StackRadar

CVE-2021-25737

Medium

Advisory

Published 7 Sept 2021In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
0.013
69th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
24
of 17,781 indexed, latest versions
Container images
21
deployed by those charts
Fix available
1 of 1
affected package

Incomplete List of Disallowed Inputs in Kubernetes

Carried by container images the latest versions of 24 of 17,781 indexed charts deploy, on 21 images.

Affected packageAffected versionsFixed inImages
k8s.io/kubernetesgolangv1.16.1, v1.16.2, v1.16.10, v1.16.15+9 more1.18.19, 1.19.11, 1.20.721
OSV records
GHSA-mfv7-gq43-w965
Also known as
GO-2022-0908

Charts affected

24 by stars
ChartLatestAffected imagesRadar Score
nfs-subdir-external-provisionernfs-subdir-external-provisioner4.0.181 of 1See more

nfs-subdir-external-provisioner nfs-subdir-external-provisioner 4.0.18

1 of the 1 container images this version deploys carry CVE-2021-25737.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
k8s.io/kubernetes@v1.18.0
1.18.19

Open the chart page →

2,743
datadogdatadog-test2.4.231 of 2See more

datadog datadog-test 2.4.23

1 of the 2 container images this version deploys carry CVE-2021-25737.

Container imageDigestPackageFixed in
datadog/agent:7.22.08f20e56b5311
k8s.io/kubernetes@v1.16.2
1.18.19

Open the chart page →

4,568
aws-efs-csi-driverkubesphere-testVerified publisher0.1.01 of 3See more

aws-efs-csi-driver kubesphere-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2021-25737.

Container imageDigestPackageFixed in
amazon/aws-efs-csi-driver:v0.3.0b55277652ea8
k8s.io/kubernetes@v1.16.1
1.18.19

Open the chart page →

2,603
linstorkvaps1.14.01 of 11See more

linstor kvaps 1.14.0

1 of the 11 container images this version deploys carry CVE-2021-25737.

Container imageDigestPackageFixed in
ghcr.io/kvaps/linstor-stork:v1.14.05e409a6332b4
k8s.io/kubernetes@v1.20.4
1.20.7

Open the chart page →

15,547
rke2-canalrke2-charts3.13.31 of 2See more

rke2-canal rke2-charts 3.13.3

1 of the 2 container images this version deploys carry CVE-2021-25737.

Container imageDigestPackageFixed in
rancher/hardened-calico:v3.13.36d2cd61a338b
k8s.io/kubernetes@v1.16.2
1.18.19

Open the chart page →

6,996
hcloud-csi-driveratem181.5.11 of 6See more

hcloud-csi-driver atem18 1.5.1

1 of the 6 container images this version deploys carry CVE-2021-25737.

Container imageDigestPackageFixed in
hetznercloud/hcloud-csi-driver:1.5.141dce5b33644
k8s.io/kubernetes@v1.17.12
1.18.19

Open the chart page →

6,491
nfs-subdir-external-provisionerbook-k8sinfra-v24.0.181 of 1See more

nfs-subdir-external-provisioner book-k8sinfra-v2 4.0.18

1 of the 1 container images this version deploys carry CVE-2021-25737.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.03ce0fdba4d8e
k8s.io/kubernetes@v1.18.0
1.18.19

Open the chart page →

2,743
argocddevtron1.8.11 of 3See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry CVE-2021-25737.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
k8s.io/kubernetes@v1.19.2
1.19.11

Open the chart page →

10,466
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry CVE-2021-25737.

Container imageDigestPackageFixed in
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
k8s.io/kubernetes@v1.20.4
1.20.7

Open the chart page →

68,240
argocddevtron-labs1.8.11 of 3See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry CVE-2021-25737.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
k8s.io/kubernetes@v1.19.2
1.19.11

Open the chart page →

10,466
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry CVE-2021-25737.

Container imageDigestPackageFixed in
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
k8s.io/kubernetes@v1.20.4
1.20.7

Open the chart page →

68,240
csi-neonsankubesphere-testVerified publisher1.3.01 of 6See more

csi-neonsan kubesphere-test 1.3.0

1 of the 6 container images this version deploys carry CVE-2021-25737.

Container imageDigestPackageFixed in
csiplugin/csi-neonsan:v1.2.21fa83d45417f
k8s.io/kubernetes@v1.18.6
1.18.19

Open the chart page →

18,475
longhornkvalitetsitVerified publisher1.1.1-01 of 2See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2021-25737.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.1.1ede61fe2a472
k8s.io/kubernetes@v1.16.15
1.18.19

Open the chart page →

16,520
kommandermesosphere-stable0.39.23 of 29See more

kommander mesosphere-stable 0.39.2

3 of the 29 container images this version deploys carry CVE-2021-25737.

Container imageDigestPackageFixed in
mesosphere/kommander-federation-authorizedlister:v0.21.263bc411b930b
k8s.io/kubernetes@v1.19.5
1.19.11
mesosphere/kommander-federation-controller-manager:v0.21.2b036785a8862
k8s.io/kubernetes@v1.19.5
1.19.11
mesosphere/kommander-federation-webhook:v0.21.294af41b6dd9a
k8s.io/kubernetes@v1.19.5
1.19.11

Open the chart page →

68,284
replacermosquitto-helm-chart0.2.01 of 3See more

replacer mosquitto-helm-chart 0.2.0

1 of the 3 container images this version deploys carry CVE-2021-25737.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/replacer:v1.1.00b2a41c2a43e
k8s.io/kubernetes@v1.16.10
1.18.19

Open the chart page →

3,929
gitlab-runner-operatorpnnl-miscscripts0.1.61 of 1See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2021-25737.

