StackRadar

CVE-2021-32690

Medium

Advisory

Published 23 Jun 2021In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.014
71st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
75
of 17,781 indexed, latest versions
Container images
64
deployed by those charts
Fix available
1 of 1
affected package

Helm passes repository credentials to alternate domain

Carried by container images the latest versions of 75 of 17,781 indexed charts deploy, on 64 images.

Affected packageAffected versionsFixed inImages
helm.sh/helm/v3golangv0.0.0-20221012195806-9f88ccb6aee4, v0.0.0-20221214143859-835b7334cfe2, v0.0.0-20230113165805-472c5736ab01, v0.0.0-20230308205603-912ebc1cd10d+35 more3.6.164
OSV records
GHSA-56hp-xqp3-w2jf
Also known as
BIT-helm-2021-32690, GHSA-7jr6-prv4-5wf5, GO-2022-0384

Charts affected

75 by stars
ChartLatestAffected imagesRadar Score
devpod-proloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

devpod-pro loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
helm.sh/helm/v3@v0.0.0-20240205060548-90a52fb06c21
3.6.1

Open the chart page →

3,225
devspace-cloudloftVerified publisher0.3.31 of 8See more

devspace-cloud loft 0.3.3

1 of the 8 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
devspacecloud/manager:0.3.349c397413f7b
helm.sh/helm/v3@v3.1.0
3.6.1

Open the chart page →

9,880
loft-agentloftVerified publisher3.2.41 of 1See more

loft-agent loft 3.2.4

1 of the 1 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/agent:3.2.45c109914ff73
helm.sh/helm/v3@v0.0.0-20230113165805-472c5736ab01
3.6.1

Open the chart page →

2,444
vcluster-control-planeloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

vcluster-control-plane loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
helm.sh/helm/v3@v0.0.0-20240205060548-90a52fb06c21
3.6.1

Open the chart page →

3,225
vcluster-headloftVerified publisher0.0.0-035ec6e1 of 2See more

vcluster-head loft 0.0.0-035ec6e

1 of the 2 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/kubernetes:v1.35.090097a08b87c
helm.sh/helm/v3@v0.0.0-20250905035149-3d8990f08366
3.6.1

Open the chart page →

1,269
vcluster-proloftVerified publisher0.0.0-ci-run.101 of 2See more

vcluster-pro loft 0.0.0-ci-run.10

1 of the 2 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
helm.sh/helm/v3@v0.0.0-20230113165805-472c5736ab01
3.6.1

Open the chart page →

5,085
vcluster-pro-eksloftVerified publisher0.0.0-ci-run.101 of 4See more

vcluster-pro-eks loft 0.0.0-ci-run.10

1 of the 4 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
helm.sh/helm/v3@v0.0.0-20230113165805-472c5736ab01
3.6.1

Open the chart page →

5,936
vcluster-pro-k0sloftVerified publisher0.0.0-ci-run.101 of 2See more

vcluster-pro-k0s loft 0.0.0-ci-run.10

1 of the 2 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
helm.sh/helm/v3@v0.0.0-20230113165805-472c5736ab01
3.6.1

Open the chart page →

5,768
vcluster-pro-k8sloftVerified publisher0.0.0-ci-run.101 of 4See more

vcluster-pro-k8s loft 0.0.0-ci-run.10

1 of the 4 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
helm.sh/helm/v3@v0.0.0-20230113165805-472c5736ab01
3.6.1

Open the chart page →

8,202
agent-controlnewrelic0.0.921 of 1See more

agent-control newrelic 0.0.92

1 of the 1 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
newrelic/newrelic-agent-control-cli:0.48.01a448492b55a
helm.sh/helm/v3@v0.0.0-20250819195950-b76a950f6835
3.6.1

Open the chart page →

3,843
lensoci-ai-incubations0.1.141 of 16See more

lens oci-ai-incubations 0.1.14

1 of the 16 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
alpine/k8s:1.31.106dbe6f391eda
helm.sh/helm/v3@v0.0.0-20250616185904-6838ebcf265a
3.6.1

Open the chart page →

17,070
harikubeopenshift0.16.31 of 3See more

harikube openshift 0.16.3

1 of the 3 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
quay.io/harikube/vcluster-pro:0.32.1b741efae8d31
helm.sh/helm/v3@v0.0.0-20250409171524-e4da49785aa6
3.6.1

Open the chart page →

2,525
kb-cloud-installeropenshift2.1.351 of 1See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
helm.sh/helm/v3@v0.0.0-20240221201614-c309b6f0ff63
3.6.1

Open the chart page →

4,127
planectlplanectlVerified publisher0.7.02 of 10See more

planectl planectl 0.7.0

2 of the 10 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
alpine/k8s:1.30.2cd560fce90f7
helm.sh/helm/v3@v0.0.0-20240612132704-1a500d562541
3.6.1
quay.io/argoproj/argocd:v2.14.115fc69e31c755
helm.sh/helm/v3@v0.0.0-20241111191401-cfd07493f46e
3.6.1

