StackRadar

CVE-2020-8911

Medium

Advisory

Published 11 Feb 2022In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.6
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
887
of 17,787 indexed, latest versions
Container images
914
deployed by those charts
Fix available
1 of 1
affected package

CBC padding oracle issue in AWS S3 Crypto SDK for golang

Carried by container images the latest versions of 887 of 17,787 indexed charts deploy, on 914 images.

Affected packageAffected versionsFixed inImages
github.com/aws/aws-sdk-gogolangv1.12.54, v1.15.24, v1.17.7, v1.17.14+284 more1.34.0914
OSV records
GHSA-f5pg-7wfw-84q9GO-2022-0646

Charts affected

887 by stars
ChartLatestAffected imagesRadar Score
harbor-scanner-trivytrivy-operator0.31.21 of 1See more

harbor-scanner-trivy trivy-operator 0.31.2

1 of the 1 container images this version deploys carry CVE-2020-8911.

Container imageDigestPackageFixed in
aquasec/harbor-scanner-trivy:0.31.26e790e233872
github.com/aws/aws-sdk-go@v1.53.0
no fix listed

Open the chart page →

2,477
tfy-agenttruefoundryVerified publisher0.2.1031 of 5See more

tfy-agent truefoundry 0.2.103

1 of the 5 container images this version deploys carry CVE-2020-8911.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/external-secrets:v2.4.19440a40b3947
github.com/aws/aws-sdk-go@v1.55.8
no fix listed

Open the chart page →

681
tfy-kservetruefoundryVerified publisher0.1.11 of 2See more

tfy-kserve truefoundry 0.1.1

1 of the 2 container images this version deploys carry CVE-2020-8911.

Container imageDigestPackageFixed in
kserve/kserve-controller:v0.10.022ff858b57c1
github.com/aws/aws-sdk-go@v1.36.30
no fix listed

Open the chart page →

1,171
tfy-lokitruefoundryVerified publisher0.1.62 of 2See more

tfy-loki truefoundry 0.1.6

2 of the 2 container images this version deploys carry CVE-2020-8911.

Container imageDigestPackageFixed in
grafana/loki:2.9.1035b02acc6765
github.com/aws/aws-sdk-go@v1.44.315
no fix listed
grafana/promtail:2.9.1063a2e57a5b14
github.com/aws/aws-sdk-go@v1.44.315
no fix listed

Open the chart page →

2,813
truefoundry-monitoringtruefoundryVerified publisher0.1.61 of 8See more

truefoundry-monitoring truefoundry 0.1.6

1 of the 8 container images this version deploys carry CVE-2020-8911.

Container imageDigestPackageFixed in
grafana/grafana:12.3.070d9599b186c
github.com/aws/aws-sdk-go@v1.55.7
no fix listed

Open the chart page →

4,526
aws-eks-asg-rolling-update-handlertwin1.5.01 of 1See more

aws-eks-asg-rolling-update-handler twin 1.5.0

1 of the 1 container images this version deploys carry CVE-2020-8911.

Container imageDigestPackageFixed in
twinproduction/aws-eks-asg-rolling-update-handler:v1.7.08f38c206972e
github.com/aws/aws-sdk-go@v1.44.152
no fix listed

Open the chart page →

1,118
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2020-8911.

Container imageDigestPackageFixed in
opencloudeu/opencloud-rolling:2.1.0f9634bb04905
github.com/aws/aws-sdk-go@v1.55.6
no fix listed

Open the chart page →

45,239
kiamuswitch6.1.21 of 1See more

kiam uswitch 6.1.2

1 of the 1 container images this version deploys carry CVE-2020-8911.

Container imageDigestPackageFixed in
quay.io/uswitch/kiam:v4.0be3a5846922d
github.com/aws/aws-sdk-go@v1.35.10
no fix listed

Open the chart page →

2,965
vault-raft-snapshot-agentvault-raft-snapshot-agentVerified publisher0.6.91 of 1See more

vault-raft-snapshot-agent vault-raft-snapshot-agent 0.6.9

1 of the 1 container images this version deploys carry CVE-2020-8911.

