CVE-2020-8911
MediumAdvisory
Published 11 Feb 2022In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.6
- base score, highest
- EPSS
- 0.003
- 28th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 896
- of 17,790 indexed, latest versions
- Container images
- 928
- deployed by those charts
- Fix available
- 1 of 1
- affected package
CBC padding oracle issue in AWS S3 Crypto SDK for golang
Carried by container images the latest versions of 896 of 17,790 indexed charts deploy, on 928 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v1.12.54, v1.15.24, v1.17.7, v1.17.14+288 more | 1.34.0 | 928 |
- OSV records
- GHSA-f5pg-7wfw-84q9GO-2022-0646
Charts affected
896 by stars
| Chart | Latest | Affected images | Radar Score |
|---|
Container images carrying it
928 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| gcr.io/ | da2bf307c353 | github.com/ | no fix listed | 1 |
| gcr.io/ | 26a17e00ee25 | github.com/ | no fix listed | 1 |
| gcr.io/ | 5a0884f9a90c | github.com/ | no fix listed | 1 |
| gcr.io/ | 4d01763016e9 | github.com/ | no fix listed | 1 |
| gcr.io/ | 4a2438d399ff | github.com/ | no fix listed | 1 |
| gcr.io/ | 873b968f02b5 | github.com/ | 1.34.0 | 1 |
| gcr.io/ | 1e3db4f2eeed | github.com/ | 1.34.0 | 1 |
| gcr.io/ | a5de0fb75046 | github.com/ | 1.34.0 | 1 |
| gcr.io/ | 2ef460356b17 | github.com/ | 1.34.0 | 1 |
| gcr.io/ | db6ceff2aab4 | github.com/ | 1.34.0 | 1 |
| gcr.io/ | 30ce73388ae5 | github.com/ | 1.34.0 | 1 |
| gcr.io/ | b2cd45b8a8a4 | github.com/ | 1.34.0 | 1 |
| gcr.io/ | d27b4495ccc3 | github.com/ | 1.34.0 | 1 |
| gcr.io/ | f16c0e022203 | github.com/ | 1.34.0 | 1 |
| gcr.io/ | 02b90651367f | github.com/ | no fix listed | 1 |
| gcr.io/ | 67f4f162da8d | github.com/ | 1.34.0 | 1 |
| gcr.io/ | 852f7923fad3 | github.com/ | no fix listed | 1 |
| gcr.io/ | 989a60847416 | github.com/ | 1.34.0 | 1 |
| gcr.io/ | 9e507ac0aebb | github.com/ | no fix listed | 1 |
| gcr.io/ | 2b1a3d08caac | github.com/ | 1.34.0 | 1 |
| gcr.io/ | a348db3e4d74 | github.com/ | 1.34.0 | 1 |
| gcr.io/ | 39661bd823e8 | github.com/ | no fix listed | 1 |
| gcr.io/ | dc6ca05bb94f | github.com/ | no fix listed | 1 |
| gcr.io/ | 82940e8c3e0d | github.com/ | no fix listed | 1 |
| ghcr.io/ | 62c44a384e13 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 18689773150d | github.com/ | 1.34.0 | 1 |
| ghcr.io/ | 744bc929a579 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 2f06e72cef36 | github.com/ | no fix listed | 1 |
| ghcr.io/ | b8e03da90e70 | github.com/ | no fix listed | 1 |
| ghcr.io/ | b1557553a2b3 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 7465f35b684c | github.com/ | no fix listed | 1 |
| ghcr.io/ | 8fbdd2479645 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 81f6007abb4e | github.com/ | no fix listed | 1 |
| ghcr.io/ | b1857871e06c | github.com/ | no fix listed | 1 |
| ghcr.io/ | 67d18880448c | github.com/ | no fix listed | 1 |
| ghcr.io/ | 6b99ee9feece | github.com/ | no fix listed | 1 |
| ghcr.io/ | 79e67164b4f0 | github.com/ | no fix listed | 1 |
| ghcr.io/ | e4b66308d8f6 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 16907aae5de1 | github.com/ | no fix listed | 1 |
| ghcr.io/ | a608b798fda5 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 345174727a2b | github.com/ | no fix listed | 1 |
| ghcr.io/ | cb5f24732197 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 657a2c9f6e6d | github.com/ | no fix listed | 1 |
| ghcr.io/ | 98b6ea2ed319 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 98baf045a1c9 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 9ab9a675c405 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 13290b9a64af | github.com/ | no fix listed | 1 |
| ghcr.io/ | 9f8896ffc15b | github.com/ | no fix listed | 1 |
| ghcr.io/ | e2b8aa62b648 | github.com/ | no fix listed | 1 |
| ghcr.io/ | df53e2c8998c | github.com/ | no fix listed | 1 |