StackRadarChart IndexLive demo

CVE-2021-25738

Medium

Advisory

Published 12 Oct 2021In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.7; base score, highest
EPSS: 0.005; 40th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 8; of 17,781 indexed, latest versions
Container images: 10; deployed by those charts
Fix available: 1 of 1; affected package

Code injection in Kubernetes Java Client

Carried by container images the latest versions of 8 of 17,781 indexed charts deploy, on 10 images.

Affected package	Affected versions	Fixed in	Images
client-javamaven	2.0.0, 3.0.0, 4.0.0, 7.0.0+1 more	11.0.1	10

OSV records: GHSA-m8wh-mqgf-rr8g

Charts affected

8 by stars

Chart

Latest

Affected images

Radar Score

skywalkingkubesphere-test

1 of 4 See more

skywalking kubesphere-test 3.1.0

1 of the 4 container images this version deploys carry CVE-2021-25738.

Container image	Digest	Package	Fixed in
apache/skywalking-oap-server :8.1.0-es7	641237e0299b	client-java@8.0.0	11.0.1

Open the chart page →

18,042

spinnakerdwardu-helm-charts

1 of 2 See more

spinnaker dwardu-helm-charts 2.2.6

1 of the 2 container images this version deploys carry CVE-2021-25738.

Container image	Digest	Package	Fixed in
gcr.io/spinnaker-marketplace/halyard :1.32.0	0ee5f968d2ab	client-java@7.0.0	11.0.1

Open the chart page →

8,752

seldon-coreseldon

2 of 3 See more

seldon-core seldon 0.2.7

2 of the 3 container images this version deploys carry CVE-2021-25738.

Container image	Digest	Package	Fixed in
seldonio/apife :0.2.7	ba81b17f00eb	client-java@3.0.0	11.0.1
seldonio/cluster-manager :0.2.7	29e362bb1ba2	client-java@3.0.0	11.0.1

Open the chart page →

13,798

2 of 2 See more

pulsar cnieg 1.0.8

2 of the 2 container images this version deploys carry CVE-2021-25738.

Container image	Digest	Package	Fixed in
apachepulsar/pulsar :2.6.1	4db6ff0b4045	client-java@2.0.0	11.0.1
apachepulsar/pulsar-manager :v0.1.0	b341ef76a852	client-java@2.0.0	11.0.1

Open the chart page →

16,860

ibm-app-navigatoribm-charts

2 of 5 See more

ibm-app-navigator ibm-charts 1.0.1

2 of the 5 container images this version deploys carry CVE-2021-25738.

Container image	Digest	Package	Fixed in
ibmcom/app-nav-api :1.0.1	ce9d2a564273	client-java@3.0.0	11.0.1
ibmcom/app-nav-was-controller :1.0.1	a6748792da26	client-java@4.0.0	11.0.1

Open the chart page →

32,915

ladeitladeit

1 of 2 See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2021-25738.

Container image	Digest	Package	Fixed in
ladeit/ladeit :latest	962b665ffe82	client-java@4.0.0	11.0.1

Open the chart page →

26,356

pulsarv2milvus-helm

1 of 4 See more

pulsarv2 milvus-helm 2.7.8

1 of the 4 container images this version deploys carry CVE-2021-25738.

Container image	Digest	Package	Fixed in
apachepulsar/pulsar-manager :v0.1.0	b341ef76a852	client-java@2.0.0	11.0.1

Open the chart page →

15,855

seldon-core-oauth-gatewayseldon

1 of 2 See more

seldon-core-oauth-gateway seldon 0.3.1

1 of the 2 container images this version deploys carry CVE-2021-25738.

Container image	Digest	Package	Fixed in
seldonio/apife :0.3.1	eea0d3f578ca	client-java@3.0.0	11.0.1

Open the chart page →

8,098

Container images carrying it

10 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
apachepulsar/pulsar-manager :v0.1.0	b341ef76a852	client-java@2.0.0	11.0.1	2
apachepulsar/pulsar :2.6.1	4db6ff0b4045	client-java@2.0.0	11.0.1	1
apache/skywalking-oap-server :8.1.0-es7	641237e0299b	client-java@8.0.0	11.0.1	1
ibmcom/app-nav-api :1.0.1	ce9d2a564273	client-java@3.0.0	11.0.1	1
ibmcom/app-nav-was-controller :1.0.1	a6748792da26	client-java@4.0.0	11.0.1	1
ladeit/ladeit :latest	962b665ffe82	client-java@4.0.0	11.0.1	1
seldonio/apife :0.2.7	ba81b17f00eb	client-java@3.0.0	11.0.1	1
seldonio/apife :0.3.1	eea0d3f578ca	client-java@3.0.0	11.0.1	1
seldonio/cluster-manager :0.2.7	29e362bb1ba2	client-java@3.0.0	11.0.1	1
gcr.io/spinnaker-marketplace/halyard :1.32.0	0ee5f968d2ab	client-java@7.0.0	11.0.1	1