StackRadarChart IndexLive demo

CVE-2021-23463

High

Advisory

Published 16 Dec 2021In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 8.1; base score, highest
EPSS: 0.027; 85th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 115; of 17,781 indexed, latest versions
Container images: 45; deployed by those charts
Fix available: 1 of 1; affected package

Improper Restriction of XML External Entity Reference in com.h2database:h2.

Carried by container images the latest versions of 115 of 17,781 indexed charts deploy, on 45 images.

Affected package	Affected versions	Fixed in	Images
h2maven	1.4.198, 1.4.199, 1.4.200	2.0.202	45

OSV records: GHSA-7rpj-hg47-cx62
Also known as: SNYK-JAVA-COMH2DATABASE-1769238

Charts affected

115 by stars

Chart

Latest

Affected images

Radar Score

apicurioone-acre-fund

2 of 5 See more

apicurio one-acre-fund 2.3.0

2 of the 5 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
apicurio/apicurio-studio-api :0.2.62.Final	302d202ed149	h2@1.4.200	2.0.202
apicurio/apicurio-studio-ws :0.2.62.Final	27a91978a388	h2@1.4.200	2.0.202

Open the chart page →

18,667

bpjstk-serviceopenshift

2 of 6 See more

bpjstk-service openshift 1.0.0

2 of the 6 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
andrianrf/bpjstk-service :latest	46abe878d9d8	h2@1.4.200	2.0.202
andrianrf/iso-client :latest	ba560086ce15	h2@1.4.200	2.0.202

Open the chart page →

34,671

pagespages

1 of 3 See more

20,190

pagespages10

1 of 3 See more

20,190

pagespages111

1 of 3 See more

20,190

pagespages2

1 of 3 See more

20,190

pagespages-alexchmielu

1 of 3 See more

pages pages-alexchmielu 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202

Open the chart page →

20,190

pagespages-alps

1 of 3 See more

20,190

pagespages-alstom

1 of 3 See more

pages pages-alstom 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202

Open the chart page →

20,190

pagespages-ambala

1 of 3 See more

pages pages-ambala 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202

Open the chart page →

20,190

pagespages-andromeda

1 of 3 See more

pages pages-andromeda 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202

Open the chart page →

20,190

pagespagesbadami

1 of 3 See more

pages pagesbadami 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202

Open the chart page →

20,190

pagespages-blackburn

1 of 3 See more

pages pages-blackburn 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202

Open the chart page →

20,190

pagespages-botes

1 of 3 See more

pages pages-botes 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202

Open the chart page →

20,190

pagespages-brian

1 of 3 See more

pages pages-brian 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202

Open the chart page →

20,190

pagespages-buckll

1 of 3 See more

pages pages-buckll 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202

Open the chart page →

20,190

pagespages-camden

1 of 3 See more

pages pages-camden 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202

Open the chart page →

20,190

pagespages-camden771

1 of 3 See more

pages pages-camden771 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202

Open the chart page →

20,190

pagespages-diarmuidkeane

1 of 3 See more

pages pages-diarmuidkeane 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202

Open the chart page →

20,190

pagespages-draco

1 of 3 See more

pages pages-draco 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202

Open the chart page →

20,190

pagespages-ellora

1 of 3 See more

pages pages-ellora 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202

Open the chart page →

20,190

pagespages-finchley

1 of 3 See more

pages pages-finchley 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202

Open the chart page →

20,190

pagespages-fornax

1 of 3 See more

pages pages-fornax 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202

Open the chart page →

20,190

pagespages-harsh

1 of 3 See more

pages pages-harsh 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202

Open the chart page →

20,190

pagespagesk

1 of 3 See more

20,190

pagespages-microservice-ashim

1 of 3 See more

pages pages-microservice-ashim 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202

