StackRadar

CVE-2021-22925

Medium

Advisory

Published 21 Jul 2021In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.049
92nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
358
of 17,781 indexed, latest versions
Container images
264
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 358 of 17,781 indexed charts deploy, on 264 images.

Affected packageAffected versionsFixed inImages
curlapk7.67.0-r0, 7.67.0-r1, 7.67.0-r3, 7.69.1-r0+7 more7.67.0-r5, 7.78.0-r0141
curldeb7.35.0-1ubuntu2.1, 7.35.0-1ubuntu2.3, 7.35.0-1ubuntu2.16, 7.35.0-1ubuntu2.19+26 more7.35.0-1ubuntu2.20+esm14, 7.47.0-1ubuntu2.19+esm3, 7.58.0-2ubuntu3.14, 7.68.0-1ubuntu2.6123
OSV records
ALPINE-CVE-2021-22925UBUNTU-CVE-2021-22925
Also known as
USN-5021-1, USN-5021-2, USN-5894-1

Charts affected

358 by stars
ChartLatestAffected imagesRadar Score
istiocloudposse1.1.02 of 8See more

istio cloudposse 1.1.0

2 of the 8 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
curl@7.47.0-1ubuntu2.13
7.47.0-1ubuntu2.19+esm3
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
curl@7.47.0-1ubuntu2.13
7.47.0-1ubuntu2.19+esm3

Open the chart page →

23,964
openvpn-asstenicVerified publisher0.1.91 of 1See more

openvpn-as stenic 0.1.9

1 of the 1 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
curl@7.58.0-2ubuntu3.10
7.58.0-2ubuntu3.14

Open the chart page →

15,592
apicurio-registryapicurio-registry-helmVerified publisher3.8.01 of 2See more

apicurio-registry apicurio-registry-helm 3.8.0

1 of the 2 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
quay.io/apicurio/apicurio-registry-kube-sync:1.0.170ef31840269
curl@7.67.0-r0
7.67.0-r5

Open the chart page →

6,675
loki-simple-scalablegrafana1.8.111 of 3See more

loki-simple-scalable grafana 1.8.11

1 of the 3 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.19-alpine084242d8028c
curl@7.76.1-r0
7.78.0-r0

Open the chart page →

6,470
netris-controllernetrisai2.8.21 of 14See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
graphiteapp/graphite-statsd:1.1.7-604a0037cc2ae
curl@7.69.1-r0
7.78.0-r0

Open the chart page →

30,326
element-imhalkeye0.2.161 of 1See more

element-im halkeye 0.2.16

1 of the 1 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
vectorim/riot-web:v1.7.16234bed2ac92a
curl@7.69.1-r3
7.78.0-r0

Open the chart page →

1,450
fadicetic0.3.13 of 25See more

fadi cetic 0.3.1

3 of the 25 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
jupyterhub/configurable-http-proxy:4.2.281bd96729c14
curl@7.69.1-r1
7.78.0-r0
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
curl@7.68.0-1ubuntu2.4
7.68.0-1ubuntu2.6
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
curl@7.68.0-1ubuntu2.4
7.68.0-1ubuntu2.6

Open the chart page →

52,919
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
istio/proxyv2:1.9.687a9db561d2e
curl@7.58.0-2ubuntu3.13
7.58.0-2ubuntu3.14

Open the chart page →

96,941
taigarc-helm-charts0.1.01 of 7See more

taiga rc-helm-charts 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
taigaio/taiga-front:6.4.24d367b1e1250
curl@7.74.0-r0
7.78.0-r0

Open the chart page →

7,255
dexwiremindVerified publisher2.15.71 of 2See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
gcr.io/google_containers/kubernetes-dashboard-init-amd64:v1.0.0fbe12aa24de6
curl@7.47.0-1ubuntu2.2
7.47.0-1ubuntu2.19+esm3

Open the chart page →

13,562
matrixzekker6Verified publisher3.30.02 of 4See more

matrix zekker6 3.30.0

2 of the 4 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
instrumentisto/coturn:4.56c25f154177c
curl@7.69.1-r3
7.78.0-r0
vectorim/riot-web:v1.7.3384bb5af00b5d
curl@7.77.0-r1
7.78.0-r0