Container imageDigestPackageFixed in
ghcr.io/argelbargel/vault-raft-snapshot-agent:v0.12.5345174727a2b
github.com/aws/aws-sdk-go@v1.55.5
no fix listed

Open the chart page →

1,114
verticadb-operatorvertica-chartsVerified publisher26.2.21 of 1See more

verticadb-operator vertica-charts 26.2.2

1 of the 1 container images this version deploys carry CVE-2020-8911.

Container imageDigestPackageFixed in
opentext/verticadb-operator:26.2.2-04ad44e44476c
github.com/aws/aws-sdk-go@v1.49.5
no fix listed

Open the chart page →

68
scrutinyvhdirkVerified publisher0.1.31 of 1See more

scrutiny vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2020-8911.

Container imageDigestPackageFixed in
ghcr.io/analogj/scrutiny:master-omnibus18689773150d
github.com/aws/aws-sdk-go@v1.29.16
1.34.0

Open the chart page →

4,382
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2020-8911.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
github.com/aws/aws-sdk-go@v1.44.7
no fix listed

Open the chart page →

13,459
consulwarjiang1.3.02 of 2See more

consul warjiang 1.3.0

2 of the 2 container images this version deploys carry CVE-2020-8911.

Container imageDigestPackageFixed in
hashicorp/consul:1.17.0712fe02d2f84
github.com/aws/aws-sdk-go@v1.44.289
no fix listed
hashicorp/consul-k8s-control-plane:1.3.00e4452f0f265
github.com/aws/aws-sdk-go@v1.44.262
no fix listed

Open the chart page →

4,060
argo-eventswenerme2.4.271 of 1See more

argo-events wenerme 2.4.27

1 of the 1 container images this version deploys carry CVE-2020-8911.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
github.com/aws/aws-sdk-go@v1.47.11
no fix listed

Open the chart page →

969
argo-rolloutswenerme2.43.11 of 1See more

argo-rollouts wenerme 2.43.1

1 of the 1 container images this version deploys carry CVE-2020-8911.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-rollouts:v1.10.0187630ba7228
github.com/aws/aws-sdk-go@v1.55.8
no fix listed

Open the chart page →

115
athens-proxywenerme0.5.21 of 2See more

athens-proxy wenerme 0.5.2

1 of the 2 container images this version deploys carry CVE-2020-8911.

Container imageDigestPackageFixed in
gomods/athens:v0.11.0efb811df7844
github.com/aws/aws-sdk-go@v1.32.7
1.34.0

Open the chart page →

4,984
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2020-8911.

Container imageDigestPackageFixed in
ubercadence/server:0.23.22ac5491d13bb
github.com/aws/aws-sdk-go@v1.34.13
no fix listed

Open the chart page →

10,127
external-secretswenerme2.10.01 of 1See more

external-secrets wenerme 2.10.0

1 of the 1 container images this version deploys carry CVE-2020-8911.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/external-secrets:v2.10.0814117b0fd6d
github.com/aws/aws-sdk-go@v1.55.8
no fix listed

Open the chart page →

77
gitlab-runnerwenerme0.92.11 of 1See more

gitlab-runner wenerme 0.92.1

1 of the 1 container images this version deploys carry CVE-2020-8911.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/gitlab-runner:alpine-v19.3.1af0325804248
github.com/aws/aws-sdk-go@v1.55.7
no fix listed

Open the chart page →

904
harborwenerme1.19.22 of 8See more

harbor wenerme 1.19.2

2 of the 8 container images this version deploys carry CVE-2020-8911.

