StackRadar

CVE-2020-8927

Medium

Advisory

Published 15 Sept 2020In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.032
87th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
34
of 17,781 indexed, latest versions
Container images
35
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: brotli security update

Carried by container images the latest versions of 34 of 17,781 indexed charts deploy, on 35 images.

Affected packageAffected versionsFixed inImages
brotlirpm1.0.6-1.el8, 1.0.6-2.el80:1.0.6-3.el823
brotliapk1.0.7-r51.0.9-r05
brotlideb1.0.7-21.0.7-2+deb10u17
OSV records
ALPINE-CVE-2020-8927RHSA-2021:1702DSA-4801-1

Charts affected

34 by stars
ChartLatestAffected imagesRadar Score
openldap-stack-hahelm-openldapVerified publisher4.3.31 of 5See more

openldap-stack-ha helm-openldap 4.3.3

1 of the 5 container images this version deploys carry CVE-2020-8927.

Container imageDigestPackageFixed in
osixia/phpldapadmin:0.9.0d112b82be133
brotli@1.0.7-2
1.0.7-2+deb10u1

Open the chart page →

5,919
openldaphelm-openldapVerified publisher2.0.41 of 3See more

openldap helm-openldap 2.0.4

1 of the 3 container images this version deploys carry CVE-2020-8927.

Container imageDigestPackageFixed in
osixia/phpldapadmin:0.9.0d112b82be133
brotli@1.0.7-2
1.0.7-2+deb10u1

Open the chart page →

6,219
netris-controllernetrisai2.8.21 of 14See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2020-8927.

Container imageDigestPackageFixed in
graphiteapp/graphite-statsd:1.1.7-604a0037cc2ae
brotli@1.0.7-r5
1.0.9-r0

Open the chart page →

30,326
openshift-consoleav1o-chartsVerified publisher0.3.61 of 1See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2020-8927.

Container imageDigestPackageFixed in
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
brotli@1.0.6-1.el8
0:1.0.6-3.el8

Open the chart page →

9,052
prometheus-sentry-exporterdeliveryheroVerified publisher0.1.51 of 1See more

prometheus-sentry-exporter deliveryhero 0.1.5

1 of the 1 container images this version deploys carry CVE-2020-8927.

Container imageDigestPackageFixed in
ujamii/prometheus-sentry-exporter:0.5.06243197349e1
brotli@1.0.7-2
1.0.7-2+deb10u1

Open the chart page →

2,474
mailtrapdev-goodies0.1.01 of 1See more

mailtrap dev-goodies 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-8927.

Container imageDigestPackageFixed in
eaudeweb/mailtrap:2.3b8ad9b7e19bb
brotli@1.0.7-2
1.0.7-2+deb10u1

Open the chart page →

2,508
riot-imhalkeye0.2.91 of 1See more

riot-im halkeye 0.2.9

1 of the 1 container images this version deploys carry CVE-2020-8927.

Container imageDigestPackageFixed in
vectorim/riot-web:v1.7.8080e313abd37
brotli@1.0.7-r5
1.0.9-r0

Open the chart page →

1,710
helm-operatorhelm-operatorVerified publisher0.0.21 of 1See more

helm-operator helm-operator 0.0.2

1 of the 1 container images this version deploys carry CVE-2020-8927.

Container imageDigestPackageFixed in
bsgrigorov/helm-operator:latest45ab095f09c8
brotli@1.0.6-2.el8
0:1.0.6-3.el8

Open the chart page →

6,977
miniomilvus8.0.171 of 1See more

minio milvus 8.0.17

1 of the 1 container images this version deploys carry CVE-2020-8927.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
brotli@1.0.6-2.el8
0:1.0.6-3.el8

Open the chart page →

6,915
mongodb-operatorccowleyVerified publisher0.1.11 of 1See more

mongodb-operator ccowley 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-8927.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-kubernetes-operator:0.3.0107a7c73af59
brotli@1.0.6-2.el8
0:1.0.6-3.el8

Open the chart page →

6,389
openldapccowleyVerified publisher2.0.41 of 3See more

openldap ccowley 2.0.4

1 of the 3 container images this version deploys carry CVE-2020-8927.