Open the chart page →

25,934
gitlab-runner-operatorpnnl-miscscripts0.1.61 of 1See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
helm.sh/helm/v3@v3.0.2
3.6.1

Open the chart page →

11,151
tenant-namespace-operatorpnnl-miscscripts0.1.281 of 1See more

tenant-namespace-operator pnnl-miscscripts 0.1.28

1 of the 1 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
pnnlmiscscripts/tenant-namespace-operator:0.1.24-18af4b7551d40
helm.sh/helm/v3@v0.0.0-20250905035149-3d8990f08366
3.6.1

Open the chart page →

12,754
prismeai-appsprismeai0.7.11 of 4See more

prismeai-apps prismeai 0.7.1

1 of the 4 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
helm.sh/helm/v3@v0.0.0-20251211174049-7cfb6e486dac
3.6.1

Open the chart page →

2,751
prismeai-coreprismeai1.12.11 of 7See more

prismeai-core prismeai 1.12.1

1 of the 7 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
helm.sh/helm/v3@v0.0.0-20251211174049-7cfb6e486dac
3.6.1

Open the chart page →

3,270
quarksquarks7.0.1+0.g5396b111 of 5See more

quarks quarks 7.0.1+0.g5396b11

1 of the 5 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
ghcr.io/cloudfoundry-incubator/quarks-secret:v1.0.754f059af4de8ed
helm.sh/helm/v3@v3.3.0
3.6.1

Open the chart page →

18,197
stackrox-chartredhat-cop0.0.101 of 1See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
helm.sh/helm/v3@v3.3.4
3.6.1

Open the chart page →

29,227
krr-enforcerrobusta0.3.51 of 2See more

krr-enforcer robusta 0.3.5

1 of the 2 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
alpine/k8s:1.30.0bd01dae02676
helm.sh/helm/v3@v0.0.0-20240410185915-81c902a12346
3.6.1

Open the chart page →

4,038
mailserverrock8sVerified publisher0.1.21 of 1See more

mailserver rock8s 0.1.2

1 of the 1 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
registry.gitlab.com/bitspur/rock8s/images/kube-commands:3.1880ef8ceffc92
helm.sh/helm/v3@v0.0.0-20231012132431-3547a4b5bf5e
3.6.1

Open the chart page →

1,946
devtron-enterpriseromholdings48.0.01 of 28See more

devtron-enterprise romholdings 48.0.0

1 of the 28 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
helm.sh/helm/v3@v0.0.0-20221012195806-9f88ccb6aee4
3.6.1

Open the chart page →

68,240
devtron-operatorromholdings0.23.31 of 11See more

devtron-operator romholdings 0.23.3

1 of the 11 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
helm.sh/helm/v3@v0.0.0-20221012195806-9f88ccb6aee4
3.6.1

Open the chart page →

32,902
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2021-32690.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
helm.sh/helm/v3@v0.0.0-20230113165805-472c5736ab01
3.6.1

