StackRadar

CVE-2020-8912

Low

Advisory

Published 11 Feb 2022In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
2.5
base score, highest
EPSS
0.002
14th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
905
of 17,787 indexed, latest versions
Container images
931
deployed by those charts
Fix available
1 of 1
affected package

In-band key negotiation issue in AWS S3 Crypto SDK for golang in github.com/aws/aws-sdk-go

Carried by container images the latest versions of 905 of 17,787 indexed charts deploy, on 931 images.

Affected packageAffected versionsFixed inImages
github.com/aws/aws-sdk-gogolangv1.12.54, v1.15.24, v1.17.7, v1.17.14+289 more1.34.0931
OSV records
GHSA-7f33-f4f5-xwgwGO-2022-0635

Charts affected

905 by stars
ChartLatestAffected imagesRadar Score
xonodepoolsxonodepoolsOfficialVerified publisher1.0.71 of 1See more

xonodepools xonodepools 1.0.7

1 of the 1 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
xosphere/xonodepools:1.0.71458097b6f85
github.com/aws/aws-sdk-go@v1.55.5
no fix listed

Open the chart page →

388
ygdrassil-monitoringygdrassilVerified publisher0.4.03 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

3 of the 10 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
grafana/grafana:11.5.15781759b3d27
github.com/aws/aws-sdk-go@v1.55.5
no fix listed
prom/alertmanager:v0.28.0d5155cfac40a
github.com/aws/aws-sdk-go@v1.55.5
no fix listed
quay.io/prometheus/prometheus:v3.1.06559acbd5d77
github.com/aws/aws-sdk-go@v1.55.5
no fix listed

Open the chart page →

9,381
version-checkerymrs0.2.31 of 1See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
github.com/aws/aws-sdk-go@v1.34.10
no fix listed

Open the chart page →

3,023
prometheus-monitoring-stackyotron-helm-charts1.2.02 of 3See more

prometheus-monitoring-stack yotron-helm-charts 1.2.0

2 of the 3 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
quay.io/prometheus/prometheus:latest5ce7540c3c00
github.com/aws/aws-sdk-go@v1.55.8
no fix listed

Open the chart page →

879
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
github.com/aws/aws-sdk-go@v1.42.34
no fix listed
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
github.com/aws/aws-sdk-go@v1.44.262
no fix listed