Open the chart page →

5,557
auto-deploy-appav1o-chartsVerified publisher0.15.41 of 1See more

auto-deploy-app av1o-charts 0.15.4

1 of the 1 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
gcr.io/google-containers/echoserver:1.910f4dbc8eeeb
curl@7.47.0-1ubuntu2.2
7.47.0-1ubuntu2.19+esm3

Open the chart page →

11,007
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
curl@7.58.0-2ubuntu3.13
7.58.0-2ubuntu3.14

Open the chart page →

22,773
network-ups-toolsgeek-cookbookVerified publisher6.4.21 of 1See more

network-ups-tools geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/network-ups-tools:v2.7.4-2479-g86a32237cbd5d4cc1245
curl@7.68.0-1ubuntu2.5
7.68.0-1ubuntu2.6

Open the chart page →

13,950
statpinggeek-cookbookVerified publisher6.2.01 of 2See more

statping geek-cookbook 6.2.0

1 of the 2 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
statping/statping:v0.90.74e874da513a5c
curl@7.69.1-r3
7.78.0-r0

Open the chart page →

3,371
radondb-mysqlkubesphere-testVerified publisher1.0.12 of 3See more

radondb-mysql kubesphere-test 1.0.1

2 of the 3 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
curl@7.68.0-1ubuntu2.5
7.68.0-1ubuntu2.6
xenondb/xenon:1.1.5-alpha0241a1112566
curl@7.76.1-r0
7.78.0-r0

Open the chart page →

7,342
lightsteplightstepsatellite1.2.41 of 1See more

lightstep lightstepsatellite 1.2.4

1 of the 1 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
curl@7.47.0-1ubuntu2.12
7.47.0-1ubuntu2.19+esm3

Open the chart page →

15,330
oesopsmxVerified publisher4.0.325 of 25See more

oes opsmx 4.0.32

5 of the 25 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2020-11-25T23-04-07Zbf85c57cdfcc
curl@7.69.1-r1
7.78.0-r0
minio/minio:RELEASE.2020-12-03T05-49-24Z053f103f4894
curl@7.69.1-r1
7.78.0-r0
quay.io/opsmxpublic/k8s-decoder:halfec086394aa9
curl@7.74.0-r0
7.78.0-r0
quay.io/opsmxpublic/oes-pre-configure:v29b052fbb046f
curl@7.77.0-r0
7.78.0-r0
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
curl@7.47.0-1ubuntu2.18
7.47.0-1ubuntu2.19+esm3

Open the chart page →

107,811
repmanszpadel-chartsVerified publisher3.52.171 of 3See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
buddy/repman:1.4.0097c897f8b54
curl@7.67.0-r0
7.67.0-r5

Open the chart page →

7,052
huginnutkuozdemirVerified publisher2.2.11 of 4See more

huginn utkuozdemir 2.2.1

1 of the 4 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
curl@7.58.0-2ubuntu3.12
7.58.0-2ubuntu3.14

Open the chart page →

18,137
github-actions-runneradwerx0.10.31 of 1See more

github-actions-runner adwerx 0.10.3

1 of the 1 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
curl@7.68.0-1ubuntu2.4
7.68.0-1ubuntu2.6

Open the chart page →

13,635
dltbrokerassist-iot-distributed-broker0.2.02 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
curl@7.47.0-1ubuntu2.8
7.47.0-1ubuntu2.19+esm3
hyperledger/fabric-couchdb:0.4.15f6c724592abf
curl@7.47.0-1ubuntu2.12
7.47.0-1ubuntu2.19+esm3

Open the chart page →

77,706
dltloggingassist-iot-logging-auditing0.2.02 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
curl@7.47.0-1ubuntu2.8
7.47.0-1ubuntu2.19+esm3
hyperledger/fabric-couchdb:0.4.15f6c724592abf
curl@7.47.0-1ubuntu2.12
7.47.0-1ubuntu2.19+esm3

Open the chart page →

77,687
open-elevationbeeinventor0.1.01 of 2See more

open-elevation beeinventor 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
openelevation/open-elevation:latest82fb21612e86
curl@7.68.0-1ubuntu2.5
7.68.0-1ubuntu2.6

