StackRadar

CVE-2021-22876

Medium

Advisory

Published 31 Mar 2021In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.053
92nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
343
of 17,781 indexed, latest versions
Container images
264
deployed by those charts
Fix available
2 of 2
affected packages

curl - security update

Carried by container images the latest versions of 343 of 17,781 indexed charts deploy, on 264 images.

Affected packageAffected versionsFixed inImages
curldeb7.35.0-1ubuntu2.1, 7.35.0-1ubuntu2.3, 7.35.0-1ubuntu2.16, 7.35.0-1ubuntu2.19+36 more7.35.0-1ubuntu2.20+esm7, 7.47.0-1ubuntu2.19, 7.52.1-5+deb9u14, 7.58.0-2ubuntu3.13+1 more186
curlapk7.69.1-r0, 7.69.1-r1, 7.69.1-r3, 7.74.0-r0+1 more7.76.0-r078
OSV records
ALPINE-CVE-2021-22876UBUNTU-CVE-2021-22876DLA-2664-1
Also known as
USN-4898-1, USN-4903-1

Charts affected

343 by stars
ChartLatestAffected imagesRadar Score
istiocloudposse1.1.02 of 8See more

istio cloudposse 1.1.0

2 of the 8 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
curl@7.47.0-1ubuntu2.13
7.47.0-1ubuntu2.19
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
curl@7.47.0-1ubuntu2.13
7.47.0-1ubuntu2.19

Open the chart page →

23,964
openvpn-asstenicVerified publisher0.1.91 of 1See more

openvpn-as stenic 0.1.9

1 of the 1 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
curl@7.58.0-2ubuntu3.10
7.58.0-2ubuntu3.13

Open the chart page →

15,592
netris-controllernetrisai2.8.21 of 14See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
graphiteapp/graphite-statsd:1.1.7-604a0037cc2ae
curl@7.69.1-r0
7.76.0-r0

Open the chart page →

30,326
element-imhalkeye0.2.161 of 1See more

element-im halkeye 0.2.16

1 of the 1 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
vectorim/riot-web:v1.7.16234bed2ac92a
curl@7.69.1-r3
7.76.0-r0

Open the chart page →

1,450
fadicetic0.3.15 of 25See more

fadi cetic 0.3.1

5 of the 25 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
jupyterhub/configurable-http-proxy:4.2.281bd96729c14
curl@7.69.1-r1
7.76.0-r0
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
curl@7.68.0-1ubuntu2.4
7.68.0-1ubuntu2.5
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
curl@7.68.0-1ubuntu2.4
7.68.0-1ubuntu2.5
osixia/openldap:1.2.4d212a12aa728
curl@7.52.1-5+deb9u9
7.52.1-5+deb9u14
osixia/phpldapadmin:0.7.11ab629698ae0
curl@7.52.1-5
7.52.1-5+deb9u14

Open the chart page →

52,919
guacamolehalkeye0.2.11 of 3See more

guacamole halkeye 0.2.1

1 of the 3 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
guacamole/guacamole:1.1.0333a7f40c145
curl@7.52.1-5+deb9u9
7.52.1-5+deb9u14

Open the chart page →

4,839
taigarc-helm-charts0.1.01 of 7See more

taiga rc-helm-charts 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
taigaio/taiga-front:6.4.24d367b1e1250
curl@7.74.0-r0
7.76.0-r0

Open the chart page →

7,255
dexwiremindVerified publisher2.15.71 of 2See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
gcr.io/google_containers/kubernetes-dashboard-init-amd64:v1.0.0fbe12aa24de6
curl@7.47.0-1ubuntu2.2
7.47.0-1ubuntu2.19

Open the chart page →

13,562
matrixzekker6Verified publisher3.30.01 of 4See more

matrix zekker6 3.30.0

1 of the 4 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
instrumentisto/coturn:4.56c25f154177c
curl@7.69.1-r3
7.76.0-r0

Open the chart page →

5,557
auto-deploy-appav1o-chartsVerified publisher0.15.41 of 1See more

auto-deploy-app av1o-charts 0.15.4

1 of the 1 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
gcr.io/google-containers/echoserver:1.910f4dbc8eeeb
curl@7.47.0-1ubuntu2.2
7.47.0-1ubuntu2.19

Open the chart page →

11,007
statpinggeek-cookbookVerified publisher6.2.01 of 2See more

statping geek-cookbook 6.2.0

1 of the 2 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
statping/statping:v0.90.74e874da513a5c
curl@7.69.1-r3
7.76.0-r0

