CVE-2021-28168

Medium

Advisory

Published 23 Apr 2021In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.2; base score, highest
EPSS: 0.009; 58th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 30; of 17,781 indexed, latest versions
Container images: 37; deployed by those charts
Fix available: 1 of 1; affected package

Local information disclosure via system temporary directory

Carried by container images the latest versions of 30 of 17,781 indexed charts deploy, on 37 images.

Affected package	Affected versions	Fixed in	Images
jersey-commonmaven	2.28, 2.29, 2.29.1, 2.30+4 more	2.34	37

OSV records: GHSA-c43q-5hpj-4crv

Charts affected

30 by stars

Chart

Latest

Affected images

Radar Score

kubernetes-loggingkubernetes-logging

4.8.0

1 of 6 See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2021-28168.

Container image	Digest	Package	Fixed in
opensearchproject/logstash-oss-with-opensearch-output-plugin :8.9.0	43b0cdaf26ed	jersey-common@2.33	2.34

Open the chart page →

10,530

soarv113assist-iot-cybersecurity-monitoring-soar

0.1.3

2 of 5 See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

2 of the 5 container images this version deploys carry CVE-2021-28168.

Container image	Digest	Package	Fixed in
assistiot/cybersecurity-monitoring_ir-ctx :latest	ae8b3d72eb5d	jersey-common@2.31	2.34
assistiot/cybersecurity-monitoring_ir-thv :latest	c8b6c7eaa0cd	jersey-common@2.31	2.34

Open the chart page →

17,896

spinnakerdwardu-helm-charts

2.2.6

1 of 2 See more

spinnaker dwardu-helm-charts 2.2.6

1 of the 2 container images this version deploys carry CVE-2021-28168.

Container image	Digest	Package	Fixed in
gcr.io/spinnaker-marketplace/halyard :1.32.0	0ee5f968d2ab	jersey-common@2.29.1	2.34

Open the chart page →

8,752

nifi-registrydysnix

1.1.5

1 of 2 See more

nifi-registry dysnix 1.1.5

1 of the 2 container images this version deploys carry CVE-2021-28168.

Container image	Digest	Package	Fixed in
apache/nifi-registry :0.8.0	974efa2f21da	jersey-common@2.29.1	2.34

Open the chart page →

6,531

neo4j-communityequinor-charts

1.2.5

1 of 1 See more

neo4j-community equinor-charts 1.2.5

1 of the 1 container images this version deploys carry CVE-2021-28168.

Container image	Digest	Package	Fixed in
library/neo4j :4.2.4	348e3f56faa2	jersey-common@2.32	2.34

Open the chart page →

2,751

stormgresearch

1.2.0

1 of 3 See more

storm gresearch 1.2.0

1 of the 3 container images this version deploys carry CVE-2021-28168.

Container image	Digest	Package	Fixed in
library/storm :2.4.0	bd5d420506d6	jersey-common@2.29	2.34

Open the chart page →

6,165

linstorkvaps

1.14.0

1 of 11 See more

linstor kvaps 1.14.0

1 of the 11 container images this version deploys carry CVE-2021-28168.

Container image	Digest	Package	Fixed in
ghcr.io/kvaps/linstor-controller :v1.14.0	00ce11c31087	jersey-common@2.31	2.34

Open the chart page →

15,547

nifi-registryprofyu

1.14.0-r001

1 of 1 See more

nifi-registry profyu 1.14.0-r001

1 of the 1 container images this version deploys carry CVE-2021-28168.

Container image	Digest	Package	Fixed in
apache/nifi-registry :1.14.0	090b7f87ec7f	jersey-common@2.33	2.34

Open the chart page →

4,621

shinyproxyremche

0.6.6

1 of 2 See more

shinyproxy remche 0.6.6

1 of the 2 container images this version deploys carry CVE-2021-28168.