Container imageDigestPackageFixed in
osixia/phpldapadmin:0.9.0d112b82be133
brotli@1.0.7-2
1.0.7-2+deb10u1

Open the chart page →

6,219
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2020-8927.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
brotli@1.0.6-1.el8
0:1.0.6-3.el8

Open the chart page →

25,456
nextcloudcloudve1.13.01 of 2See more

nextcloud cloudve 1.13.0

1 of the 2 container images this version deploys carry CVE-2020-8927.

Container imageDigestPackageFixed in
library/nextcloud:17.0.0-apache96104cb965fc
brotli@1.0.7-2
1.0.7-2+deb10u1

Open the chart page →

3,016
cp-helm-chartscp-helm-charts0.6.17 of 8See more

cp-helm-charts cp-helm-charts 0.6.1

7 of the 8 container images this version deploys carry CVE-2020-8927.

Container imageDigestPackageFixed in
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
brotli@1.0.6-2.el8
0:1.0.6-3.el8
confluentinc/cp-enterprise-kafka:6.1.08f1544df1f48
brotli@1.0.6-2.el8
0:1.0.6-3.el8
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
brotli@1.0.6-2.el8
0:1.0.6-3.el8
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
brotli@1.0.6-2.el8
0:1.0.6-3.el8
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
brotli@1.0.6-2.el8
0:1.0.6-3.el8
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
brotli@1.0.6-2.el8
0:1.0.6-3.el8
confluentinc/cp-zookeeper:6.1.078c190f4472c
brotli@1.0.6-2.el8
0:1.0.6-3.el8

Open the chart page →

58,857
openldap-stack-haeclipse-aeriosVerified publisher4.1.21 of 4See more

openldap-stack-ha eclipse-aerios 4.1.2

1 of the 4 container images this version deploys carry CVE-2020-8927.

Container imageDigestPackageFixed in
osixia/phpldapadmin:0.9.0d112b82be133
brotli@1.0.7-2
1.0.7-2+deb10u1

Open the chart page →

7,534
backuppcfermosit0.0.21 of 2See more

backuppc fermosit 0.0.2

1 of the 2 container images this version deploys carry CVE-2020-8927.

Container imageDigestPackageFixed in
adferrand/backuppc:4.4.06fea97b02758
brotli@1.0.7-r5
1.0.9-r0

Open the chart page →

4,622
fibfibonacci-cluster-appsVerified publisher1.0.01 of 5See more

fib fibonacci-cluster-apps 1.0.0

1 of the 5 container images this version deploys carry CVE-2020-8927.

Container imageDigestPackageFixed in
golenski/fibonacci-front:2.0.048cfd60b8413
brotli@1.0.7-r5
1.0.9-r0

Open the chart page →

16,927
ldap-account-managergabibbo970.2.11 of 1See more

ldap-account-manager gabibbo97 0.2.1

1 of the 1 container images this version deploys carry CVE-2020-8927.

Container imageDigestPackageFixed in
ldapaccountmanager/lam:7.295533a96a4c1
brotli@1.0.7-2
1.0.7-2+deb10u1

Open the chart page →

2,404
mimir-openshift-experimentalgrafana2.1.02 of 4See more

mimir-openshift-experimental grafana 2.1.0

2 of the 4 container images this version deploys carry CVE-2020-8927.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2021-02-14T04-28-06Z2a374c124d44
brotli@1.0.6-2.el8
0:1.0.6-3.el8
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
brotli@1.0.6-2.el8
0:1.0.6-3.el8

Open the chart page →

17,759
hawkbit-operatorhelm-chartsVerified publisher0.1.41 of 1See more

hawkbit-operator helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2020-8927.

Container imageDigestPackageFixed in
ctron/hawkbit-operator:0.1.48fdea8f76499
brotli@1.0.6-1.el8
0:1.0.6-3.el8

Open the chart page →

5,792
prometheus-sentry-exporterhelm-charts-nr0.1.51 of 1See more

prometheus-sentry-exporter helm-charts-nr 0.1.5

1 of the 1 container images this version deploys carry CVE-2020-8927.

Container imageDigestPackageFixed in
ujamii/prometheus-sentry-exporter:0.5.06243197349e1
brotli@1.0.7-2
1.0.7-2+deb10u1

Open the chart page →

2,474
ibm-object-storage-pluginibm-charts1.1.52 of 2See more

ibm-object-storage-plugin ibm-charts 1.1.5

2 of the 2 container images this version deploys carry CVE-2020-8927.

