CVE-2021-23336

Medium

Advisory

Published 15 Feb 2021In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.360; 98th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 217; of 17,781 indexed, latest versions
Container images: 210; deployed by those charts
Fix available: 1 of 6; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 217 of 17,781 indexed charts deploy, on 210 images.

Affected package	Affected versions	Fixed in	Images
python3.8deb	3.8.5-1~20.04, 3.8.5-1~20.04.2, 3.8.5-1~20.04.3, 3.8.10-0ubuntu1~20.04+11 more	no fix listed	100
python2.7deb	2.7.6-8, 2.7.6-8ubuntu0.4, 2.7.12-1ubuntu0~16.04.2, 2.7.12-1ubuntu0~16.04.3+12 more	no fix listed	54
python3.6deb	3.6.6-1~18.04, 3.6.7-1~18.04, 3.6.9-1~18.04, 3.6.9-1~18.04ubuntu1+7 more	no fix listed	44
python3.5deb	3.5.2-2ubuntu0~16.04.1, 3.5.2-2ubuntu0~16.04.4, 3.5.2-2ubuntu0~16.04.5, 3.5.2-2ubuntu0~16.04.9	no fix listed	25
python3apk	3.8.3-r0, 3.8.5-r0, 3.8.7-r1	3.8.8-r0	11
python3.4deb	3.4.0-2ubuntu1, 3.4.3-1ubuntu1~14.04.5, 3.4.3-1ubuntu1~14.04.6, 3.4.3-1ubuntu1~14.04.7	no fix listed	7

OSV records: ALPINE-CVE-2021-23336 UBUNTU-CVE-2021-23336

Charts affected

217 by stars

Chart

Latest

Affected images

Radar Score

sn-platform-slimstreamnative

1.11.44

1 of 6 See more

sn-platform-slim streamnative 1.11.44

1 of the 6 container images this version deploys carry CVE-2021-23336.

Container image	Digest	Package	Fixed in
streamnative/apache-pulsar-grafana-dashboard-k8s :0.1.2	0e6d7aa3ef32	python3.8@3.8.10-0ubuntu1~20.04.9	no fix listed

Open the chart page →

10,134

freeradiussvtech-public-helm-charts

0.1.5

1 of 4 See more

freeradius svtech-public-helm-charts 0.1.5

1 of the 4 container images this version deploys carry CVE-2021-23336.

Container image	Digest	Package	Fixed in
ptthanh1511/freeradius-server :3.0.26-netdebug	5741cbde85ab	python2.7@2.7.18-1~20.04.3	no fix listed

Open the chart page →

12,655

grafanasvtech-public-helm-charts

1.0.0

1 of 2 See more

grafana svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2021-23336.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_grafana :v1.2.2	1d71314424aa	python2.7@2.7.18-1~20.04.3	no fix listed

Open the chart page →

10,902

rundecksvtech-public-helm-charts

1.0.0

1 of 2 See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2021-23336.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	python3.8@3.8.10-0ubuntu1~20.04.9	no fix listed

Open the chart page →

18,756

istio-discoverytemp-charts

0.3.3

1 of 1 See more

istio-discovery temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2021-23336.

Container image	Digest	Package	Fixed in
istio/pilot :1.10.0	294ca55bd1cc	python3.6@3.6.9-1~18.04ubuntu1.4	no fix listed

Open the chart page →

10,568

istio-ingresstemp-charts

0.3.3

1 of 1 See more

istio-ingress temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2021-23336.

Container image	Digest	Package	Fixed in
istio/proxyv2 :1.10.0	88c6c693e67a	python3.6@3.6.9-1~18.04ubuntu1.4	no fix listed

Open the chart page →

10,514

owncloudth-charts

0.2.1

1 of 1 See more

owncloud th-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2021-23336.

Container image	Digest	Package	Fixed in
owncloud/server :10.15.0	51d9b74fc2a8	python3.8@3.8.10-0ubuntu1~20.04.11	no fix listed

Open the chart page →

10,006

todoapitodoapi-app

0.1.0

1 of 2 See more

todoapi todoapi-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-23336.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/mssql/server :2017-latest	13221ac5f673	python2.7@2.7.17-1~18.04ubuntu1.11 python3.6@3.6.9-1~18.04ubuntu1.12	no fix listed no fix listed

Open the chart page →

6,793

lightstepupdater-lightstep-satellite

1.2.2

1 of 1 See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2021-23336.

Container image	Digest	Package	Fixed in
lightstep/collector :2021-01-26_23-02-36Z	11c5569aaf3b	python3.5@3.5.2-2ubuntu0~16.04.5	no fix listed

Open the chart page →

15,330

wazuh-manager-filebeatwazuh-manager-filebeat

0.1.0-gamma

1 of 1 See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2021-23336.

