CVE-2021-23336

Medium

Advisory

Published 15 Feb 2021In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.360; 98th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 217; of 17,781 indexed, latest versions
Container images: 210; deployed by those charts
Fix available: 1 of 6; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 217 of 17,781 indexed charts deploy, on 210 images.

Affected package	Affected versions	Fixed in	Images
python3.8deb	3.8.5-1~20.04, 3.8.5-1~20.04.2, 3.8.5-1~20.04.3, 3.8.10-0ubuntu1~20.04+11 more	no fix listed	100
python2.7deb	2.7.6-8, 2.7.6-8ubuntu0.4, 2.7.12-1ubuntu0~16.04.2, 2.7.12-1ubuntu0~16.04.3+12 more	no fix listed	54
python3.6deb	3.6.6-1~18.04, 3.6.7-1~18.04, 3.6.9-1~18.04, 3.6.9-1~18.04ubuntu1+7 more	no fix listed	44
python3.5deb	3.5.2-2ubuntu0~16.04.1, 3.5.2-2ubuntu0~16.04.4, 3.5.2-2ubuntu0~16.04.5, 3.5.2-2ubuntu0~16.04.9	no fix listed	25
python3apk	3.8.3-r0, 3.8.5-r0, 3.8.7-r1	3.8.8-r0	11
python3.4deb	3.4.0-2ubuntu1, 3.4.3-1ubuntu1~14.04.5, 3.4.3-1ubuntu1~14.04.6, 3.4.3-1ubuntu1~14.04.7	no fix listed	7

OSV records: ALPINE-CVE-2021-23336 UBUNTU-CVE-2021-23336

Charts affected

217 by stars

Chart

Latest

Affected images

Radar Score

sn-platform-slimstreamnative

1.11.44

1 of 6 See more

sn-platform-slim streamnative 1.11.44

1 of the 6 container images this version deploys carry CVE-2021-23336.

Container image	Digest	Package	Fixed in
streamnative/apache-pulsar-grafana-dashboard-k8s :0.1.2	0e6d7aa3ef32	python3.8@3.8.10-0ubuntu1~20.04.9	no fix listed

Open the chart page →

10,134

freeradiussvtech-public-helm-charts

0.1.5

1 of 4 See more

freeradius svtech-public-helm-charts 0.1.5

1 of the 4 container images this version deploys carry CVE-2021-23336.

Container image	Digest	Package	Fixed in
ptthanh1511/freeradius-server :3.0.26-netdebug	5741cbde85ab	python2.7@2.7.18-1~20.04.3	no fix listed

Open the chart page →

12,655

grafanasvtech-public-helm-charts

1.0.0

1 of 2 See more

grafana svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2021-23336.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_grafana :v1.2.2	1d71314424aa	python2.7@2.7.18-1~20.04.3	no fix listed

Open the chart page →

10,902

rundecksvtech-public-helm-charts

1.0.0

1 of 2 See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2021-23336.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	python3.8@3.8.10-0ubuntu1~20.04.9	no fix listed

Open the chart page →

18,756

istio-discoverytemp-charts

0.3.3

1 of 1 See more

istio-discovery temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2021-23336.

Container image	Digest	Package	Fixed in
istio/pilot :1.10.0	294ca55bd1cc	python3.6@3.6.9-1~18.04ubuntu1.4	no fix listed

Open the chart page →

10,568

istio-ingresstemp-charts

0.3.3

1 of 1 See more

istio-ingress temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2021-23336.

Container image	Digest	Package	Fixed in
istio/proxyv2 :1.10.0	88c6c693e67a	python3.6@3.6.9-1~18.04ubuntu1.4	no fix listed

Open the chart page →

10,514

owncloudth-charts

0.2.1

1 of 1 See more

owncloud th-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2021-23336.

Container image	Digest	Package	Fixed in
owncloud/server :10.15.0	51d9b74fc2a8	python3.8@3.8.10-0ubuntu1~20.04.11	no fix listed

Open the chart page →

10,006

todoapitodoapi-app

0.1.0

1 of 2 See more

todoapi todoapi-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-23336.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/mssql/server :2017-latest	13221ac5f673	python2.7@2.7.17-1~18.04ubuntu1.11 python3.6@3.6.9-1~18.04ubuntu1.12	no fix listed no fix listed

Open the chart page →

6,793

lightstepupdater-lightstep-satellite

1.2.2

1 of 1 See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2021-23336.

Container image	Digest	Package	Fixed in
lightstep/collector :2021-01-26_23-02-36Z	11c5569aaf3b	python3.5@3.5.2-2ubuntu0~16.04.5	no fix listed

Open the chart page →

15,330

wazuh-manager-filebeatwazuh-manager-filebeat

0.1.0-gamma

1 of 1 See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2021-23336.