Container imageDigestPackageFixed in
goharbor/harbor-registryctl:v2.15.2223d5cb49d5d
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
goharbor/registry-photon:v2.15.2c4ebef61ceb5
github.com/aws/aws-sdk-go@v1.55.8
no fix listed

Open the chart page →

1,650
prometheuswenerme29.30.01See more

prometheus wenerme 29.30.0

1 container image this version deploys carries CVE-2020-8911.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v3.14.05ce7540c3c00
github.com/aws/aws-sdk-go@v1.55.8
no fix listed

Open the chart page →

—
rancherwenerme2.15.11 of 2See more

rancher wenerme 2.15.1

1 of the 2 container images this version deploys carry CVE-2020-8911.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.15f6c4dc52a05
github.com/aws/aws-sdk-go@v1.55.8
no fix listed

Open the chart page →

1,456
temporalwenerme0.15.14 of 13See more

temporal wenerme 0.15.1

4 of the 13 container images this version deploys carry CVE-2020-8911.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
github.com/aws/aws-sdk-go@v1.25.48
1.34.0
prom/prometheus:v2.16.0e4ca62c0d62f
github.com/aws/aws-sdk-go@v1.25.48
1.34.0
temporalio/admin-tools:1.15.135034611d981
github.com/aws/aws-sdk-go@v1.42.44
no fix listed
temporalio/server:1.15.1e26758f5a1bf
github.com/aws/aws-sdk-go@v1.42.44
no fix listed

Open the chart page →

22,665
traefikwenerme9.1.11 of 1See more

traefik wenerme 9.1.1

1 of the 1 container images this version deploys carry CVE-2020-8911.

Container imageDigestPackageFixed in
library/traefik:2.2.8f5af5a5ce17f
github.com/aws/aws-sdk-go@v1.30.20
1.34.0

Open the chart page →

3,369
vaultwenerme0.34.11 of 2See more

vault wenerme 0.34.1

1 of the 2 container images this version deploys carry CVE-2020-8911.

Container imageDigestPackageFixed in
hashicorp/vault:2.0.45be49781ecf7
github.com/aws/aws-sdk-go@v1.55.8
no fix listed

Open the chart page →

542
victoria-metrics-k8s-stackwenerme0.92.11 of 7See more

victoria-metrics-k8s-stack wenerme 0.92.1

1 of the 7 container images this version deploys carry CVE-2020-8911.

Container imageDigestPackageFixed in
grafana/grafana:13.1.17cb8c64c4d57
github.com/aws/aws-sdk-go@v1.55.8
no fix listed

Open the chart page →

1,889
wexa-studiowexa-studio1.2.03 of 15See more

wexa-studio wexa-studio 1.2.0

3 of the 15 container images this version deploys carry CVE-2020-8911.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.40b01ed3924e6
github.com/aws/aws-sdk-go@v1.44.331
no fix listed
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
github.com/aws/aws-sdk-go@v1.55.6
no fix listed
temporalio/server:1.29.1c1e3326b2ce1
github.com/aws/aws-sdk-go@v1.55.6
no fix listed

Open the chart page →

14,983
ceph-csi-cephfswikimedia0.1.81 of 5See more

ceph-csi-cephfs wikimedia 0.1.8

1 of the 5 container images this version deploys carry CVE-2020-8911.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
github.com/aws/aws-sdk-go@v1.44.67
no fix listed

Open the chart page →

10,285
ceph-csi-rbdwikimedia0.1.131 of 6See more

ceph-csi-rbd wikimedia 0.1.13

1 of the 6 container images this version deploys carry CVE-2020-8911.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
github.com/aws/aws-sdk-go@v1.44.67
no fix listed

Open the chart page →

11,784
opentelemetry-collectorwikimedia0.62.71 of 1See more

opentelemetry-collector wikimedia 0.62.7

1 of the 1 container images this version deploys carry CVE-2020-8911.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.81.0c6671841470b
github.com/aws/aws-sdk-go@v1.44.295
no fix listed

Open the chart page →

2,022
postgres-operatorwiremindVerified publisher1.14.0-wiremind01 of 1See more

postgres-operator wiremind 1.14.0-wiremind0

1 of the 1 container images this version deploys carry CVE-2020-8911.

Container imageDigestPackageFixed in
ghcr.io/zalando/postgres-operator:v1.14.04f40cfc2283b
github.com/aws/aws-sdk-go@v1.53.8
no fix listed

Open the chart page →

1,286
registrywiremindVerified publisher0.1.11 of 1See more

registry wiremind 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-8911.