Open the chart page →

13,145
brpservicebrpservice1.1.01 of 4See more

brpservice brpservice 1.1.0

1 of the 4 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/brpservice-php:latestc17f1ba17d36
curl@7.69.1-r0
7.78.0-r0

Open the chart page →

7,830
tensorflow-notebookcloudnativeapp0.1.21 of 1See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
tensorflow/tensorflow:1.6.0-devel1e3172090703
curl@7.47.0-1ubuntu2.6
7.47.0-1ubuntu2.19+esm3

Open the chart page →

36,094
clustereye-stackclustereyeVerified publisher0.1.11 of 5See more

clustereye-stack clustereye 0.1.1

1 of the 5 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
johnblack77/clustereye:latest-amd64bb53ceb8442e
curl@7.76.1-r0
7.78.0-r0

Open the chart page →

4,855
digispoof-interfacedigispoof-interface1.0.01 of 3See more

digispoof-interface digispoof-interface 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/digispoof-interface-php:latest03aba499950f
curl@7.69.1-r0
7.78.0-r0

Open the chart page →

7,779
dominodominoVerified publisher0.1.111 of 3See more

domino domino 0.1.11

1 of the 3 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
ghcr.io/tauffer-consulting/domino-frontend:latesta923b86a0903
curl@7.76.1-r0
7.78.0-r0

Open the chart page →

8,823
spinnakerdwardu-helm-charts2.2.61 of 2See more

spinnaker dwardu-helm-charts 2.2.6

1 of the 2 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
curl@7.67.0-r0
7.67.0-r5

Open the chart page →

8,752
taigafermosit0.0.111 of 7See more

taiga fermosit 0.0.11

1 of the 7 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
library/nginx:1.19-alpine07ab71a2c8e4
curl@7.76.1-r0
7.78.0-r0

Open the chart page →

8,496
flink-operatorflink-operator0.1.11 of 2See more

flink-operator flink-operator 0.1.1

1 of the 2 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.14

Open the chart page →

12,908
appdaemongeek-cookbookVerified publisher8.4.21 of 1See more

appdaemon geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
acockburn/appdaemon:4.0.83a93281d7e94
curl@7.74.0-r1
7.78.0-r0

Open the chart page →

3,461
foundryvttgeek-cookbookVerified publisher3.4.21 of 1See more

foundryvtt geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
felddy/foundryvtt:0.8.36c5d90b90349
curl@7.76.1-r0
7.78.0-r0

Open the chart page →

2,042
lazylibrariangeek-cookbookVerified publisher7.4.21 of 1See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
linuxserver/lazylibrarian:version-1152df82f93d2560e233
curl@7.58.0-2ubuntu3.13
7.58.0-2ubuntu3.14

Open the chart page →

11,662
sabnzbdgeek-cookbookVerified publisher9.4.21 of 1See more

sabnzbd geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
curl@7.68.0-1ubuntu2.5
7.68.0-1ubuntu2.6

Open the chart page →

10,231
shlinkgeek-cookbookVerified publisher5.2.01 of 1See more

shlink geek-cookbook 5.2.0

1 of the 1 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
shlinkio/shlink:2.7.1c6729db1d3a8
curl@7.76.1-r0
7.78.0-r0

Open the chart page →

2,056
tdarrgeek-cookbookVerified publisher4.6.21 of 2See more

tdarr geek-cookbook 4.6.2

1 of the 2 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
haveagitgat/tdarr_node:2.00.101e3f9328327d
curl@7.68.0-1ubuntu2.4
7.68.0-1ubuntu2.6

Open the chart page →

31,000
uptimerobot-prometheusgeek-cookbookVerified publisher6.4.21 of 1See more

uptimerobot-prometheus geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
billimek/prometheus-uptimerobot-exporter:0.0.1f14ccd7aad0e
curl@7.69.1-r0
7.78.0-r0

Open the chart page →

2,265
wireguardgeek-cookbookVerified publisher1.4.21 of 1See more

wireguard geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/wireguard:v1.0.20210424448045c4270b
curl@7.68.0-1ubuntu2.5
7.68.0-1ubuntu2.6