Open the chart page →

3,371
lightsteplightstepsatellite1.2.41 of 1See more

lightstep lightstepsatellite 1.2.4

1 of the 1 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
curl@7.47.0-1ubuntu2.12
7.47.0-1ubuntu2.19

Open the chart page →

15,330
oesopsmxVerified publisher4.0.325 of 25See more

oes opsmx 4.0.32

5 of the 25 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2020-11-25T23-04-07Zbf85c57cdfcc
curl@7.69.1-r1
7.76.0-r0
minio/minio:RELEASE.2020-12-03T05-49-24Z053f103f4894
curl@7.69.1-r1
7.76.0-r0
osixia/openldap:1.2.4d212a12aa728
curl@7.52.1-5+deb9u9
7.52.1-5+deb9u14
quay.io/opsmxpublic/k8s-decoder:halfec086394aa9
curl@7.74.0-r0
7.76.0-r0
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
curl@7.47.0-1ubuntu2.18
7.47.0-1ubuntu2.19

Open the chart page →

107,811
maeshtraefikOfficialVerified publisher2.1.21 of 7See more

maesh traefik 2.1.2

1 of the 7 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
grafana/grafana:6.2.5ab415470454b
curl@7.52.1-5+deb9u9
7.52.1-5+deb9u14

Open the chart page →

4,136
traefik-meshtraefikOfficialVerified publisher4.1.11 of 7See more

traefik-mesh traefik 4.1.1

1 of the 7 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
grafana/grafana:6.2.5ab415470454b
curl@7.52.1-5+deb9u9
7.52.1-5+deb9u14

Open the chart page →

9,257
huginnutkuozdemirVerified publisher2.2.11 of 4See more

huginn utkuozdemir 2.2.1

1 of the 4 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
curl@7.58.0-2ubuntu3.12
7.58.0-2ubuntu3.13

Open the chart page →

18,137
activemq-artemisactivemq-artemis-helm0.3.61 of 1See more

activemq-artemis activemq-artemis-helm 0.3.6

1 of the 1 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
vromero/activemq-artemis:2.16.0408d6a46b153
curl@7.52.1-5+deb9u9
7.52.1-5+deb9u14

Open the chart page →

4,419
github-actions-runneradwerx0.10.31 of 1See more

github-actions-runner adwerx 0.10.3

1 of the 1 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
curl@7.68.0-1ubuntu2.4
7.68.0-1ubuntu2.5

Open the chart page →

13,635
openldapalphani-helm-chartsVerified publisher2.4.571 of 2See more

openldap alphani-helm-charts 2.4.57

1 of the 2 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
osixia/phpldapadmin:0.7.11ab629698ae0
curl@7.52.1-5
7.52.1-5+deb9u14

Open the chart page →

3,067
phpldapadminalphani-helm-chartsVerified publisher0.1.31 of 1See more

phpldapadmin alphani-helm-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
osixia/phpldapadmin:0.7.11ab629698ae0
curl@7.52.1-5
7.52.1-5+deb9u14

Open the chart page →

2,559
dltbrokerassist-iot-distributed-broker0.2.02 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
curl@7.47.0-1ubuntu2.8
7.47.0-1ubuntu2.19
hyperledger/fabric-couchdb:0.4.15f6c724592abf
curl@7.47.0-1ubuntu2.12
7.47.0-1ubuntu2.19

Open the chart page →

77,706
dltloggingassist-iot-logging-auditing0.2.02 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
curl@7.47.0-1ubuntu2.8
7.47.0-1ubuntu2.19
hyperledger/fabric-couchdb:0.4.15f6c724592abf
curl@7.47.0-1ubuntu2.12
7.47.0-1ubuntu2.19

Open the chart page →

77,687
brpservicebrpservice1.1.01 of 4See more

brpservice brpservice 1.1.0

1 of the 4 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/brpservice-php:latestc17f1ba17d36
curl@7.69.1-r0
7.76.0-r0

Open the chart page →

7,830
phpldapadmincetic0.1.41 of 1See more

phpldapadmin cetic 0.1.4

1 of the 1 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
osixia/phpldapadmin:0.7.11ab629698ae0
curl@7.52.1-5
7.52.1-5+deb9u14

Open the chart page →

2,559
tensorflow-notebookcloudnativeapp0.1.21 of 1See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
tensorflow/tensorflow:1.6.0-devel1e3172090703
curl@7.47.0-1ubuntu2.6
7.47.0-1ubuntu2.19

