CVE-2020-8911
MediumAdvisory
Published 11 Feb 2022In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.6
- base score, highest
- EPSS
- 0.003
- 28th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 896
- of 17,790 indexed, latest versions
- Container images
- 928
- deployed by those charts
- Fix available
- 1 of 1
- affected package
CBC padding oracle issue in AWS S3 Crypto SDK for golang
Carried by container images the latest versions of 896 of 17,790 indexed charts deploy, on 928 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v1.12.54, v1.15.24, v1.17.7, v1.17.14+288 more | 1.34.0 | 928 |
- OSV records
- GHSA-f5pg-7wfw-84q9GO-2022-0646
Charts affected
896 by stars
| Chart | Latest | Affected images | Radar Score |
|---|
Container images carrying it
928 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | e3d1f1302e49 | github.com/ | no fix listed | 1 |
| ghcr.io/ | ac8459f70f85 | github.com/ | no fix listed | 1 |
| ghcr.io/ | af77073c184f | github.com/ | no fix listed | 1 |
| ghcr.io/ | 669e27a5d1af | github.com/ | no fix listed | 1 |
| ghcr.io/ | c6fe64c7bfcd | github.com/ | no fix listed | 1 |
| ghcr.io/ | 0087cb49616f | github.com/ | no fix listed | 1 |
| ghcr.io/ | 00b48beff3ae | github.com/ | no fix listed | 1 |
| ghcr.io/ | 6226040e1346 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 5e409a6332b4 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 9c73f1841ebc | github.com/ | no fix listed | 1 |
| ghcr.io/ | 185d2eebc60c | github.com/ | no fix listed | 1 |
| ghcr.io/ | e74c6bf33d1b | github.com/ | no fix listed | 1 |
| ghcr.io/ | 89028adefcff | github.com/ | no fix listed | 1 |
| ghcr.io/ | ef92da4621e6 | github.com/ | no fix listed | 1 |
| ghcr.io/ | df917c5a7e54 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 8e3869d31c70 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 7fbc6855c8b3 | github.com/ | no fix listed | 1 |
| ghcr.io/ | e949b0f733f0 | github.com/ | 1.34.0 | 1 |
| ghcr.io/ | 17369c4cd390 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 056f0953763d | github.com/ | no fix listed | 1 |
| ghcr.io/ | 9c7bc0f9bb35 | github.com/ | no fix listed | 1 |
| ghcr.io/ | ff23f452813a | github.com/ | no fix listed | 1 |
| ghcr.io/ | 71e24278a049 | github.com/ | no fix listed | 1 |
| ghcr.io/ | f04925fe1fa6 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 3ebe2fd253f6 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 5bc5ca66d55a | github.com/ | no fix listed | 1 |
| ghcr.io/ | d7f93d2182fe | github.com/ | no fix listed | 1 |
| ghcr.io/ | a16ab5ca10a7 | github.com/ | no fix listed | 1 |
| ghcr.io/ | c0c8d53df9f3 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 69131511501f | github.com/ | no fix listed | 1 |
| ghcr.io/ | 79412399f301 | github.com/ | no fix listed | 1 |
| ghcr.io/ | d422a9ebd4a2 | github.com/ | no fix listed | 1 |
| ghcr.io/ | e9ab76a4ec77 | github.com/ | no fix listed | 1 |
| ghcr.io/ | d44ed3b3128c | github.com/ | no fix listed | 1 |
| ghcr.io/ | 32234e63c1d0 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 2434560e8f0e | github.com/ | no fix listed | 1 |
| ghcr.io/ | 5e331c925091 | github.com/ | no fix listed | 1 |
| ghcr.io/ | bcb7f0f733f5 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 3776500fde82 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 8de11e2363fc | github.com/ | no fix listed | 1 |
| ghcr.io/ | 0fae829caf29 | github.com/ | 1.34.0 | 1 |
| ghcr.io/ | e45a5fcdf1a4 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 3af8698e0524 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 9fda541d53ea | github.com/ | no fix listed | 1 |
| ghcr.io/ | 60a23bfaba84 | github.com/ | no fix listed | 1 |
| ghcr.io/ | fd8d3f9a59fa | github.com/ | no fix listed | 1 |
| ghcr.io/ | 08526e5117e3 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 916a90abec6c | github.com/ | no fix listed | 1 |
| ghcr.io/ | 8e9d0e1f6075 | github.com/ | no fix listed | 1 |
| ghcr.io/ | b907c8923678 | github.com/ | no fix listed | 1 |