Container imageDigestPackageFixed in
ibmcom/ibmcloud-object-storage-driver:1.8.16c796a4c693b4
brotli@1.0.6-1.el8
0:1.0.6-3.el8
ibmcom/ibmcloud-object-storage-plugin:1.8.169c73804b37a3
brotli@1.0.6-1.el8
0:1.0.6-3.el8

Open the chart page →

12,461
ibm-ucv-prodibm-helm5.2.61 of 16See more

ibm-ucv-prod ibm-helm 5.2.6

1 of the 16 container images this version deploys carry CVE-2020-8927.

Container imageDigestPackageFixed in
ibmcom/opencontent-common-utils:1.1.2cd5065df7304
brotli@1.0.6-1.el8
0:1.0.6-3.el8

Open the chart page →

12,105
jx-app-anchorejenkins-x0.0.41 of 2See more

jx-app-anchore jenkins-x 0.0.4

1 of the 2 container images this version deploys carry CVE-2020-8927.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.7.1ed9b3badd17c
brotli@1.0.6-1.el8
0:1.0.6-3.el8

Open the chart page →

9,854
nexusjenkins-x0.1.371 of 1See more

nexus jenkins-x 0.1.37

1 of the 1 container images this version deploys carry CVE-2020-8927.

Container imageDigestPackageFixed in
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
brotli@1.0.6-1.el8
0:1.0.6-3.el8

Open the chart page →

12,856
cloud-native-javamcouliba0.1.01 of 1See more

cloud-native-java mcouliba 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-8927.

Container imageDigestPackageFixed in
quay.io/mcouliba/quarkus-serverless:1.0c2851757eca4
brotli@1.0.6-1.el8
0:1.0.6-3.el8

Open the chart page →

4,979
cheoteemo-chartsVerified publisher0.1.51 of 2See more

che oteemo-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2020-8927.

Container imageDigestPackageFixed in
quay.io/eclipse/che-devfile-registry:nightly5d25d47d6e17
brotli@1.0.7-r5
1.0.9-r0

Open the chart page →

4,369
gitlab-runner-operatorpnnl-miscscripts0.1.61 of 1See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2020-8927.

Container imageDigestPackageFixed in
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
brotli@1.0.6-1.el8
0:1.0.6-3.el8

Open the chart page →

11,151
ibm-mongodb-enterprise-helmredhat0.3.01 of 1See more

ibm-mongodb-enterprise-helm redhat 0.3.0

1 of the 1 container images this version deploys carry CVE-2020-8927.

Container imageDigestPackageFixed in
ibmcom/ibm-enterprise-mongodb-ppc64le:4.4d28bf361327a
brotli@1.0.6-2.el8
0:1.0.6-3.el8

Open the chart page →

12,248
ploigosredhat-cop0.0.91 of 2See more

ploigos redhat-cop 0.0.9

1 of the 2 container images this version deploys carry CVE-2020-8927.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.66722d5041b47
brotli@1.0.6-1.el8
0:1.0.6-3.el8

Open the chart page →

11,437
site-usbsite-usb0.1.01 of 1See more

site-usb site-usb 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-8927.

Container imageDigestPackageFixed in
norskel/site-usb:id45fd6798558d
brotli@1.0.7-2
1.0.7-2+deb10u1

Open the chart page →

1,695
thruksvtech-public-helm-charts1.0.01 of 1See more

thruk svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-8927.

Container imageDigestPackageFixed in
svtechnmaa/svtech_http_thruk:v1.0.2e19aba397c1f
brotli@1.0.7-2
1.0.7-2+deb10u1

Open the chart page →

1,781
openldap-havcnngrVerified publisher1.0.01 of 3See more

openldap-ha vcnngr 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8927.

