CVE-2020-8911
MediumAdvisory
Published 11 Feb 2022In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.6
- base score, highest
- EPSS
- 0.003
- 28th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 896
- of 17,790 indexed, latest versions
- Container images
- 928
- deployed by those charts
- Fix available
- 1 of 1
- affected package
CBC padding oracle issue in AWS S3 Crypto SDK for golang
Carried by container images the latest versions of 896 of 17,790 indexed charts deploy, on 928 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v1.12.54, v1.15.24, v1.17.7, v1.17.14+288 more | 1.34.0 | 928 |
- OSV records
- GHSA-f5pg-7wfw-84q9GO-2022-0646
Charts affected
896 by stars
| Chart | Latest | Affected images | Radar Score |
|---|
Container images carrying it
928 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| public.ecr.aws/ | f0e5ab60b2df | github.com/ | no fix listed | 1 |
| public.ecr.aws/ | cfc92cc2de65 | github.com/ | no fix listed | 1 |
| public.ecr.aws/ | 9083e60c38bc | github.com/ | no fix listed | 1 |
| public.ecr.aws/ | 651739583336 | github.com/ | no fix listed | 1 |
| quay.io/ | 5b6701d8fb31 | github.com/ | no fix listed | 1 |
| quay.io/ | 95b5cf7ba6fe | github.com/ | no fix listed | 1 |
| quay.io/ | a36ab0c0860c | github.com/ | no fix listed | 1 |
| quay.io/ | acaf37352569 | github.com/ | no fix listed | 1 |
| quay.io/ | 91b9825f09a8 | github.com/ | no fix listed | 1 |
| quay.io/ | a83d2699ae53 | github.com/ | no fix listed | 1 |
| quay.io/ | 01d8538c4f48 | github.com/ | no fix listed | 1 |
| quay.io/ | 28a674af1df2 | github.com/ | no fix listed | 1 |
| quay.io/ | d6fd2a9e3273 | github.com/ | no fix listed | 1 |
| quay.io/ | 13aaae779248 | github.com/ | no fix listed | 1 |
| quay.io/ | 5d1c2cf4c538 | github.com/ | no fix listed | 1 |
| quay.io/ | a3b9a07648b6 | github.com/ | no fix listed | 1 |
| quay.io/ | 63baf86a49ac | github.com/ | no fix listed | 1 |
| quay.io/ | a4d2667f2b6e | github.com/ | no fix listed | 1 |
| quay.io/ | 9663f06adcb1 | github.com/ | no fix listed | 1 |
| quay.io/ | 1143471c90db | github.com/ | no fix listed | 1 |
| quay.io/ | 4a9d0264055b | github.com/ | no fix listed | 1 |
| quay.io/ | 9c0527cab629 | github.com/ | no fix listed | 1 |
| quay.io/ | a20c44021a5d | github.com/ | no fix listed | 1 |
| quay.io/ | e1642bf8e933 | github.com/ | no fix listed | 1 |
| quay.io/ | 4fbd63194674 | github.com/ | no fix listed | 1 |
| quay.io/ | 34de6387233b | github.com/ | no fix listed | 1 |
| quay.io/ | 58651dce3376 | github.com/ | no fix listed | 1 |
| quay.io/ | 2044ed750f5e | github.com/ | no fix listed | 1 |
| quay.io/ | 01b2694425e9 | github.com/ | no fix listed | 1 |
| quay.io/ | 11fd73a2102c | github.com/ | no fix listed | 1 |
| quay.io/ | 3e010e1188f1 | github.com/ | no fix listed | 1 |
| quay.io/ | 6722d5041b47 | github.com/ | 1.34.0 | 1 |
| quay.io/ | c241c971aef8 | github.com/ | no fix listed | 1 |
| quay.io/ | f0c5bebaec96 | github.com/ | no fix listed | 1 |
| quay.io/ | b61c1ed2f015 | github.com/ | no fix listed | 1 |
| quay.io/ | bdfee214c7ea | github.com/ | no fix listed | 1 |
| quay.io/ | 088464f949de | github.com/ | no fix listed | 1 |
| quay.io/ | bdba5215a666 | github.com/ | no fix listed | 1 |
| quay.io/ | a9f4d31ab811 | github.com/ | no fix listed | 1 |
| quay.io/ | d4c97a1b2d67 | github.com/ | no fix listed | 1 |
| quay.io/ | 706cde441321 | github.com/ | no fix listed | 1 |
| quay.io/ | 7bbe804260f3 | github.com/ | no fix listed | 1 |
| quay.io/ | 04f2b98d71ef | github.com/ | no fix listed | 1 |
| quay.io/ | 6b3f6d8b4c0a | github.com/ | no fix listed | 1 |
| quay.io/ | a2d502c204f9 | github.com/ | no fix listed | 1 |
| quay.io/ | a7cc63108511 | github.com/ | no fix listed | 1 |
| quay.io/ | be2aef39a2f8 | github.com/ | no fix listed | 1 |
| quay.io/ | cd7d1a82ef00 | github.com/ | no fix listed | 1 |
| quay.io/ | 3b9b2a15d376 | github.com/ | no fix listed | 1 |
| quay.io/ | 3c42b892cf72 | github.com/ | no fix listed | 1 |