Open the chart page →

5,033

Container images carrying it

931 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/kubedb/provider-azure:v0.27.0aa0c8526ae5e
github.com/aws/aws-sdk-go@v1.42.35
no fix listed
1
ghcr.io/kubedb/provider-gcp:v0.27.0a1d4cf8b8fe1
github.com/aws/aws-sdk-go@v1.42.35
no fix listed
1
ghcr.io/kubeform/provider-aws:v0.0.1e3d1f1302e49
github.com/aws/aws-sdk-go@v1.42.35
no fix listed
1
ghcr.io/kubeform/provider-azure:v0.0.1ac8459f70f85
github.com/aws/aws-sdk-go@v1.42.35
no fix listed
1
ghcr.io/kubeform/provider-gcp:v0.0.1af77073c184f
github.com/aws/aws-sdk-go@v1.42.35
no fix listed
1
ghcr.io/kubeshop/botkube:v1.0.0669e27a5d1af
github.com/aws/aws-sdk-go@v1.44.122
no fix listed
1
ghcr.io/kubeshop/botkube:v1.14.0c6fe64c7bfcd
github.com/aws/aws-sdk-go@v1.44.122
no fix listed
1
ghcr.io/kubevault/vault-operator:v0.24.00087cb49616f
github.com/aws/aws-sdk-go@v1.55.6
no fix listed
1
ghcr.io/kuoss/eventrouter:v0.4.1300b48beff3ae
github.com/aws/aws-sdk-go@v1.55.6
no fix listed
1
ghcr.io/kuoss/eventrouter:v0.4.156226040e1346
github.com/aws/aws-sdk-go@v1.55.6
no fix listed
1
ghcr.io/kvaps/linstor-stork:v1.14.05e409a6332b4
github.com/aws/aws-sdk-go@v1.35.37
no fix listed
1
ghcr.io/kyverno/kyverno:v1.7.19c73f1841ebc
github.com/aws/aws-sdk-go@v1.43.45
no fix listed
1
ghcr.io/kyverno/kyvernopre:v1.7.1185d2eebc60c
github.com/aws/aws-sdk-go@v1.43.45
no fix listed
1
ghcr.io/kyverno/policy-reporter:2.14.1e74c6bf33d1b
github.com/aws/aws-sdk-go@v1.44.229
no fix listed
1
ghcr.io/lavanet/lava/lavap:v2.5.089028adefcff
github.com/aws/aws-sdk-go@v1.44.203
no fix listed
1
ghcr.io/loft-sh/vcluster-platform:4.12.0ef92da4621e6
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
1
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
github.com/aws/aws-sdk-go@v1.48.4
no fix listed
1
ghcr.io/manishchaudhary101/kube-argus:latest8e3869d31c70
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
1
ghcr.io/manzil-infinity180/deploydefender:ea3ab0bb646cdbeddd1aca483ecf650f9ac0d0847fbc6855c8b3
github.com/aws/aws-sdk-go@v1.54.6
no fix listed
1
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
github.com/aws/aws-sdk-go@v1.25.36
1.34.0
1
ghcr.io/middleware-labs/agent-kube-go:dev17369c4cd390
github.com/aws/aws-sdk-go@v1.44.163
no fix listed
1
ghcr.io/middleware-labs/mw-kube-agent:master056f0953763d
github.com/aws/aws-sdk-go@v1.45.2
no fix listed
1
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
github.com/aws/aws-sdk-go@v1.55.5
no fix listed
1
ghcr.io/middleware-labs/mw-kube-agent:1.21.0ff23f452813a
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
1
ghcr.io/nerdswords/yet-another-cloudwatch-exporter:v0.32.0-alpha71e24278a049
github.com/aws/aws-sdk-go@v1.40.37
no fix listed
1
ghcr.io/nerdswords/yet-another-cloudwatch-exporter:v0.61.2f04925fe1fa6
github.com/aws/aws-sdk-go@v1.54.7
no fix listed
1
ghcr.io/nnstd/seaweedfs-operator:1.43ebe2fd253f6
github.com/aws/aws-sdk-go@v1.55.7
no fix listed
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
github.com/aws/aws-sdk-go@v1.55.6
no fix listed
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
github.com/aws/aws-sdk-go@v1.55.6
no fix listed
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe:latesta16ab5ca10a7
github.com/aws/aws-sdk-go@v1.44.183
no fix listed
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe:latestc0c8d53df9f3
github.com/aws/aws-sdk-go@v1.55.6
no fix listed
1
ghcr.io/okteto/registry:0.0.0-2026-08-1769131511501f
github.com/aws/aws-sdk-go@v1.44.181
no fix listed
1
ghcr.io/openclarity/grype-server:v0.6.079412399f301
github.com/aws/aws-sdk-go@v1.44.180
no fix listed
1
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
github.com/aws/aws-sdk-go@v1.55.7
no fix listed
1
ghcr.io/openfaasltd/sns-connector:0.2.0e9ab76a4ec77
github.com/aws/aws-sdk-go@v1.44.209
no fix listed
1
ghcr.io/openfaasltd/sqs-connector:0.3.4d44ed3b3128c
github.com/aws/aws-sdk-go@v1.55.6
no fix listed
1
ghcr.io/open-feature/flagd:v0.16.032234e63c1d0
github.com/aws/aws-sdk-go@v1.55.6
no fix listed
1
ghcr.io/openlit/openlit:1.24.02434560e8f0e
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.132.05e331c925091
github.com/aws/aws-sdk-go@v1.55.5
no fix listed
1
ghcr.io/open-telemetry/opentelemetry-operator/target-allocator:0.158.0738933f2a951
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
1
ghcr.io/ownkube/kubernetes-events-exporter:0.1.2bcb7f0f733f5
github.com/aws/aws-sdk-go@v1.44.162
no fix listed
1
ghcr.io/parca-dev/parca:v0.24.23776500fde82
github.com/aws/aws-sdk-go@v1.55.7
no fix listed
1
ghcr.io/performancecopilot/archive-analysis:latest8de11e2363fc
github.com/aws/aws-sdk-go@v1.44.325
no fix listed
1
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
github.com/aws/aws-sdk-go@v1.25.3
1.34.0
1
ghcr.io/quenchworks/images/cadencee45a5fcdf1a4
github.com/aws/aws-sdk-go@v1.54.12
no fix listed
1
ghcr.io/quenchworks/images/chartmuseum3af8698e0524
github.com/aws/aws-sdk-go@v1.47.11
no fix listed
1
ghcr.io/quenchworks/images/distribution9fda541d53ea
github.com/aws/aws-sdk-go@v1.55.5
no fix listed
1
ghcr.io/quenchworks/images/external-secrets60a23bfaba84
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
1
ghcr.io/quenchworks/images/harbor-registryfd8d3f9a59fa
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
1
ghcr.io/quenchworks/images/harbor-registryctl08526e5117e3
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.