StackRadar

CVE-2021-27919

Unscored

Advisory

Published 14 Apr 2021In the index since 6 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.015
73rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
17
of 17,781 indexed, latest versions
Container images
15
deployed by those charts
Fix available
1 of 1
affected package

Panic when opening archives in archive/zip

Carried by container images the latest versions of 17 of 17,781 indexed charts deploy, on 15 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.161.16.115
OSV records
GO-2021-0067
Also known as
BIT-golang-2021-27919

Charts affected

17 by stars
ChartLatestAffected imagesRadar Score
kubernetes-dashboard-proxyosc0.7.21 of 4See more

kubernetes-dashboard-proxy osc 0.7.2

1 of the 4 container images this version deploys carry CVE-2021-27919.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.1.3ecd26b74a01f
stdlib@go1.16
1.16.1

Open the chart page →

6,005
okd-webhookav1o-chartsVerified publisher0.1.01 of 1See more

okd-webhook av1o-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-27919.

Container imageDigestPackageFixed in
registry.gitlab.com/av1o/okd-webhook:v0.1.028c3e5eb2650
stdlib@go1.16
1.16.1

Open the chart page →

1,727
vcloud-csiclastixVerified publisher1.6.02 of 5See more

vcloud-csi clastix 1.6.0

2 of the 5 container images this version deploys carry CVE-2021-27919.

Container imageDigestPackageFixed in
csiplugin/csi-attacher:v3.2.160ab9b3e6a03
stdlib@go1.16
1.16.1
csiplugin/csi-node-driver-registrar:v2.2.02dee3fe5fe86
stdlib@go1.16
1.16.1

Open the chart page →

7,386
kove-deprecationscmacraeVerified publisher0.1.21 of 1See more

kove-deprecations cmacrae 0.1.2

1 of the 1 container images this version deploys carry CVE-2021-27919.

Container imageDigestPackageFixed in
ghcr.io/cmacrae/kove:v0.1.0db1244edefc8
stdlib@go1.16
1.16.1

Open the chart page →

2,203
grafana-agentdandydev-chartsVerified publisher0.19.21 of 1See more

grafana-agent dandydev-charts 0.19.2

1 of the 1 container images this version deploys carry CVE-2021-27919.

Container imageDigestPackageFixed in
grafana/agent:v0.20.0825c09373d27
stdlib@go1.16
1.16.1

Open the chart page →

3,238
kube-prometheus-stackdevtron19.3.01 of 6See more

kube-prometheus-stack devtron 19.3.0

1 of the 6 container images this version deploys carry CVE-2021-27919.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.50.0ab4f480f2cc6
stdlib@go1.16
1.16.1

Open the chart page →

8,645
kube-prometheus-stackdevtron-labs19.3.01 of 6See more

kube-prometheus-stack devtron-labs 19.3.0

1 of the 6 container images this version deploys carry CVE-2021-27919.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.50.0ab4f480f2cc6
stdlib@go1.16
1.16.1

Open the chart page →

8,645
gotifygeek-cookbookVerified publisher1.2.21 of 1See more

gotify geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2021-27919.

Container imageDigestPackageFixed in
gotify/server:2.1.409c79bc1e403
stdlib@go1.16
1.16.1

Open the chart page →

3,131
postgres-backup-localheywood8-helm-chartsVerified publisher0.1.131 of 1See more

postgres-backup-local heywood8-helm-charts 0.1.13

1 of the 1 container images this version deploys carry CVE-2021-27919.

Container imageDigestPackageFixed in
prodrigestivill/postgres-backup-local:12-alpine-8d72d2d6ed2afadc326
stdlib@go1.16
1.16.1

Open the chart page →

2,434
csi-qingcloudkubesphere-stable1.4.03 of 6See more

csi-qingcloud kubesphere-stable 1.4.0

3 of the 6 container images this version deploys carry CVE-2021-27919.

Container imageDigestPackageFixed in
csiplugin/csi-attacher:v3.2.160ab9b3e6a03
stdlib@go1.16
1.16.1
csiplugin/csi-node-driver-registrar:v2.2.02dee3fe5fe86
stdlib@go1.16
1.16.1
csiplugin/csi-resizer:v1.2.036c31f7e1f43
stdlib@go1.16
1.16.1

Open the chart page →

12,402
csi-neonsankubesphere-testVerified publisher1.3.03 of 6See more

csi-neonsan kubesphere-test 1.3.0

3 of the 6 container images this version deploys carry CVE-2021-27919.