Container image	Digest	Package	Fixed in
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	python3.8@3.8.10-0ubuntu1~20.04.2	no fix listed

Open the chart page →

11,119

myweatherhelmwebapp1

1.3.50

1 of 8 See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2021-23336.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	python3.8@3.8.10-0ubuntu1~20.04.8	no fix listed

Open the chart page →

9,130

myweatherhelm-schedulingwebapp1

1.3.92

1 of 9 See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2021-23336.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	python3.8@3.8.10-0ubuntu1~20.04.8	no fix listed

Open the chart page →

9,130

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2021-23336.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	python3.8@3.8.10-0ubuntu1~20.04.1	no fix listed

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2021-23336.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	python3.8@3.8.10-0ubuntu1~20.04.1	no fix listed

Open the chart page →

28,605

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2021-23336.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	python3.6@3.6.9-1~18.04ubuntu1.1	no fix listed

Open the chart page →

10,843

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2021-23336.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	python3.8@3.8.10-0ubuntu1~20.04.2	no fix listed

Open the chart page →

15,230

sambawenerme

1.0.0

1 of 1 See more

samba wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-23336.

Container image	Digest	Package	Fixed in
wener/samba :4.13.3	9a42bae466d4	python3@3.8.7-r1	3.8.8-r0

Open the chart page →

2,555

Container images carrying it

210 by charts deploying them

A fixed version is listed for 1 of the 6 affected packages.