Open the chart page →

36,094
duplicaticronce0.1.01 of 1See more

duplicati cronce 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
duplicati/duplicati:2.0.5.111_canary_2020-09-268660f0eda7c9
curl@7.52.1-5+deb9u12
7.52.1-5+deb9u14

Open the chart page →

3,026
wiremockdeliveryheroVerified publisher1.4.61 of 2See more

wiremock deliveryhero 1.4.6

1 of the 2 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
rodolpheche/wiremock:2.26.03be08a386092
curl@7.52.1-5+deb9u9
7.52.1-5+deb9u14

Open the chart page →

2,140
digispoof-interfacedigispoof-interface1.0.01 of 3See more

digispoof-interface digispoof-interface 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/digispoof-interface-php:latest03aba499950f
curl@7.69.1-r0
7.76.0-r0

Open the chart page →

7,779
flink-operatorflink-operator0.1.11 of 2See more

flink-operator flink-operator 0.1.1

1 of the 2 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.13

Open the chart page →

12,908
appdaemongeek-cookbookVerified publisher8.4.21 of 1See more

appdaemon geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
acockburn/appdaemon:4.0.83a93281d7e94
curl@7.74.0-r1
7.76.0-r0

Open the chart page →

3,461
tdarrgeek-cookbookVerified publisher4.6.21 of 2See more

tdarr geek-cookbook 4.6.2

1 of the 2 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
haveagitgat/tdarr_node:2.00.101e3f9328327d
curl@7.68.0-1ubuntu2.4
7.68.0-1ubuntu2.5

Open the chart page →

31,000
uptimerobot-prometheusgeek-cookbookVerified publisher6.4.21 of 1See more

uptimerobot-prometheus geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
billimek/prometheus-uptimerobot-exporter:0.0.1f14ccd7aad0e
curl@7.69.1-r0
7.76.0-r0

Open the chart page →

2,265
riot-imhalkeye0.2.91 of 1See more

riot-im halkeye 0.2.9

1 of the 1 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
vectorim/riot-web:v1.7.8080e313abd37
curl@7.69.1-r0
7.76.0-r0

Open the chart page →

1,710
pdc-portali4trustVerified publisher2.3.21 of 1See more

pdc-portal i4trust 2.3.2

1 of the 1 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
i4trust/pdc-portal:2.0.03e77858e1219
curl@7.52.1-5+deb9u13
7.52.1-5+deb9u14

Open the chart page →

2,723
mesherykubesphere-stable0.5.01 of 13See more

meshery kubesphere-stable 0.5.0

1 of the 13 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
layer5/meshery-cpx:stable-latest8c20a8a1d6a4
curl@7.69.1-r0
7.76.0-r0

Open the chart page →

24,690
landelijketabellencataloguslandelijketabellencatalogus1.0.01 of 3See more

landelijketabellencatalogus landelijketabellencatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/landelijketabellencatalogus-php:latest26d91dcbba56
curl@7.69.1-r0
7.76.0-r0

Open the chart page →

7,510
Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacionVerified publisher1.0.13 of 6See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

3 of the 6 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
fjvela/urjc-fjvela-external-service:1.0.1a8ebe5ca13fc
curl@7.52.1-5+deb9u10
7.52.1-5+deb9u14
fjvela/urjc-fjvela-server:1.0.53c840aebce22
curl@7.52.1-5+deb9u10
7.52.1-5+deb9u14
library/mongo:4.2.358b25d51baa1
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.13

Open the chart page →

19,187
helm-taigamvitale1989-helm-taigaVerified publisher0.2.51 of 2See more

helm-taiga mvitale1989-helm-taiga 0.2.5

1 of the 2 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
mvitale1989/docker-taiga:20191031-4.2.141504ccda06df
curl@7.52.1-5+deb9u9
7.52.1-5+deb9u14

Open the chart page →

5,104
influxdbromanow-helm-chartsVerified publisher1.7.11 of 1See more

influxdb romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
library/influxdb:1.8.472b1b24a0288
curl@7.52.1-5+deb9u13
7.52.1-5+deb9u14

Open the chart page →

508
sentinel-dashboardsentinel-dashboardVerified publisher0.1.01 of 1See more

sentinel-dashboard sentinel-dashboard 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
royalwang/sentinel-dashboard:1.8.4df99e2499f91
curl@7.52.1-5+deb9u9
7.52.1-5+deb9u14

Open the chart page →

4,287
statpingstatping0.1.141 of 1See more

statping statping 0.1.14

1 of the 1 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
statping/statping:v0.90.74e874da513a5c
curl@7.69.1-r3
7.76.0-r0

