CVE-2021-31232
MediumAdvisory
Published 23 Jun 2021In the index since 8 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.5
- base score, highest
- EPSS
- 0.004
- 30th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 12
- of 17,781 indexed, latest versions
- Container images
- 13
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Improper input validation in CNCF Cortex
Carried by container images the latest versions of 12 of 17,781 indexed charts deploy, on 13 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v1.0.1-0.20200430170006-3462eb63f324, v1.2.1-0.20200812152417-a4aad5da5e4e, v1.4.1-0.20201022071705-85942c5703cf, v1.5.1-0.20201111110551-ba512881b076+2 more | 1.8.1 | 13 |
- OSV records
- GHSA-m45g-f45x-vv22
- Also known as
- GO-2022-0915
Charts affected
12 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| grafanaappscodeVerified publisher | 2026.9.11 | 1 of 1See more | 2,333 |
| lokichoerodon | 0.29.0 | 1 of 1See more | 2,869 |
| promtailchoerodon | 0.23.0 | 1 of 1See more | 2,821 |
| grafana-dashboardsdysnixVerified publisher | 0.2.2 | 1 of 2See more | 5,161 |
| lokikube-opsVerified publisher | 1.7.3 | 1 of 1See more | 2,646 |
| promtailkube-opsVerified publisher | 1.5.1 | 1 of 2See more | 4,149 |
| pulsarkubesphere-stable | 2.7.13 | 1 of 3See more | 14,320 |
| kommandermesosphere-stable | 0.39.2 | 3 of 29See more | 68,284 |
| opscruiseopenshift | 0.35.100 | 2 of 11See more | 8,201 |
| cost-analyzerstatcan | 1.82.2 | 1 of 9See more | 16,506 |
| lokit3n | 1.0.0 | 1 of 1See more | 2,869 |
| promtailt3n | 1.0.0 | 1 of 1See more | 2,821 |
Container images carrying it
13 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| grafana/ | 922b3f412fdd | github.com/ | 1.8.1 | 2 |
| grafana/ | 46e88d390cd6 | github.com/ | 1.8.1 | 2 |
| grafana/ | 09bb407e26ab | github.com/ | 1.8.1 | 1 |
| grafana/ | d322192ed2fa | github.com/ | 1.8.1 | 1 |
| grafana/ | 77e138f81a8e | github.com/ | 1.8.1 | 1 |
| grafana/ | 5fd12edcc694 | github.com/ | 1.8.1 | 1 |
| streamnative/ | 11bceacec8fb | github.com/ | 1.8.1 | 1 |
| thanosio/ | 88276fcd1491 | github.com/ | 1.8.1 | 1 |
| thanosio/ | b12d5c31bf5a | github.com/ | 1.8.1 | 1 |
| ghcr.io/ | 67d18880448c | github.com/ | 1.8.1 | 1 |
| quay.io/ | 4fbd63194674 | github.com/ | 1.8.1 | 1 |
| quay.io/ | 34de6387233b | github.com/ | 1.8.1 | 1 |
| quay.io/ | e362f02ed304 | github.com/ | 1.8.1 | 1 |