StackRadarChart IndexLive demo

CVE-2021-32803

High

Advisory

Published 3 Aug 2021In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 8.2; base score, highest
EPSS: 0.078; 94th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 173; of 17,781 indexed, latest versions
Container images: 174; deployed by those charts
Fix available: 2 of 2; affected packages

Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning

Carried by container images the latest versions of 173 of 17,781 indexed charts deploy, on 174 images.

Affected package	Affected versions	Fixed in	Images
tarnpm	4.0.1, 4.0.2, 4.4.1, 4.4.2+8 more	4.4.15, 6.1.2	174
node-tardeb	4.4.10+ds1-2ubuntu1	4.4.10+ds1-2ubuntu1+esm1	2

OSV records: GHSA-r628-mhmh-qjhw UBUNTU-CVE-2021-32803
Also known as: USN-5283-1

Charts affected

173 by stars

Chart

Latest

Affected images

Radar Score

codimdphntom

1 of 3 See more

6,524

practica-helmpractica-helm

2 of 7 See more

practica-helm practica-helm 0.1.0

2 of the 7 container images this version deploys carry CVE-2021-32803.

Container image	Digest	Package	Fixed in
slagattollas/server-practica :latest	6dd8ead8e2b1	tar@4.4.13	4.4.15
slagattollas/weatherservice-practica :latest	68e7f56393fc	tar@4.4.13	4.4.15

Open the chart page →

28,484

stackrox-chartredhat-cop

1 of 1 See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2021-32803.

Container image	Digest	Package	Fixed in
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	tar@4.4.13	4.4.15

Open the chart page →

29,227

laravel-workerrenoki-co

1 of 1 See more

laravel-worker renoki-co 1.1.0

1 of the 1 container images this version deploys carry CVE-2021-32803.

Container image	Digest	Package	Fixed in
quay.io/renokico/laravel-helm-demo :worker-0.6.0	4b188259267e	tar@6.1.0	6.1.2

Open the chart page →

5,687

1 of 7 See more

bookinfo rgnu 1.0.0

1 of the 7 container images this version deploys carry CVE-2021-32803.

Container image	Digest	Package	Fixed in
istio/examples-bookinfo-ratings-v1 :1.14.0	eb0f1a725ca8	tar@4.4.8	4.4.15

Open the chart page →

20,462

istio-bookinforgnu

1 of 7 See more

istio-bookinfo rgnu 1.0.2

1 of the 7 container images this version deploys carry CVE-2021-32803.

Container image	Digest	Package	Fixed in
istio/examples-bookinfo-ratings-v1 :1.14.0	eb0f1a725ca8	tar@4.4.8	4.4.15

Open the chart page →

20,462

1 of 1 See more

5,215

unifi-protectschichtel

1 of 1 See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry CVE-2021-32803.

Container image	Digest	Package	Fixed in
markdegroot/unifi-protect-arm64 :latest	d8445f2a0de6	tar@4.4.13	4.4.15

Open the chart page →

5,582

parkingsikalabs

1 of 1 See more

parking sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-32803.

Container image	Digest	Package	Fixed in
ondrejsika/parking :latest	b1fd497416c8	tar@6.1.0	6.1.2

Open the chart page →

3,696

first-appsimple-helm-chart

1 of 1 See more

first-app simple-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-32803.

Container image	Digest	Package	Fixed in
leeyoongti/first-app :1.0.0	21d66cb76352	tar@4.4.13	4.4.15

Open the chart page →

2,154

logsmo-helm-chart

1 of 6 See more

log smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2021-32803.

Container image	Digest	Package	Fixed in
taskrabbit/elasticsearch-dump :latest	c967fe68b9c7	tar@4.4.12	4.4.15

Open the chart page →

29,220

pombasmo-helm-chart

1 of 17 See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2021-32803.

Container image	Digest	Package	Fixed in
taskrabbit/elasticsearch-dump :latest	c967fe68b9c7	tar@4.4.12	4.4.15

Open the chart page →

29,220

pachydermstatcan

1 of 4 See more

pachyderm statcan 0.5.1

1 of the 4 container images this version deploys carry CVE-2021-32803.

Container image	Digest	Package	Fixed in
pachyderm/grpc-proxy :0.4.9	2b27f41d4d02	tar@4.4.6	4.4.15

Open the chart page →

4,967

grafanasvtech-public-helm-charts

1 of 2 See more

grafana svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2021-32803.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_grafana :v1.2.2	1d71314424aa	node-tar@4.4.10+ds1-2ubuntu1 tar@4.4.10	4.4.10+ds1-2ubuntu1+esm1 4.4.15

Open the chart page →

10,902

1 of 1 See more

dashkiosk t3n 2.0.0

1 of the 1 container images this version deploys carry CVE-2021-32803.

Container image	Digest	Package	Fixed in
quay.io/t3n/dashkiosk :v2.7.8	c973e166a5dc	tar@4.4.13	4.4.15

Open the chart page →

3,827

trudesktechpreta

1 of 3 See more

4,017

pock-helm-charttinote-chart

1 of 3 See more

pock-helm-chart tinote-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2021-32803.

