StackRadar

CVE-2020-8911

Medium

Advisory

Published 11 Feb 2022In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.6
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
896
of 17,790 indexed, latest versions
Container images
928
deployed by those charts
Fix available
1 of 1
affected package

CBC padding oracle issue in AWS S3 Crypto SDK for golang

Carried by container images the latest versions of 896 of 17,790 indexed charts deploy, on 928 images.

Affected packageAffected versionsFixed inImages
github.com/aws/aws-sdk-gogolangv1.12.54, v1.15.24, v1.17.7, v1.17.14+288 more1.34.0928
OSV records
GHSA-f5pg-7wfw-84q9GO-2022-0646

Charts affected

896 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

928 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
scholtz2/algorand-relay-mainnet:4.4.1-stablee9af7d8ff6bb
github.com/aws/aws-sdk-go@v1.34.0
no fix listed
1
scholtz2/aramid-algo-follow-node:v4.3.0-stable1ec63eca86b6
github.com/aws/aws-sdk-go@v1.34.0
no fix listed
1
scholtz2/aramid-algo-node:v4.4.1-stable70263d8fab5b
github.com/aws/aws-sdk-go@v1.34.0
no fix listed
1
sealio/terraform-deployer:v1.5.7-seal.1b0389d9848a5
github.com/aws/aws-sdk-go@v1.44.122
no fix listed
1
semaphoreui/semaphore:latest:v2.19.123996804607eb
github.com/aws/aws-sdk-go@v1.44.122
no fix listed
1
semaphoreui/semaphore:v2.19.1498ad9bc7a2a0
github.com/aws/aws-sdk-go@v1.55.6
no fix listed
1
semaphoreui/semaphore:v2.18.3e9260bfa8255
github.com/aws/aws-sdk-go@v1.55.6
no fix listed
1
shaowenchen/ops-controller-manager:latest26da43bb5b66
github.com/aws/aws-sdk-go@v1.44.131
no fix listed
1
signoz/alertmanager:0.5.07bc7de2e33c2
github.com/aws/aws-sdk-go@v1.40.11
no fix listed
1
signoz/signoz-otel-collector:v0.144.972aa1e4c1ec5
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
1
sikalabs/slu:v0.72.07bd267f30247
github.com/aws/aws-sdk-go@v1.45.20
no fix listed
1
sikalabs/slu:v0.34.0fdc0c6711add
github.com/aws/aws-sdk-go@v1.43.8
no fix listed
1
simpleidserver/faasprometheus:0.0.425e378d57d78
github.com/aws/aws-sdk-go@v1.40.37
no fix listed
1
sky5367/locust-plugins-grafana:latestd51bf68d4b26
github.com/aws/aws-sdk-go@v1.50.8
no fix listed
1
skylenet/ethereum-testnet-homepage:latest8698903e379f
github.com/aws/aws-sdk-go@v1.41.14
no fix listed
1
slamdev/flux-notifier:v0.0.8b173d809132d
github.com/aws/aws-sdk-go@v1.27.1
1.34.0
1
solarwinds/solarwinds-otel-collector:0.152.3-k8s3c1110e8bdfb
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
1
splunk/splunk-operator:2.0.0c4e0d3146226
github.com/aws/aws-sdk-go@v1.42.16
no fix listed
1
sstarcher/ecr-cleaner:0.1.12d43c390cb19
github.com/aws/aws-sdk-go@v1.29.12
1.34.0
1
sstarcher/kube-ebs-tagger:0.1.01f8cae8cfa80
github.com/aws/aws-sdk-go@v1.17.7
1.34.0
1
stakater/whitelister:v0.0.1639107924063e
github.com/aws/aws-sdk-go@v1.33.5
1.34.0
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
github.com/aws/aws-sdk-go@v1.35.5
no fix listed
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.10ebcf7f033b54
github.com/aws/aws-sdk-go@v1.25.48
1.34.0
1
streamnative/pulsar-resources-operator:v0.21.11886043c24d0
github.com/aws/aws-sdk-go@v1.55.5
no fix listed
1
streamnative/pulsar_vault_init:v1.0.731533fa9fab7
github.com/aws/aws-sdk-go@v1.37.19
no fix listed
1
streamnative/sn-operator:v0.20.92a7944a55491
github.com/aws/aws-sdk-go@v1.40.21
no fix listed
1
superorbital/cludod:0.0.2-alphad59732f61d6e
github.com/aws/aws-sdk-go@v1.42.34
no fix listed
1
surajwarbhe/grafana:v185248611e9f1
github.com/aws/aws-sdk-go@v1.29.20
1.34.0
1
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
github.com/aws/aws-sdk-go@v1.44.171
no fix listed
1
temporalio/admin-tools:1.22.4258958fe2ff2
github.com/aws/aws-sdk-go@v1.44.289
no fix listed
1
temporalio/admin-tools:1.15.135034611d981
github.com/aws/aws-sdk-go@v1.42.44
no fix listed
1
temporalio/admin-tools:1.26.237e2e33dbd7b
github.com/aws/aws-sdk-go@v1.44.151
no fix listed
1
temporalio/admin-tools:1.22.0836af062af30
github.com/aws/aws-sdk-go@v1.44.203
no fix listed
1
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
github.com/aws/aws-sdk-go@v1.55.6
no fix listed
1
temporalio/admin-tools:1.25.0-tctl-1.18.1-cli-1.0.0cda4901bab53
github.com/aws/aws-sdk-go@v1.53.15
no fix listed
1
temporalio/admin-tools:1.28cfde8170c92f
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
1
temporalio/auto-setup:1.29.15b3502a3b685
github.com/aws/aws-sdk-go@v1.44.151
no fix listed
1
temporalio/auto-setup:1.27.2b44cbfeb43db
github.com/aws/aws-sdk-go@v1.55.6
no fix listed
1
temporalio/auto-setup:1.29.7f14912b699cf
github.com/aws/aws-sdk-go@v1.55.6
no fix listed
1
temporalio/server:1.26.21e2626efcbc1
github.com/aws/aws-sdk-go@v1.44.151
no fix listed
1
temporalio/server:1.25.08a5798191dea
github.com/aws/aws-sdk-go@v1.51.27
no fix listed
1
temporalio/server:1.29.1c1e3326b2ce1
github.com/aws/aws-sdk-go@v1.55.6
no fix listed
1
temporalio/server:1.22.0ddeebf8bad8f
github.com/aws/aws-sdk-go@v1.44.203
no fix listed
1
temporalio/server:1.15.1e26758f5a1bf
github.com/aws/aws-sdk-go@v1.42.44
no fix listed
1
thanosio/thanos:v0.15.0b12d5c31bf5a
github.com/aws/aws-sdk-go@v1.33.12
1.34.0
1
tile38/tile38:1.38.05b61c6f3b32e
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
1
tile38/tile38:1.33.4afb7e82f9485
github.com/aws/aws-sdk-go@v1.37.3
no fix listed
1
tobiasbp/db-backup:0.0.314bee6e33a26
github.com/aws/aws-sdk-go@v1.25.31
1.34.0
1
tranhailong/nfs-server:4.2-2-gcsfuse028662749be2
github.com/aws/aws-sdk-go@v1.44.159
no fix listed
1
treeverse/lakefs:0.69.0478f37a6cffc
github.com/aws/aws-sdk-go@v1.37.26
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.