StackRadar

CVE-2020-8912

Low

Advisory

Published 11 Feb 2022In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
2.5
base score, highest
EPSS
0.002
14th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
888
of 17,787 indexed, latest versions
Container images
915
deployed by those charts
Fix available
1 of 1
affected package

In-band key negotiation issue in AWS S3 Crypto SDK for golang in github.com/aws/aws-sdk-go

Carried by container images the latest versions of 888 of 17,787 indexed charts deploy, on 915 images.

Affected packageAffected versionsFixed inImages
github.com/aws/aws-sdk-gogolangv1.12.54, v1.15.24, v1.17.7, v1.17.14+286 more1.34.0915
OSV records
GHSA-7f33-f4f5-xwgwGO-2022-0635

Charts affected

888 by stars
ChartLatestAffected imagesRadar Score
nfs-servertranhailongVerified publisher0.1.21 of 1See more

nfs-server tranhailong 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
tranhailong/nfs-server:4.2-2-gcsfuse028662749be2
github.com/aws/aws-sdk-go@v1.44.159
no fix listed

Open the chart page →

2,323
harbor-scanner-trivytrivy-operator0.31.21 of 1See more

harbor-scanner-trivy trivy-operator 0.31.2

1 of the 1 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
aquasec/harbor-scanner-trivy:0.31.26e790e233872
github.com/aws/aws-sdk-go@v1.53.0
no fix listed

Open the chart page →

2,477
tfy-agenttruefoundryVerified publisher0.2.1031 of 5See more

tfy-agent truefoundry 0.2.103

1 of the 5 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/external-secrets:v2.4.19440a40b3947
github.com/aws/aws-sdk-go@v1.55.8
no fix listed

Open the chart page →

681
tfy-kservetruefoundryVerified publisher0.1.11 of 2See more

tfy-kserve truefoundry 0.1.1

1 of the 2 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
kserve/kserve-controller:v0.10.022ff858b57c1
github.com/aws/aws-sdk-go@v1.36.30
no fix listed

Open the chart page →

1,171
tfy-lokitruefoundryVerified publisher0.1.62 of 2See more

tfy-loki truefoundry 0.1.6

2 of the 2 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
grafana/loki:2.9.1035b02acc6765
github.com/aws/aws-sdk-go@v1.44.315
no fix listed
grafana/promtail:2.9.1063a2e57a5b14
github.com/aws/aws-sdk-go@v1.44.315
no fix listed

Open the chart page →

2,813
truefoundry-monitoringtruefoundryVerified publisher0.1.61 of 8See more

truefoundry-monitoring truefoundry 0.1.6

1 of the 8 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
grafana/grafana:12.3.070d9599b186c
github.com/aws/aws-sdk-go@v1.55.7
no fix listed

Open the chart page →

4,526
aws-eks-asg-rolling-update-handlertwin1.5.01 of 1See more

aws-eks-asg-rolling-update-handler twin 1.5.0

1 of the 1 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
twinproduction/aws-eks-asg-rolling-update-handler:v1.7.08f38c206972e
github.com/aws/aws-sdk-go@v1.44.152
no fix listed

Open the chart page →

1,118
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
opencloudeu/opencloud-rolling:2.1.0f9634bb04905
github.com/aws/aws-sdk-go@v1.55.6
no fix listed

Open the chart page →

45,239
kiamuswitch6.1.21 of 1See more

kiam uswitch 6.1.2

1 of the 1 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
quay.io/uswitch/kiam:v4.0be3a5846922d
github.com/aws/aws-sdk-go@v1.35.10
no fix listed

Open the chart page →

2,965
vault-raft-snapshot-agentvault-raft-snapshot-agentVerified publisher0.6.91 of 1See more

vault-raft-snapshot-agent vault-raft-snapshot-agent 0.6.9

1 of the 1 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
ghcr.io/argelbargel/vault-raft-snapshot-agent:v0.12.5345174727a2b
github.com/aws/aws-sdk-go@v1.55.5
no fix listed

Open the chart page →

1,114
verticadb-operatorvertica-chartsVerified publisher26.2.21 of 1See more

verticadb-operator vertica-charts 26.2.2

1 of the 1 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
opentext/verticadb-operator:26.2.2-04ad44e44476c
github.com/aws/aws-sdk-go@v1.49.5
no fix listed

Open the chart page →

68
scrutinyvhdirkVerified publisher0.1.31 of 1See more

scrutiny vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
ghcr.io/analogj/scrutiny:master-omnibus18689773150d
github.com/aws/aws-sdk-go@v1.29.16
1.34.0