Container image	Digest	Package	Fixed in	Used by
linuxserver/calibre-web :version-0.6.12	938810eca3d3	python3.8@3.8.10-0ubuntu1~20.04	no fix listed	1
linuxserver/codimd :latest	b801bbcf6386	python2.7@2.7.17-1~18.04ubuntu1.2	no fix listed	1
linuxserver/deluge :18.04.1	0ac871624394	python3.6@3.6.9-1~18.04ubuntu1.4	no fix listed	1
linuxserver/deluge :version-2.0.3-2201906121747ubuntu18.04.1	2ce561a95e7b	python3.6@3.6.9-1~18.04ubuntu1.4	no fix listed	1
linuxserver/lazylibrarian :version-1152df82	f93d2560e233	python3.6@3.6.9-1~18.04ubuntu1.4	no fix listed	1
longhornio/longhorn-manager :v1.2.3	dca34321452c	python3.8@3.8.10-0ubuntu1~20.04.2	no fix listed	1
longhornio/longhorn-manager :v1.1.1	ede61fe2a472	python3.6@3.6.9-1~18.04ubuntu1.4	no fix listed	1
lsstsqre/nublado2 :2.0.1	b75bf8aaafa4	python2.7@2.7.18-1~20.04.1 python3.8@3.8.10-0ubuntu1~20.04.2	no fix listed no fix listed	1
mediagis/nominatim :3.7	c15e941485ef	python3.8@3.8.10-0ubuntu1~20.04.5	no fix listed	1
mshanley80/httpbin2022 :latest	5b189a70c0fb	python3.8@3.8.10-0ubuntu1~20.04.6	no fix listed	1
muluder/prograncontrollermcord :0.1.8	43b597a93da7	python2.7@2.7.12-1ubuntu0~16.04.3 python3.5@3.5.2-2ubuntu0~16.04.4	no fix listed no fix listed	1
ngoduykhanh/powerdns-admin :0.2.3	099371dd9ba6	python3@3.8.5-r0	3.8.8-r0	1
omecproject/c3po-hssdb :master-latest	28a90cc26716	python2.7@2.7.18-1~20.04.1	no fix listed	1
omecproject/mme-exporter :paging-latest	bcc5f19fd676	python3.6@3.6.9-1~18.04	no fix listed	1
omecproject/onos-progran :1.0.0	5715e5648aa0	python2.7@2.7.12-1ubuntu0~16.04.3 python3.5@3.5.2-2ubuntu0~16.04.4	no fix listed no fix listed	1
omecproject/progran-synchronizer :comac-1.0.0	d109a8e57e71	python2.7@2.7.12-1ubuntu0~16.04.4 python3.5@3.5.2-2ubuntu0~16.04.5	no fix listed no fix listed	1
opendatacube/pipelines :wofs-1.22	5d810e8504b8	python3.6@3.6.7-1~18.04	no fix listed	1
opendatacube/restcube :latest	91870111837c	python3.6@3.6.7-1~18.04	no fix listed	1
opendatacube/wms :latest	1b90cdf68831	python3.6@3.6.7-1~18.04	no fix listed	1
openelevation/open-elevation :latest	82fb21612e86	python3.8@3.8.10-0ubuntu1~20.04	no fix listed	1
openkm/openkm-ce :6.3.11	3bc465a7461b	python3.8@3.8.10-0ubuntu1~20.04.5	no fix listed	1
openstackhelm/heat :wallaby-ubuntu_focal	f728510bab3c	python3.8@3.8.10-0ubuntu1~20.04.8	no fix listed	1
openstackhelm/keystone :wallaby-ubuntu_focal	e07d75953d2e	python3.8@3.8.10-0ubuntu1~20.04.8	no fix listed	1
openthread/otbr :latest	f307f59f6432	python2.7@2.7.17-1~18.04ubuntu1.11 python3.6@3.6.9-1~18.04ubuntu1.12	no fix listed no fix listed	1
openwhisk/ow-utils :1.0.0	c80dba0de3aa	python2.7@2.7.17-1~18.04ubuntu1.2	no fix listed	1
opsmx11/issuegen :v2.1.0	5c50ca123d88	python3.4@3.4.3-1ubuntu1~14.04.6	no fix listed	1
owncloud/server :10.15.0	51d9b74fc2a8	python3.8@3.8.10-0ubuntu1~20.04.11	no fix listed	1
project2team4/react :latest	3ff031a08887	python3.8@3.8.10-0ubuntu1~20.04.4	no fix listed	1
prompve/prometheus-pve-exporter :2.0.1	ff6749eb03b0	python3@3.8.5-r0	3.8.8-r0	1
psorab/elibrary :latest	53b68896c4ce	python3.8@3.8.10-0ubuntu1~20.04.7	no fix listed	1
ptthanh1511/freeradius-server :3.0.26-netdebug	5741cbde85ab	python2.7@2.7.18-1~20.04.3	no fix listed	1
puppet/puppet-agent :7.14.0	0b6fd9a6b7da	python3.6@3.6.9-1~18.04ubuntu1.6	no fix listed	1
rancher/local-path-provisioner :v0.0.5	e66f32d19eb9	python2.7@2.7.12-1ubuntu0~16.04.3 python3.5@3.5.2-2ubuntu0~16.04.4	no fix listed no fix listed	1
resouer/redis-slave :v2	e2f198b49ba7	python2.7@2.7.6-8 python3.4@3.4.0-2ubuntu1	no fix listed no fix listed	1
rezachalak/bzen-mongo :1.0.0	34f694325191	python3.8@3.8.10-0ubuntu1~20.04.8	no fix listed	1
scrapinghub/splash :3.4.1	a5f89bc84606	python3.6@3.6.9-1~18.04	no fix listed	1
seafileltd/seafile-mc :9.0.10	6693911bcc40	python3.8@3.8.10-0ubuntu1~20.04.5	no fix listed	1
seafileltd/seafile-mc :10.0.1	70628f29c663	python3.8@3.8.10-0ubuntu1~20.04.8	no fix listed	1
seafileltd/seafile-mc :9.0.9	7ac833196f60	python3.8@3.8.10-0ubuntu1~20.04.5	no fix listed	1
seafileltd/seafile-mc :8.0.7	ed0fcda5e6a9	python3.8@3.8.10-0ubuntu1~20.04	no fix listed	1
seldonio/locust-core :0.8	1d0da98a2d76	python2.7@2.7.12-1ubuntu0~16.04.4	no fix listed	1
sismics/docs :v1.10	f4b0ef019cf1	python3.6@3.6.6-1~18.04	no fix listed	1
snipe/snipe-it :v6.0.14	55fb7636a98c	python3.8@3.8.10-0ubuntu1~20.04.5	no fix listed	1
socialmediamacroscope/autophrase :0.1.5	70fb11d4f531	python3.8@3.8.10-0ubuntu1~20.04.8	no fix listed	1
socialmediamacroscope/collect_reddit_comment :0.1.2	19d3d26d53ee	python3.6@3.6.9-1~18.04ubuntu1.12	no fix listed	1
socialmediamacroscope/image_crawler :0.1.2	f508216be63c	python3.6@3.6.9-1~18.04ubuntu1.12	no fix listed	1
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	python3.8@3.8.10-0ubuntu1~20.04.4	no fix listed	1
stackstorm/st2actionrunner :3.8	88235ba70cad	python3.8@3.8.10-0ubuntu1~20.04.9	no fix listed	1
stackstorm/st2api :3.8	6f56d239d280	python3.8@3.8.10-0ubuntu1~20.04.9	no fix listed	1
stackstorm/st2auth :3.8	33ecfda16608	python3.8@3.8.10-0ubuntu1~20.04.9	no fix listed	1