Container imageDigestPackageFixed in
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
k8s.io/kubernetes@v1.16.2
1.18.19

Open the chart page →

11,151
stackrox-chartredhat-cop0.0.101 of 1See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2021-25737.

Container imageDigestPackageFixed in
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
k8s.io/kubernetes@v1.20.4
1.20.7

Open the chart page →

29,227
rke2-canal-1.19-1.20rke2-charts3.13.3-build20211022021 of 2See more

rke2-canal-1.19-1.20 rke2-charts 3.13.3-build2021102202

1 of the 2 container images this version deploys carry CVE-2021-25737.

Container imageDigestPackageFixed in
rancher/hardened-calico:v3.13.3-build20210223c678c25d47c8
k8s.io/kubernetes@v1.16.2
1.18.19

Open the chart page →

5,942
argocdromholdings1.8.11 of 3See more

argocd romholdings 1.8.1

1 of the 3 container images this version deploys carry CVE-2021-25737.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
k8s.io/kubernetes@v1.19.2
1.19.11

Open the chart page →

10,466
devtron-enterpriseromholdings48.0.01 of 28See more

devtron-enterprise romholdings 48.0.0

1 of the 28 container images this version deploys carry CVE-2021-25737.

Container imageDigestPackageFixed in
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
k8s.io/kubernetes@v1.20.4
1.20.7

Open the chart page →

68,240
nfs-provisionersupporttools0.11.01 of 1See more

nfs-provisioner supporttools 0.11.0

1 of the 1 container images this version deploys carry CVE-2021-25737.

Container imageDigestPackageFixed in
openebs/provisioner-nfs:0.11.04f41dd782761
k8s.io/kubernetes@v1.17.3
1.18.19

Open the chart page →

2,671
vineyard-operatorvineyardVerified publisher0.24.21 of 2See more

vineyard-operator vineyard 0.24.2

1 of the 2 container images this version deploys carry CVE-2021-25737.

Container imageDigestPackageFixed in
vineyardcloudnative/vineyard-operator:latest9d419aa18faa
k8s.io/kubernetes@v1.19.3
1.19.11

Open the chart page →

4,525
nfs-subdir-external-provisionerwenerme4.0.181 of 1See more

nfs-subdir-external-provisioner wenerme 4.0.18

1 of the 1 container images this version deploys carry CVE-2021-25737.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
k8s.io/kubernetes@v1.18.0
1.18.19

Open the chart page →

2,743
csi-driver-host-pathwiremindVerified publisher0.1.11 of 8See more

csi-driver-host-path wiremind 0.1.1

1 of the 8 container images this version deploys carry CVE-2021-25737.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/hostpathplugin:v1.9.092257881c1d6
k8s.io/kubernetes@v1.20.0
1.20.7

Open the chart page →

12,606

Container images carrying it

21 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
argoproj/argocd:v1.8.1830e86cacefd
k8s.io/kubernetes@v1.19.2
1.19.11
3
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
k8s.io/kubernetes@v1.20.4
1.20.7
3
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
k8s.io/kubernetes@v1.18.0
1.18.19
2
amazon/aws-efs-csi-driver:v0.3.0b55277652ea8
k8s.io/kubernetes@v1.16.1
1.18.19
1
csiplugin/csi-neonsan:v1.2.21fa83d45417f
k8s.io/kubernetes@v1.18.6
1.18.19
1
datadog/agent:7.22.08f20e56b5311
k8s.io/kubernetes@v1.16.2
1.18.19
1
hetznercloud/hcloud-csi-driver:1.5.141dce5b33644
k8s.io/kubernetes@v1.17.12
1.18.19
1
longhornio/longhorn-manager:v1.1.1ede61fe2a472
k8s.io/kubernetes@v1.16.15
1.18.19
1
mesosphere/kommander-federation-authorizedlister:v0.21.263bc411b930b
k8s.io/kubernetes@v1.19.5
1.19.11
1
mesosphere/kommander-federation-controller-manager:v0.21.2b036785a8862
k8s.io/kubernetes@v1.19.5
1.19.11
1
mesosphere/kommander-federation-webhook:v0.21.294af41b6dd9a
k8s.io/kubernetes@v1.19.5
1.19.11
1
openebs/provisioner-nfs:0.11.04f41dd782761
k8s.io/kubernetes@v1.17.3
1.18.19
1
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
k8s.io/kubernetes@v1.16.2
1.18.19
1
rancher/hardened-calico:v3.13.36d2cd61a338b
k8s.io/kubernetes@v1.16.2
1.18.19
1
rancher/hardened-calico:v3.13.3-build20210223c678c25d47c8
k8s.io/kubernetes@v1.16.2
1.18.19
1
vineyardcloudnative/vineyard-operator:latest9d419aa18faa
k8s.io/kubernetes@v1.19.3
1.19.11
1
ghcr.io/kvaps/linstor-stork:v1.14.05e409a6332b4
k8s.io/kubernetes@v1.20.4
1.20.7
1
ghcr.io/liangyuanpeng/replacer:v1.1.00b2a41c2a43e
k8s.io/kubernetes@v1.16.10
1.18.19
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
k8s.io/kubernetes@v1.20.4
1.20.7
1
registry.k8s.io/sig-storage/hostpathplugin:v1.9.092257881c1d6
k8s.io/kubernetes@v1.20.0
1.20.7
1
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.03ce0fdba4d8e
k8s.io/kubernetes@v1.18.0
1.18.19
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.