyvernosoftonic3.5.21 of 7See more

kyverno softonic 3.5.2

1 of the 7 container images this version deploys carry CVE-2020-8555.

Container imageDigestPackageFixed in
registry.k8s.io/kubectl:v1.32.73c5268158974
k8s.io/kubernetes@v0.0.0-20250715180032-158eee9fac88
1.15.12

Open the chart page →

1,019
gloo-meshsolo-gloo-mesh1.1.21 of 1See more

gloo-mesh solo-gloo-mesh 1.1.2

1 of the 1 container images this version deploys carry CVE-2020-8555.

Container imageDigestPackageFixed in
gcr.io/gloo-mesh/gloo-mesh:1.1.2a4011eae6a0b
k8s.io/kubernetes@v1.13.0
1.15.12

Open the chart page →

3,257
spire-identity-exchangespiffeVerified publisher0.2.21 of 3See more

spire-identity-exchange spiffe 0.2.2

1 of the 3 container images this version deploys carry CVE-2020-8555.

Container imageDigestPackageFixed in
registry.k8s.io/kubectl:v1.31.099b37df34bc4
k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559
1.15.12

Open the chart page →

1,427
cost-analyzerstatcan1.82.21 of 9See more

cost-analyzer statcan 1.82.2

1 of the 9 container images this version deploys carry CVE-2020-8555.

Container imageDigestPackageFixed in
gcr.io/kubecost1/server:prod-1.82.22b1a3d08caac
k8s.io/kubernetes@v1.14.1
1.15.12

Open the chart page →

16,506
nfs-provisionersupporttools0.11.01 of 1See more

nfs-provisioner supporttools 0.11.0

1 of the 1 container images this version deploys carry CVE-2020-8555.

Container imageDigestPackageFixed in
openebs/provisioner-nfs:0.11.04f41dd782761
k8s.io/kubernetes@v1.17.3
1.17.4

Open the chart page →

2,671
tfy-inferentia-operatortruefoundryVerified publisher0.2.81 of 3See more

tfy-inferentia-operator truefoundry 0.2.8

1 of the 3 container images this version deploys carry CVE-2020-8555.

Container imageDigestPackageFixed in
public.ecr.aws/eks-distro/kubernetes/kube-scheduler:v1.29.14-eks-1-29-lateste7e1db003e6a
k8s.io/kubernetes@v0.0.0-20250108021927-cd1e1306b0ba
1.15.12

Open the chart page →

2,902
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2020-8555.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.301249fc292e84
k8s.io/kubernetes@v0.0.0-20241119172634-0c76c645d5a6
1.15.12

Open the chart page →

8,607
azure-scheduledevents-managerwebdevopsVerified publisher1.0.171 of 1See more

azure-scheduledevents-manager webdevops 1.0.17

1 of the 1 container images this version deploys carry CVE-2020-8555.

Container imageDigestPackageFixed in
webdevops/azure-scheduledevents-manager:24.9.0-kubernetes7acd46a8a972
k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559
1.15.12

Open the chart page →

1,122
nfs-subdir-external-provisionerwenerme4.0.181 of 1See more

nfs-subdir-external-provisioner wenerme 4.0.18

1 of the 1 container images this version deploys carry CVE-2020-8555.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
k8s.io/kubernetes@v1.18.0
1.18.1

Open the chart page →

2,743
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2020-8555.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
k8s.io/kubernetes@v0.0.0-20241022202812-5864a4677267
1.15.12