Open the chart page →

4,382
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
github.com/aws/aws-sdk-go@v1.44.7
no fix listed

Open the chart page →

13,459
consulwarjiang1.3.02 of 2See more

consul warjiang 1.3.0

2 of the 2 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
hashicorp/consul:1.17.0712fe02d2f84
github.com/aws/aws-sdk-go@v1.44.289
no fix listed
hashicorp/consul-k8s-control-plane:1.3.00e4452f0f265
github.com/aws/aws-sdk-go@v1.44.262
no fix listed

Open the chart page →

4,060
argo-eventswenerme2.4.271 of 1See more

argo-events wenerme 2.4.27

1 of the 1 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
github.com/aws/aws-sdk-go@v1.47.11
no fix listed

Open the chart page →

969
argo-rolloutswenerme2.43.11 of 1See more

argo-rollouts wenerme 2.43.1

1 of the 1 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-rollouts:v1.10.0187630ba7228
github.com/aws/aws-sdk-go@v1.55.8
no fix listed

Open the chart page →

115
athens-proxywenerme0.5.21 of 2See more

athens-proxy wenerme 0.5.2

1 of the 2 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
gomods/athens:v0.11.0efb811df7844
github.com/aws/aws-sdk-go@v1.32.7
1.34.0

Open the chart page →

4,984
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
ubercadence/server:0.23.22ac5491d13bb
github.com/aws/aws-sdk-go@v1.34.13
no fix listed

Open the chart page →

10,127
external-secretswenerme2.10.01 of 1See more

external-secrets wenerme 2.10.0

1 of the 1 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/external-secrets:v2.10.0814117b0fd6d
github.com/aws/aws-sdk-go@v1.55.8
no fix listed

Open the chart page →

77
gitlab-runnerwenerme0.92.11 of 1See more

gitlab-runner wenerme 0.92.1

1 of the 1 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/gitlab-runner:alpine-v19.3.1af0325804248
github.com/aws/aws-sdk-go@v1.55.7
no fix listed

Open the chart page →

904
harborwenerme1.19.22 of 8See more

harbor wenerme 1.19.2

2 of the 8 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
goharbor/harbor-registryctl:v2.15.2223d5cb49d5d
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
goharbor/registry-photon:v2.15.2c4ebef61ceb5
github.com/aws/aws-sdk-go@v1.55.8
no fix listed

Open the chart page →

1,650
prometheuswenerme29.30.01See more

prometheus wenerme 29.30.0

1 container image this version deploys carries CVE-2020-8912.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v3.14.05ce7540c3c00
github.com/aws/aws-sdk-go@v1.55.8
no fix listed

Open the chart page →

—
rancherwenerme2.15.11 of 2See more

rancher wenerme 2.15.1

1 of the 2 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.15f6c4dc52a05
github.com/aws/aws-sdk-go@v1.55.8
no fix listed

Open the chart page →

1,456
temporalwenerme0.15.14 of 13See more

temporal wenerme 0.15.1

4 of the 13 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
github.com/aws/aws-sdk-go@v1.25.48
1.34.0
prom/prometheus:v2.16.0e4ca62c0d62f
github.com/aws/aws-sdk-go@v1.25.48
1.34.0
temporalio/admin-tools:1.15.135034611d981
github.com/aws/aws-sdk-go@v1.42.44
no fix listed
temporalio/server:1.15.1e26758f5a1bf
github.com/aws/aws-sdk-go@v1.42.44
no fix listed

Open the chart page →

22,665
traefikwenerme9.1.11 of 1See more

traefik wenerme 9.1.1

1 of the 1 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
library/traefik:2.2.8f5af5a5ce17f
github.com/aws/aws-sdk-go@v1.30.20
1.34.0

Open the chart page →

3,369
vaultwenerme0.34.11 of 2See more

vault wenerme 0.34.1

1 of the 2 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
hashicorp/vault:2.0.45be49781ecf7
github.com/aws/aws-sdk-go@v1.55.8
no fix listed

Open the chart page →

542
victoria-metrics-k8s-stackwenerme0.92.11 of 7See more

victoria-metrics-k8s-stack wenerme 0.92.1

1 of the 7 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
grafana/grafana:13.1.17cb8c64c4d57
github.com/aws/aws-sdk-go@v1.55.8
no fix listed

Open the chart page →

1,889
wexa-studiowexa-studio1.2.03 of 15See more

wexa-studio wexa-studio 1.2.0

3 of the 15 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.40b01ed3924e6
github.com/aws/aws-sdk-go@v1.44.331
no fix listed
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
github.com/aws/aws-sdk-go@v1.55.6
no fix listed
temporalio/server:1.29.1c1e3326b2ce1
github.com/aws/aws-sdk-go@v1.55.6
no fix listed

