StackRadar

CVE-2021-32690

Medium

Advisory

Published 23 Jun 2021In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.014
71st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
75
of 17,781 indexed, latest versions
Container images
64
deployed by those charts
Fix available
1 of 1
affected package

Helm passes repository credentials to alternate domain

Carried by container images the latest versions of 75 of 17,781 indexed charts deploy, on 64 images.

Affected packageAffected versionsFixed inImages
helm.sh/helm/v3golangv0.0.0-20221012195806-9f88ccb6aee4, v0.0.0-20221214143859-835b7334cfe2, v0.0.0-20230113165805-472c5736ab01, v0.0.0-20230308205603-912ebc1cd10d+35 more3.6.164
OSV records
GHSA-56hp-xqp3-w2jf
Also known as
BIT-helm-2021-32690, GHSA-7jr6-prv4-5wf5, GO-2022-0384

Charts affected

75 by stars
ChartLatestAffected imagesRadar Score
argocdnicklasfrahm-argocdVerified publisher0.3.01 of 2See more

argocd nicklasfrahm-argocd 0.3.0

1 of the 2 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.1.1a36ab0c0860c
helm.sh/helm/v3@v0.0.0-20250708195800-d80839cf37d8
3.6.1

Open the chart page →

5,240
devtron-operatordevtron0.23.31 of 11See more

devtron-operator devtron 0.23.3

1 of the 11 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
helm.sh/helm/v3@v0.0.0-20221012195806-9f88ccb6aee4
3.6.1

Open the chart page →

32,902
ilumilumOfficialVerified publisher6.7.31 of 19See more

ilum ilum 6.7.3

1 of the 19 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
ilum/api:6.7.3624fd09528c8
helm.sh/helm/v3@v0.0.0-20250409171524-e4da49785aa6
3.6.1

Open the chart page →

23,228
helm-exportersstarcher0.5.01 of 1See more

helm-exporter sstarcher 0.5.0

1 of the 1 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
sstarcher/helm-exporter:0.5.011769d01ba35
helm.sh/helm/v3@v3.0.2
3.6.1

Open the chart page →

4,154
emqx-operatoremqx-operator2.3.21 of 2See more

emqx-operator emqx-operator 2.3.2

1 of the 2 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
alpine/k8s:1.31.49c4976d47656
helm.sh/helm/v3@v0.0.0-20241111191401-cfd07493f46e
3.6.1

Open the chart page →

4,531
loftloftVerified publisher0.0.0-ci.141 of 1See more

loft loft 0.0.0-ci.14

1 of the 1 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
helm.sh/helm/v3@v0.0.0-20230113165805-472c5736ab01
3.6.1

Open the chart page →

3,675
helm-ai-kernelmindburn-labsOfficialVerified publisher0.8.51 of 2See more

helm-ai-kernel mindburn-labs 0.8.5

1 of the 2 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
alpine/helmdigest-pinned105741fa6621
helm.sh/helm/v3@v0.0.0-20240814142712-fa9efb07d9d8
3.6.1

Open the chart page →

2,160
argocdtwomartensVerified publisher0.1.11 of 3See more

argocd twomartens 0.1.1

1 of the 3 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.8.6acaf37352569
helm.sh/helm/v3@v0.0.0-20230614175909-f32a527a0601
3.6.1

Open the chart page →

10,315
upcloud-csiankra-chartsVerified publisher0.4.01 of 8See more

upcloud-csi ankra-charts 0.4.0

1 of the 8 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
alpine/k8s:1.31.137a319b15cfc9
helm.sh/helm/v3@v0.0.0-20250905035149-3d8990f08366
3.6.1

Open the chart page →

14,917
helm-dashboardbeluga-cloudVerified publisher2.4.01 of 1See more

helm-dashboard beluga-cloud 2.4.0

1 of the 1 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
helm.sh/helm/v3@v0.0.0-20231012132431-3547a4b5bf5e
3.6.1

Open the chart page →

2,898
cloudttycloudtty0.8.91 of 2See more

cloudtty cloudtty 0.8.9

1 of the 2 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
ghcr.io/cloudtty/cloudshell:v0.8.900984ba0f0eb
helm.sh/helm/v3@v0.0.0-20251111020852-4f953c223ba2
3.6.1