Container imageDigestPackageFixed in
osixia/phpldapadmin:0.9.0d112b82be133
brotli@1.0.7-2
1.0.7-2+deb10u1

Open the chart page →

5,514
miniowenerme8.0.101 of 1See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2020-8927.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
brotli@1.0.6-2.el8
0:1.0.6-3.el8

Open the chart page →

6,915

Container images carrying it

35 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
osixia/phpldapadmin:0.9.0d112b82be133
brotli@1.0.7-2
1.0.7-2+deb10u1
5
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
brotli@1.0.6-2.el8
0:1.0.6-3.el8
3
ujamii/prometheus-sentry-exporter:0.5.06243197349e1
brotli@1.0.7-2
1.0.7-2+deb10u1
2
adferrand/backuppc:4.4.06fea97b02758
brotli@1.0.7-r5
1.0.9-r0
1
anchore/anchore-engine:v0.7.1ed9b3badd17c
brotli@1.0.6-1.el8
0:1.0.6-3.el8
1
bsgrigorov/helm-operator:latest45ab095f09c8
brotli@1.0.6-2.el8
0:1.0.6-3.el8
1
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
brotli@1.0.6-2.el8
0:1.0.6-3.el8
1
confluentinc/cp-enterprise-kafka:6.1.08f1544df1f48
brotli@1.0.6-2.el8
0:1.0.6-3.el8
1
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
brotli@1.0.6-2.el8
0:1.0.6-3.el8
1
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
brotli@1.0.6-2.el8
0:1.0.6-3.el8
1
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
brotli@1.0.6-2.el8
0:1.0.6-3.el8
1
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
brotli@1.0.6-2.el8
0:1.0.6-3.el8
1
confluentinc/cp-zookeeper:6.1.078c190f4472c
brotli@1.0.6-2.el8
0:1.0.6-3.el8
1
ctron/hawkbit-operator:0.1.48fdea8f76499
brotli@1.0.6-1.el8
0:1.0.6-3.el8
1
eaudeweb/mailtrap:2.3b8ad9b7e19bb
brotli@1.0.7-2
1.0.7-2+deb10u1
1
golenski/fibonacci-front:2.0.048cfd60b8413
brotli@1.0.7-r5
1.0.9-r0
1
graphiteapp/graphite-statsd:1.1.7-604a0037cc2ae
brotli@1.0.7-r5
1.0.9-r0
1
ibmcom/ibmcloud-object-storage-driver:1.8.16c796a4c693b4
brotli@1.0.6-1.el8
0:1.0.6-3.el8
1
ibmcom/ibmcloud-object-storage-plugin:1.8.169c73804b37a3
brotli@1.0.6-1.el8
0:1.0.6-3.el8
1
ibmcom/ibm-enterprise-mongodb-ppc64le:4.4d28bf361327a
brotli@1.0.6-2.el8
0:1.0.6-3.el8
1
ibmcom/opencontent-common-utils:1.1.2cd5065df7304
brotli@1.0.6-1.el8
0:1.0.6-3.el8
1
ldapaccountmanager/lam:7.295533a96a4c1
brotli@1.0.7-2
1.0.7-2+deb10u1
1
library/nextcloud:17.0.0-apache96104cb965fc
brotli@1.0.7-2
1.0.7-2+deb10u1
1
minio/mc:RELEASE.2021-02-14T04-28-06Z2a374c124d44
brotli@1.0.6-2.el8
0:1.0.6-3.el8
1
norskel/site-usb:id45fd6798558d
brotli@1.0.7-2
1.0.7-2+deb10u1
1
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
brotli@1.0.6-1.el8
0:1.0.6-3.el8
1
svtechnmaa/svtech_http_thruk:v1.0.2e19aba397c1f
brotli@1.0.7-2
1.0.7-2+deb10u1
1
vectorim/riot-web:v1.7.8080e313abd37
brotli@1.0.7-r5
1.0.9-r0
1
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
brotli@1.0.6-1.el8
0:1.0.6-3.el8
1
quay.io/eclipse/che-devfile-registry:nightly5d25d47d6e17
brotli@1.0.7-r5
1.0.9-r0
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
brotli@1.0.6-1.el8
0:1.0.6-3.el8
1
quay.io/mcouliba/quarkus-serverless:1.0c2851757eca4
brotli@1.0.6-1.el8
0:1.0.6-3.el8
1
quay.io/mongodb/mongodb-kubernetes-operator:0.3.0107a7c73af59
brotli@1.0.6-2.el8
0:1.0.6-3.el8
1
quay.io/openshift/origin-cli:4.66722d5041b47
brotli@1.0.6-1.el8
0:1.0.6-3.el8
1
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
brotli@1.0.6-1.el8
0:1.0.6-3.el8
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.