Open the chart page →

14,983
ceph-csi-cephfswikimedia0.1.81 of 5See more

ceph-csi-cephfs wikimedia 0.1.8

1 of the 5 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
github.com/aws/aws-sdk-go@v1.44.67
no fix listed

Open the chart page →

10,285
ceph-csi-rbdwikimedia0.1.131 of 6See more

ceph-csi-rbd wikimedia 0.1.13

1 of the 6 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
github.com/aws/aws-sdk-go@v1.44.67
no fix listed

Open the chart page →

11,784
opentelemetry-collectorwikimedia0.62.71 of 1See more

opentelemetry-collector wikimedia 0.62.7

1 of the 1 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.81.0c6671841470b
github.com/aws/aws-sdk-go@v1.44.295
no fix listed

Open the chart page →

2,022
postgres-operatorwiremindVerified publisher1.14.0-wiremind01 of 1See more

postgres-operator wiremind 1.14.0-wiremind0

1 of the 1 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
ghcr.io/zalando/postgres-operator:v1.14.04f40cfc2283b
github.com/aws/aws-sdk-go@v1.53.8
no fix listed

Open the chart page →

1,286
registrywiremindVerified publisher0.1.11 of 1See more

registry wiremind 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
ghcr.io/distribution/distribution:3.0.04ba3adf47f5c
github.com/aws/aws-sdk-go@v1.55.5
no fix listed

Open the chart page →

1,187
xonodepoolsxonodepoolsOfficialVerified publisher1.0.71 of 1See more

xonodepools xonodepools 1.0.7

1 of the 1 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
xosphere/xonodepools:1.0.71458097b6f85
github.com/aws/aws-sdk-go@v1.55.5
no fix listed

Open the chart page →

388
ygdrassil-monitoringygdrassilVerified publisher0.4.03 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

3 of the 10 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
grafana/grafana:11.5.15781759b3d27
github.com/aws/aws-sdk-go@v1.55.5
no fix listed
prom/alertmanager:v0.28.0d5155cfac40a
github.com/aws/aws-sdk-go@v1.55.5
no fix listed
quay.io/prometheus/prometheus:v3.1.06559acbd5d77
github.com/aws/aws-sdk-go@v1.55.5
no fix listed

Open the chart page →

9,381
version-checkerymrs0.2.31 of 1See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
github.com/aws/aws-sdk-go@v1.34.10
no fix listed

Open the chart page →

3,023
prometheus-monitoring-stackyotron-helm-charts1.2.02 of 3See more

prometheus-monitoring-stack yotron-helm-charts 1.2.0

2 of the 3 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
quay.io/prometheus/prometheus:latest5ce7540c3c00
github.com/aws/aws-sdk-go@v1.55.8
no fix listed

Open the chart page →

878
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2020-8912.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
github.com/aws/aws-sdk-go@v1.42.34
no fix listed
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
github.com/aws/aws-sdk-go@v1.44.262
no fix listed