Open the chart page →

3,951
cluster-setupcluster-setup1.5.01 of 8See more

cluster-setup cluster-setup 1.5.0

1 of the 8 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
helm.sh/helm/v3@v0.0.0-20250212201646-980d8ac1939e
3.6.1

Open the chart page →

10,037
helm-operatorhelm-operatorVerified publisher0.0.21 of 1See more

helm-operator helm-operator 0.0.2

1 of the 1 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
bsgrigorov/helm-operator:latest45ab095f09c8
helm.sh/helm/v3@v3.4.1
3.6.1

Open the chart page →

6,977
helmuphelmupVerified publisher0.1.01 of 3See more

helmup helmup 0.1.0

1 of the 3 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
sirrend/helmup-engine:0.1.13699e79e3d4e2
helm.sh/helm/v3@v0.0.0-20240710191640-3bb50bbbdd9c
3.6.1

Open the chart page →

16,514
operatoristio1.10.31 of 1See more

operator istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
istio/operator:1.10.3655eefa11c84
helm.sh/helm/v3@v3.5.3
3.6.1

Open the chart page →

10,701
ks-corekubeblocksVerified publisher1.1.31 of 5See more

ks-core kubeblocks 1.1.3

1 of the 5 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
kubesphere/kubectl:v1.27.1649b445b1b732
helm.sh/helm/v3@v0.0.0-20240214200314-e8858f8696b1
3.6.1

Open the chart page →

4,721
kubernetes-stateless-chartkubernetes-stateless-chart1.0.31 of 1See more

kubernetes-stateless-chart kubernetes-stateless-chart 1.0.3

1 of the 1 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
helm.sh/helm/v3@v0.0.0-20230113165805-472c5736ab01
3.6.1

Open the chart page →

3,274
mesherykubesphere-stable0.5.01 of 13See more

meshery kubesphere-stable 0.5.0

1 of the 13 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
layer5/meshery-nsm:stable-latestebd6a8faf21f
helm.sh/helm/v3@v3.3.1
3.6.1

Open the chart page →

24,690
upbot-operatorupbot-operator0.0.201 of 2See more

upbot-operator upbot-operator 0.0.20

1 of the 2 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
alpine/k8s:1.28.13e5c0b053fed7
helm.sh/helm/v3@v0.0.0-20240814142712-fa9efb07d9d8
3.6.1

Open the chart page →

4,460
devportal-admin-uiveecode-platformVerified publisher0.5.41 of 1See more

devportal-admin-ui veecode-platform 0.5.4

1 of the 1 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
veecode/devportal-admin-ui:0.4.30c69fd286b489
helm.sh/helm/v3@v0.0.0-20240814142712-fa9efb07d9d8
3.6.1

Open the chart page →

5,225
argocdargo-helm-charts1.0.01 of 3See more

argocd argo-helm-charts 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.14.115fc69e31c755
helm.sh/helm/v3@v0.0.0-20241111191401-cfd07493f46e
3.6.1

Open the chart page →

7,300
argonix-apiargonix0.2.01 of 4See more

argonix-api argonix 0.2.0

1 of the 4 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
ghcr.io/argonix-io/argonix-api:1.0.068e17a8aaa40
helm.sh/helm/v3@v0.0.0-20241111191401-cfd07493f46e
3.6.1

Open the chart page →

4,923
helm-controllerazureorkestra0.1.12 of 2See more

helm-controller azureorkestra 0.1.1

2 of the 2 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
fluxcd/helm-controller:v0.9.092b891e495d8
helm.sh/helm/v3@v3.5.3
3.6.1
fluxcd/source-controller:v0.10.031a8c79a6803
helm.sh/helm/v3@v3.5.3
3.6.1

Open the chart page →

7,705
keptn-addonsazureorkestra0.1.01 of 4See more

keptn-addons azureorkestra 0.1.0

1 of the 4 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
keptnsandbox/job-executor-service:0.1.36e6d323dd7ae
helm.sh/helm/v3@v3.6.0
3.6.1

Open the chart page →

10,621
node-appbryopsida0.5.11 of 2See more

node-app bryopsida 0.5.1

1 of the 2 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
helm.sh/helm/v3@v0.0.0-20250527180604-f6f8700a539c
3.6.1