Open the chart page →

20,190

pagespages-mihai

1 of 3 See more

pages pages-mihai 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202

Open the chart page →

20,190

pagespages-nivesh

1 of 3 See more

pages pages-nivesh 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202

Open the chart page →

20,190

pagespagessandeepgudu

1 of 3 See more

pages pagessandeepgudu 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202

Open the chart page →

20,190

pagespages-shubhanker

1 of 3 See more

pages pages-shubhanker 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202

Open the chart page →

20,190

pagespages-ssharma0909

1 of 3 See more

pages pages-ssharma0909 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202

Open the chart page →

20,190

pagespages-sucharitha

1 of 3 See more

pages pages-sucharitha 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202

Open the chart page →

20,190

pagespages-sudhir

1 of 3 See more

pages pages-sudhir 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202

Open the chart page →

20,190

pagespages-sushi

1 of 3 See more

pages pages-sushi 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202

Open the chart page →

20,190

pagespages-vasanth5814

1 of 3 See more

pages pages-vasanth5814 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202

Open the chart page →

20,190

pagespages-vjp

1 of 3 See more

20,190

pagespawan-pages

1 of 3 See more

pages pawan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202

Open the chart page →

20,190

pagespighosh-pages

1 of 3 See more

pages pighosh-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202

Open the chart page →

20,190

pagesprasanthi

1 of 3 See more

20,190

pagesranjinigogga

1 of 3 See more

pages ranjinigogga 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202

Open the chart page →

20,190

pagesrebecca-pages

1 of 3 See more

pages rebecca-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202

Open the chart page →

20,190

pagesroccohiggins-pages

1 of 3 See more

pages roccohiggins-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202

Open the chart page →

20,190

pagesronan-pages

1 of 3 See more

pages ronan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202

Open the chart page →

20,190

helm-chart-examplesalaboy

1 of 1 See more

helm-chart-example salaboy 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
salaboy/fmtok8s-monolith :v0.1.0	f225568e6d03	h2@1.4.200	2.0.202

Open the chart page →

2,847

pagessamanvithkaranth

1 of 3 See more

pages samanvithkaranth 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202

Open the chart page →

20,190

pagessarubits-pages

1 of 3 See more

pages sarubits-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202

Open the chart page →

20,190

pagessekharpkube

1 of 3 See more

pages sekharpkube 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202

Open the chart page →

20,190

shenyushenyu

1 of 2 See more

shenyu shenyu 0.6.3

1 of the 2 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
apache/shenyu-admin :2.5.1	e2be712fc4f4	h2@1.4.200	2.0.202

Open the chart page →

8,804

shenyushenyu-helm-chart-test

1 of 2 See more

shenyu shenyu-helm-chart-test 2.4.27

1 of the 2 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
apache/shenyu-admin :2.4.2	e8b7c4ddd069	h2@1.4.200	2.0.202

Open the chart page →

12,513

pagesshrutiujlan-pages

1 of 3 See more

pages shrutiujlan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23463.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202

