StackRadar

CVE-2020-8911

Medium

Advisory

Published 11 Feb 2022In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.6
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
896
of 17,790 indexed, latest versions
Container images
928
deployed by those charts
Fix available
1 of 1
affected package

CBC padding oracle issue in AWS S3 Crypto SDK for golang

Carried by container images the latest versions of 896 of 17,790 indexed charts deploy, on 928 images.

Affected packageAffected versionsFixed inImages
github.com/aws/aws-sdk-gogolangv1.12.54, v1.15.24, v1.17.7, v1.17.14+288 more1.34.0928
OSV records
GHSA-f5pg-7wfw-84q9GO-2022-0646

Charts affected

896 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

928 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/traefik:2.5.62f603f8d3abe
github.com/aws/aws-sdk-go@v1.39.0
no fix listed
1
library/traefik:v1.7.345d47b7bb2546
github.com/aws/aws-sdk-go@v1.39.0
no fix listed
1
library/traefik:2.5.47d0228d19042
github.com/aws/aws-sdk-go@v1.39.0
no fix listed
1
library/traefik:2.4.8eda951fd29a8
github.com/aws/aws-sdk-go@v1.37.27
no fix listed
1
library/traefik:2.2.8f5af5a5ce17f
github.com/aws/aws-sdk-go@v1.30.20
1.34.0
1
library/vault:1.13.3f98ac9dd97b0
github.com/aws/aws-sdk-go@v1.44.191
no fix listed
1
litestream/litestream:0.3c5a1e1b01916
github.com/aws/aws-sdk-go@v1.44.318
no fix listed
1
livekit/livekit-recorder:v0.3.13ecf1409c75e0
github.com/aws/aws-sdk-go@v1.40.55
no fix listed
1
localstack/localstack:latest3fe5b51caec8
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
1
localstack/localstack:3.19d278167f2b7
github.com/aws/aws-sdk-go@v1.44.62
no fix listed
1
logiqai/flash:v3.10.265b996bc7bdc
github.com/aws/aws-sdk-go@v1.33.1
1.34.0
1
machines/filestash:latest0b8fc005e52e
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
1
mantlenetworkio/l2geth:v0.4.36bf383d14291
github.com/aws/aws-sdk-go@v1.44.285
no fix listed
1
maponyacharles/sceptreai:seaweedfs-0.1.127c8a525f08e9
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
1
mesosphere/dex:v2.37.0-d2iq.1b093d78a21ed
github.com/aws/aws-sdk-go@v1.44.206
no fix listed
1
mesosphere/kommander-federation-authorizedlister:v0.21.263bc411b930b
github.com/aws/aws-sdk-go@v1.36.2
no fix listed
1
mesosphere/kommander-federation-controller-manager:v0.21.2b036785a8862
github.com/aws/aws-sdk-go@v1.36.2
no fix listed
1
mesosphere/kommander-federation-utility-apiserver:v0.21.2f9b769c65e24
github.com/aws/aws-sdk-go@v1.36.2
no fix listed
1
mesosphere/kommander-federation-webhook:v0.21.294af41b6dd9a
github.com/aws/aws-sdk-go@v1.36.2
no fix listed
1
mesosphere/kommander-licensing-controller-manager:v0.21.28e18bbe407f7
github.com/aws/aws-sdk-go@v1.34.1
no fix listed
1
mesosphere/kommander-licensing-webhook:v0.21.2265edcd2a1ca
github.com/aws/aws-sdk-go@v1.34.1
no fix listed
1
migrate/migrate:latest76cc2074cb66
github.com/aws/aws-sdk-go@v1.49.6
no fix listed
1
minio/kes:v0.22.255f3aef5803e
github.com/aws/aws-sdk-go@v1.30.27
1.34.0
1
minio/kes:2023-04-03T16-41-28Zf93c2d9088df
github.com/aws/aws-sdk-go@v1.34.0
no fix listed
1
mirrorgitlabcontainers/gitlab-container-registry:v2.9.1-gitlab06b19a4bc805
github.com/aws/aws-sdk-go@v1.26.3
1.34.0
1
mirrorgitlabcontainers/gitlab-workhorse-ce:v13.2.2a6d7bf42805a
github.com/aws/aws-sdk-go@v1.31.7
1.34.0
1
netrisai/controller-telescope:4.6.0.00414d82948a8b2
github.com/aws/aws-sdk-go@v1.34.28
no fix listed
1
neuvector/controller:5.6.1ae45c394f1ac
github.com/aws/aws-sdk-go@v1.55.7
no fix listed
1
neuvector/enforcer:5.6.1aa2137cc90ec
github.com/aws/aws-sdk-go@v1.55.7
no fix listed
1
neuvector/scanner:6ac0167154880
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
1
nocodb/nocodb:0.258.06779a4ddedf2
github.com/aws/aws-sdk-go@v1.49.5
no fix listed
1
nocodb/nocodb:0.100.2b0b91ec2a2dd
github.com/aws/aws-sdk-go@v1.44.71
no fix listed
1
nocodb/nocodb:0.84.15f9b799933aa8
github.com/aws/aws-sdk-go@v1.42.53
no fix listed
1
ofekmeister/csi-gcs:v0.9.030d70fa9211b
github.com/aws/aws-sdk-go@v1.42.48
no fix listed
1
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
github.com/aws/aws-sdk-go@v1.55.5
no fix listed
1
opencsghq/gitlab-shell:v17.5.0f6d7e7d6be5d
github.com/aws/aws-sdk-go@v1.44.206
no fix listed
1
opencsghq/prometheus:v3.13.00aac0d04749e
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
1
openkruise/kruise-game-manager:v1.1.0d3c6d69d2c39
github.com/aws/aws-sdk-go@v1.50.20
no fix listed
1
openmined/syft-seaweedfs:0.9.53a4144c0bb82
github.com/aws/aws-sdk-go@v1.50.25
no fix listed
1
opennms/sentinel:36.0.288869082a14f
github.com/aws/aws-sdk-go@v1.55.5
no fix listed
1
openpolicyagent/gatekeeper:v3.17.1b7b4d7cfdd52
github.com/aws/aws-sdk-go@v1.47.9
no fix listed
1
openpolicyagent/gatekeeper:v3.23.1dfc6fc78753f
github.com/aws/aws-sdk-go@v1.47.9
no fix listed
1
opentext/verticadb-operator:26.2.2-04ad44e44476c
github.com/aws/aws-sdk-go@v1.49.5
no fix listed
1
opsgenie/kubernetes-event-exporter:0.9ecb246e4d260
github.com/aws/aws-sdk-go@v1.30.10
1.34.0
1
oryd/oathkeeper:v26.2.0467329abde34
github.com/aws/aws-sdk-go@v1.55.6
no fix listed
1
otel/opentelemetry-collector:0.153.06ed874ea083d
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
1
otel/opentelemetry-collector:0.100.09e36620d6c2c
github.com/aws/aws-sdk-go@v1.51.32
no fix listed
1
otel/opentelemetry-collector:0.59.0ee9da0b08d83
github.com/aws/aws-sdk-go@v1.44.87
no fix listed
1
otel/opentelemetry-collector-contrib:0.114.037fa87091cfa
github.com/aws/aws-sdk-go@v1.55.5
no fix listed
1
otel/opentelemetry-collector-contrib:0.143.03bc07732530c
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.