Container imageDigestPackageFixed in
ghcr.io/distribution/distribution:3.0.04ba3adf47f5c
github.com/aws/aws-sdk-go@v1.55.5
no fix listed

Open the chart page →

1,187
xonodepoolsxonodepoolsOfficialVerified publisher1.0.71 of 1See more

xonodepools xonodepools 1.0.7

1 of the 1 container images this version deploys carry CVE-2020-8911.

Container imageDigestPackageFixed in
xosphere/xonodepools:1.0.71458097b6f85
github.com/aws/aws-sdk-go@v1.55.5
no fix listed

Open the chart page →

388
ygdrassil-monitoringygdrassilVerified publisher0.4.03 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

3 of the 10 container images this version deploys carry CVE-2020-8911.

Container imageDigestPackageFixed in
grafana/grafana:11.5.15781759b3d27
github.com/aws/aws-sdk-go@v1.55.5
no fix listed
prom/alertmanager:v0.28.0d5155cfac40a
github.com/aws/aws-sdk-go@v1.55.5
no fix listed
quay.io/prometheus/prometheus:v3.1.06559acbd5d77
github.com/aws/aws-sdk-go@v1.55.5
no fix listed

Open the chart page →

9,381
version-checkerymrs0.2.31 of 1See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry CVE-2020-8911.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
github.com/aws/aws-sdk-go@v1.34.10
no fix listed

Open the chart page →

3,023
prometheus-monitoring-stackyotron-helm-charts1.2.02 of 3See more

prometheus-monitoring-stack yotron-helm-charts 1.2.0

2 of the 3 container images this version deploys carry CVE-2020-8911.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
quay.io/prometheus/prometheus:latest5ce7540c3c00
github.com/aws/aws-sdk-go@v1.55.8
no fix listed

Open the chart page →

878
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2020-8911.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
github.com/aws/aws-sdk-go@v1.42.34
no fix listed
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
github.com/aws/aws-sdk-go@v1.25.41
1.34.0