Container image	Digest	Package	Fixed in
remche/shinyproxy :2.6.1	8bcda8a04d3b	jersey-common@2.33	2.34

Open the chart page →

3,958

logstashromanow-helm-charts

1.5.0

1 of 1 See more

logstash romanow-helm-charts 1.5.0

1 of the 1 container images this version deploys carry CVE-2021-28168.

Container image	Digest	Package	Fixed in
library/logstash :7.17.8	17a4f64e9cf5	jersey-common@2.33	2.34

Open the chart page →

7,529

airbyte-cronairbyte

0.40.37

1 of 1 See more

airbyte-cron airbyte 0.40.37

1 of the 1 container images this version deploys carry CVE-2021-28168.

Container image	Digest	Package	Fixed in
airbyte/cron :0.40.17	caf4f551c546	jersey-common@2.31	2.34

Open the chart page →

1,413

chart-app-vidapp-vid-chart

0.0.7

1 of 2 See more

chart-app-vid app-vid-chart 0.0.7

1 of the 2 container images this version deploys carry CVE-2021-28168.

Container image	Digest	Package	Fixed in
fimperato/sparkvid-api :1.0.5-RELEASE	604012b77841	jersey-common@2.30.1	2.34

Open the chart page →

8,866

cp-helm-chartscp-helm-charts

0.6.1

7 of 8 See more

cp-helm-charts cp-helm-charts 0.6.1

7 of the 8 container images this version deploys carry CVE-2021-28168.

Container image	Digest	Package	Fixed in
confluentinc/cp-enterprise-control-center :6.1.0	f2975d507a2a	jersey-common@2.31	2.34
confluentinc/cp-enterprise-kafka :6.1.0	8f1544df1f48	jersey-common@2.31	2.34
confluentinc/cp-kafka-connect :6.1.0	4bc70a83ca6f	jersey-common@2.31	2.34
confluentinc/cp-kafka-rest :6.1.0	b0b7aa26254a	jersey-common@2.31	2.34
confluentinc/cp-ksqldb-server :6.1.0	ee403d5b9090	jersey-common@2.31	2.34
confluentinc/cp-schema-registry :6.1.0	b651d4b6185a	jersey-common@2.31	2.34
confluentinc/cp-zookeeper :6.1.0	78c190f4472c	jersey-common@2.31	2.34

Open the chart page →

58,857

mod-agreementsfolio-org

0.1.32

1 of 1 See more

mod-agreements folio-org 0.1.32

1 of the 1 container images this version deploys carry CVE-2021-28168.

Container image	Digest	Package	Fixed in
folioci/mod-agreements :latest	29c3f233a498	jersey-common@2.31	2.34

Open the chart page →

1,874

mod-licensesfolio-org

0.1.32

1 of 1 See more

mod-licenses folio-org 0.1.32

1 of the 1 container images this version deploys carry CVE-2021-28168.

Container image	Digest	Package	Fixed in
folioci/mod-licenses :latest	cfd6109bf477	jersey-common@2.31	2.34

Open the chart page →

1,760

mod-oafolio-org

0.1.2

1 of 1 See more

mod-oa folio-org 0.1.2

1 of the 1 container images this version deploys carry CVE-2021-28168.

Container image	Digest	Package	Fixed in
folioci/mod-oa :latest	ae3b069d4ba5	jersey-common@2.31	2.34

Open the chart page →

1,733

mod-serials-managementfolio-org

0.1.1

1 of 1 See more

mod-serials-management folio-org 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-28168.

Container image	Digest	Package	Fixed in
folioci/mod-serials-management :latest	571fa1ffe8c9	jersey-common@2.31	2.34

Open the chart page →

1,733

mod-service-interactionfolio-org

0.1.6

1 of 1 See more

mod-service-interaction folio-org 0.1.6

1 of the 1 container images this version deploys carry CVE-2021-28168.

Container image	Digest	Package	Fixed in
folioci/mod-service-interaction :latest	f53c327a48e8	jersey-common@2.31	2.34

Open the chart page →

1,733

accumulogaffer

2.2.1

1 of 4 See more

accumulo gaffer 2.2.1

1 of the 4 container images this version deploys carry CVE-2021-28168.