Open the chart page →

20,190

Container images carrying it

45 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
flyway/flyway :6.4.4	22d97ceb0c47	h2@1.4.200	2.0.202	79
apache/shenyu-admin :2.4.2	e8b7c4ddd069	h2@1.4.200	2.0.202	3
geoservercloud/geoserver-cloud-rest :1.0-RC3	99540eef78ad	h2@1.4.200	2.0.202	2
geoservercloud/geoserver-cloud-wcs :1.0-RC3	5c254c53a357	h2@1.4.200	2.0.202	2
geoservercloud/geoserver-cloud-webui :1.0-RC3	c687b1cbc891	h2@1.4.200	2.0.202	2
geoservercloud/geoserver-cloud-wfs :1.0-RC3	5288f320cf36	h2@1.4.200	2.0.202	2
geoservercloud/geoserver-cloud-wms :1.0-RC3	a30a60ac6cd0	h2@1.4.200	2.0.202	2
andrianrf/bpjstk-service :latest	46abe878d9d8	h2@1.4.200	2.0.202	1
andrianrf/iso-client :latest	ba560086ce15	h2@1.4.200	2.0.202	1
apache/nifi-registry :1.14.0	090b7f87ec7f	h2@1.4.199	2.0.202	1
apache/nifi-registry :0.8.0	974efa2f21da	h2@1.4.199	2.0.202	1
apache/shenyu-admin :2.5.1	e2be712fc4f4	h2@1.4.200	2.0.202	1
apicurio/apicurio-studio-api :0.2.62.Final	302d202ed149	h2@1.4.200	2.0.202	1
apicurio/apicurio-studio-ws :0.2.62.Final	27a91978a388	h2@1.4.200	2.0.202	1
atlassian/confluence-server :7.10.0	3b9222ab32ef	h2@1.4.200	2.0.202	1
beastob/url-shortener :1.0.2	99a49885ab33	h2@1.4.200	2.0.202	1
binhex/arch-nzbhydra2 :3.1.0-1-01	fb8952921ab6	h2@1.4.200	2.0.202	1
eikek0/sharry :1.8.0	661ff3ef42cd	h2@1.4.200	2.0.202	1
esperotech/yaade :latest	24d2d692d948	h2@1.4.200	2.0.202	1
geoservercloud/geoserver-cloud-rest :1.0-RC2	5dc0c93a1710	h2@1.4.200	2.0.202	1
geoservercloud/geoserver-cloud-wcs :1.0-RC2	47ae1bdb4bcc	h2@1.4.200	2.0.202	1
geoservercloud/geoserver-cloud-webui :1.0-RC2	28c3e5a8c5a3	h2@1.4.200	2.0.202	1
geoservercloud/geoserver-cloud-wfs :1.0-RC2	8c70ee06d5ab	h2@1.4.200	2.0.202	1
geoservercloud/geoserver-cloud-wms :1.0-RC2	42775ba6a4da	h2@1.4.200	2.0.202	1
gocd/gocd-server :v26.1.0	720d1012b93f	h2@1.4.200	2.0.202	1
library/sonarqube :9.1.0-datacenter-search	7e43ff493a47	h2@1.4.199	2.0.202	1
library/sonarqube :8.9.2-community	88cd63154d4b	h2@1.4.199	2.0.202	1
library/sonarqube :8.2-community	a246bc64207e	h2@1.4.199	2.0.202	1
library/sonarqube :9.1.0-datacenter-app	a9bc5a3a1fc3	h2@1.4.199	2.0.202	1
library/sonarqube :8.9-community	eb2f0be32efd	h2@1.4.199	2.0.202	1
massimolauri/wso2is :5.11.0-centos	e08abf0ce767	h2@1.4.199	2.0.202	1
odavid/my-bloody-jenkins :2.462.3-306	e7ab3bbc948e	h2@1.4.199	2.0.202	1
owasp/dependency-track :3.8.0	efc65e702ee1	h2@1.4.200	2.0.202	1
remche/shinyproxy :2.6.1	8bcda8a04d3b	h2@1.4.200	2.0.202	1
rundeck/rundeck :3.2.7	4d64fe56f767	h2@1.4.199	2.0.202	1
salaboy/fmtok8s-monolith :v0.1.0	f225568e6d03	h2@1.4.200	2.0.202	1
sismics/docs :v1.10	f4b0ef019cf1	h2@1.4.199	2.0.202	1
someblackmagic/smtp-fake-server :latest	0d63ba37a560	h2@1.4.200	2.0.202	1
sonatype/nexus3 :3.58.1	586060431b64	h2@1.4.200	2.0.202	1
trinodb/trino :405	ee80ab5eeab2	h2@1.4.200	2.0.202	1
xeotek/kadeck :4.2.9	4c6b04d9ce55	h2@1.4.198	2.0.202	1
ghcr.io/jenkins-x/nexus :0.1.37	8caf5289fe73	h2@1.4.200	2.0.202	1
ghcr.io/k8s-at-home/nzbhydra2 :v3.14.2	ef3670f7e0a8	h2@1.4.200	2.0.202	1
quay.io/fiware/canis-major :1.5.15	bb40472e4ff5	h2@1.4.200	2.0.202	1
quay.io/fiware/endpoint-configuration-service :0.4.3	0dc38a87b844	h2@1.4.200	2.0.202	1