Open the chart page →

3,371
statsdstatsd-airflow-smd0.1.191 of 1See more

statsd statsd-airflow-smd 0.1.19

1 of the 1 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
statsd/statsd:v0.8.6dab129e74c25
curl@7.52.1-5+deb9u9
7.52.1-5+deb9u14

Open the chart page →

4,185
atlantistrozz3.12.111 of 1See more

atlantis trozz 3.12.11

1 of the 1 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
runatlantis/atlantis:v0.16.145fbaf7e207c
curl@7.69.1-r0
7.76.0-r0

Open the chart page →

5,280
waardepapierenwaardepapieren1.0.01 of 3See more

waardepapieren waardepapieren 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/waardepapieren-php:latestb2666ffcbad8
curl@7.69.1-r0
7.76.0-r0

Open the chart page →

8,079
waardepapieren-baliewaardepapieren-balie1.0.01 of 3See more

waardepapieren-balie waardepapieren-balie 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/waardepapieren-balie-php:latestf36c423cd259
curl@7.69.1-r0
7.76.0-r0

Open the chart page →

7,871
waardepapieren-registerwaardepapieren-register1.1.01 of 4See more

waardepapieren-register waardepapieren-register 1.1.0

1 of the 4 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/waardepapieren-register-php:latest9affab218351
curl@7.69.1-r0
7.76.0-r0

Open the chart page →

7,429
wavefront-adapter-for-istiowavefront0.1.41 of 2See more

wavefront-adapter-for-istio wavefront 0.1.4

1 of the 2 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
wavefronthq/proxy:9.2d1064d28f6eb
curl@7.58.0-2ubuntu3.9
7.58.0-2ubuntu3.13

Open the chart page →

15,970
kafka-devwikimedia0.2.01 of 1See more

kafka-dev wikimedia 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
curl@7.35.0-1ubuntu2.1
7.35.0-1ubuntu2.20+esm7

Open the chart page →

41,427
open5gsadaptivenetlabVerified publisher1.0.32 of 3See more

open5gs adaptivenetlab 1.0.3

2 of the 3 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
free5gmano/nextepc-mongodb:latest36f806935519
curl@7.47.0-1ubuntu2.11
7.47.0-1ubuntu2.19
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
curl@7.68.0-1ubuntu2.4
7.68.0-1ubuntu2.5

Open the chart page →

25,443
adresserviceadresservice1.1.01 of 5See more

adresservice adresservice 1.1.0

1 of the 5 container images this version deploys carry CVE-2021-22876.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/adresservice-php:latestc5075f0320cd
curl@7.69.1-r0
7.76.0-r0

Open the chart page →

7,447

Container images carrying it

264 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/leoquote/mergeable:latest451706815103
curl@7.52.1-5+deb9u9
7.52.1-5+deb9u14
1
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
curl@7.52.1-5+deb9u9
7.52.1-5+deb9u14
1
ghcr.io/mmontes11/github-explorer:v0.7.0bf2234545584
curl@7.69.1-r3
7.76.0-r0
1
ghcr.io/mmontes11/iot-front:v3.11.0eb942172cda9
curl@7.69.1-r3
7.76.0-r0
1
ghcr.io/mmontes11/iot-nginx:v3.11.0dc8c7bb6605e
curl@7.69.1-r3
7.76.0-r0
1
ghcr.io/skyoo2003/digdag:0.0.1821fd6a6f2cd
curl@7.74.0-r0
7.76.0-r0
1
ghcr.io/wbstack/queryservice-gateway:2.2ab8e2f583e56
curl@7.52.1-5+deb9u13
7.52.1-5+deb9u14
1
quay.io/eclipse/che-devfile-registry:nightly5d25d47d6e17
curl@7.69.1-r0
7.76.0-r0
1
quay.io/ibmgaragecloud/nodejs:latest01c3b7acb301
curl@7.52.1-5+deb9u11
7.52.1-5+deb9u14
1
quay.io/mongodb/mongodb-enterprise-operator:1.8.2a1c3843b03bc
curl@7.47.0-1ubuntu2.16
7.47.0-1ubuntu2.19
1
quay.io/opsmxpublic/k8s-decoder:halfec086394aa9
curl@7.74.0-r0
7.76.0-r0
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
curl@7.47.0-1ubuntu2.18
7.47.0-1ubuntu2.19
1
quay.io/simplyzee/kube-rclone:v1.52.389a0c23d5ad3
curl@7.69.1-r0
7.76.0-r0
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
curl@7.68.0-1ubuntu2.4
7.68.0-1ubuntu2.5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.