Open the chart page →

7,660
riot-imhalkeye0.2.91 of 1See more

riot-im halkeye 0.2.9

1 of the 1 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
vectorim/riot-web:v1.7.8080e313abd37
curl@7.69.1-r0
7.78.0-r0

Open the chart page →

1,710
cniistio1.10.31 of 1See more

cni istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
istio/install-cni:1.10.32232f365aed6
curl@7.58.0-2ubuntu3.13
7.58.0-2ubuntu3.14

Open the chart page →

10,400
discoveryistio1.10.31 of 1See more

discovery istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
istio/pilot:1.10.3e7e110a421c2
curl@7.58.0-2ubuntu3.13
7.58.0-2ubuntu3.14

Open the chart page →

10,475
egressistio1.10.31 of 1See more

egress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
curl@7.58.0-2ubuntu3.13
7.58.0-2ubuntu3.14

Open the chart page →

10,421
ingressistio1.10.31 of 1See more

ingress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
curl@7.58.0-2ubuntu3.13
7.58.0-2ubuntu3.14

Open the chart page →

10,421
operatoristio1.10.31 of 1See more

operator istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
istio/operator:1.10.3655eefa11c84
curl@7.58.0-2ubuntu3.13
7.58.0-2ubuntu3.14

Open the chart page →

10,701
giteakeyporttech0.2.101 of 4See more

gitea keyporttech 0.2.10

1 of the 4 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
gitea/gitea:1.12.485416d6f65fe
curl@7.67.0-r0
7.67.0-r5

Open the chart page →

5,408
mesherykubesphere-stable0.5.01 of 13See more

meshery kubesphere-stable 0.5.0

1 of the 13 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
layer5/meshery-cpx:stable-latest8c20a8a1d6a4
curl@7.69.1-r0
7.78.0-r0

Open the chart page →

24,690
opennebulakvaps2.1.11 of 9See more

opennebula kvaps 2.1.1

1 of the 9 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
curl@7.68.0-1ubuntu2.5
7.68.0-1ubuntu2.6

Open the chart page →

113,791
landelijketabellencataloguslandelijketabellencatalogus1.0.01 of 3See more

landelijketabellencatalogus landelijketabellencatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-22925.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/landelijketabellencatalogus-php:latest26d91dcbba56
curl@7.69.1-r0
7.78.0-r0

Open the chart page →

7,510

Container images carrying it

264 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/apicurio/apicurio-registry-kube-sync:1.0.170ef31840269
curl@7.67.0-r0
7.67.0-r5
1
quay.io/eclipse/che-devfile-registry:nightly5d25d47d6e17
curl@7.69.1-r0
7.78.0-r0
1
quay.io/eclipse/che-plugin-registry:nightlya88add0f8c93
curl@7.76.1-r0
7.78.0-r0
1
quay.io/fairwinds/clamav:v0.0.3e12bdddaa81d
curl@7.67.0-r0
7.67.0-r5
1
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
curl@7.77.0-r0
7.78.0-r0
1
quay.io/kubernetes-ingress-controller/nginx-ingress-controller:0.32.0251e733bf41c
curl@7.67.0-r0
7.67.0-r5
1
quay.io/kubernetes-ingress-controller/nginx-ingress-controller:0.30.0b312c91d0de6
curl@7.67.0-r0
7.67.0-r5
1
quay.io/mongodb/mongodb-enterprise-operator:1.8.2a1c3843b03bc
curl@7.47.0-1ubuntu2.16
7.47.0-1ubuntu2.19+esm3
1
quay.io/opsmxpublic/k8s-decoder:halfec086394aa9
curl@7.74.0-r0
7.78.0-r0
1
quay.io/opsmxpublic/oes-pre-configure:v29b052fbb046f
curl@7.77.0-r0
7.78.0-r0
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
curl@7.47.0-1ubuntu2.18
7.47.0-1ubuntu2.19+esm3
1
quay.io/renokico/laravel-helm-demo:octane-0.6.0cad83090c58f
curl@7.76.1-r0
7.78.0-r0
1
quay.io/simplyzee/kube-rclone:v1.52.389a0c23d5ad3
curl@7.69.1-r0
7.78.0-r0
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
curl@7.68.0-1ubuntu2.4
7.68.0-1ubuntu2.6
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.