StackRadar

CVE-2021-25740

Low

Advisory

Published 21 Sept 2021In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
3.1
base score, highest
EPSS
0.020
79th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
105
of 17,781 indexed, latest versions
Container images
92
deployed by those charts
Fix available
None
affected packages

Confused Deputy in Kubernetes

Carried by container images the latest versions of 105 of 17,781 indexed charts deploy, on 92 images.

Affected packageAffected versionsFixed inImages
k8s.io/kubernetesgolangv0.0.0-20240417172702-7c48c2bd72b9, v0.0.0-20240514104202-6911225c3f74, v0.0.0-20240611201126-f25b321b9ae4, v0.0.0-20240611201706-062798d53d83+50 moreno fix listed91
kubernetes-1.34apk1.34.11-r2no fix listed1
OSV records
CGA-c6g4-cprc-w95vGHSA-vw47-mr44-3jf9
Also known as
CGA-qhmr-xg5p-vgvc

Charts affected

105 by stars
ChartLatestAffected imagesRadar Score
azure-scheduledevents-managerwebdevopsVerified publisher1.0.171 of 1See more

azure-scheduledevents-manager webdevops 1.0.17

1 of the 1 container images this version deploys carry CVE-2021-25740.

Container imageDigestPackageFixed in
webdevops/azure-scheduledevents-manager:24.9.0-kubernetes7acd46a8a972
k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559
no fix listed

Open the chart page →

1,122
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2021-25740.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
k8s.io/kubernetes@v1.18.19
no fix listed

Open the chart page →

15,230
nfs-subdir-external-provisionerwenerme4.0.181 of 1See more

nfs-subdir-external-provisioner wenerme 4.0.18

1 of the 1 container images this version deploys carry CVE-2021-25740.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
k8s.io/kubernetes@v1.18.0
no fix listed

Open the chart page →

2,743
csi-driver-host-pathwiremindVerified publisher0.1.11 of 8See more

csi-driver-host-path wiremind 0.1.1

1 of the 8 container images this version deploys carry CVE-2021-25740.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/hostpathplugin:v1.9.092257881c1d6
k8s.io/kubernetes@v1.20.0
no fix listed

Open the chart page →

12,606
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2021-25740.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
k8s.io/kubernetes@v0.0.0-20241022202812-5864a4677267
no fix listed