Container imageDigestPackageFixed in
csiplugin/csi-attacher:v3.2.160ab9b3e6a03
stdlib@go1.16
1.16.1
csiplugin/csi-node-driver-registrar:v2.2.02dee3fe5fe86
stdlib@go1.16
1.16.1
csiplugin/csi-resizer:v1.2.036c31f7e1f43
stdlib@go1.16
1.16.1

Open the chart page →

18,475
csi-qingcloudkubesphere-testVerified publisher1.4.03 of 6See more

csi-qingcloud kubesphere-test 1.4.0

3 of the 6 container images this version deploys carry CVE-2021-27919.

Container imageDigestPackageFixed in
csiplugin/csi-attacher:v3.2.160ab9b3e6a03
stdlib@go1.16
1.16.1
csiplugin/csi-node-driver-registrar:v2.2.02dee3fe5fe86
stdlib@go1.16
1.16.1
csiplugin/csi-resizer:v1.2.036c31f7e1f43
stdlib@go1.16
1.16.1

Open the chart page →

12,402
metadockvalitetsitVerified publisher0.0.71 of 2See more

metadoc kvalitetsit 0.0.7

1 of the 2 container images this version deploys carry CVE-2021-27919.

Container imageDigestPackageFixed in
kvalitetsit/metadoc-web:mainf57e7553f5bd
stdlib@go1.16
1.16.1

Open the chart page →

4,026
codimdphntom0.1.121 of 3See more

codimd phntom 0.1.12

1 of the 3 container images this version deploys carry CVE-2021-27919.

Container imageDigestPackageFixed in
phntom/codimd:2.4.31b9aafbb62e6
stdlib@go1.16
1.16.1

Open the chart page →

6,524
stackrox-chartredhat-cop0.0.101 of 1See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2021-27919.

Container imageDigestPackageFixed in
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
stdlib@go1.16
1.16.1

Open the chart page →

29,227
kube-prometheus-stackromholdings19.3.01 of 6See more

kube-prometheus-stack romholdings 19.3.0

1 of the 6 container images this version deploys carry CVE-2021-27919.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.50.0ab4f480f2cc6
stdlib@go1.16
1.16.1

Open the chart page →

8,645
rawfile-csiymatrixVerified publisher0.2.12 of 4See more

rawfile-csi ymatrix 0.2.1

2 of the 4 container images this version deploys carry CVE-2021-27919.

Container imageDigestPackageFixed in
matrixdb/sig-storage_csi-node-driver-registrar:v2.2.0ba763bb01ddc
stdlib@go1.16
1.16.1
matrixdb/sig-storage_livenessprobe:v2.3.07ab06fe3d8a7
stdlib@go1.16
1.16.1

Open the chart page →

7,972

Container images carrying it

15 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
csiplugin/csi-attacher:v3.2.160ab9b3e6a03
stdlib@go1.16
1.16.1
4
csiplugin/csi-node-driver-registrar:v2.2.02dee3fe5fe86
stdlib@go1.16
1.16.1
4
csiplugin/csi-resizer:v1.2.036c31f7e1f43
stdlib@go1.16
1.16.1
3
quay.io/prometheus-operator/prometheus-operator:v0.50.0ab4f480f2cc6
stdlib@go1.16
1.16.1
3
gotify/server:2.1.409c79bc1e403
stdlib@go1.16
1.16.1
1
grafana/agent:v0.20.0825c09373d27
stdlib@go1.16
1.16.1
1
kvalitetsit/metadoc-web:mainf57e7553f5bd
stdlib@go1.16
1.16.1
1
matrixdb/sig-storage_csi-node-driver-registrar:v2.2.0ba763bb01ddc
stdlib@go1.16
1.16.1
1
matrixdb/sig-storage_livenessprobe:v2.3.07ab06fe3d8a7
stdlib@go1.16
1.16.1
1
phntom/codimd:2.4.31b9aafbb62e6
stdlib@go1.16
1.16.1
1
prodrigestivill/postgres-backup-local:12-alpine-8d72d2d6ed2afadc326
stdlib@go1.16
1.16.1
1
ghcr.io/cmacrae/kove:v0.1.0db1244edefc8
stdlib@go1.16
1.16.1
1
quay.io/oauth2-proxy/oauth2-proxy:v7.1.3ecd26b74a01f
stdlib@go1.16
1.16.1
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
stdlib@go1.16
1.16.1
1
registry.gitlab.com/av1o/okd-webhook:v0.1.028c3e5eb2650
stdlib@go1.16
1.16.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.