Container image	Digest	Package	Fixed in
gchq/accumulo :2.0.1	c460bb587d6d	jersey-common@2.28	2.34

Open the chart page →

16,892

teedygeek-cookbook

6.2.0

1 of 1 See more

teedy geek-cookbook 6.2.0

1 of the 1 container images this version deploys carry CVE-2021-28168.

Container image	Digest	Package	Fixed in
sismics/docs :v1.10	f4b0ef019cf1	jersey-common@2.33	2.34

Open the chart page →

26,944

video-analytics-demogpu-operator

0.1.9

1 of 3 See more

video-analytics-demo gpu-operator 0.1.9

1 of the 3 container images this version deploys carry CVE-2021-28168.

Container image	Digest	Package	Fixed in
anguda/ant-media :2.5	c435285fc241	jersey-common@2.31	2.34

Open the chart page →

15,722

pinotinseefrlab

0.2.0

1 of 2 See more

pinot inseefrlab 0.2.0

1 of the 2 container images this version deploys carry CVE-2021-28168.

Container image	Digest	Package	Fixed in
apachepinot/pinot :latest-jdk11	0018bb04ced7	jersey-common@2.28	2.34

Open the chart page →

10,777

thehiveittrident-oss

0.1.0

1 of 6 See more

thehive ittrident-oss 0.1.0

1 of the 6 container images this version deploys carry CVE-2021-28168.

Container image	Digest	Package	Fixed in
thehiveproject/cortex :3.1.7	f4bc64fb8844	jersey-common@2.31	2.34

Open the chart page →

6,122

kafka-connect-wrapperlsmhun

0.1.0

1 of 1 See more

kafka-connect-wrapper lsmhun 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-28168.

Container image	Digest	Package	Fixed in
lsmaster/kafka-connect-wrapper :6.1.0-0.1	061eb5fbfa00	jersey-common@2.31	2.34

Open the chart page →

2,391

dependency-tracknovum-rgi-charts

0.1.8

1 of 2 See more

dependency-track novum-rgi-charts 0.1.8

1 of the 2 container images this version deploys carry CVE-2021-28168.

Container image	Digest	Package	Fixed in
owasp/dependency-track :3.8.0	efc65e702ee1	jersey-common@2.29.1	2.34

Open the chart page →

3,633

radar-integrationradar-base

0.9.0

1 of 1 See more

radar-integration radar-base 0.9.0

1 of the 1 container images this version deploys carry CVE-2021-28168.

Container image	Digest	Package	Fixed in
radarbase/radar-redcapintegration :1.0.6	fcd973d4796d	jersey-common@2.31	2.34

Open the chart page →

2,855

sentry-dbsentry

0.9.4

1 of 10 See more

sentry-db sentry 0.9.4

1 of the 10 container images this version deploys carry CVE-2021-28168.

Container image	Digest	Package	Fixed in
confluentinc/cp-kafka :5.4.0	1bbda887bc53	jersey-common@2.28	2.34

Open the chart page →

10,967

atlassian-confluencesomeblackmagic

3.4.1

1 of 1 See more

atlassian-confluence someblackmagic 3.4.1

1 of the 1 container images this version deploys carry CVE-2021-28168.

Container image	Digest	Package	Fixed in
atlassian/confluence-server :7.10.0	3b9222ab32ef	jersey-common@2.31	2.34

Open the chart page →

13,605

trinostatcan

1.23.4

1 of 2 See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2021-28168.

Container image	Digest	Package	Fixed in
trinodb/trino :405	ee80ab5eeab2	jersey-common@2.30	2.34

Open the chart page →

13,767

drillwearefrank

1.3.6

1 of 3 See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2021-28168.

