StackRadar

CVE-2020-8911

Medium

Advisory

Published 11 Feb 2022In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.6
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
897
of 17,790 indexed, latest versions
Container images
929
deployed by those charts
Fix available
1 of 1
affected package

CBC padding oracle issue in AWS S3 Crypto SDK for golang

Carried by container images the latest versions of 897 of 17,790 indexed charts deploy, on 929 images.

Affected packageAffected versionsFixed inImages
github.com/aws/aws-sdk-gogolangv1.12.54, v1.15.24, v1.17.7, v1.17.14+289 more1.34.0929
OSV records
GHSA-f5pg-7wfw-84q9GO-2022-0646

Charts affected

897 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

929 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
istio/proxyv2:1.10.3a78b7a165744
github.com/aws/aws-sdk-go@v1.38.3
no fix listed
2
library/influxdb:2.6.1-alpine44a366dd7724
github.com/aws/aws-sdk-go@v1.30.12
1.34.0
2
library/influxdb:2.7b8d940ca9376
github.com/aws/aws-sdk-go@v1.34.0
no fix listed
2
library/traefik:v2.57d5a6ae66572
github.com/aws/aws-sdk-go@v1.39.0
no fix listed
2
localstack/localstack-pro:latest4aef81c53168
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
2
mattermost/mattermost-team-edition:10.11.2b8bd1246cb3a
github.com/aws/aws-sdk-go@v1.55.7
no fix listed
2
opencloudeu/opencloud-rolling:2.1.0f9634bb04905
github.com/aws/aws-sdk-go@v1.55.6
no fix listed
2
oryd/oathkeeper:v0.40.6e8cb9b79a89c
github.com/aws/aws-sdk-go@v1.34.28
no fix listed
2
otel/opentelemetry-collector-contrib:0.156.0125bdbeb7590
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
2
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
github.com/aws/aws-sdk-go@v1.50.27
no fix listed
2
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/aws/aws-sdk-go@v1.55.5
no fix listed
2
phntom/kochi:1.1.33b82358bd56e
github.com/aws/aws-sdk-go@v1.35.35
no fix listed
2
pottava/s3-proxy:2.020a0bcb15f76
github.com/aws/aws-sdk-go@v1.25.25
1.34.0
2
prom/prometheus:v2.17.242d2395cd719
github.com/aws/aws-sdk-go@v1.29.18
1.34.0
2
prom/prometheus:v2.52.05c435642ca4d
github.com/aws/aws-sdk-go@v1.51.25
no fix listed
2
prom/prometheus:v2.37.98176adea328e
github.com/aws/aws-sdk-go@v1.44.45
no fix listed
2
prom/prometheus:v2.48.1a67e5e402ff5
github.com/aws/aws-sdk-go@v1.45.25
no fix listed
2
prom/prometheus:v2.21.0d43417c260e5
github.com/aws/aws-sdk-go@v1.34.9
no fix listed
2
rookout/controller:latest4451a6f6b8ec
github.com/aws/aws-sdk-go@v1.44.314
no fix listed
2
statping/statping:v0.90.74e874da513a5c
github.com/aws/aws-sdk-go@v1.30.20
1.34.0
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
github.com/aws/aws-sdk-go@v1.44.171
no fix listed
2
temporalio/server:1.22.4c0a44c26397b
github.com/aws/aws-sdk-go@v1.44.151
no fix listed
2
thomasnyambati/aws-service-events-exporter:1.0.01e18a0944ceb
github.com/aws/aws-sdk-go@v1.36.33
no fix listed
2
thoughtmachine/aws-service-quotas-exporter:v1.3.2c6065ba55c72
github.com/aws/aws-sdk-go@v1.44.175
no fix listed
2
xelalex/dregsy:0.4.3574054e1c417
github.com/aws/aws-sdk-go@v1.38.13
no fix listed
2
ghcr.io/appscode/license-proxyserver:v0.1.1e192ad567e0b
github.com/aws/aws-sdk-go@v1.55.6
no fix listed
2
ghcr.io/bank-vaults/vault-operator:v1.24.06f622c5fb8a9
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
2
ghcr.io/buoyantio/prometheus:v2.55.12659f4c2ebb7
github.com/aws/aws-sdk-go@v1.55.5
no fix listed
2
ghcr.io/celestiaorg/celestia-node:v0.27.5-mocha4768ea1c5fd2
github.com/aws/aws-sdk-go@v1.55.5
no fix listed
2
ghcr.io/chaos-mesh/chaos-coredns:v0.2.838bfdf5e3774
github.com/aws/aws-sdk-go@v1.33.17
1.34.0
2
ghcr.io/chaos-mesh/chaos-coredns:v0.2.678dc63bc5b89
github.com/aws/aws-sdk-go@v1.33.17
1.34.0
2
ghcr.io/cosmos/gaia:v25.1.0f115777d1112
github.com/aws/aws-sdk-go@v1.49.0
no fix listed
2
ghcr.io/dexidp/dex:v2.28.15e88f2205de1
github.com/aws/aws-sdk-go@v1.36.31
no fix listed
2
ghcr.io/juniorjpdj/containers/openssl-kubectl:1.36.1-r358afba209ea0
github.com/aws/aws-sdk-go@v1.55.7
no fix listed
2
ghcr.io/opencost/opencost:1.121.2de2784434527
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
2
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
github.com/aws/aws-sdk-go@v1.44.302
no fix listed
2
ghcr.io/project-zot/zot:v2.1.216b69512c00dc
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
2
ghcr.io/quenchworks/images/loki97bbf905a6c1
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
2
ghcr.io/quenchworks/images/otel-collector695e7fd14483
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
2
ghcr.io/quenchworks/images/prometheuse9037c190bc1
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
2
public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.16.11564359e1e0e
github.com/aws/aws-sdk-go@v1.44.160
no fix listed
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
github.com/aws/aws-sdk-go@v1.55.5
no fix listed
2
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
github.com/aws/aws-sdk-go@v1.47.11
no fix listed
2
quay.io/argoproj/argo-rollouts:v1.10.0187630ba7228
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
2
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
2
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
github.com/aws/aws-sdk-go@v1.44.67
no fix listed
2
quay.io/groundcover/grafana:9.3.18c65b333a3d3
github.com/aws/aws-sdk-go@v1.44.146
no fix listed
2
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
github.com/aws/aws-sdk-go@v1.49.13
no fix listed
2
quay.io/jetstack/cert-manager-controller:v1.13.29c67cf8c92d8
github.com/aws/aws-sdk-go@v1.45.7
no fix listed
2
quay.io/jetstack/cert-manager-controller:v1.11.0d429b6d696e0
github.com/aws/aws-sdk-go@v1.44.105
no fix listed
2

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.