Container image	Digest	Package	Fixed in
denisshav/backend :latest	4cc8dc5a4499	tar@4.4.13	4.4.15

Open the chart page →

6,881

kubernetes-external-secretstrozz

1 of 1 See more

kubernetes-external-secrets trozz 6.3.0

1 of the 1 container images this version deploys carry CVE-2021-32803.

Container image	Digest	Package	Fixed in
ghcr.io/external-secrets/kubernetes-external-secrets :6.3.0	eab9bd0b6986	tar@4.4.13	4.4.15

Open the chart page →

2,838

queryservice-gatewaywbstack

1 of 1 See more

queryservice-gateway wbstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-32803.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/queryservice-gateway :2.2	ab8e2f583e56	tar@6.1.0	6.1.2

Open the chart page →

2,559

cadencewenerme

1 of 5 See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2021-32803.

Container image	Digest	Package	Fixed in
ubercadence/web :v3.29.5	8564a5b44a6d	tar@4.4.13	4.4.15

Open the chart page →

10,127

temporalwenerme

1 of 13 See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2021-32803.

Container image	Digest	Package	Fixed in
temporalio/web :1.14.0	33cfa863d8ce	tar@4.4.13	4.4.15

Open the chart page →

22,665

opendistro-eswitcom-gmbh

1 of 3 See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry CVE-2021-32803.

Container image	Digest	Package	Fixed in
amazon/opendistro-for-elasticsearch-kibana :1.13.2	c740d7a89475	tar@6.0.2	6.1.2

Open the chart page →

5,806

helloworldyotron-helm-charts

1 of 1 See more

helloworld yotron-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-32803.

Container image	Digest	Package	Fixed in
a5hut0sh/helloworld :1.0	2ae77620e616	tar@4.4.8	4.4.15

Open the chart page →

1,309

Container images carrying it

174 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/ctron/streamsheets-service-streams :2.4.0	8ba040e79ca0	tar@4.4.13	4.4.15	1
ghcr.io/external-secrets/kubernetes-external-secrets :6.3.0	eab9bd0b6986	tar@4.4.13	4.4.15	1
ghcr.io/flaresolverr/flaresolverr :v1.2.8	96f8c08c0c1b	tar@6.0.5	6.1.2	1
ghcr.io/k8s-at-home/haste-server :latest	827aa2f2389d	tar@4.4.13	4.4.15	1
ghcr.io/leoquote/mergeable :latest	451706815103	tar@4.4.13	4.4.15	1
ghcr.io/linuxserver/wikijs :version-2.5.201	58d377933678	tar@4.4.13	4.4.15	1
ghcr.io/mario-f/kubevis :v1.4.0	763daf9caf8e	tar@6.1.0	6.1.2	1
ghcr.io/mmontes11/iot-back :v3.11.0	96683c54ae65	tar@4.4.13	4.4.15	1
ghcr.io/mmontes11/iot-biot :v3.11.0	33f7976b26a8	tar@4.4.13	4.4.15	1
ghcr.io/mmontes11/iot-thing :v3.11.0	542e91e8499c	tar@4.4.13	4.4.15	1
ghcr.io/mmontes11/iot-worker :v3.11.0	491bb243f555	tar@4.4.13	4.4.15	1
ghcr.io/sct/overseerr :1.26.1	254d16af8f71	tar@6.1.0	6.1.2	1
ghcr.io/wbstack/queryservice-gateway :2.2	ab8e2f583e56	tar@6.1.0	6.1.2	1
quay.io/ctrontesting/iofog-controller :latest	10df27bc5560	tar@4.4.13	4.4.15	1
quay.io/hewlettpackardenterprise/squest :2.8.4	65694109877e	tar@6.0.5	6.1.2	1
quay.io/ibmgaragecloud/developer-dashboard :v1.4.4	7a4b9fedc724	tar@4.4.13	4.4.15	1
quay.io/ibmgaragecloud/nodejs :latest	01c3b7acb301	tar@4.4.13	4.4.15	1
quay.io/ibmgaragecloud/slack-notifications :latest	041df93e2bac	tar@4.4.13	4.4.15	1
quay.io/mongodb/farm-intro-frontend :0.1	99ccdfd543e1	tar@6.0.5	6.1.2	1
quay.io/renokico/laravel-helm-demo :0.6.0	3207f957e80c	tar@6.1.0	6.1.2	1
quay.io/renokico/laravel-helm-demo :worker-0.6.0	4b188259267e	tar@6.1.0	6.1.2	1
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	tar@4.4.13	4.4.15	1
quay.io/t3n/dashkiosk :v2.7.8	c973e166a5dc	tar@4.4.13	4.4.15	1
registry.gitlab.com/infinitydon/registry/open5gs-webui :v2.2.2	fda21b0a0344	tar@4.4.13	4.4.15	1