Container image	Digest	Package	Fixed in
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	python3.8@3.8.10-0ubuntu1~20.04.2	no fix listed

Open the chart page →

11,119

myweatherhelmwebapp1

1.3.50

1 of 8 See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2021-23336.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	python3.8@3.8.10-0ubuntu1~20.04.8	no fix listed

Open the chart page →

9,130

myweatherhelm-schedulingwebapp1

1.3.92

1 of 9 See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2021-23336.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	python3.8@3.8.10-0ubuntu1~20.04.8	no fix listed

Open the chart page →

9,130

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2021-23336.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	python3.8@3.8.10-0ubuntu1~20.04.1	no fix listed

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2021-23336.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	python3.8@3.8.10-0ubuntu1~20.04.1	no fix listed

Open the chart page →

28,605

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2021-23336.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	python3.6@3.6.9-1~18.04ubuntu1.1	no fix listed

Open the chart page →

10,843

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2021-23336.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	python3.8@3.8.10-0ubuntu1~20.04.2	no fix listed

Open the chart page →

15,230

sambawenerme

1.0.0

1 of 1 See more

samba wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-23336.

Container image	Digest	Package	Fixed in
wener/samba :4.13.3	9a42bae466d4	python3@3.8.7-r1	3.8.8-r0

Open the chart page →

2,555

Container images carrying it

210 by charts deploying them

A fixed version is listed for 1 of the 6 affected packages.