Open the chart page →

14,352
kubermatic-operatorbuttahtoastVerified publisher2.24.51 of 1See more

kubermatic-operator buttahtoast 2.24.5

1 of the 1 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
quay.io/kubermatic/kubermatic:v2.24.5ebba936046ab
helm.sh/helm/v3@v0.0.0-20230412170203-323249351482
3.6.1

Open the chart page →

2,770
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latesta058034ca006
helm.sh/helm/v3@v0.0.0-20241111191401-cfd07493f46e
3.6.1

Open the chart page →

14,130
catalyst-agentscatalyst-agents0.1.301 of 18See more

catalyst-agents catalyst-agents 0.1.30

1 of the 18 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
helm.sh/helm/v3@v0.0.0-20250313161139-cc0bbbd6d627
3.6.1

Open the chart page →

15,027
rtcsic-charts0.1.11 of 5See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.11.2a1041bb0f1d1
helm.sh/helm/v3@v0.0.0-20230308205603-912ebc1cd10d
3.6.1

Open the chart page →

15,380
dapr-agentsdapr-agents-devVerified publisher0.1.51 of 31See more

dapr-agents dapr-agents-dev 0.1.5

1 of the 31 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
helm.sh/helm/v3@v0.0.0-20250905035149-3d8990f08366
3.6.1

Open the chart page →

22,193
ambassador-operatordatawire0.3.01 of 1See more

ambassador-operator datawire 0.3.0

1 of the 1 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
datawire/ambassador-operator:v1.3.0f95ae710d75c
helm.sh/helm/v3@v3.0.3
3.6.1

Open the chart page →

7,486
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
helm.sh/helm/v3@v0.0.0-20221012195806-9f88ccb6aee4
3.6.1

Open the chart page →

68,240
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
helm.sh/helm/v3@v0.0.0-20221012195806-9f88ccb6aee4
3.6.1

Open the chart page →

68,240
devtron-operatordevtron-labs0.23.31 of 11See more

devtron-operator devtron-labs 0.23.3

1 of the 11 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
helm.sh/helm/v3@v0.0.0-20221012195806-9f88ccb6aee4
3.6.1

Open the chart page →

32,902
k8s-crondoubanVerified publisher0.2.01 of 1See more

k8s-cron douban 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
alpine/k8s:1.28.2fc059f056ad0
helm.sh/helm/v3@v0.0.0-20230918200057-825e86f6a7a3
3.6.1

Open the chart page →

3,659
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
helm.sh/helm/v3@v0.0.0-20250819195950-b76a950f6835
3.6.1

Open the chart page →

5,292
mission-control-tenantflanksourceVerified publisher1.0.921 of 3See more

mission-control-tenant flanksource 1.0.92

1 of the 3 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster:0.16.484f70425f4dd
helm.sh/helm/v3@v0.0.0-20231012132431-3547a4b5bf5e
3.6.1

Open the chart page →

5,684
siembolgresearch0.1.61 of 4See more

siembol gresearch 0.1.6

1 of the 4 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
alpine/k8s:1.18.16a41efe02a041
helm.sh/helm/v3@v3.5.1
3.6.1

Open the chart page →

14,312
ilum-apiilumVerified publisher6.7.31 of 1See more

ilum-api ilum 6.7.3

1 of the 1 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
ilum/api:6.7.3624fd09528c8
helm.sh/helm/v3@v0.0.0-20250409171524-e4da49785aa6
3.6.1

Open the chart page →

2,165
kore-boardimprowisedVerified publisher0.5.81 of 4See more

kore-board improwised 0.5.8

1 of the 4 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
helm.sh/helm/v3@v0.0.0-20221214143859-835b7334cfe2
3.6.1

Open the chart page →

16,212
cloudshellinseefrlab4.3.01 of 2See more

cloudshell inseefrlab 4.3.0

1 of the 2 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
inseefrlab/shelly:cloudshell31f04ca7436b
helm.sh/helm/v3@v0.0.0-20231012132431-3547a4b5bf5e
3.6.1

Open the chart page →

10,494
koptimizejaconiVerified publisher0.5.41 of 2See more

koptimize jaconi 0.5.4

1 of the 2 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
alpine/k8s:1.27.321b24e6bf801
helm.sh/helm/v3@v0.0.0-20230614175909-f32a527a0601
3.6.1

