CVE-2021-22890
LowAdvisory
Published 31 Mar 2021In the index since 6 Sept 2026
- Severity
- Low
- worst across findings
- CVSS
- 3.7
- base score, highest
- EPSS
- 0.031
- 87th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 165
- of 17,781 indexed, latest versions
- Container images
- 89
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 165 of 17,781 indexed charts deploy, on 89 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| curlapk | 7.69.1-r0, 7.69.1-r1, 7.69.1-r3, 7.74.0-r0+1 more | 7.76.0-r0 | 78 |
| curldeb | 7.68.0-1ubuntu2.2, 7.68.0-1ubuntu2.4 | 7.68.0-1ubuntu2.5 | 11 |
- OSV records
- ALPINE-CVE-2021-22890UBUNTU-CVE-2021-22890
- Also known as
- USN-4898-1
Charts affected
165 by stars
Container images carrying it
89 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| dellcloud/ | 6ba7b22caacd | curl | 7.68.0-1ubuntu2.5 | 79 |
| apteno/ | 74035b864eed | curl | 7.76.0-r0 | 2 |
| giantswarm/ | 58a9d175cdb7 | curl | 7.76.0-r0 | 2 |
| mesosphere/ | 073db43d0b8b | curl | 7.68.0-1ubuntu2.5 | 2 |
| minio/ | bf85c57cdfcc | curl | 7.76.0-r0 | 2 |
| statping/ | e874da513a5c | curl | 7.76.0-r0 | 2 |
| acockburn/ | 3a93281d7e94 | curl | 7.76.0-r0 | 1 |
| adwerx/ | 840d2b078682 | curl | 7.68.0-1ubuntu2.5 | 1 |
| airsonicadvanced/ | f7cbafac2806 | curl | 7.68.0-1ubuntu2.5 | 1 |
| ajanvier/ | 91ac61b88c85 | curl | 7.76.0-r0 | 1 |
| billimek/ | f14ccd7aad0e | curl | 7.76.0-r0 | 1 |
| chetangautamm/ | e7f7049e1544 | curl | 7.68.0-1ubuntu2.5 | 1 |
| conduction/ | 9cfeeb6c7c20 | curl | 7.76.0-r0 | 1 |
| conduction/ | c36094a41369 | curl | 7.76.0-r0 | 1 |
| conduction/ | ece1ab544c57 | curl | 7.76.0-r0 | 1 |
| conduction/ | 3423845692c1 | curl | 7.76.0-r0 | 1 |
| conduction/ | 2744565516e8 | curl | 7.76.0-r0 | 1 |
| conduction/ | e1d4ad1e22a8 | curl | 7.76.0-r0 | 1 |
| conduction/ | b6f95c8ead7d | curl | 7.76.0-r0 | 1 |
| conduction/ | 8f177f9f8a7b | curl | 7.76.0-r0 | 1 |
| conduction/ | 24f03c57568f | curl | 7.76.0-r0 | 1 |
| dellcloud/ | 02fc234353a9 | curl | 7.68.0-1ubuntu2.5 | 1 |
| dellcloud/ | 4d2eb25b9225 | curl | 7.68.0-1ubuntu2.5 | 1 |
| gitea/ | d5ab14cd29af | curl | 7.76.0-r0 | 1 |
| gitlab/ | fd7e5dfb9f30 | curl | 7.76.0-r0 | 1 |
| gmelillo/ | eeb2f9371b71 | curl | 7.76.0-r0 | 1 |
| gmelillo/ | 1b30f79cf7ea | curl | 7.76.0-r0 | 1 |
| golenski/ | 48cfd60b8413 | curl | 7.76.0-r0 | 1 |
| graphiteapp/ | 04a0037cc2ae | curl | 7.76.0-r0 | 1 |
| hashicorp/ | 5697b85bc69a | curl | 7.76.0-r0 | 1 |
| haveagitgat/ | 1e3f9328327d | curl | 7.68.0-1ubuntu2.5 | 1 |
| instrumentisto/ | 6c25f154177c | curl | 7.76.0-r0 | 1 |
| jupyterhub/ | 81bd96729c14 | curl | 7.76.0-r0 | 1 |
| jupyterhub/ | b6b4a1a34bf0 | curl | 7.68.0-1ubuntu2.5 | 1 |
| jupyterhub/ | e3e6f3051df8 | curl | 7.68.0-1ubuntu2.5 | 1 |
| keitaro/ | 5bf1a45f45c1 | curl | 7.76.0-r0 | 1 |
| keyporttech/ | 5bd7955ea2f1 | curl | 7.76.0-r0 | 1 |
| layer5/ | 8c20a8a1d6a4 | curl | 7.76.0-r0 | 1 |
| library/ | 143ec8cc2f3a | curl | 7.76.0-r0 | 1 |
| library/ | 5aa44b407756 | curl | 7.76.0-r0 | 1 |
| minio/ | 053f103f4894 | curl | 7.76.0-r0 | 1 |
| minio/ | e2b7b633c250 | curl | 7.76.0-r0 | 1 |
| moikot/ | 0d941bd30ffa | curl | 7.76.0-r0 | 1 |
| openwhisk/ | f5831ec85525 | curl | 7.76.0-r0 | 1 |
| phntom/ | 0c75ed6dd606 | curl | 7.76.0-r0 | 1 |
| runatlantis/ | 45fbaf7e207c | curl | 7.76.0-r0 | 1 |
| taigaio/ | 4d367b1e1250 | curl | 7.76.0-r0 | 1 |
| vectorim/ | 080e313abd37 | curl | 7.76.0-r0 | 1 |
| vectorim/ | 234bed2ac92a | curl | 7.76.0-r0 | 1 |
| wallabag/ | 5e4c26a7fb4a | curl | 7.76.0-r0 | 1 |