StackRadar

CVE-2019-0210

High

Advisory

Published 18 May 2021In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.064
93rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
11
of 17,781 indexed, latest versions
Container images
11
deployed by those charts
Fix available
1 of 1
affected package

Out-of-bounds read in Apache Thrift

Carried by container images the latest versions of 11 of 17,781 indexed charts deploy, on 11 images.

Affected packageAffected versionsFixed inImages
github.com/apache/thriftgolangv0.0.0-20151001171628-53dd39833a08, v0.0.0-20161221203622-b2a4d4ae21c7, v0.0.0-20170131211753-2d6060d88206, v0.0.0-20181211084444-2b7365c54f82+1 more0.13.011
OSV records
GHSA-jq7p-26h5-w78rGO-2021-0101

Charts affected

11 by stars
ChartLatestAffected imagesRadar Score
traefik-meshtraefikOfficialVerified publisher4.1.11 of 7See more

traefik-mesh traefik 4.1.1

1 of the 7 container images this version deploys carry CVE-2019-0210.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:1.18db45c07f2e1b
github.com/apache/thrift@v0.0.0-20151001171628-53dd39833a08
0.13.0

Open the chart page →

9,257
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2019-0210.

Container imageDigestPackageFixed in
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert:1.3e225fe7eaa55
github.com/apache/thrift@v0.0.0-20181211084444-2b7365c54f82
0.13.0

Open the chart page →

20,900
dgraphdevtron0.0.201 of 1See more

dgraph devtron 0.0.20

1 of the 1 container images this version deploys carry CVE-2019-0210.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
github.com/apache/thrift@v0.12.0
0.13.0

Open the chart page →

11,909
dgraphdevtron-labs0.0.201 of 1See more

dgraph devtron-labs 0.0.20

1 of the 1 container images this version deploys carry CVE-2019-0210.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
github.com/apache/thrift@v0.12.0
0.13.0

Open the chart page →

11,909
jx-app-athensjenkins-x0.0.181 of 1See more

jx-app-athens jenkins-x 0.0.18

1 of the 1 container images this version deploys carry CVE-2019-0210.

Container imageDigestPackageFixed in
gomods/athens:v0.8.1d714c7ff0231
github.com/apache/thrift@v0.12.0
0.13.0

Open the chart page →

4,225
cockroachdb-operatormmontesVerified publisher0.1.01 of 1See more

cockroachdb-operator mmontes 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-0210.

Container imageDigestPackageFixed in
cockroachdb/cockroach-operator:v2.1.0983312754620
github.com/apache/thrift@v0.0.0-20181211084444-2b7365c54f82
0.13.0

Open the chart page →

7,775
dgraphromholdings0.0.201 of 1See more

dgraph romholdings 0.0.20

1 of the 1 container images this version deploys carry CVE-2019-0210.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
github.com/apache/thrift@v0.12.0
0.13.0

Open the chart page →

11,909
ed-traefikscaleway-charts0.2.01 of 1See more

ed-traefik scaleway-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2019-0210.

Container imageDigestPackageFixed in
library/traefik:v1.7.345d47b7bb2546
github.com/apache/thrift@v0.12.0
0.13.0

Open the chart page →

2,133
athens-proxywenerme0.5.21 of 2See more

athens-proxy wenerme 0.5.2

1 of the 2 container images this version deploys carry CVE-2019-0210.

Container imageDigestPackageFixed in
gomods/athens:v0.11.0efb811df7844
github.com/apache/thrift@v0.12.0
0.13.0

Open the chart page →

4,984
cadencewenerme0.23.02 of 5See more

cadence wenerme 0.23.0

2 of the 5 container images this version deploys carry CVE-2019-0210.

Container imageDigestPackageFixed in
ubercadence/server:0.23.22ac5491d13bb
github.com/apache/thrift@v0.0.0-20161221203622-b2a4d4ae21c7
0.13.0
ghcr.io/banzaicloud/tcheck:latest0147d87c2019
github.com/apache/thrift@v0.0.0-20170131211753-2d6060d88206
0.13.0

Open the chart page →

10,127
temporalwenerme0.15.12 of 13See more

temporal wenerme 0.15.1

2 of the 13 container images this version deploys carry CVE-2019-0210.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.15.135034611d981
github.com/apache/thrift@v0.0.0-20161221203622-b2a4d4ae21c7
0.13.0
temporalio/server:1.15.1e26758f5a1bf
github.com/apache/thrift@v0.0.0-20161221203622-b2a4d4ae21c7
0.13.0

Open the chart page →

22,665

Container images carrying it

11 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
dgraph/dgraph:v21.12.03b55ea83fffe
github.com/apache/thrift@v0.12.0
0.13.0
3
cockroachdb/cockroach-operator:v2.1.0983312754620
github.com/apache/thrift@v0.0.0-20181211084444-2b7365c54f82
0.13.0
1
gomods/athens:v0.8.1d714c7ff0231
github.com/apache/thrift@v0.12.0
0.13.0
1
gomods/athens:v0.11.0efb811df7844
github.com/apache/thrift@v0.12.0
0.13.0
1
jaegertracing/all-in-one:1.18db45c07f2e1b
github.com/apache/thrift@v0.0.0-20151001171628-53dd39833a08
0.13.0
1
library/traefik:v1.7.345d47b7bb2546
github.com/apache/thrift@v0.12.0
0.13.0
1
temporalio/admin-tools:1.15.135034611d981
github.com/apache/thrift@v0.0.0-20161221203622-b2a4d4ae21c7
0.13.0
1
temporalio/server:1.15.1e26758f5a1bf
github.com/apache/thrift@v0.0.0-20161221203622-b2a4d4ae21c7
0.13.0
1
ubercadence/server:0.23.22ac5491d13bb
github.com/apache/thrift@v0.0.0-20161221203622-b2a4d4ae21c7
0.13.0
1
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert:1.3e225fe7eaa55
github.com/apache/thrift@v0.0.0-20181211084444-2b7365c54f82
0.13.0
1
ghcr.io/banzaicloud/tcheck:latest0147d87c2019
github.com/apache/thrift@v0.0.0-20170131211753-2d6060d88206
0.13.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.