Open the chart page →

5,713
k8s-dev-podk8s-dev-pod0.3.11 of 1See more

k8s-dev-pod k8s-dev-pod 0.3.1

1 of the 1 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
helm.sh/helm/v3@v0.0.0-20250527180604-f6f8700a539c
3.6.1

Open the chart page →

8,811
installerkrateo2.7.11 of 2See more

installer krateo 2.7.1

1 of the 2 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.14.455429449408e
helm.sh/helm/v3@v0.0.0-20240410185915-81c902a12346
3.6.1

Open the chart page →

3,236
installer-pre-upgradekrateo2.7.11 of 1See more

installer-pre-upgrade krateo 2.7.1

1 of the 1 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.14.455429449408e
helm.sh/helm/v3@v0.0.0-20240410185915-81c902a12346
3.6.1

Open the chart page →

2,534
pipecdkrzwiatrzyk0.39.01 of 3See more

pipecd krzwiatrzyk 0.39.0

1 of the 3 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
helm.sh/helm/v3@v3.2.0
3.6.1

Open the chart page →

3,812
kubestellar-consolekubestellar-consoleVerified publisher0.3.411 of 2See more

kubestellar-console kubestellar-console 0.3.41

1 of the 2 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
alpine/k8s:1.32.47e1e7d5b7a96
helm.sh/helm/v3@v0.0.0-20250409171524-e4da49785aa6
3.6.1

Open the chart page →

4,439
kubestellar-uikubestellaruiVerified publisher0.1.11 of 4See more

kubestellar-ui kubestellarui 0.1.1

1 of the 4 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
mavrick1/kubestellar-b:latest45ca0429a1d4
helm.sh/helm/v3@v0.0.0-20230501180843-c9f554d75773
3.6.1

Open the chart page →

4,763
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.41 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

1 of the 9 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
helm.sh/helm/v3@v0.0.0-20241216182912-7877b45b63f9
3.6.1

Open the chart page →

20,204
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
kubeoperator/webkubectl:v2.4.0be8f0d624640
helm.sh/helm/v3@v3.2.0
3.6.1

Open the chart page →

26,356

Container images carrying it

64 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/loft-sh/agent:3.2.45c109914ff73
helm.sh/helm/v3@v0.0.0-20230113165805-472c5736ab01
3.6.1
1
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
helm.sh/helm/v3@v0.0.0-20240205060548-90a52fb06c21
3.6.1
1
ghcr.io/loft-sh/kubernetes:v1.35.090097a08b87c
helm.sh/helm/v3@v0.0.0-20250905035149-3d8990f08366
3.6.1
1
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
helm.sh/helm/v3@v0.0.0-20230113165805-472c5736ab01
3.6.1
1
ghcr.io/loft-sh/vcluster:0.16.484f70425f4dd
helm.sh/helm/v3@v0.0.0-20231012132431-3547a4b5bf5e
3.6.1
1
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
helm.sh/helm/v3@v0.0.0-20240205060548-90a52fb06c21
3.6.1
1
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
helm.sh/helm/v3@v3.2.0
3.6.1
1
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
helm.sh/helm/v3@v0.0.0-20250212201646-980d8ac1939e
3.6.1
1
quay.io/argoproj/argocd:v3.1.1a36ab0c0860c
helm.sh/helm/v3@v0.0.0-20250708195800-d80839cf37d8
3.6.1
1
quay.io/argoproj/argocd:v2.8.6acaf37352569
helm.sh/helm/v3@v0.0.0-20230614175909-f32a527a0601
3.6.1
1
quay.io/harikube/vcluster-pro:0.32.1b741efae8d31
helm.sh/helm/v3@v0.0.0-20250409171524-e4da49785aa6
3.6.1
1
quay.io/kubermatic/kubermatic:v2.24.5ebba936046ab
helm.sh/helm/v3@v0.0.0-20230412170203-323249351482
3.6.1
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
helm.sh/helm/v3@v3.3.4
3.6.1
1
registry.gitlab.com/bitspur/rock8s/images/kube-commands:3.1880ef8ceffc92
helm.sh/helm/v3@v0.0.0-20231012132431-3547a4b5bf5e
3.6.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.