StackRadar

CVE-2021-2389

Medium

Advisory

Published 21 Jul 2021In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.081
95th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
25
of 17,781 indexed, latest versions
Container images
22
deployed by those charts
Fix available
4 of 6
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 25 of 17,781 indexed charts deploy, on 22 images.

Affected packageAffected versionsFixed inImages
mariadbapk10.4.13-r0, 10.4.17-r1, 10.5.8-r0, 10.5.9-r0+1 more10.4.21-r0, 10.5.12-r07
mysql-5.7deb5.7.20-0ubuntu0.16.04.1, 5.7.29-0ubuntu0.18.04.1, 5.7.32-0ubuntu0.18.04.1, 5.7.33-0ubuntu0.18.04.1+1 more5.7.35-0ubuntu0.16.04.1+esm1, 5.7.35-0ubuntu0.18.04.15
mariadb-10.5deb1:10.5.11-11:10.5.12-0+deb11u14
mysql-8.0deb8.0.23-0ubuntu0.20.04.1, 8.0.25-0ubuntu0.20.04.18.0.26-0ubuntu0.20.04.23
mariadb-10.1deb1:10.1.47-0ubuntu0.18.04.1, 1:10.1.48-0ubuntu0.18.04.1no fix listed2
mysql-5.5deb5.5.60-0ubuntu0.14.04.1, 5.5.62-0ubuntu0.14.04.1no fix listed2
OSV records
ALPINE-CVE-2021-2389DEBIAN-CVE-2021-2389UBUNTU-CVE-2021-2389
Also known as
USN-5022-1, USN-5022-3

Charts affected

25 by stars
ChartLatestAffected imagesRadar Score
openvpn-asstenicVerified publisher0.1.91 of 1See more

openvpn-as stenic 0.1.9

1 of the 1 container images this version deploys carry CVE-2021-2389.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
mariadb-10.1@1:10.1.47-0ubuntu0.18.04.1
mysql-5.7@5.7.32-0ubuntu0.18.04.1
no fix listed
5.7.35-0ubuntu0.18.04.1

Open the chart page →

15,592
netris-controllernetrisai2.8.21 of 14See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2021-2389.

Container imageDigestPackageFixed in
graphiteapp/graphite-statsd:1.1.7-604a0037cc2ae
mariadb@10.4.13-r0
10.4.21-r0

Open the chart page →

30,326
network-ups-toolsgeek-cookbookVerified publisher6.4.21 of 1See more

network-ups-tools geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2021-2389.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/network-ups-tools:v2.7.4-2479-g86a32237cbd5d4cc1245
mysql-8.0@8.0.25-0ubuntu0.20.04.1
8.0.26-0ubuntu0.20.04.2

Open the chart page →

13,950
huginnutkuozdemirVerified publisher2.2.11 of 4See more

huginn utkuozdemir 2.2.1

1 of the 4 container images this version deploys carry CVE-2021-2389.

Container imageDigestPackageFixed in
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
mysql-5.7@5.7.33-0ubuntu0.18.04.1
5.7.35-0ubuntu0.18.04.1

Open the chart page →

18,137
pact-brokeralmorgvVerified publisher0.1.01 of 1See more

pact-broker almorgv 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-2389.

Container imageDigestPackageFixed in
pactfoundation/pact-broker:2.79.1.112861b0bd4d9
mariadb@10.5.8-r0
10.5.12-r0

Open the chart page →

4,995
db-backupballe-petersen0.1.41 of 1See more

db-backup balle-petersen 0.1.4

1 of the 1 container images this version deploys carry CVE-2021-2389.

Container imageDigestPackageFixed in
tobiasbp/db-backup:0.0.314bee6e33a26
mariadb@10.4.13-r0
10.4.21-r0

Open the chart page →

4,814
deepstackgeek-cookbookVerified publisher1.5.21 of 2See more

deepstack geek-cookbook 1.5.2

1 of the 2 container images this version deploys carry CVE-2021-2389.

Container imageDigestPackageFixed in
robmarkcole/deepstack-ui:latest410275726459
mariadb-10.5@1:10.5.11-1
1:10.5.12-0+deb11u1

Open the chart page →

5,305
opennebulakvaps2.1.11 of 9See more

opennebula kvaps 2.1.1

1 of the 9 container images this version deploys carry CVE-2021-2389.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
mysql-8.0@8.0.25-0ubuntu0.20.04.1
8.0.26-0ubuntu0.20.04.2

Open the chart page →

113,791
matomot3n1.3.11 of 4See more

matomo t3n 1.3.1

1 of the 4 container images this version deploys carry CVE-2021-2389.