Open the chart page →

13,677

Container images carrying it

92 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
vineyardcloudnative/vineyard-operator:latest9d419aa18faa
k8s.io/kubernetes@v1.19.3
no fix listed
1
webdevops/azure-scheduledevents-manager:24.9.0-kubernetes7acd46a8a972
k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559
no fix listed
1
gcr.io/gloo-mesh/gloo-mesh:1.1.2a4011eae6a0b
k8s.io/kubernetes@v1.13.0
no fix listed
1
gcr.io/kubecost1/server:prod-1.82.22b1a3d08caac
k8s.io/kubernetes@v1.14.1
no fix listed
1
gcr.io/kubecost1/server:prod-1.81.0a348db3e4d74
k8s.io/kubernetes@v1.14.1
no fix listed
1
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
k8s.io/kubernetes@v1.11.1
no fix listed
1
gcr.io/ml-pipeline/api-server:2.0.0-alpha.5dc6ca05bb94f
k8s.io/kubernetes@v1.11.1
no fix listed
1
gcr.io/ml-pipeline/cache-server:2.3.0293941ee4f65
k8s.io/kubernetes@v1.11.1
no fix listed
1
gcr.io/ml-pipeline/cache-server:2.0.0-alpha.583e79c709df3
k8s.io/kubernetes@v1.11.1
no fix listed
1
gcr.io/ml-pipeline/persistenceagent:2.0.0-alpha.500db9796a37b
k8s.io/kubernetes@v1.11.1
no fix listed
1
gcr.io/ml-pipeline/persistenceagent:2.3.0109ac1b38c41
k8s.io/kubernetes@v1.11.1
no fix listed
1
gcr.io/ml-pipeline/scheduledworkflow:2.0.0-alpha.5795a0c8a0e13
k8s.io/kubernetes@v1.11.1
no fix listed
1
gcr.io/ml-pipeline/scheduledworkflow:2.3.0f7e67e0bc071
k8s.io/kubernetes@v1.11.1
no fix listed
1
ghcr.io/caninehq/canine:latesta058034ca006
k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559
no fix listed
1
ghcr.io/clastix/kamaji-console:v0.2.129ecf8d4fa65
k8s.io/kubernetes@v0.0.0-20240514104202-6911225c3f74
no fix listed
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
k8s.io/kubernetes@v0.0.0-20240716234811-6fc0a69044f1
no fix listed
1
ghcr.io/fluxcd/flux-cli:v2.5.1274a179fd402
k8s.io/kubernetes@v0.0.0-20250212211946-67a30c0adcf5
no fix listed
1
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.2c7adcc4db378
k8s.io/kubernetes@v0.0.0-20250311174105-0d0f172cdf9f
no fix listed
1
ghcr.io/k8snetworkplumbingwg/multus-cni:v3.7.1e72aa733faf2
k8s.io/kubernetes@v1.13.0
no fix listed
1
ghcr.io/kluster-manager/cluster-proxy:v0.10.1a7fce69e171c
k8s.io/kubernetes@v0.0.0-20240611202059-39683505b630
no fix listed
1
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
k8s.io/kubernetes@v0.0.0-20241211175915-70d3cc986aa8
no fix listed
1
ghcr.io/kvaps/linstor-csi:v1.14.0087618d16b83
k8s.io/kubernetes@v1.14.10
no fix listed
1
ghcr.io/kvaps/linstor-stork:v1.14.05e409a6332b4
k8s.io/kubernetes@v1.20.4
no fix listed
1
ghcr.io/liangyuanpeng/replacer:v1.1.00b2a41c2a43e
k8s.io/kubernetes@v1.16.10
no fix listed
1
ghcr.io/mskazemi/kubeintellect:2.5.0b5d7681d1b9d
k8s.io/kubernetes@v0.0.0-20250422155613-59526cd48674
no fix listed
1
ghcr.io/nefelim4ag/k8s-ssh-bastion:0.5.04d337e14c80b
k8s.io/kubernetes@v0.0.0-20240611201706-062798d53d83
no fix listed
1
ghcr.io/quenchworks/images/kubectlb98289383cc7
kubernetes-1.34@1.34.11-r2
no fix listed
1
ghcr.io/tjm/vault-gcp-secrets:v1.19.59f157fe035f1
k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559
no fix listed
1
ghcr.io/turbot/guardrails-agent-kubernetes:0.3.09d01bf9c9224
k8s.io/kubernetes@v0.0.0-20241119134819-c83cbee114dd
no fix listed
1
mcr.microsoft.com/k8s/csi/azuredisk-csi:v1.1.1ec1803037ed9
k8s.io/kubernetes@v1.21.0-alpha.0.0.20201210005053-f58c4d8cd725
no fix listed
1
public.ecr.aws/eks-distro/kubernetes/kube-scheduler:v1.29.14-eks-1-29-lateste7e1db003e6a
k8s.io/kubernetes@v0.0.0-20250108021927-cd1e1306b0ba
no fix listed
1
quay.io/bentoml/yatai:0.4.614b482c1f1b8
k8s.io/kubernetes@v1.13.4
no fix listed
1
quay.io/ddn/exascaler-csi-file-driver:v2.2.6fe2e2e5a2751
k8s.io/kubernetes@v1.14.1
no fix listed
1
quay.io/icdh/core-dump-handler:v9.0.0cc79b9e2a1c8
k8s.io/kubernetes@v1.22.0
no fix listed
1
quay.io/open-cluster-management/cluster-proxy:v0.12.035f9c3ad644a
k8s.io/kubernetes@v0.0.0-20240611202059-39683505b630
no fix listed
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
k8s.io/kubernetes@v1.20.4
no fix listed
1
registry.k8s.io/kubectl:v1.32.73c5268158974
k8s.io/kubernetes@v0.0.0-20250715180032-158eee9fac88
no fix listed
1
registry.k8s.io/kubectl:v1.32.08ccae74fc039
k8s.io/kubernetes@v0.0.0-20241211175915-70d3cc986aa8
no fix listed
1
registry.k8s.io/kubectl:v1.31.10e0b2d217d1d2
k8s.io/kubernetes@v0.0.0-20250617183334-61183587c03f
no fix listed
1
registry.k8s.io/kube-scheduler:v1.28.1146cf7475c8da
k8s.io/kubernetes@v0.0.0-20240611201126-f25b321b9ae4
no fix listed
1
registry.k8s.io/sig-storage/hostpathplugin:v1.9.092257881c1d6
k8s.io/kubernetes@v1.20.0
no fix listed
1
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.03ce0fdba4d8e
k8s.io/kubernetes@v1.18.0
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.