CVE-2021-25736
MediumAdvisory
Published 30 Oct 2023In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.8
- base score, highest
- EPSS
- 0.009
- 58th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 101
- of 17,781 indexed, latest versions
- Container images
- 88
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Kube-proxy may unintentionally forward traffic
Carried by container images the latest versions of 101 of 17,781 indexed charts deploy, on 88 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| k8s.io/ | v0.0.0-20240417172702-7c48c2bd72b9, v0.0.0-20240514104202-6911225c3f74, v0.0.0-20240611201126-f25b321b9ae4, v0.0.0-20240611201706-062798d53d83+47 more | 1.21.0 | 88 |
- OSV records
- GHSA-35c7-w35f-xwgh
- Also known as
- GO-2023-2159
Charts affected
101 by stars
Container images carrying it
88 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| clastix/ | 22918a06c253 | k8s.io/ | 1.21.0 | 6 |
| quay.io/ | e6df72478956 | k8s.io/ | 1.21.0 | 5 |
| argoproj/ | 830e86cacefd | k8s.io/ | 1.21.0 | 3 |
| quay.io/ | 6545dac92173 | k8s.io/ | 1.21.0 | 3 |
| quay.io/ | bc4aa22272ef | k8s.io/ | 1.21.0 | 3 |
| quay.io/ | 4c3b91bebd3d | k8s.io/ | 1.21.0 | 3 |
| registry.k8s.io/ | 99b37df34bc4 | k8s.io/ | 1.21.0 | 3 |
| csiplugin/ | 0766163dc046 | k8s.io/ | 1.21.0 | 2 |
| ghcr.io/ | 82d0b161161d | k8s.io/ | 1.21.0 | 2 |
| ghcr.io/ | c137478627cc | k8s.io/ | 1.21.0 | 2 |
| quay.io/ | 382fca2054c9 | k8s.io/ | 1.21.0 | 2 |
| registry.k8s.io/ | 74a5cf9cfa9f | k8s.io/ | 1.21.0 | 2 |
| registry.k8s.io/ | 63d5e04551ec | k8s.io/ | 1.21.0 | 2 |
| airbyte/ | 98d2c39d512e | k8s.io/ | 1.21.0 | 1 |
| alpine/ | 6dbe6f391eda | k8s.io/ | 1.21.0 | 1 |
| alpine/ | 7a319b15cfc9 | k8s.io/ | 1.21.0 | 1 |
| alpine/ | 7e1e7d5b7a96 | k8s.io/ | 1.21.0 | 1 |
| alpine/ | 9c4976d47656 | k8s.io/ | 1.21.0 | 1 |
| alpine/ | bd01dae02676 | k8s.io/ | 1.21.0 | 1 |
| alpine/ | cd560fce90f7 | k8s.io/ | 1.21.0 | 1 |
| alpine/ | e5c0b053fed7 | k8s.io/ | 1.21.0 | 1 |
| alpine/ | eec354133193 | k8s.io/ | 1.21.0 | 1 |
| amazon/ | b55277652ea8 | k8s.io/ | 1.21.0 | 1 |
| bitnamilegacy/ | 1249fc292e84 | k8s.io/ | 1.21.0 | 1 |
| bitnamilegacy/ | 64614ef8290f | k8s.io/ | 1.21.0 | 1 |
| bitnamilegacy/ | 744f84cf7493 | k8s.io/ | 1.21.0 | 1 |
| burganbank/ | 9259c34e4037 | k8s.io/ | 1.21.0 | 1 |
| crowdfox/ | 6fa7e8063d27 | k8s.io/ | 1.21.0 | 1 |
| csiplugin/ | 1fa83d45417f | k8s.io/ | 1.21.0 | 1 |
| datadog/ | 8f20e56b5311 | k8s.io/ | 1.21.0 | 1 |
| dserio83/ | 6b3d9115fee2 | k8s.io/ | 1.21.0 | 1 |
| hetznercloud/ | 41dce5b33644 | k8s.io/ | 1.21.0 | 1 |
| huzafach/ | 6e271d43ea48 | k8s.io/ | 1.21.0 | 1 |
| kubesphere/ | 49b445b1b732 | k8s.io/ | 1.21.0 | 1 |
| leonardomulticloud/ | d119918900e8 | k8s.io/ | 1.21.0 | 1 |
| longhornio/ | dca34321452c | k8s.io/ | 1.21.0 | 1 |
| longhornio/ | ede61fe2a472 | k8s.io/ | 1.21.0 | 1 |
| mesosphere/ | 63bc411b930b | k8s.io/ | 1.21.0 | 1 |
| mesosphere/ | b036785a8862 | k8s.io/ | 1.21.0 | 1 |
| mesosphere/ | 94af41b6dd9a | k8s.io/ | 1.21.0 | 1 |
| murtazashah46/ | 4d11726cf803 | k8s.io/ | 1.21.0 | 1 |
| openebs/ | 4f41dd782761 | k8s.io/ | 1.21.0 | 1 |
| openpolicyagent/ | 77bc9bf3d163 | k8s.io/ | 1.21.0 | 1 |
| pnnlmiscscripts/ | 155131891741 | k8s.io/ | 1.21.0 | 1 |
| rancher/ | 6d2cd61a338b | k8s.io/ | 1.21.0 | 1 |
| rancher/ | c678c25d47c8 | k8s.io/ | 1.21.0 | 1 |
| rancher/ | 8eb8092f0728 | k8s.io/ | 1.21.0 | 1 |
| veecode/ | c69fd286b489 | k8s.io/ | 1.21.0 | 1 |
| vineyardcloudnative/ | 9d419aa18faa | k8s.io/ | 1.21.0 | 1 |
| webdevops/ | 7acd46a8a972 | k8s.io/ | 1.21.0 | 1 |