StackRadar

CVE-2020-8561

Medium

Advisory

Published 21 Sept 2021In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.1
base score, highest
EPSS
0.021
81st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
104
of 17,781 indexed, latest versions
Container images
91
deployed by those charts
Fix available
None
affected package

Confused Deputy in Kubernetes

Carried by container images the latest versions of 104 of 17,781 indexed charts deploy, on 91 images.

Affected packageAffected versionsFixed inImages
k8s.io/kubernetesgolangv0.0.0-20240417172702-7c48c2bd72b9, v0.0.0-20240514104202-6911225c3f74, v0.0.0-20240611201126-f25b321b9ae4, v0.0.0-20240611201706-062798d53d83+50 moreno fix listed91
OSV records
GHSA-74j8-88mm-7496

Charts affected

104 by stars
ChartLatestAffected imagesRadar Score
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2020-8561.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
k8s.io/kubernetes@v1.18.19
no fix listed

Open the chart page →

15,230
nfs-subdir-external-provisionerwenerme4.0.181 of 1See more

nfs-subdir-external-provisioner wenerme 4.0.18

1 of the 1 container images this version deploys carry CVE-2020-8561.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
k8s.io/kubernetes@v1.18.0
no fix listed

Open the chart page →

2,743
csi-driver-host-pathwiremindVerified publisher0.1.11 of 8See more

csi-driver-host-path wiremind 0.1.1

1 of the 8 container images this version deploys carry CVE-2020-8561.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/hostpathplugin:v1.9.092257881c1d6
k8s.io/kubernetes@v1.20.0
no fix listed

Open the chart page →

12,606
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2020-8561.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
k8s.io/kubernetes@v0.0.0-20241022202812-5864a4677267
no fix listed