Container imageDigestPackageFixed in
t3nde/matomo:4.3.1-fpm-alpine329ce194393a
mariadb@10.5.11-r0
10.5.12-r0

Open the chart page →

4,264
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2021-2389.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
mysql-5.7@5.7.34-0ubuntu0.18.04.1
5.7.35-0ubuntu0.18.04.1

Open the chart page →

22,891
bnkrbnkr1.0.51 of 2See more

bnkr bnkr 1.0.5

1 of the 2 container images this version deploys carry CVE-2021-2389.

Container imageDigestPackageFixed in
engrmth/bnkr:2.1.06d8464e6f0e8
mysql-8.0@8.0.23-0ubuntu0.20.04.1
8.0.26-0ubuntu0.20.04.2

Open the chart page →

15,253
opensipschetan-opensips0.1.01 of 1See more

opensips chetan-opensips 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-2389.

Container imageDigestPackageFixed in
chetangautamm/repo:Opensips_Buildb4b94155ff5a
mysql-5.5@5.5.62-0ubuntu0.14.04.1
no fix listed

Open the chart page →

30,140
robot-shopcloud-native-toolkit1.1.11 of 12See more

robot-shop cloud-native-toolkit 1.1.1

1 of the 12 container images this version deploys carry CVE-2021-2389.

Container imageDigestPackageFixed in
robotshop/rs-payment:latest774b52c6180d
mariadb-10.5@1:10.5.11-1
1:10.5.12-0+deb11u1

Open the chart page →

29,555
galaxy-stablecloudve2.0.01 of 5See more

galaxy-stable cloudve 2.0.0

1 of the 5 container images this version deploys carry CVE-2021-2389.

Container imageDigestPackageFixed in
galaxy/galaxy-stable:v18.018e577a626dfd
mysql-5.5@5.5.60-0ubuntu0.14.04.1
no fix listed

Open the chart page →

70,895
tinyproxy-exporterdoubanVerified publisher0.1.21 of 1See more

tinyproxy-exporter douban 0.1.2

1 of the 1 container images this version deploys carry CVE-2021-2389.

Container imageDigestPackageFixed in
ghcr.io/leoquote/tinyproxy_exporter:master6b4103d88dbb
mariadb-10.5@1:10.5.11-1
1:10.5.12-0+deb11u1

Open the chart page →

3,421
wallabaggeek-cookbookVerified publisher7.2.01 of 1See more

wallabag geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2021-2389.

Container imageDigestPackageFixed in
wallabag/wallabag:2.4.25e4c26a7fb4a
mariadb@10.4.17-r1
10.4.21-r0

Open the chart page →

4,358
jisortjisort0.4.11 of 7See more

jisort jisort 0.4.1

1 of the 7 container images this version deploys carry CVE-2021-2389.

Container imageDigestPackageFixed in
litmuschaos/mysql-client:latest251afd8fc039
mariadb@10.4.13-r0
10.4.21-r0

Open the chart page →

1,826
betydbncsaVerified publisher0.6.11 of 4See more

betydb ncsa 0.6.1

1 of the 4 container images this version deploys carry CVE-2021-2389.

Container imageDigestPackageFixed in
pecan/bety:5.4.1f825d480cd62
mariadb-10.5@1:10.5.11-1
1:10.5.12-0+deb11u1

Open the chart page →

9,542
pecanncsaVerified publisher0.6.21 of 15See more

pecan ncsa 0.6.2

1 of the 15 container images this version deploys carry CVE-2021-2389.

Container imageDigestPackageFixed in
pecan/bety:5.4.1f825d480cd62
mariadb-10.5@1:10.5.11-1
1:10.5.12-0+deb11u1

Open the chart page →

14,154
freeradiusopencord1.0.41 of 1See more

freeradius opencord 1.0.4

1 of the 1 container images this version deploys carry CVE-2021-2389.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.0.2121c8bfa904d8
mysql-5.7@5.7.29-0ubuntu0.18.04.1
5.7.35-0ubuntu0.18.04.1

Open the chart page →

15,702
sebaopencord1.0.01 of 17See more

seba opencord 1.0.0

1 of the 17 container images this version deploys carry CVE-2021-2389.

Container imageDigestPackageFixed in
tpdock/freeradius:2.2.93da600c95a49
mysql-5.7@5.7.20-0ubuntu0.16.04.1
5.7.35-0ubuntu0.16.04.1+esm1

Open the chart page →

93,855
voltha-infraopencord2.14.01 of 10See more

voltha-infra opencord 2.14.0

1 of the 10 container images this version deploys carry CVE-2021-2389.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.0.2121c8bfa904d8
mysql-5.7@5.7.29-0ubuntu0.18.04.1
5.7.35-0ubuntu0.18.04.1

Open the chart page →

41,044
open-vpnopenvpn0.0.11 of 1See more

open-vpn openvpn 0.0.1

1 of the 1 container images this version deploys carry CVE-2021-2389.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
mariadb-10.1@1:10.1.47-0ubuntu0.18.04.1
mysql-5.7@5.7.32-0ubuntu0.18.04.1
no fix listed
5.7.35-0ubuntu0.18.04.1

Open the chart page →

15,592
dolibarrraphaelVerified publisher0.0.11 of 1See more

dolibarr raphael 0.0.1

1 of the 1 container images this version deploys carry CVE-2021-2389.