Open the chart page →

5,033

Container images carrying it

914 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
github.com/aws/aws-sdk-go@v1.55.7
no fix listed
3
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
github.com/aws/aws-sdk-go@v1.55.7
no fix listed
3
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
github.com/aws/aws-sdk-go@v1.55.7
no fix listed
3
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
github.com/aws/aws-sdk-go@v1.55.7
no fix listed
3
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
github.com/aws/aws-sdk-go@v1.27.0
1.34.0
3
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/aws/aws-sdk-go@v1.45.19
no fix listed
3
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
github.com/aws/aws-sdk-go@v1.55.7
no fix listed
3
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
github.com/aws/aws-sdk-go@v1.55.7
no fix listed
3
quay.io/prometheus/alertmanager:v0.26.0361db356b330
github.com/aws/aws-sdk-go@v1.44.317
no fix listed
3
quay.io/prometheus-operator/prometheus-config-reloader:v0.74.0d55631c7a740
github.com/aws/aws-sdk-go@v1.51.25
no fix listed
3
quay.io/prometheus/prometheus:v2.41.01a3e9a878e50
github.com/aws/aws-sdk-go@v1.44.159
no fix listed
3
quay.io/prometheus/prometheus:v2.55.0378f4e037035
github.com/aws/aws-sdk-go@v1.55.5
no fix listed
3
quay.io/prometheus/prometheus:v2.26.038d40a760569
github.com/aws/aws-sdk-go@v1.38.3
no fix listed
3
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
github.com/aws/aws-sdk-go@v1.41.7
no fix listed
3
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
github.com/aws/aws-sdk-go@v1.44.217
no fix listed
3
registry.gitlab.com/gitlab-org/gitlab-runner:alpine-v19.3.1af0325804248
github.com/aws/aws-sdk-go@v1.55.7
no fix listed
3
abutaha/aws-es-proxy:v1.1190ed2d1dfc8
github.com/aws/aws-sdk-go@v1.30.4
1.34.0
2
bitnamilegacy/influxdb:2.6.1-debian-11-r18d17df1f9d745
github.com/aws/aws-sdk-go@v1.30.12
1.34.0
2
chankh/k8s-cloudwatch-adapter:v0.9.0963c44c7f8b1
github.com/aws/aws-sdk-go@v1.33.5
1.34.0
2
cs3org/revad:v1.19.03b57a34a7dfd
github.com/aws/aws-sdk-go@v1.44.27
no fix listed
2
cs3org/revad:v1.24.0e80a4d67b352
github.com/aws/aws-sdk-go@v1.44.199
no fix listed
2
danielfm/aws-limits-exporter:0.6.07152b84e57cb
github.com/aws/aws-sdk-go@v1.25.34
1.34.0
2
devopsfaith/krakend:latestf8bdaa8a1a43
github.com/aws/aws-sdk-go@v1.55.5
no fix listed
2
free5gc/chf:v3.4.3e2a4dd98a4ed
github.com/aws/aws-sdk-go@v1.44.177
no fix listed
2
free5gc/webui:v3.4.39adeb18492cb
github.com/aws/aws-sdk-go@v1.44.263
no fix listed
2
garugaru/aws-cloudwatch-exporter:latest541852cafda5
github.com/aws/aws-sdk-go@v1.33.1
1.34.0
2
governify/dashboard:lateste83a17ba5038
github.com/aws/aws-sdk-go@v1.40.11
no fix listed
2
grafana/alloy:v1.8.17790f6f7fbd8
github.com/aws/aws-sdk-go@v1.55.6
no fix listed
2
grafana/alloy:v1.12.2f94b1c82957a
github.com/aws/aws-sdk-go@v1.55.7
no fix listed
2
grafana/grafana:9.2.4057896e23443
github.com/aws/aws-sdk-go@v1.44.109
no fix listed
2
grafana/grafana:11.1.0079600c9517b
github.com/aws/aws-sdk-go@v1.51.31
no fix listed
2
grafana/grafana:12.3.12175aaa91c96
github.com/aws/aws-sdk-go@v1.55.7
no fix listed
2
grafana/grafana:8.5.042d3e6bc1865
github.com/aws/aws-sdk-go@v1.42.8
no fix listed
2
grafana/grafana:7.3.5511bc20bfcd1
github.com/aws/aws-sdk-go@v1.33.12
1.34.0
2
grafana/grafana:11.1.4886b56d5534e
github.com/aws/aws-sdk-go@v1.51.31
no fix listed
2
grafana/grafana:12.3.39e1e77ade304
github.com/aws/aws-sdk-go@v1.55.7
no fix listed
2
grafana/grafana:11.4.0d8ea37798ccc
github.com/aws/aws-sdk-go@v1.55.5
no fix listed
2
grafana/grafana:12.4.1e932bd6ed0e0
github.com/aws/aws-sdk-go@v1.55.7
no fix listed
2
grafana/loki:3.6.1144148ad243c0
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
2
grafana/loki:1.5.0922b3f412fdd
github.com/aws/aws-sdk-go@v1.27.0
1.34.0
2
grafana/loki:3.1.0d947e68a84d9
github.com/aws/aws-sdk-go@v1.50.32
no fix listed
2
grafana/loki:2.5.0f9ef133793af
github.com/aws/aws-sdk-go@v1.43.10
no fix listed
2
grafana/promtail:1.5.046e88d390cd6
github.com/aws/aws-sdk-go@v1.27.0
1.34.0
2
grafana/tempo:2.5.0f0200a9bff6d
github.com/aws/aws-sdk-go@v1.51.11
no fix listed
2
hashicorp/consul:1.14.2e38576edcdfd
github.com/aws/aws-sdk-go@v1.42.34
no fix listed
2
hashicorp/consul-k8s-control-plane:1.0.2538a3436398d
github.com/aws/aws-sdk-go@v1.25.41
1.34.0
2
hashicorp/vault:1.8.34db614d40d0e
github.com/aws/aws-sdk-go@v1.37.19
no fix listed
2
hashicorp/vault:2.0.45be49781ecf7
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
2
hashicorp/vault:1.15.26b4e5dadf082
github.com/aws/aws-sdk-go@v1.44.331
no fix listed
2
hashicorp/vault:1.12.18de4d5f31b38
github.com/aws/aws-sdk-go@v1.44.95
no fix listed
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.