Open the chart page →

13,677

Container images carrying it

91 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
clastix/kubectl:v1.3122918a06c253
k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559
no fix listed
6
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
k8s.io/kubernetes@v1.11.0-beta.2
no fix listed
5
argoproj/argocd:v1.8.1830e86cacefd
k8s.io/kubernetes@v1.19.2
no fix listed
3
quay.io/devtron/ai-agent:0.0.16545dac92173
k8s.io/kubernetes@v0.0.0-20241022202705-f0c1ea863533
no fix listed
3
quay.io/devtron/calico-networking:node-v3.19.1bc4aa22272ef
k8s.io/kubernetes@v1.21.0-rc.0
no fix listed
3
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
k8s.io/kubernetes@v1.20.4
no fix listed
3
registry.k8s.io/kubectl:v1.31.099b37df34bc4
k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559
no fix listed
3
csiplugin/csi-qingcloud:v1.4.00766163dc046
k8s.io/kubernetes@v1.14.1
no fix listed
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
k8s.io/kubernetes@v0.0.0-20250515091041-8f3800390d48
no fix listed
2
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.1c137478627cc
k8s.io/kubernetes@v0.0.0-20250813142120-2e83bc4bf31e
no fix listed
2
quay.io/zncdatadev/tools:1.0.0-kubedoop0.0.0-dev382fca2054c9
k8s.io/kubernetes@v0.0.0-20240911212207-948afe5ca072
no fix listed
2
registry.k8s.io/kube-scheduler:v1.30.1474a5cf9cfa9f
k8s.io/kubernetes@v0.0.0-20250617182919-9e1848391882
no fix listed
2
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
k8s.io/kubernetes@v1.18.0
no fix listed
2
airbyte/pod-sweeper:1.5.198d2c39d512e
k8s.io/kubernetes@v0.0.0-20241210113726-a78aa47129b8
no fix listed
1
alpine/k8s:1.31.106dbe6f391eda
k8s.io/kubernetes@v0.0.0-20250617183334-61183587c03f
no fix listed
1
alpine/k8s:1.31.137a319b15cfc9
k8s.io/kubernetes@v0.0.0-20250909225156-c601ba40fa8f
no fix listed
1
alpine/k8s:1.32.47e1e7d5b7a96
k8s.io/kubernetes@v0.0.0-20250422155613-59526cd48674
no fix listed
1
alpine/k8s:1.31.49c4976d47656
k8s.io/kubernetes@v0.0.0-20241210113726-a78aa47129b8
no fix listed
1
alpine/k8s:1.30.0bd01dae02676
k8s.io/kubernetes@v0.0.0-20240417172702-7c48c2bd72b9
no fix listed
1
alpine/k8s:1.30.2cd560fce90f7
k8s.io/kubernetes@v0.0.0-20240611202059-39683505b630
no fix listed
1
alpine/k8s:1.28.13e5c0b053fed7
k8s.io/kubernetes@v0.0.0-20240814194418-024ab2a13ff7
no fix listed
1
alpine/k8s:1.32.3eec354133193
k8s.io/kubernetes@v0.0.0-20250311195220-32cc146f75aa
no fix listed
1
amazon/aws-efs-csi-driver:v0.3.0b55277652ea8
k8s.io/kubernetes@v1.16.1
no fix listed
1
bitnamilegacy/kubectl:1.301249fc292e84
k8s.io/kubernetes@v0.0.0-20241119172634-0c76c645d5a6
no fix listed
1
bitnamilegacy/kubectl:1.3164614ef8290f
k8s.io/kubernetes@v0.0.0-20241210113726-a78aa47129b8
no fix listed
1
bitnamilegacy/kubectl:1.30.5744f84cf7493
k8s.io/kubernetes@v0.0.0-20240912001154-74e84a90c725
no fix listed
1
burganbank/vault-initializer:v19259c34e4037
k8s.io/kubernetes@v0.0.0-20240514104202-6911225c3f74
no fix listed
1
crowdfox/external-service-operator:v1.1.06fa7e8063d27
k8s.io/kubernetes@v1.13.4
no fix listed
1
csiplugin/csi-neonsan:v1.2.21fa83d45417f
k8s.io/kubernetes@v1.18.6
no fix listed
1
datadog/agent:7.22.08f20e56b5311
k8s.io/kubernetes@v1.16.2
no fix listed
1
dserio83/velero-api:0.3.16b3d9115fee2
k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559
no fix listed
1
hetznercloud/hcloud-csi-driver:1.5.141dce5b33644
k8s.io/kubernetes@v1.17.12
no fix listed
1
huzafach/aws-cli-k8:1.0.06e271d43ea48
k8s.io/kubernetes@v0.0.0-20240611202059-39683505b630
no fix listed
1
j0113/haven-compliancy-dashboard:1.3696cb8ca9f4e
k8s.io/kubernetes@v1.21.4
no fix listed
1
kubesphere/kubectl:v1.27.1649b445b1b732
k8s.io/kubernetes@v0.0.0-20240717014424-cbb86e0d7f4a
no fix listed
1
leonardomulticloud/webhook:v1.0.0d119918900e8
k8s.io/kubernetes@v0.0.0-20240911212207-948afe5ca072
no fix listed
1
longhornio/longhorn-manager:v1.2.3dca34321452c
k8s.io/kubernetes@v1.18.19
no fix listed
1
longhornio/longhorn-manager:v1.1.1ede61fe2a472
k8s.io/kubernetes@v1.16.15
no fix listed
1
mesosphere/kommander-federation-authorizedlister:v0.21.263bc411b930b
k8s.io/kubernetes@v1.19.5
no fix listed
1
mesosphere/kommander-federation-controller-manager:v0.21.2b036785a8862
k8s.io/kubernetes@v1.19.5
no fix listed
1
mesosphere/kommander-federation-webhook:v0.21.294af41b6dd9a
k8s.io/kubernetes@v1.19.5
no fix listed
1
murtazashah46/helmfile:latest4d11726cf803
k8s.io/kubernetes@v0.0.0-20241022202812-5864a4677267
no fix listed
1
natsio/nats-operator:0.8.31261dae38389
k8s.io/kubernetes@v1.22.2
no fix listed
1
openebs/provisioner-nfs:0.11.04f41dd782761
k8s.io/kubernetes@v1.17.3
no fix listed
1
openpolicyagent/gatekeeper-crds:v3.17.177bc9bf3d163
k8s.io/kubernetes@v0.0.0-20240716234811-6fc0a69044f1
no fix listed
1
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
k8s.io/kubernetes@v1.16.2
no fix listed
1
rancher/hardened-calico:v3.13.36d2cd61a338b
k8s.io/kubernetes@v1.16.2
no fix listed
1
rancher/hardened-calico:v3.13.3-build20210223c678c25d47c8
k8s.io/kubernetes@v1.16.2
no fix listed
1
rancher/hardened-multus-cni:v3.7.1-build202104168eb8092f0728
k8s.io/kubernetes@v1.13.0
no fix listed
1
veecode/devportal-admin-ui:0.4.30c69fd286b489
k8s.io/kubernetes@v0.0.0-20240814185733-a51b3b711150
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.