Container image	Digest	Package	Fixed in	Used by
flyway/flyway :9.15	45b5d7cdc75a	python3.8@3.8.10-0ubuntu1~20.04.6	no fix listed	1
frankescobar/allure-docker-service :2.21.0	8a4d7e9308de	python3.6@3.6.9-1~18.04ubuntu1.9	no fix listed	1
frankescobar/allure-docker-service :2.19.0	cafa03b94dac	python3.6@3.6.9-1~18.04ubuntu1.8	no fix listed	1
freeradius/freeradius-server :3.2.8	af6fd34a5b78	python2.7@2.7.18-13ubuntu1.5	no fix listed	1
galaxy/cloudman-server :latest	e5c265fe9fcd	python3.8@3.8.10-0ubuntu1~20.04.5	no fix listed	1
galaxy/galaxy-init :v18.01	0267bad550e6	python2.7@2.7.6-8ubuntu0.4 python3.4@3.4.3-1ubuntu1~14.04.6	no fix listed no fix listed	1
galaxy/galaxy-stable :v18.01	8e577a626dfd	python2.7@2.7.6-8ubuntu0.4 python3.4@3.4.3-1ubuntu1~14.04.6	no fix listed no fix listed	1
geoscienceaustralia/dea-k8s-data :latest	f4039b45572a	python3.6@3.6.9-1~18.04ubuntu1.1	no fix listed	1
gethue/hue :4.11.0	11b649636e68	python3.8@3.8.10-0ubuntu1~20.04.6	no fix listed	1
gethue/hue :4.10.0	5702b2c37ff9	python2.7@2.7.17-1~18.04ubuntu1.6 python3.6@3.6.9-1~18.04ubuntu1.4	no fix listed no fix listed	1
graphiteapp/graphite-statsd :1.1.7-6	04a0037cc2ae	python3@3.8.3-r0	3.8.8-r0	1
haugene/transmission-openvpn :4.0	059216cfae4b	python3.8@3.8.10-0ubuntu1~20.04	no fix listed	1
haveagitgat/tdarr :2.00.18	1256348872ce	python2.7@2.7.18-1~20.04.1 python3.8@3.8.10-0ubuntu1~20.04.4	no fix listed no fix listed	1
haveagitgat/tdarr_node :2.00.10	1e3f9328327d	python3.8@3.8.5-1~20.04	no fix listed	1
haveagitgat/tdarr_node :2.17.01	3ff0913202dd	python2.7@2.7.18-1~20.04.3 python3.8@3.8.10-0ubuntu1~20.04.8	no fix listed no fix listed	1
helicone/clickhouse-migration-runner :v2025.03.05-1	4c69b971a7e4	python3.8@3.8.10-0ubuntu1~20.04.13	no fix listed	1
hetznercloud/hcloud-csi-driver :1.5.1	41dce5b33644	python3@3.8.5-r0	3.8.8-r0	1
hmdmph/redis-pod-labeler :1.0.0-alpine	7f1381fe0f3b	python3@3.8.3-r0	3.8.8-r0	1
hyperledger/fabric-couchdb :0.4.10	c65891b6c237	python2.7@2.7.12-1ubuntu0~16.04.3 python3.5@3.5.2-2ubuntu0~16.04.4	no fix listed no fix listed	1
ibmcom/ibm-workload-scheduler-agent-dynamic-dev :9.4.0.04	7e4dc1e27cdf	python3.5@3.5.2-2ubuntu0~16.04.4	no fix listed	1
ibmcom/icp-swift-sample :latest	b5d8c6714dbc	python2.7@2.7.12-1ubuntu0~16.04.3 python3.5@3.5.2-2ubuntu0~16.04.4	no fix listed no fix listed	1
ibmcom/microclimate-theia :latest	e17bdccc5030	python2.7@2.7.12-1ubuntu0~16.04.2	no fix listed	1
ibmcom/skydive :0.22.0	395e60cc6e3d	python2.7@2.7.15~rc1-1ubuntu0.1	no fix listed	1
intel/dlstreamer-pipeline-server :2022.1.1-ubuntu20	aa8f5483a2ef	python3.8@3.8.10-0ubuntu1~20.04.4	no fix listed	1
intel/multimodal-data-visualization-streaming :3.0	1a89327e499b	python3.8@3.8.10-0ubuntu1~20.04.5	no fix listed	1
iofog/router :2.0.1	7260cf861479	python2.7@2.7.17-1~18.04ubuntu1.1	no fix listed	1
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	python3.8@3.8.10-0ubuntu1~20.04.2	no fix listed	1
istio/install-cni :1.10.3	2232f365aed6	python3.6@3.6.9-1~18.04ubuntu1.4	no fix listed	1
istio/node-agent-k8s :1.2.9	268ab879ea51	python3.5@3.5.2-2ubuntu0~16.04.5	no fix listed	1
istio/operator :1.10.3	655eefa11c84	python3.6@3.6.9-1~18.04ubuntu1.4	no fix listed	1
istio/pilot :1.10.0	294ca55bd1cc	python3.6@3.6.9-1~18.04ubuntu1.4	no fix listed	1
istio/pilot :1.2.9	c09319753454	python3.5@3.5.2-2ubuntu0~16.04.5	no fix listed	1
istio/pilot :1.10.3	e7e110a421c2	python3.6@3.6.9-1~18.04ubuntu1.4	no fix listed	1
istio/proxyv2 :1.2.9	0c78be035e98	python3.5@3.5.2-2ubuntu0~16.04.5	no fix listed	1
istio/proxyv2 :1.9.6	87a9db561d2e	python3.6@3.6.9-1~18.04ubuntu1.4	no fix listed	1
istio/proxyv2 :1.10.0	88c6c693e67a	python3.6@3.6.9-1~18.04ubuntu1.4	no fix listed	1
jakowenko/double-take :1.6.0	b858bac9e32a	python3.8@3.8.10-0ubuntu1~20.04.1	no fix listed	1
jedi132000/nextapp :latest	dc2a81e92f23	python3.8@3.8.10-0ubuntu1~20.04.5	no fix listed	1
jmferrer/azure-devops-agent :latest	030f68ec6998	python3.5@3.5.2-2ubuntu0~16.04.9	no fix listed	1
jupyterhub/k8s-hub :0.11.1	b6b4a1a34bf0	python3.8@3.8.5-1~20.04	no fix listed	1
jupyterhub/k8s-hub :1.2.0	e4770285aaf7	python3.8@3.8.10-0ubuntu1~20.04.1	no fix listed	1
keitaro/ckan-datapusher :0.0.17	5bf1a45f45c1	python3@3.8.5-r0	3.8.8-r0	1
kennethreitz/httpbin :latest	599fe5e50731	python3.6@3.6.6-1~18.04	no fix listed	1
kfirfer/phppgadmin :7.13.0-2	2efb4a5d74a3	python3.8@3.8.10-0ubuntu1~20.04.6	no fix listed	1
kubeoperator/webkubectl :v2.4.0	be8f0d624640	python3.6@3.6.9-1~18.04ubuntu1	no fix listed	1
library/cassandra :3.11.10	b095ff3248c6	python2.7@2.7.18-1~20.04.1	no fix listed	1
library/rabbitmq :3.11.5-management	1b0f675d2f24	python3.8@3.8.10-0ubuntu1~20.04.6	no fix listed	1
library/rabbitmq :3.7-management	b6dd45cc35b3	python3.6@3.6.9-1~18.04ubuntu1.1	no fix listed	1
library/rabbitmq :3.7-management-alpine	e97f6bb68aab	python3@3.8.5-r0	3.8.8-r0	1
linuxserver/calibre :version-v5.21.0	a847b5b2d860	python2.7@2.7.17-1~18.04ubuntu1.6 python3.6@3.6.9-1~18.04ubuntu1.4	no fix listed no fix listed	1