Container imageDigestPackageFixed in
monogramm/docker-dolibarr:13.0-alpine5afd99523984
mariadb@10.5.9-r0
10.5.12-r0

Open the chart page →

3,466
wbaas-backupwbstack0.1.01 of 1See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-2389.

Container imageDigestPackageFixed in
ghcr.io/wmde/wbaas-backup:v0.1.78e6a9516eac0
mariadb-10.1@1:10.1.48-0ubuntu0.18.04.1
no fix listed

Open the chart page →

9,743

Container images carrying it

22 by charts deploying them

A fixed version is listed for 4 of the 6 affected packages.

Container imageDigestPackageFixed inUsed by
freeradius/freeradius-server:3.0.2121c8bfa904d8
mysql-5.7@5.7.29-0ubuntu0.18.04.1
5.7.35-0ubuntu0.18.04.1
2
pecan/bety:5.4.1f825d480cd62
mariadb-10.5@1:10.5.11-1
1:10.5.12-0+deb11u1
2
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
mariadb-10.1@1:10.1.47-0ubuntu0.18.04.1
mysql-5.7@5.7.32-0ubuntu0.18.04.1
no fix listed
5.7.35-0ubuntu0.18.04.1
2
chetangautamm/repo:Opensips_Buildb4b94155ff5a
mysql-5.5@5.5.62-0ubuntu0.14.04.1
no fix listed
1
engrmth/bnkr:2.1.06d8464e6f0e8
mysql-8.0@8.0.23-0ubuntu0.20.04.1
8.0.26-0ubuntu0.20.04.2
1
galaxy/galaxy-stable:v18.018e577a626dfd
mysql-5.5@5.5.60-0ubuntu0.14.04.1
no fix listed
1
gethue/hue:4.10.05702b2c37ff9
mysql-5.7@5.7.34-0ubuntu0.18.04.1
5.7.35-0ubuntu0.18.04.1
1
graphiteapp/graphite-statsd:1.1.7-604a0037cc2ae
mariadb@10.4.13-r0
10.4.21-r0
1
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
mysql-5.7@5.7.33-0ubuntu0.18.04.1
5.7.35-0ubuntu0.18.04.1
1
litmuschaos/mysql-client:latest251afd8fc039
mariadb@10.4.13-r0
10.4.21-r0
1
monogramm/docker-dolibarr:13.0-alpine5afd99523984
mariadb@10.5.9-r0
10.5.12-r0
1
pactfoundation/pact-broker:2.79.1.112861b0bd4d9
mariadb@10.5.8-r0
10.5.12-r0
1
robmarkcole/deepstack-ui:latest410275726459
mariadb-10.5@1:10.5.11-1
1:10.5.12-0+deb11u1
1
robotshop/rs-payment:latest774b52c6180d
mariadb-10.5@1:10.5.11-1
1:10.5.12-0+deb11u1
1
t3nde/matomo:4.3.1-fpm-alpine329ce194393a
mariadb@10.5.11-r0
10.5.12-r0
1
tobiasbp/db-backup:0.0.314bee6e33a26
mariadb@10.4.13-r0
10.4.21-r0
1
tpdock/freeradius:2.2.93da600c95a49
mysql-5.7@5.7.20-0ubuntu0.16.04.1
5.7.35-0ubuntu0.16.04.1+esm1
1
wallabag/wallabag:2.4.25e4c26a7fb4a
mariadb@10.4.17-r1
10.4.21-r0
1
ghcr.io/k8s-at-home/network-ups-tools:v2.7.4-2479-g86a32237cbd5d4cc1245
mysql-8.0@8.0.25-0ubuntu0.20.04.1
8.0.26-0ubuntu0.20.04.2
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
mysql-8.0@8.0.25-0ubuntu0.20.04.1
8.0.26-0ubuntu0.20.04.2
1
ghcr.io/leoquote/tinyproxy_exporter:master6b4103d88dbb
mariadb-10.5@1:10.5.11-1
1:10.5.12-0+deb11u1
1
ghcr.io/wmde/wbaas-backup:v0.1.78e6a9516eac0
mariadb-10.1@1:10.1.48-0ubuntu0.18.04.1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.