Open the chart page →

13,677

Container images carrying it

72 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
clastix/kubectl:v1.3122918a06c253
k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559
1.15.12
6
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
k8s.io/kubernetes@v1.11.0-beta.2
1.15.12
5
quay.io/devtron/ai-agent:0.0.16545dac92173
k8s.io/kubernetes@v0.0.0-20241022202705-f0c1ea863533
1.15.12
3
registry.k8s.io/kubectl:v1.31.099b37df34bc4
k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559
1.15.12
3
csiplugin/csi-qingcloud:v1.4.00766163dc046
k8s.io/kubernetes@v1.14.1
1.15.12
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
k8s.io/kubernetes@v0.0.0-20250515091041-8f3800390d48
1.15.12
2
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.1c137478627cc
k8s.io/kubernetes@v0.0.0-20250813142120-2e83bc4bf31e
1.15.12
2
quay.io/zncdatadev/tools:1.0.0-kubedoop0.0.0-dev382fca2054c9
k8s.io/kubernetes@v0.0.0-20240911212207-948afe5ca072
1.15.12
2
registry.k8s.io/kube-scheduler:v1.30.1474a5cf9cfa9f
k8s.io/kubernetes@v0.0.0-20250617182919-9e1848391882
1.15.12
2
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
k8s.io/kubernetes@v1.18.0
1.18.1
2
airbyte/pod-sweeper:1.5.198d2c39d512e
k8s.io/kubernetes@v0.0.0-20241210113726-a78aa47129b8
1.15.12
1
alpine/k8s:1.31.106dbe6f391eda
k8s.io/kubernetes@v0.0.0-20250617183334-61183587c03f
1.15.12
1
alpine/k8s:1.31.137a319b15cfc9
k8s.io/kubernetes@v0.0.0-20250909225156-c601ba40fa8f
1.15.12
1
alpine/k8s:1.32.47e1e7d5b7a96
k8s.io/kubernetes@v0.0.0-20250422155613-59526cd48674
1.15.12
1
alpine/k8s:1.31.49c4976d47656
k8s.io/kubernetes@v0.0.0-20241210113726-a78aa47129b8
1.15.12
1
alpine/k8s:1.30.0bd01dae02676
k8s.io/kubernetes@v0.0.0-20240417172702-7c48c2bd72b9
1.15.12
1
alpine/k8s:1.30.2cd560fce90f7
k8s.io/kubernetes@v0.0.0-20240611202059-39683505b630
1.15.12
1
alpine/k8s:1.28.13e5c0b053fed7
k8s.io/kubernetes@v0.0.0-20240814194418-024ab2a13ff7
1.15.12
1
alpine/k8s:1.32.3eec354133193
k8s.io/kubernetes@v0.0.0-20250311195220-32cc146f75aa
1.15.12
1
amazon/aws-efs-csi-driver:v0.3.0b55277652ea8
k8s.io/kubernetes@v1.16.1
1.16.9
1
bitnamilegacy/kubectl:1.301249fc292e84
k8s.io/kubernetes@v0.0.0-20241119172634-0c76c645d5a6
1.15.12
1
bitnamilegacy/kubectl:1.3164614ef8290f
k8s.io/kubernetes@v0.0.0-20241210113726-a78aa47129b8
1.15.12
1
bitnamilegacy/kubectl:1.30.5744f84cf7493
k8s.io/kubernetes@v0.0.0-20240912001154-74e84a90c725
1.15.12
1
burganbank/vault-initializer:v19259c34e4037
k8s.io/kubernetes@v0.0.0-20240514104202-6911225c3f74
1.15.12
1
crowdfox/external-service-operator:v1.1.06fa7e8063d27
k8s.io/kubernetes@v1.13.4
1.15.12
1
datadog/agent:7.22.08f20e56b5311
k8s.io/kubernetes@v1.16.2
1.16.9
1
dserio83/velero-api:0.3.16b3d9115fee2
k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559
1.15.12
1
huzafach/aws-cli-k8:1.0.06e271d43ea48
k8s.io/kubernetes@v0.0.0-20240611202059-39683505b630
1.15.12
1
kubesphere/kubectl:v1.27.1649b445b1b732
k8s.io/kubernetes@v0.0.0-20240717014424-cbb86e0d7f4a
1.15.12
1
leonardomulticloud/webhook:v1.0.0d119918900e8
k8s.io/kubernetes@v0.0.0-20240911212207-948afe5ca072
1.15.12
1
murtazashah46/helmfile:latest4d11726cf803
k8s.io/kubernetes@v0.0.0-20241022202812-5864a4677267
1.15.12
1
openebs/provisioner-nfs:0.11.04f41dd782761
k8s.io/kubernetes@v1.17.3
1.17.4
1
openpolicyagent/gatekeeper-crds:v3.17.177bc9bf3d163
k8s.io/kubernetes@v0.0.0-20240716234811-6fc0a69044f1
1.15.12
1
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
k8s.io/kubernetes@v1.16.2
1.16.9
1
rancher/hardened-calico:v3.13.36d2cd61a338b
k8s.io/kubernetes@v1.16.2
1.16.9
1
rancher/hardened-calico:v3.13.3-build20210223c678c25d47c8
k8s.io/kubernetes@v1.16.2
1.16.9
1
rancher/hardened-multus-cni:v3.7.1-build202104168eb8092f0728
k8s.io/kubernetes@v1.13.0
1.15.12
1
veecode/devportal-admin-ui:0.4.30c69fd286b489
k8s.io/kubernetes@v0.0.0-20240814185733-a51b3b711150
1.15.12
1
webdevops/azure-scheduledevents-manager:24.9.0-kubernetes7acd46a8a972
k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559
1.15.12
1
gcr.io/gloo-mesh/gloo-mesh:1.1.2a4011eae6a0b
k8s.io/kubernetes@v1.13.0
1.15.12
1
gcr.io/kubecost1/server:prod-1.82.22b1a3d08caac
k8s.io/kubernetes@v1.14.1
1.15.12
1
gcr.io/kubecost1/server:prod-1.81.0a348db3e4d74
k8s.io/kubernetes@v1.14.1
1.15.12
1
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
k8s.io/kubernetes@v1.11.1
1.15.12
1
gcr.io/ml-pipeline/api-server:2.0.0-alpha.5dc6ca05bb94f
k8s.io/kubernetes@v1.11.1
1.15.12
1
gcr.io/ml-pipeline/cache-server:2.3.0293941ee4f65
k8s.io/kubernetes@v1.11.1
1.15.12
1
gcr.io/ml-pipeline/cache-server:2.0.0-alpha.583e79c709df3
k8s.io/kubernetes@v1.11.1
1.15.12
1
gcr.io/ml-pipeline/persistenceagent:2.0.0-alpha.500db9796a37b
k8s.io/kubernetes@v1.11.1
1.15.12
1
gcr.io/ml-pipeline/persistenceagent:2.3.0109ac1b38c41
k8s.io/kubernetes@v1.11.1
1.15.12
1
gcr.io/ml-pipeline/scheduledworkflow:2.0.0-alpha.5795a0c8a0e13
k8s.io/kubernetes@v1.11.1
1.15.12
1
gcr.io/ml-pipeline/scheduledworkflow:2.3.0f7e67e0bc071
k8s.io/kubernetes@v1.11.1
1.15.12
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.