StackRadar

CVE-2020-8559

Medium

Advisory

Published 24 Apr 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.8
base score, highest
EPSS
0.061
93rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
263
of 17,781 indexed, latest versions
Container images
237
deployed by those charts
Fix available
2 of 2
affected packages

Privilege Escalation in Kubernetes

Carried by container images the latest versions of 263 of 17,781 indexed charts deploy, on 237 images.

Affected packageAffected versionsFixed inImages
k8s.io/apimachinerygolangv0.0.0-20170513172009-9603df80256c, v0.0.0-20180515182440-31dade610c05, v0.0.0-20180621070125-103fd098999d, v0.0.0-20181127025237-2b1284ed4c93+43 more0.16.13, 0.17.9, 0.18.7178
k8s.io/kubernetesgolangv0.0.0-20240417172702-7c48c2bd72b9, v0.0.0-20240514104202-6911225c3f74, v0.0.0-20240611201126-f25b321b9ae4, v0.0.0-20240611201706-062798d53d83+37 more1.16.13, 1.17.9, 1.18.774
OSV records
GHSA-33c5-9fx5-fvjm
Also known as
GO-2024-2748

Charts affected

263 by stars
ChartLatestAffected imagesRadar Score
verhuis-serviceverhuis-service1.0.01 of 3See more

verhuis-service verhuis-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8559.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verhuis-service-php:latest66bbaf95a123
k8s.io/apimachinery@v0.18.0
0.18.7

Open the chart page →

7,510
verzoekconversieserviceverzoekconversieservice1.0.01 of 3See more

verzoekconversieservice verzoekconversieservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8559.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekconversieservice-php:lateste918014fb8d3
k8s.io/apimachinery@v0.18.0
0.18.7

Open the chart page →

7,528
verzoekregistratiecomponentverzoekregistratiecomponent1.1.01 of 4See more

verzoekregistratiecomponent verzoekregistratiecomponent 1.1.0

1 of the 4 container images this version deploys carry CVE-2020-8559.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekregistratiecomponent-php:latestc4f6c03af5d3
k8s.io/apimachinery@v0.18.0
0.18.7

Open the chart page →

7,429
verzoektypecatalogusverzoektypecatalogus1.1.01 of 4See more

verzoektypecatalogus verzoektypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2020-8559.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoektypecatalogus-php:latest64f5eb7a398b
k8s.io/apimachinery@v0.18.0
0.18.7

Open the chart page →

7,429
wazuhwazuh-helm-eksVerified publisher1.2.101 of 6See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry CVE-2020-8559.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.14.45a065930682d
k8s.io/apimachinery@v0.18.3
0.18.7

Open the chart page →

5,484
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2020-8559.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
k8s.io/apimachinery@v0.18.3
0.18.7

Open the chart page →

11,119
azure-scheduledevents-managerwebdevopsVerified publisher1.0.171 of 1See more

azure-scheduledevents-manager webdevops 1.0.17

1 of the 1 container images this version deploys carry CVE-2020-8559.

Container imageDigestPackageFixed in
webdevops/azure-scheduledevents-manager:24.9.0-kubernetes7acd46a8a972
k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559
1.16.13

Open the chart page →

1,122
webresourcecataloguswebresourcecatalogus1.1.01 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2020-8559.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
k8s.io/apimachinery@v0.18.0
0.18.7

Open the chart page →

7,552
nfs-subdir-external-provisionerwenerme4.0.181 of 1See more

nfs-subdir-external-provisioner wenerme 4.0.18

1 of the 1 container images this version deploys carry CVE-2020-8559.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
k8s.io/apimachinery@v0.18.2-beta.0
k8s.io/kubernetes@v1.18.0
0.18.7
1.18.7

Open the chart page →

2,743
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2020-8559.

Container imageDigestPackageFixed in
prom/prometheus:v2.16.0e4ca62c0d62f
k8s.io/apimachinery@v0.0.0-20190809020650-423f5d784010
0.16.13

Open the chart page →

22,665
traefikwenerme9.1.11 of 1See more

traefik wenerme 9.1.1

1 of the 1 container images this version deploys carry CVE-2020-8559.

Container imageDigestPackageFixed in
library/traefik:2.2.8f5af5a5ce17f
k8s.io/apimachinery@v0.17.3
0.17.9

Open the chart page →

3,369
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2020-8559.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
k8s.io/kubernetes@v0.0.0-20241022202812-5864a4677267
1.16.13

Open the chart page →

13,677
zahori-consulzahoriVerified publisher1.0.11 of 2See more

zahori-consul zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2020-8559.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
k8s.io/apimachinery@v0.18.2
0.18.7

