CVE-2020-8912
LowAdvisory
Published 11 Feb 2022In the index since 5 Sept 2026
- Severity
- Low
- worst across findings
- CVSS
- 2.5
- base score, highest
- EPSS
- 0.002
- 14th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 896
- of 17,790 indexed, latest versions
- Container images
- 928
- deployed by those charts
- Fix available
- 1 of 1
- affected package
In-band key negotiation issue in AWS S3 Crypto SDK for golang in github.com/aws/aws-sdk-go
Carried by container images the latest versions of 896 of 17,790 indexed charts deploy, on 928 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v1.12.54, v1.15.24, v1.17.7, v1.17.14+289 more | 1.34.0 | 928 |
- OSV records
- GHSA-7f33-f4f5-xwgwGO-2022-0635
Charts affected
896 by stars
| Chart | Latest | Affected images | Radar Score |
|---|
Container images carrying it
928 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| quay.io/ | 4748e26f9369 | github.com/ | no fix listed | 1 |
| quay.io/ | 508729e0e2d1 | github.com/ | no fix listed | 1 |
| quay.io/ | 56e7f18e05dd | github.com/ | no fix listed | 1 |
| quay.io/ | 5888c188cf09 | github.com/ | no fix listed | 1 |
| quay.io/ | 63805ebb8d2b | github.com/ | no fix listed | 1 |
| quay.io/ | 6927e0919a14 | github.com/ | no fix listed | 1 |
| quay.io/ | 91100b06e86d | github.com/ | no fix listed | 1 |
| quay.io/ | 9abc6cf6aea7 | github.com/ | no fix listed | 1 |
| quay.io/ | b37103e03399 | github.com/ | no fix listed | 1 |
| quay.io/ | f20d3127bf28 | github.com/ | no fix listed | 1 |
| quay.io/ | 7b4202c25b67 | github.com/ | no fix listed | 1 |
| quay.io/ | 6ba82beff18e | github.com/ | no fix listed | 1 |
| quay.io/ | 5b62aaade3c9 | github.com/ | no fix listed | 1 |
| quay.io/ | 9a6c84560d44 | github.com/ | no fix listed | 1 |
| quay.io/ | e542959e1b36 | github.com/ | no fix listed | 1 |
| quay.io/ | 379efe0c2541 | github.com/ | 1.34.0 | 1 |
| quay.io/ | c6591da87aa8 | github.com/ | 1.34.0 | 1 |
| quay.io/ | be3a5846922d | github.com/ | no fix listed | 1 |
| registry.gitlab.com/ | 7a6f84b81c4e | github.com/ | no fix listed | 1 |
| registry.gitlab.com/ | cf72810d33f5 | github.com/ | no fix listed | 1 |
| registry.gitlab.com/ | 5b7636dfba3f | github.com/ | no fix listed | 1 |
| registry.gitlab.com/ | 9b9d1ed86b6a | github.com/ | no fix listed | 1 |
| registry.k8s.io/ | 6ef10d108e0e | github.com/ | no fix listed | 1 |
| registry.k8s.io/ | 7b172f42533c | github.com/ | no fix listed | 1 |
| registry.k8s.io/ | f6902791fb9a | github.com/ | no fix listed | 1 |
| registry.k8s.io/ | 66ce7d460e53 | github.com/ | no fix listed | 1 |
| registry.k8s.io/ | 52f0618e9bc2 | github.com/ | no fix listed | 1 |
| registry.k8s.io/ | c380751accc5 | github.com/ | no fix listed | 1 |