Container image	Digest	Package	Fixed in
apache/drill :1.21.1	1f96558fd292	jersey-common@2.32	2.34

Open the chart page →

9,397

Container images carrying it

37 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
airbyte/cron :0.40.17	caf4f551c546	jersey-common@2.31	2.34	1
anguda/ant-media :2.5	c435285fc241	jersey-common@2.31	2.34	1
apache/drill :1.21.1	1f96558fd292	jersey-common@2.32	2.34	1
apache/nifi-registry :1.14.0	090b7f87ec7f	jersey-common@2.33	2.34	1
apache/nifi-registry :0.8.0	974efa2f21da	jersey-common@2.29.1	2.34	1
apachepinot/pinot :latest-jdk11	0018bb04ced7	jersey-common@2.28	2.34	1
assistiot/cybersecurity-monitoring_ir-ctx :latest	ae8b3d72eb5d	jersey-common@2.31	2.34	1
assistiot/cybersecurity-monitoring_ir-thv :latest	c8b6c7eaa0cd	jersey-common@2.31	2.34	1
atlassian/confluence-server :7.10.0	3b9222ab32ef	jersey-common@2.31	2.34	1
confluentinc/cp-enterprise-control-center :6.1.0	f2975d507a2a	jersey-common@2.31	2.34	1
confluentinc/cp-enterprise-kafka :6.1.0	8f1544df1f48	jersey-common@2.31	2.34	1
confluentinc/cp-kafka :5.4.0	1bbda887bc53	jersey-common@2.28	2.34	1
confluentinc/cp-kafka-connect :6.1.0	4bc70a83ca6f	jersey-common@2.31	2.34	1
confluentinc/cp-kafka-rest :6.1.0	b0b7aa26254a	jersey-common@2.31	2.34	1
confluentinc/cp-ksqldb-server :6.1.0	ee403d5b9090	jersey-common@2.31	2.34	1
confluentinc/cp-schema-registry :6.1.0	b651d4b6185a	jersey-common@2.31	2.34	1
confluentinc/cp-zookeeper :6.1.0	78c190f4472c	jersey-common@2.31	2.34	1
fimperato/sparkvid-api :1.0.5-RELEASE	604012b77841	jersey-common@2.30.1	2.34	1
folioci/mod-agreements :latest	29c3f233a498	jersey-common@2.31	2.34	1
folioci/mod-licenses :latest	cfd6109bf477	jersey-common@2.31	2.34	1
folioci/mod-oa :latest	ae3b069d4ba5	jersey-common@2.31	2.34	1
folioci/mod-serials-management :latest	571fa1ffe8c9	jersey-common@2.31	2.34	1
folioci/mod-service-interaction :latest	f53c327a48e8	jersey-common@2.31	2.34	1
gchq/accumulo :2.0.1	c460bb587d6d	jersey-common@2.28	2.34	1
library/logstash :7.17.8	17a4f64e9cf5	jersey-common@2.33	2.34	1
library/neo4j :4.2.4	348e3f56faa2	jersey-common@2.32	2.34	1
library/storm :2.4.0	bd5d420506d6	jersey-common@2.29	2.34	1
lsmaster/kafka-connect-wrapper :6.1.0-0.1	061eb5fbfa00	jersey-common@2.31	2.34	1
opensearchproject/logstash-oss-with-opensearch-output-plugin :8.9.0	43b0cdaf26ed	jersey-common@2.33	2.34	1
owasp/dependency-track :3.8.0	efc65e702ee1	jersey-common@2.29.1	2.34	1
radarbase/radar-redcapintegration :1.0.6	fcd973d4796d	jersey-common@2.31	2.34	1
remche/shinyproxy :2.6.1	8bcda8a04d3b	jersey-common@2.33	2.34	1
sismics/docs :v1.10	f4b0ef019cf1	jersey-common@2.33	2.34	1
thehiveproject/cortex :3.1.7	f4bc64fb8844	jersey-common@2.31	2.34	1
trinodb/trino :405	ee80ab5eeab2	jersey-common@2.30	2.34	1
gcr.io/spinnaker-marketplace/halyard :1.32.0	0ee5f968d2ab	jersey-common@2.29.1	2.34	1
ghcr.io/kvaps/linstor-controller :v1.14.0	00ce11c31087	jersey-common@2.31	2.34	1