StackRadar

CVE-2021-31812

Medium

Advisory

Published 12 Jun 2021In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.031
87th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
9
of 17,781 indexed, latest versions
Container images
8
deployed by those charts
Fix available
1 of 2
affected packages

Infinite Loop in Apache PDFBox

Carried by container images the latest versions of 9 of 17,781 indexed charts deploy, on 8 images.

Affected packageAffected versionsFixed inImages
pdfboxmaven2.0.6, 2.0.13, 2.0.16, 2.0.19+2 more2.0.247
libpdfbox-javadeb1:1.8.16-2no fix listed1
OSV records
DEBIAN-CVE-2021-31812GHSA-7grw-6pjh-jpc9

Charts affected

9 by stars
ChartLatestAffected imagesRadar Score
solrpreferred-aiVerified publisher3.2.01 of 3See more

solr preferred-ai 3.2.0

1 of the 3 container images this version deploys carry CVE-2021-31812.

Container imageDigestPackageFixed in
library/solr:8.7.0d124efd81fbb
pdfbox@2.0.19
2.0.24

Open the chart page →

6,048
zammaddevplayer0Verified publisher4.0.51 of 4See more

zammad devplayer0 4.0.5

1 of the 4 container images this version deploys carry CVE-2021-31812.

Container imageDigestPackageFixed in
zammad/zammad-docker-compose:zammad-elasticsearch-4.1.0-318274d75a51fc
pdfbox@2.0.19
2.0.24

Open the chart page →

6,110
komgageek-cookbookVerified publisher2.4.21 of 1See more

komga geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2021-31812.

Container imageDigestPackageFixed in
gotson/komga:0.99.49b15ea6bfc30
pdfbox@2.0.23
2.0.24

Open the chart page →

12,581
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2021-31812.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
pdfbox@2.0.13
2.0.24

Open the chart page →

27,949
teedygeek-cookbookVerified publisher6.2.01 of 1See more

teedy geek-cookbook 6.2.0

1 of the 1 container images this version deploys carry CVE-2021-31812.

Container imageDigestPackageFixed in
sismics/docs:v1.10f4b0ef019cf1
pdfbox@2.0.22
2.0.24

Open the chart page →

26,944
ubooquityhalkeye0.1.11 of 1See more

ubooquity halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-31812.

Container imageDigestPackageFixed in
linuxserver/ubooquity:2.1.2-ls369932d6759112
pdfbox@2.0.6
2.0.24

Open the chart page →

4,303
falcon-asgi-serverphanVerified publisher0.1.01 of 1See more

falcon-asgi-server phan 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-31812.

Container imageDigestPackageFixed in
phan2410/falcon-asgi-server:0.1.04a86d138832d
libpdfbox-java@1:1.8.16-2
no fix listed

Open the chart page →

8,189
atlassian-confluencesomeblackmagic3.4.11 of 1See more

atlassian-confluence someblackmagic 3.4.1

1 of the 1 container images this version deploys carry CVE-2021-31812.

Container imageDigestPackageFixed in
atlassian/confluence-server:7.10.03b9222ab32ef
pdfbox@2.0.16
2.0.24

Open the chart page →

13,605
ubooquityvhdirkVerified publisher0.1.31 of 1See more

ubooquity vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2021-31812.

Container imageDigestPackageFixed in
linuxserver/ubooquity:2.1.2-ls369932d6759112
pdfbox@2.0.6
2.0.24

Open the chart page →

4,303

Container images carrying it

8 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
linuxserver/ubooquity:2.1.2-ls369932d6759112
pdfbox@2.0.6
2.0.24
2
atlassian/confluence-server:7.10.03b9222ab32ef
pdfbox@2.0.16
2.0.24
1
gotson/komga:0.99.49b15ea6bfc30
pdfbox@2.0.23
2.0.24
1
library/solr:8.7.0d124efd81fbb
pdfbox@2.0.19
2.0.24
1
openkm/openkm-ce:6.3.113bc465a7461b
pdfbox@2.0.13
2.0.24
1
phan2410/falcon-asgi-server:0.1.04a86d138832d
libpdfbox-java@1:1.8.16-2
no fix listed
1
sismics/docs:v1.10f4b0ef019cf1
pdfbox@2.0.22
2.0.24
1
zammad/zammad-docker-compose:zammad-elasticsearch-4.1.0-318274d75a51fc
pdfbox@2.0.19
2.0.24
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.