Open the chart page →

13,677

Container images carrying it

64 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/devtron/kubectl:latest2ad610626658
helm.sh/helm/v3@v0.0.0-20221012195806-9f88ccb6aee4
3.6.1
6
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
helm.sh/helm/v3@v0.0.0-20230113165805-472c5736ab01
3.6.1
4
dtzar/helm-kubectl:3.14.455429449408e
helm.sh/helm/v3@v0.0.0-20240410185915-81c902a12346
3.6.1
2
ilum/api:6.7.3624fd09528c8
helm.sh/helm/v3@v0.0.0-20250409171524-e4da49785aa6
3.6.1
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
helm.sh/helm/v3@v0.0.0-20250527180604-f6f8700a539c
3.6.1
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
helm.sh/helm/v3@v0.0.0-20241111191401-cfd07493f46e
3.6.1
2
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
helm.sh/helm/v3@v0.0.0-20251211174049-7cfb6e486dac
3.6.1
2
alpine/helm105741fa6621
helm.sh/helm/v3@v0.0.0-20240814142712-fa9efb07d9d8
3.6.1
1
alpine/k8s:1.27.321b24e6bf801
helm.sh/helm/v3@v0.0.0-20230614175909-f32a527a0601
3.6.1
1
alpine/k8s:1.31.106dbe6f391eda
helm.sh/helm/v3@v0.0.0-20250616185904-6838ebcf265a
3.6.1
1
alpine/k8s:1.31.137a319b15cfc9
helm.sh/helm/v3@v0.0.0-20250905035149-3d8990f08366
3.6.1
1
alpine/k8s:1.32.47e1e7d5b7a96
helm.sh/helm/v3@v0.0.0-20250409171524-e4da49785aa6
3.6.1
1
alpine/k8s:1.31.49c4976d47656
helm.sh/helm/v3@v0.0.0-20241111191401-cfd07493f46e
3.6.1
1
alpine/k8s:1.18.16a41efe02a041
helm.sh/helm/v3@v3.5.1
3.6.1
1
alpine/k8s:1.30.0bd01dae02676
helm.sh/helm/v3@v0.0.0-20240410185915-81c902a12346
3.6.1
1
alpine/k8s:1.30.2cd560fce90f7
helm.sh/helm/v3@v0.0.0-20240612132704-1a500d562541
3.6.1
1
alpine/k8s:1.28.13e5c0b053fed7
helm.sh/helm/v3@v0.0.0-20240814142712-fa9efb07d9d8
3.6.1
1
alpine/k8s:1.32.3eec354133193
helm.sh/helm/v3@v0.0.0-20250313161139-cc0bbbd6d627
3.6.1
1
alpine/k8s:1.28.2fc059f056ad0
helm.sh/helm/v3@v0.0.0-20230918200057-825e86f6a7a3
3.6.1
1
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
helm.sh/helm/v3@v0.0.0-20240221201614-c309b6f0ff63
3.6.1
1
bsgrigorov/helm-operator:latest45ab095f09c8
helm.sh/helm/v3@v3.4.1
3.6.1
1
datawire/ambassador-operator:v1.3.0f95ae710d75c
helm.sh/helm/v3@v3.0.3
3.6.1
1
devspacecloud/manager:0.3.349c397413f7b
helm.sh/helm/v3@v3.1.0
3.6.1
1
dtzar/helm-kubectl:3.11.2a1041bb0f1d1
helm.sh/helm/v3@v0.0.0-20230308205603-912ebc1cd10d
3.6.1
1
flanksource/batch-runner:v1.0.44689687a7cf95
helm.sh/helm/v3@v0.0.0-20250819195950-b76a950f6835
3.6.1
1
fluxcd/helm-controller:v0.9.092b891e495d8
helm.sh/helm/v3@v3.5.3
3.6.1
1
fluxcd/source-controller:v0.10.031a8c79a6803
helm.sh/helm/v3@v3.5.3
3.6.1
1
inseefrlab/shelly:cloudshell31f04ca7436b
helm.sh/helm/v3@v0.0.0-20231012132431-3547a4b5bf5e
3.6.1
1
istio/operator:1.10.3655eefa11c84
helm.sh/helm/v3@v3.5.3
3.6.1
1
keptnsandbox/job-executor-service:0.1.36e6d323dd7ae
helm.sh/helm/v3@v3.6.0
3.6.1
1
kubeoperator/webkubectl:v2.4.0be8f0d624640
helm.sh/helm/v3@v3.2.0
3.6.1
1
kubesphere/kubectl:v1.27.1649b445b1b732
helm.sh/helm/v3@v0.0.0-20240214200314-e8858f8696b1
3.6.1
1
layer5/meshery-nsm:stable-latestebd6a8faf21f
helm.sh/helm/v3@v3.3.1
3.6.1
1
mavrick1/kubestellar-b:latest45ca0429a1d4
helm.sh/helm/v3@v0.0.0-20230501180843-c9f554d75773
3.6.1
1
murtazashah46/helmfile:latest4d11726cf803
helm.sh/helm/v3@v0.0.0-20230113165805-472c5736ab01
3.6.1
1
newrelic/newrelic-agent-control-cli:0.48.01a448492b55a
helm.sh/helm/v3@v0.0.0-20250819195950-b76a950f6835
3.6.1
1
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
helm.sh/helm/v3@v3.0.2
3.6.1
1
pnnlmiscscripts/tenant-namespace-operator:0.1.24-18af4b7551d40
helm.sh/helm/v3@v0.0.0-20250905035149-3d8990f08366
3.6.1
1
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
helm.sh/helm/v3@v0.0.0-20230113165805-472c5736ab01
3.6.1
1
sirrend/helmup-engine:0.1.13699e79e3d4e2
helm.sh/helm/v3@v0.0.0-20240710191640-3bb50bbbdd9c
3.6.1
1
sstarcher/helm-exporter:0.5.011769d01ba35
helm.sh/helm/v3@v3.0.2
3.6.1
1
veecode/devportal-admin-ui:0.4.30c69fd286b489
helm.sh/helm/v3@v0.0.0-20240814142712-fa9efb07d9d8
3.6.1
1
ghcr.io/argonix-io/argonix-api:1.0.068e17a8aaa40
helm.sh/helm/v3@v0.0.0-20241111191401-cfd07493f46e
3.6.1
1
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
helm.sh/helm/v3@v0.0.0-20231012132431-3547a4b5bf5e
3.6.1
1
ghcr.io/caninehq/canine:latesta058034ca006
helm.sh/helm/v3@v0.0.0-20241111191401-cfd07493f46e
3.6.1
1
ghcr.io/cloudfoundry-incubator/quarks-secret:v1.0.754f059af4de8ed
helm.sh/helm/v3@v3.3.0
3.6.1
1
ghcr.io/cloudtty/cloudshell:v0.8.900984ba0f0eb
helm.sh/helm/v3@v0.0.0-20251111020852-4f953c223ba2
3.6.1
1
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
helm.sh/helm/v3@v0.0.0-20250905035149-3d8990f08366
3.6.1
1
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
helm.sh/helm/v3@v0.0.0-20221214143859-835b7334cfe2
3.6.1
1
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
helm.sh/helm/v3@v0.0.0-20241216182912-7877b45b63f9
3.6.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.