CVE-2020-8911
MediumAdvisory
Published 11 Feb 2022In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.6
- base score, highest
- EPSS
- 0.003
- 28th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 905
- of 17,787 indexed, latest versions
- Container images
- 931
- deployed by those charts
- Fix available
- 1 of 1
- affected package
CBC padding oracle issue in AWS S3 Crypto SDK for golang
Carried by container images the latest versions of 905 of 17,787 indexed charts deploy, on 931 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v1.12.54, v1.15.24, v1.17.7, v1.17.14+288 more | 1.34.0 | 931 |
- OSV records
- GHSA-f5pg-7wfw-84q9GO-2022-0646
Charts affected
905 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| xonodepoolsxonodepoolsOfficialVerified publisher | 1.0.7 | 1 of 1See more | 388 |
| ygdrassil-monitoringygdrassilVerified publisher | 0.4.0 | 3 of 10See more | 9,381 |
| version-checkerymrs | 0.2.3 | 1 of 1See more | 3,023 |
| prometheus-monitoring-stackyotron-helm-charts | 1.2.0 | 2 of 3See more | 879 |
| zahori-consulzahoriVerified publisher | 1.0.1 | 2 of 2See more | 5,033 |
Container images carrying it
931 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| datasaker/ | 08b52999f67b | github.com/ | no fix listed | 1 |
| deepflowce/ | 34fcc526dd59 | github.com/ | no fix listed | 1 |
| defactops/ | 825cdf9ba706 | github.com/ | no fix listed | 1 |
| dellemc/ | 148ada9060a9 | github.com/ | 1.34.0 | 1 |
| devopsfaith/ | 4c678c224f67 | github.com/ | no fix listed | 1 |
| devopsfaith/ | 9219cda867e2 | github.com/ | no fix listed | 1 |
| devopstales/ | 75136aa7a26e | github.com/ | no fix listed | 1 |
| dexidp/ | 43655afd1a8f | github.com/ | no fix listed | 1 |
| distribution/ | bca24727f400 | github.com/ | no fix listed | 1 |
| dollarshaveclub/ | 14a257836529 | github.com/ | 1.34.0 | 1 |
| dollarshaveclub/ | 663cbf25fcfe | github.com/ | no fix listed | 1 |
| donetick/ | 849a43d9e363 | github.com/ | no fix listed | 1 |
| dragonflyoss/ | c3ef7f10698d | github.com/ | no fix listed | 1 |
| dragonflyoss/ | 523785c77787 | github.com/ | no fix listed | 1 |
| dragonflyoss/ | 6d710dc2bae0 | github.com/ | no fix listed | 1 |
| drone/ | 55897c8fb22d | github.com/ | no fix listed | 1 |
| drumsergio/ | dd3ee9703969 | github.com/ | 1.34.0 | 1 |
| dvdlevanon/ | 57d68c534e8e | github.com/ | no fix listed | 1 |
| elastiflow/ | fee67842e16b | github.com/ | no fix listed | 1 |
| elastisys/ | 509b94f1da55 | github.com/ | no fix listed | 1 |
| empathyco/ | 4f1e26eaacbf | github.com/ | no fix listed | 1 |
| emqxecp/ | 4c31d9bec846 | github.com/ | no fix listed | 1 |
| engrmth/ | 6d8464e6f0e8 | github.com/ | no fix listed | 1 |
| ethpandaops/ | 989da6bea4bd | github.com/ | no fix listed | 1 |
| factly/ | 384d384310ef | github.com/ | no fix listed | 1 |
| falcosecurity/ | 828ee36cb13a | github.com/ | no fix listed | 1 |
| fission/ | 3fcfd8a0fa5d | github.com/ | no fix listed | 1 |
| flanksource/ | 1dacc3195bf9 | github.com/ | no fix listed | 1 |
| flanksource/ | 689687a7cf95 | github.com/ | no fix listed | 1 |
| fleetdm/ | 12e644b7f40e | github.com/ | no fix listed | 1 |
| gabekangas/ | 97461aedb580 | github.com/ | no fix listed | 1 |
| garugaru/ | 5201314c28f3 | github.com/ | 1.34.0 | 1 |
| garugaru/ | 89d66d117029 | github.com/ | no fix listed | 1 |
| getconvoy/ | f4934cc05e31 | github.com/ | no fix listed | 1 |
| gocrane/ | a1400909118c | github.com/ | no fix listed | 1 |
| goharbor/ | 6ab3ca28e9e5 | github.com/ | no fix listed | 1 |
| goharbor/ | 6412d679fdc3 | github.com/ | no fix listed | 1 |
| goharbor/ | 86bf3031f4a7 | github.com/ | no fix listed | 1 |
| goharbor/ | a30e5a8be3d9 | github.com/ | no fix listed | 1 |
| goharbor/ | c017dd84ee96 | github.com/ | no fix listed | 1 |
| goharbor/ | 39435daedd0c | github.com/ | no fix listed | 1 |
| goharbor/ | 8d5339ff2d74 | github.com/ | no fix listed | 1 |
| goharbor/ | e2b0298e894d | github.com/ | no fix listed | 1 |
| goharbor/ | 7f82ed1e2635 | github.com/ | no fix listed | 1 |
| goharbor/ | cce272836449 | github.com/ | no fix listed | 1 |
| goharbor/ | ddf6bb429eb6 | github.com/ | no fix listed | 1 |
| goharbor/ | fd91a4a1273f | github.com/ | 1.34.0 | 1 |
| goharbor/ | a92b51aa7d6e | github.com/ | 1.34.0 | 1 |
| goharbor/ | b9522c3f5056 | github.com/ | no fix listed | 1 |
| goharbor/ | dc5b882a7db4 | github.com/ | no fix listed | 1 |