CVE-2020-8911
MediumAdvisory
Published 11 Feb 2022In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.6
- base score, highest
- EPSS
- 0.003
- 28th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 896
- of 17,790 indexed, latest versions
- Container images
- 928
- deployed by those charts
- Fix available
- 1 of 1
- affected package
CBC padding oracle issue in AWS S3 Crypto SDK for golang
Carried by container images the latest versions of 896 of 17,790 indexed charts deploy, on 928 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v1.12.54, v1.15.24, v1.17.7, v1.17.14+288 more | 1.34.0 | 928 |
- OSV records
- GHSA-f5pg-7wfw-84q9GO-2022-0646
Charts affected
896 by stars
| Chart | Latest | Affected images | Radar Score |
|---|
Container images carrying it
928 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| treeverse/ | fb7a0d90f77e | github.com/ | no fix listed | 1 |
| tusproject/ | 1e457b59fd5b | github.com/ | no fix listed | 1 |
| tusproject/ | f8088058b80f | github.com/ | no fix listed | 1 |
| twentycrm/ | 2f78405a78be | github.com/ | no fix listed | 1 |
| twinproduction/ | 8f38c206972e | github.com/ | no fix listed | 1 |
| ubercadence/ | 2ac5491d13bb | github.com/ | no fix listed | 1 |
| udhos/ | 196ef68af380 | github.com/ | no fix listed | 1 |
| udhos/ | 3acc0e7599bf | github.com/ | no fix listed | 1 |
| udhos/ | 5567c9363c4c | github.com/ | no fix listed | 1 |
| udhos/ | f44ef986df49 | github.com/ | no fix listed | 1 |
| udhos/ | 6bd2cf2ac732 | github.com/ | no fix listed | 1 |
| udhos/ | 03b08b63f524 | github.com/ | no fix listed | 1 |
| udhos/ | 474c467bbf42 | github.com/ | no fix listed | 1 |
| udhos/ | 615b6a7d742e | github.com/ | no fix listed | 1 |
| udhos/ | daa2b4eaac09 | github.com/ | no fix listed | 1 |
| udhos/ | 6ae70677b6a3 | github.com/ | no fix listed | 1 |
| udhos/ | cf7979da82e1 | github.com/ | no fix listed | 1 |
| udhos/ | 728013f2fac1 | github.com/ | no fix listed | 1 |
| uptrace/ | 34a02c3b2d12 | github.com/ | no fix listed | 1 |
| velero/ | 277fbfaf8dcf | github.com/ | 1.34.0 | 1 |
| velero/ | 8d784580931c | github.com/ | 1.34.0 | 1 |
| velero/ | 3d2ea7aab32d | github.com/ | no fix listed | 1 |
| victoriametrics/ | 716b89a3ed79 | github.com/ | no fix listed | 1 |
| victoriametrics/ | 71be93cfafb6 | github.com/ | no fix listed | 1 |
| weaveworks/ | 174307de1b36 | github.com/ | 1.34.0 | 1 |
| wernight/ | d211f29ebcfe | github.com/ | no fix listed | 1 |
| willnorris/ | 21d0c90f4c31 | github.com/ | no fix listed | 1 |
| xosphere/ | 1458097b6f85 | github.com/ | no fix listed | 1 |
| gcr.io/ | 135327c978de | github.com/ | no fix listed | 1 |
| gcr.io/ | e6c562b5e983 | github.com/ | no fix listed | 1 |
| gcr.io/ | e225fe7eaa55 | github.com/ | 1.34.0 | 1 |
| gcr.io/ | a4011eae6a0b | github.com/ | no fix listed | 1 |
| gcr.io/ | c552478f8f11 | github.com/ | no fix listed | 1 |
| gcr.io/ | 9538fabe49fd | github.com/ | no fix listed | 1 |
| gcr.io/ | 8ab8229f6a89 | github.com/ | no fix listed | 1 |
| gcr.io/ | e5acd40c5aa5 | github.com/ | no fix listed | 1 |
| gcr.io/ | ed3cdf44ea5f | github.com/ | no fix listed | 1 |
| gcr.io/ | d481c617ba01 | github.com/ | no fix listed | 1 |
| gcr.io/ | 1903f72cca29 | github.com/ | no fix listed | 1 |
| gcr.io/ | 03ab619db308 | github.com/ | no fix listed | 1 |
| gcr.io/ | 8c74d06d7f93 | github.com/ | no fix listed | 1 |
| gcr.io/ | dbbec053774e | github.com/ | no fix listed | 1 |
| gcr.io/ | 0b0cfdbfff16 | github.com/ | no fix listed | 1 |
| gcr.io/ | 9388835ed097 | github.com/ | no fix listed | 1 |
| gcr.io/ | e352701f1045 | github.com/ | no fix listed | 1 |
| gcr.io/ | 81882d4a2bed | github.com/ | no fix listed | 1 |
| gcr.io/ | 47d015e7a487 | github.com/ | no fix listed | 1 |
| gcr.io/ | efa6b7da835b | github.com/ | no fix listed | 1 |
| gcr.io/ | f012ae1e3b98 | github.com/ | no fix listed | 1 |
| gcr.io/ | 3e38f505e436 | github.com/ | no fix listed | 1 |