Open the chart page →

5,033

Container images carrying it

915 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
istio/proxyv2:1.10.3a78b7a165744
github.com/aws/aws-sdk-go@v1.38.3
no fix listed
2
library/influxdb:2.6.1-alpine44a366dd7724
github.com/aws/aws-sdk-go@v1.30.12
1.34.0
2
library/influxdb:2.7b8d940ca9376
github.com/aws/aws-sdk-go@v1.34.0
no fix listed
2
library/traefik:v2.57d5a6ae66572
github.com/aws/aws-sdk-go@v1.39.0
no fix listed
2
localstack/localstack-pro:latest4aef81c53168
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
2
mattermost/mattermost-team-edition:10.11.2b8bd1246cb3a
github.com/aws/aws-sdk-go@v1.55.7
no fix listed
2
opencloudeu/opencloud-rolling:2.1.0f9634bb04905
github.com/aws/aws-sdk-go@v1.55.6
no fix listed
2
oryd/oathkeeper:v0.40.6e8cb9b79a89c
github.com/aws/aws-sdk-go@v1.34.28
no fix listed
2
otel/opentelemetry-collector-contrib:0.156.0125bdbeb7590
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
2
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
github.com/aws/aws-sdk-go@v1.50.27
no fix listed
2
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/aws/aws-sdk-go@v1.55.5
no fix listed
2
phntom/kochi:1.1.33b82358bd56e
github.com/aws/aws-sdk-go@v1.35.35
no fix listed
2
pottava/s3-proxy:2.020a0bcb15f76
github.com/aws/aws-sdk-go@v1.25.25
1.34.0
2
prom/prometheus:v2.17.242d2395cd719
github.com/aws/aws-sdk-go@v1.29.18
1.34.0
2
prom/prometheus:v2.52.05c435642ca4d
github.com/aws/aws-sdk-go@v1.51.25
no fix listed
2
prom/prometheus:v2.37.98176adea328e
github.com/aws/aws-sdk-go@v1.44.45
no fix listed
2
prom/prometheus:v2.48.1a67e5e402ff5
github.com/aws/aws-sdk-go@v1.45.25
no fix listed
2
prom/prometheus:v2.21.0d43417c260e5
github.com/aws/aws-sdk-go@v1.34.9
no fix listed
2
rookout/controller:latest4451a6f6b8ec
github.com/aws/aws-sdk-go@v1.44.314
no fix listed
2
statping/statping:v0.90.74e874da513a5c
github.com/aws/aws-sdk-go@v1.30.20
1.34.0
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
github.com/aws/aws-sdk-go@v1.44.171
no fix listed
2
temporalio/server:1.22.4c0a44c26397b
github.com/aws/aws-sdk-go@v1.44.151
no fix listed
2
thomasnyambati/aws-service-events-exporter:1.0.01e18a0944ceb
github.com/aws/aws-sdk-go@v1.36.33
no fix listed
2
thoughtmachine/aws-service-quotas-exporter:v1.3.2c6065ba55c72
github.com/aws/aws-sdk-go@v1.44.175
no fix listed
2
xelalex/dregsy:0.4.3574054e1c417
github.com/aws/aws-sdk-go@v1.38.13
no fix listed
2
ghcr.io/appscode/license-proxyserver:v0.1.1e192ad567e0b
github.com/aws/aws-sdk-go@v1.55.6
no fix listed
2
ghcr.io/bank-vaults/vault-operator:v1.24.06f622c5fb8a9
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
2
ghcr.io/buoyantio/prometheus:v2.55.12659f4c2ebb7
github.com/aws/aws-sdk-go@v1.55.5
no fix listed
2
ghcr.io/celestiaorg/celestia-node:v0.27.5-mocha4768ea1c5fd2
github.com/aws/aws-sdk-go@v1.55.5
no fix listed
2
ghcr.io/chaos-mesh/chaos-coredns:v0.2.838bfdf5e3774
github.com/aws/aws-sdk-go@v1.33.17
1.34.0
2
ghcr.io/chaos-mesh/chaos-coredns:v0.2.678dc63bc5b89
github.com/aws/aws-sdk-go@v1.33.17
1.34.0
2
ghcr.io/cosmos/gaia:v25.1.0f115777d1112
github.com/aws/aws-sdk-go@v1.49.0
no fix listed
2
ghcr.io/dexidp/dex:v2.28.15e88f2205de1
github.com/aws/aws-sdk-go@v1.36.31
no fix listed
2
ghcr.io/juniorjpdj/containers/openssl-kubectl:1.36.1-r358afba209ea0
github.com/aws/aws-sdk-go@v1.55.7
no fix listed
2
ghcr.io/opencost/opencost:1.121.2de2784434527
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
2
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
github.com/aws/aws-sdk-go@v1.44.302
no fix listed
2
ghcr.io/project-zot/zot:v2.1.216b69512c00dc
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
2
ghcr.io/quenchworks/images/loki97bbf905a6c1
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
2
ghcr.io/quenchworks/images/otel-collector695e7fd14483
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
2
ghcr.io/quenchworks/images/prometheuse9037c190bc1
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
2
public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.16.11564359e1e0e
github.com/aws/aws-sdk-go@v1.44.160
no fix listed
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
github.com/aws/aws-sdk-go@v1.55.5
no fix listed
2
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
github.com/aws/aws-sdk-go@v1.47.11
no fix listed
2
quay.io/argoproj/argo-rollouts:v1.10.0187630ba7228
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
2
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
github.com/aws/aws-sdk-go@v1.55.8
no fix listed
2
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
github.com/aws/aws-sdk-go@v1.44.67
no fix listed
2
quay.io/groundcover/grafana:9.3.18c65b333a3d3
github.com/aws/aws-sdk-go@v1.44.146
no fix listed
2
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
github.com/aws/aws-sdk-go@v1.49.13
no fix listed
2
quay.io/jetstack/cert-manager-controller:v1.13.29c67cf8c92d8
github.com/aws/aws-sdk-go@v1.45.7
no fix listed
2
quay.io/jetstack/cert-manager-controller:v1.11.0d429b6d696e0
github.com/aws/aws-sdk-go@v1.44.105
no fix listed
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.