StackRadar

CVE-2020-8912

Low

Advisory

Published 11 Feb 2022In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
2.5
base score, highest
EPSS
0.002
14th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
905
of 17,787 indexed, latest versions
Container images
931
deployed by those charts
Fix available
1 of 1
affected package

In-band key negotiation issue in AWS S3 Crypto SDK for golang in github.com/aws/aws-sdk-go

Carried by container images the latest versions of 905 of 17,787 indexed charts deploy, on 931 images.

Affected packageAffected versionsFixed inImages
github.com/aws/aws-sdk-gogolangv1.12.54, v1.15.24, v1.17.7, v1.17.14+289 more1.34.0931
OSV records
GHSA-7f33-f4f5-xwgwGO-2022-0635

Charts affected

905 by stars
ChartLatestAffected imagesRadar Score
xonodepoolsxonodepoolsOfficialVerified publisher1.0.71 of 1See more

xonodepools xonodepools 1.0.7

1 of the 1 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
xosphere/xonodepools:1.0.71458097b6f85
github.com/aws/aws-sdk-go@v1.55.5
no fix listed

Open the chart page →

388
ygdrassil-monitoringygdrassilVerified publisher0.4.03 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

3 of the 10 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
grafana/grafana:11.5.15781759b3d27
github.com/aws/aws-sdk-go@v1.55.5
no fix listed
prom/alertmanager:v0.28.0d5155cfac40a
github.com/aws/aws-sdk-go@v1.55.5
no fix listed
quay.io/prometheus/prometheus:v3.1.06559acbd5d77
github.com/aws/aws-sdk-go@v1.55.5
no fix listed

Open the chart page →

9,381
version-checkerymrs0.2.31 of 1See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
github.com/aws/aws-sdk-go@v1.34.10
no fix listed

Open the chart page →

3,023
prometheus-monitoring-stackyotron-helm-charts1.2.02 of 3See more

prometheus-monitoring-stack yotron-helm-charts 1.2.0

2 of the 3 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
quay.io/prometheus/prometheus:latest5ce7540c3c00
github.com/aws/aws-sdk-go@v1.55.8
no fix listed

Open the chart page →

879
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
github.com/aws/aws-sdk-go@v1.42.34
no fix listed
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
github.com/aws/aws-sdk-go@v1.44.262
no fix listed

