CVE-2020-8911
MediumAdvisory
Published 11 Feb 2022In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.6
- base score, highest
- EPSS
- 0.003
- 28th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 906
- of 17,790 indexed, latest versions
- Container images
- 934
- deployed by those charts
- Fix available
- 1 of 1
- affected package
CBC padding oracle issue in AWS S3 Crypto SDK for golang
Carried by container images the latest versions of 906 of 17,790 indexed charts deploy, on 934 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v1.12.54, v1.15.24, v1.17.7, v1.17.14+289 more | 1.34.0 | 934 |
- OSV records
- GHSA-f5pg-7wfw-84q9GO-2022-0646
Charts affected
906 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| registrywiremindVerified publisher | 0.1.1 | 1 of 1See more | 1,195 |
| xonodepoolsxonodepoolsOfficialVerified publisher | 1.0.7 | 1 of 1See more | 394 |
| ygdrassil-monitoringygdrassilVerified publisher | 0.4.0 | 3 of 10See more | 9,395 |
| version-checkerymrs | 0.2.3 | 1 of 1See more | 3,024 |
| prometheus-monitoring-stackyotron-helm-charts | 1.2.0 | 2 of 3See more | 899 |
| zahori-consulzahoriVerified publisher | 1.0.1 | 2 of 2See more | 5,047 |
Container images carrying it
934 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 13290b9a64af | github.com/ | no fix listed | 1 |
| ghcr.io/ | 9f8896ffc15b | github.com/ | no fix listed | 1 |
| ghcr.io/ | e2b8aa62b648 | github.com/ | no fix listed | 1 |
| ghcr.io/ | df53e2c8998c | github.com/ | no fix listed | 1 |
| ghcr.io/ | 23a9ec9b1879 | github.com/ | no fix listed | 1 |
| ghcr.io/ | a604aefa3fae | github.com/ | no fix listed | 1 |
| ghcr.io/ | 41177982c584 | github.com/ | no fix listed | 1 |
| ghcr.io/ | ee1eb3c9c9a1 | github.com/ | no fix listed | 1 |
| ghcr.io/ | a982103d91d3 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 0881d3c9359b | github.com/ | no fix listed | 1 |
| ghcr.io/ | 13964b29d63e | github.com/ | no fix listed | 1 |
| ghcr.io/ | 5d0656fce7d4 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 8186d6dd81f4 | github.com/ | no fix listed | 1 |
| ghcr.io/ | f579d00721b0 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 4ba3adf47f5c | github.com/ | no fix listed | 1 |
| ghcr.io/ | f646b68a1b8d | github.com/ | no fix listed | 1 |
| ghcr.io/ | 8bfed3d49a08 | github.com/ | no fix listed | 1 |
| ghcr.io/ | f5654f745d4c | github.com/ | no fix listed | 1 |
| ghcr.io/ | 2f5be9cde5f9 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 233aa9808fc7 | github.com/ | no fix listed | 1 |
| ghcr.io/ | d24a579a3c75 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 56a1ea4490ba | github.com/ | no fix listed | 1 |
| ghcr.io/ | 9440a40b3947 | github.com/ | no fix listed | 1 |
| ghcr.io/ | ec40c3d9c48f | github.com/ | no fix listed | 1 |
| ghcr.io/ | 15b372d35012 | github.com/ | no fix listed | 1 |
| ghcr.io/ | b803fbe1cdb8 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 324f9b7b689c | github.com/ | no fix listed | 1 |
| ghcr.io/ | cdba39e3f3d0 | github.com/ | no fix listed | 1 |
| ghcr.io/ | edd095d3c0ee | github.com/ | 1.34.0 | 1 |
| ghcr.io/ | 7db1a1bf3dae | github.com/ | no fix listed | 1 |
| ghcr.io/ | 0c58ff972451 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 48bc27743c08 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 71d1f1c0179e | github.com/ | no fix listed | 1 |
| ghcr.io/ | 878ef6a31fa0 | github.com/ | no fix listed | 1 |
| ghcr.io/ | c298183a5208 | github.com/ | no fix listed | 1 |
| ghcr.io/ | c81f105c3682 | github.com/ | no fix listed | 1 |
| ghcr.io/ | f20e612d5a98 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 08265c006973 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 6d4106724d56 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 8abb52b66557 | github.com/ | no fix listed | 1 |
| ghcr.io/ | c4b1d3d0f052 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 50b431281d3e | github.com/ | no fix listed | 1 |
| ghcr.io/ | c8882543f693 | github.com/ | no fix listed | 1 |
| ghcr.io/ | d22616a5998b | github.com/ | no fix listed | 1 |
| ghcr.io/ | b40439329191 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 7390a215d63c | github.com/ | no fix listed | 1 |
| ghcr.io/ | df6b11907d33 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 735dd5d2709d | github.com/ | no fix listed | 1 |
| ghcr.io/ | ec36422b09af | github.com/ | no fix listed | 1 |
| ghcr.io/ | 42574f512837 | github.com/ | no fix listed | 1 |