Open the chart page →

5,033

Container images carrying it

237 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.2c7adcc4db378
k8s.io/kubernetes@v0.0.0-20250311174105-0d0f172cdf9f
1.16.13
1
ghcr.io/honeycombio/kspan/kspan:0.2c966a4f8a4b7
k8s.io/apimachinery@v0.18.6
0.18.7
1
ghcr.io/k8snetworkplumbingwg/multus-cni:v3.7.1e72aa733faf2
k8s.io/apimachinery@v0.18.3
k8s.io/kubernetes@v1.13.0
0.18.7
1.16.13
1
ghcr.io/kluster-manager/cluster-proxy:v0.10.1a7fce69e171c
k8s.io/kubernetes@v0.0.0-20240611202059-39683505b630
1.16.13
1
ghcr.io/kore3lab/kore-board.metrics-scraper:v0.5.547f88b18fb7c
k8s.io/apimachinery@v0.0.0-20190221093215-450d01ad5771
0.16.13
1
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
k8s.io/kubernetes@v0.0.0-20241211175915-70d3cc986aa8
1.16.13
1
ghcr.io/kvaps/linstor-controller:v1.14.000ce11c31087
k8s.io/apimachinery@v0.18.4
0.18.7
1
ghcr.io/kvaps/linstor-csi:v1.14.0087618d16b83
k8s.io/apimachinery@v0.17.0
k8s.io/kubernetes@v1.14.10
0.17.9
1.16.13
1
ghcr.io/liangyuanpeng/replacer:v1.1.00b2a41c2a43e
k8s.io/apimachinery@v0.16.10
k8s.io/kubernetes@v1.16.10
0.16.13
1.16.13
1
ghcr.io/mskazemi/kubeintellect:2.5.0b5d7681d1b9d
k8s.io/kubernetes@v0.0.0-20250422155613-59526cd48674
1.16.13
1
ghcr.io/nefelim4ag/k8s-ssh-bastion:0.5.04d337e14c80b
k8s.io/kubernetes@v0.0.0-20240611201706-062798d53d83
1.16.13
1
ghcr.io/paganuzzi/ngrokoperator:latest5a10cd095699
k8s.io/apimachinery@v0.18.2
0.18.7
1
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
k8s.io/apimachinery@v0.18.3
0.18.7
1
ghcr.io/salesforce/sloop:sha-2ce8bbe119e24f24b1d
k8s.io/apimachinery@v0.17.0
0.17.9
1
ghcr.io/tjm/vault-gcp-secrets:v1.19.59f157fe035f1
k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559
1.16.13
1
ghcr.io/turbot/guardrails-agent-kubernetes:0.3.09d01bf9c9224
k8s.io/kubernetes@v0.0.0-20241119134819-c83cbee114dd
1.16.13
1
mcr.microsoft.com/oss/kubernetes-csi/csi-attacher:v2.2.0f55f30876129
k8s.io/apimachinery@v0.17.1-beta.0
0.17.9
1
mcr.microsoft.com/oss/kubernetes-csi/csi-provisioner:v1.6.1667b1b1ea1e4
k8s.io/apimachinery@v0.17.3
0.17.9
1
public.ecr.aws/eks-distro/kubernetes/kube-scheduler:v1.29.14-eks-1-29-lateste7e1db003e6a
k8s.io/kubernetes@v0.0.0-20250108021927-cd1e1306b0ba
1.16.13
1
public.ecr.aws/j1r0q0g6/notebooks/notebook-controller:v1.4cac3ed9a9826
k8s.io/apimachinery@v0.0.0-20190404173353-6a84e37a896d
0.16.13
1
quay.io/bentoml/yatai:0.4.614b482c1f1b8
k8s.io/kubernetes@v1.13.4
1.16.13
1
quay.io/ddn/exascaler-csi-file-driver:v2.2.6fe2e2e5a2751
k8s.io/apimachinery@v0.17.1-beta.0
k8s.io/kubernetes@v1.14.1
0.17.9
1.16.13
1
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
k8s.io/apimachinery@v0.0.0-20190913080033-27d36303b655
0.16.13
1
quay.io/jetstack/kube-oidc-proxy:v0.3.0e045b26eb6df
k8s.io/apimachinery@v0.18.0
0.18.7
1
quay.io/mittwald/kubernetes-secret-generator:v3.4.1465b8e6d0462
k8s.io/apimachinery@v0.0.0-20191004115801-a2eda9f80ab8
0.16.13
1
quay.io/mongodb/mongodb-enterprise-operator:1.8.2a1c3843b03bc
k8s.io/apimachinery@v0.17.8
0.17.9
1
quay.io/mongodb/mongodb-kubernetes-operator:0.3.0107a7c73af59
k8s.io/apimachinery@v0.17.5
0.17.9
1
quay.io/open-cluster-management/cluster-proxy:v0.12.035f9c3ad644a
k8s.io/kubernetes@v0.0.0-20240611202059-39683505b630
1.16.13
1
quay.io/prometheusmsteams/prometheus-msteams:v1.5.3a9f4d31ab811
k8s.io/apimachinery@v0.18.2
0.18.7
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
k8s.io/apimachinery@v0.16.8
0.16.13
1
quay.io/titansoft/imagepullsecret-patcher:v0.1421e6d6a155dc
k8s.io/apimachinery@v0.17.0
0.17.9
1
quay.io/uswitch/kiam:v4.0be3a5846922d
k8s.io/apimachinery@v0.0.0-20180515182440-31dade610c05
0.16.13
1
registry.k8s.io/kubectl:v1.32.73c5268158974
k8s.io/kubernetes@v0.0.0-20250715180032-158eee9fac88
1.16.13
1
registry.k8s.io/kubectl:v1.32.08ccae74fc039
k8s.io/kubernetes@v0.0.0-20241211175915-70d3cc986aa8
1.16.13
1
registry.k8s.io/kubectl:v1.31.10e0b2d217d1d2
k8s.io/kubernetes@v0.0.0-20250617183334-61183587c03f
1.16.13
1
registry.k8s.io/kube-scheduler:v1.28.1146cf7475c8da
k8s.io/kubernetes@v0.0.0-20240611201126-f25b321b9ae4
1.16.13
1
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.03ce0fdba4d8e
k8s.io/apimachinery@v0.18.2-beta.0
k8s.io/kubernetes@v1.18.0
0.18.7
1.18.7
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.