Open the chart page →

5,033

Container images carrying it

931 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
tranhailong/nfs-server:4.2-2-gcsfuse028662749be2
github.com/aws/aws-sdk-go@v1.44.159
no fix listed
1
treeverse/lakefs:0.69.0478f37a6cffc
github.com/aws/aws-sdk-go@v1.37.26
no fix listed
1
treeverse/lakefs:1.86.0fb7a0d90f77e
github.com/aws/aws-sdk-go@v1.48.11
no fix listed
1
tusproject/tusd:v1.10.01e457b59fd5b
github.com/aws/aws-sdk-go@v1.44.114
no fix listed
1
tusproject/tusd:v1.13.0f8088058b80f
github.com/aws/aws-sdk-go@v1.45.1
no fix listed
1
twentycrm/twenty-postgres-spilo:latest2f78405a78be
github.com/aws/aws-sdk-go@v1.44.7
no fix listed
1
twinproduction/aws-eks-asg-rolling-update-handler:v1.7.08f38c206972e
github.com/aws/aws-sdk-go@v1.44.152
no fix listed
1
ubercadence/server:0.23.22ac5491d13bb
github.com/aws/aws-sdk-go@v1.34.13
no fix listed
1
udhos/eks-auto-pod-id-assoc:0.6.0196ef68af380
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
1
udhos/gateboard:1.12.53acc0e7599bf
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
1
udhos/gateboard-discovery:1.9.55567c9363c4c
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
1
udhos/kubecache:0.14.1f44ef986df49
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
1
udhos/lambdaping:1.0.46bd2cf2ac732
github.com/aws/aws-sdk-go@v1.55.5
no fix listed
1
udhos/mongoping:1.3.103b08b63f524
github.com/aws/aws-sdk-go@v1.55.7
no fix listed
1
udhos/rabbitping:1.3.0474c467bbf42
github.com/aws/aws-sdk-go@v1.55.7
no fix listed
1
udhos/redis-enforce-expire:1.0.0615b6a7d742e
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
1
udhos/secrets:1.0.6daa2b4eaac09
github.com/aws/aws-sdk-go@v1.55.6
no fix listed
1
udhos/snsping:1.2.96ae70677b6a3
github.com/aws/aws-sdk-go@v1.55.5
no fix listed
1
udhos/sqs-to-sns:2.0.15cf7979da82e1
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
1
udhos/token-server:1.0.9728013f2fac1
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
1
uptrace/uptrace:2.0.234a02c3b2d12
github.com/aws/aws-sdk-go@v1.55.6
no fix listed
1
velero/velero:v1.9.0277fbfaf8dcf
github.com/aws/aws-sdk-go@v1.28.2
1.34.0
1
velero/velero:v1.8.18d784580931c
github.com/aws/aws-sdk-go@v1.28.2
1.34.0
1
velero/velero-plugin-for-aws:v1.5.03d2ea7aab32d
github.com/aws/aws-sdk-go@v1.42.10
no fix listed
1
victoriametrics/operator:v0.65.0716b89a3ed79
github.com/aws/aws-sdk-go@v1.55.6
no fix listed
1
victoriametrics/operator:v0.47.271be93cfafb6
github.com/aws/aws-sdk-go@v1.51.23
no fix listed
1
weaveworks/flagger:1.0.0-rc.5174307de1b36
github.com/aws/aws-sdk-go@v1.30.19
1.34.0
1
wernight/ngrok:latestd211f29ebcfe
github.com/aws/aws-sdk-go@v1.44.52
no fix listed
1
willnorris/imageproxy:latest21d0c90f4c31
github.com/aws/aws-sdk-go@v1.40.42
no fix listed
1
xosphere/xonodepools:1.0.71458097b6f85
github.com/aws/aws-sdk-go@v1.55.5
no fix listed
1
gcr.io/cadvisor/cadvisor:v0.40.0135327c978de
github.com/aws/aws-sdk-go@v1.35.24
no fix listed
1
gcr.io/cadvisor/cadvisor:v0.47.2e6c562b5e983
github.com/aws/aws-sdk-go@v1.35.24
no fix listed
1
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert:1.3e225fe7eaa55
github.com/aws/aws-sdk-go@v1.33.8
1.34.0
1
gcr.io/gloo-mesh/gloo-mesh:1.1.2a4011eae6a0b
github.com/aws/aws-sdk-go@v1.38.3
no fix listed
1
gcr.io/istio-release/pilot:1.11.1c552478f8f11
github.com/aws/aws-sdk-go@v1.38.51
no fix listed
1
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
github.com/aws/aws-sdk-go@v1.38.51
no fix listed
1
gcr.io/k8s-staging-multitenancy/hnc-manager:v1.1.08ab8229f6a89
github.com/aws/aws-sdk-go@v1.38.49
no fix listed
1
gcr.io/kasten-images/aggregatedapis:9.0.5e5acd40c5aa5
github.com/aws/aws-sdk-go@v1.55.7
no fix listed
1
gcr.io/kasten-images/auth:9.0.5ed3cdf44ea5f
github.com/aws/aws-sdk-go@v1.55.7
no fix listed
1
gcr.io/kasten-images/bloblifecyclemanager:9.0.5d481c617ba01
github.com/aws/aws-sdk-go@v1.55.7
no fix listed
1
gcr.io/kasten-images/catalog:9.0.51903f72cca29
github.com/aws/aws-sdk-go@v1.55.7
no fix listed
1
gcr.io/kasten-images/controllermanager:9.0.503ab619db308
github.com/aws/aws-sdk-go@v1.55.7
no fix listed
1
gcr.io/kasten-images/crypto:9.0.58c74d06d7f93
github.com/aws/aws-sdk-go@v1.55.7
no fix listed
1
gcr.io/kasten-images/dashboardbff:9.0.5dbbec053774e
github.com/aws/aws-sdk-go@v1.55.7
no fix listed
1
gcr.io/kasten-images/events:9.0.50b0cfdbfff16
github.com/aws/aws-sdk-go@v1.55.7
no fix listed
1
gcr.io/kasten-images/executor:9.0.59388835ed097
github.com/aws/aws-sdk-go@v1.55.7
no fix listed
1
gcr.io/kasten-images/garbagecollector:9.0.5e352701f1045
github.com/aws/aws-sdk-go@v1.55.7
no fix listed
1
gcr.io/kasten-images/jobs:9.0.581882d4a2bed
github.com/aws/aws-sdk-go@v1.55.7
no fix listed
1
gcr.io/kasten-images/kanister:9.0.547d015e7a487
github.com/aws/aws-sdk-go@v1.55.7
no fix listed
1
gcr.io/kasten-images/kanister-tools:9.0.5efa6b7da835b
github.com/aws/aws-sdk-go@v1.55.7
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.