StackRadar

CVE-2021-33196

Unscored

Advisory

Published 17 Feb 2022In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.035
88th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
541
of 17,781 indexed, latest versions
Container images
546
deployed by those charts
Fix available
1 of 1
affected package

Panic when reading certain archives in archive/zip

Carried by container images the latest versions of 541 of 17,781 indexed charts deploy, on 546 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+43 more1.15.13546
OSV records
GO-2021-0240
Also known as
BIT-golang-2021-33196

Charts affected

541 by stars
ChartLatestAffected imagesRadar Score
education-componenteducation-component1.0.01 of 3See more

education-component education-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/education-component-php:latestda6b05a1a601
stdlib@go1.13.10
1.15.13

Open the chart page →

7,327
eherkenning-uieherkenning-ui1.0.01 of 3See more

eherkenning-ui eherkenning-ui 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eherkenning-ui-php:latestdeed102b4255
stdlib@go1.13.10
1.15.13

Open the chart page →

7,510
mongodb-charteks-3-tier-app-chart0.1.01 of 1See more

mongodb-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
library/mongo:4.4.66efa05203990
stdlib@go1.16.3
1.15.13

Open the chart page →

8,041
deadman-switchempathyco0.0.21 of 1See more

deadman-switch empathyco 0.0.2

1 of the 1 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
gcr.io/pingcap-public/deadmansswitch:1.04861d81aa528
stdlib@go1.16.3
1.15.13

Open the chart page →

1,258
eolicplantseolicplantsVerified publisher0.1.01 of 7See more

eolicplants eolicplants 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
oscarsotosanchez/weatherservice:v1.0911ec961d10b
stdlib@go1.15.6
1.15.13

Open the chart page →

27,291
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.01 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
oscarsotosanchez/weatherservice:v1.0911ec961d10b
stdlib@go1.15.6
1.15.13

Open the chart page →

27,256
eoloplannereoloplanner-molynx-gat0.1.01 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
library/mongo:4.4.66efa05203990
stdlib@go1.16.3
1.15.13

Open the chart page →

28,482
chaos-meshethereum-helm-chartsVerified publisher0.0.31 of 4See more

chaos-mesh ethereum-helm-charts 0.0.3

1 of the 4 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
stdlib@go1.16.2
1.15.13

Open the chart page →

12,127
pgbouncerevilmartians0.2.01 of 2See more

pgbouncer evilmartians 0.2.0

1 of the 2 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
quay.io/evl.ms/pgbouncer-exporter:0.4.074f919b78494
stdlib@go1.14.4
1.15.13

Open the chart page →

1,838
degafactlyVerified publisher0.11.132 of 3See more

dega factly 0.11.13

2 of the 3 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
factly/dega-api:0.15.166fafc7b0a17
stdlib@go1.16.2
1.15.13
factly/dega-server:0.15.194d21479382e
stdlib@go1.16.2
1.15.13

Open the chart page →

5,747
kavachfactlyVerified publisher0.9.51 of 2See more

kavach factly 0.9.5

1 of the 2 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
factly/kavach-server:0.22.3be85ff1b9bd3
stdlib@go1.16.2
1.15.13

Open the chart page →

3,573
oom-event-generatorfairwinds-incubator0.2.21 of 1See more

oom-event-generator fairwinds-incubator 0.2.2

1 of the 1 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
xingse/kubernetes-oom-event-generator:v1.2.09f9d5492e4bf
stdlib@go1.13
1.15.13

Open the chart page →

4,639
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
stdlib@go1.13.5
1.15.13

Open the chart page →

14,673
findery-marketfindery-market0.1.01 of 7See more

findery-market findery-market 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
chandanteekinavar/findery-market-payment-service:1.0c96f759b6ce4
stdlib@go1.13
1.15.13

Open the chart page →

7,691
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:3.6.213e51da56fc54
stdlib@go1.15.1
1.15.13

Open the chart page →

64,489
grafanaflagger1.7.01 of 1See more

grafana flagger 1.7.0

1 of the 1 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
grafana/grafana:7.3.46d42886b3ebe
stdlib@go1.15.5
1.15.13

Open the chart page →

3,365
floriapp-mongodbfloriapp1.0.01 of 1See more

floriapp-mongodb floriapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
library/mongo:4.4.66efa05203990
stdlib@go1.16.3
1.15.13

Open the chart page →

8,041
flyte-depsflyte1.16.81 of 3See more

flyte-deps flyte 1.16.8

1 of the 3 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
kubernetesui/dashboard:v2.2.0148991563e37
stdlib@go1.15.1
1.15.13

Open the chart page →

2,245
passboltg0dscookie0.5.21 of 2See more

passbolt g0dscookie 0.5.2

1 of the 2 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
passbolt/passbolt:3.9.0-2-ce-non-rootec046e112d5c
stdlib@go1.14.4
1.15.13

Open the chart page →

7,940
podgrabgabe565Verified publisher0.5.21 of 1See more

podgrab gabe565 0.5.2

1 of the 1 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
ghcr.io/akhilrex/podgrab:1.0.0bce133f3f511
stdlib@go1.15.2
1.15.13

Open the chart page →

2,401
embygeek-cookbookVerified publisher3.4.21 of 1See more

emby geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/emby:v4.6.1.05c6b8f91f1c4
stdlib@go1.15
1.15.13

Open the chart page →

8,545
gonicgeek-cookbookVerified publisher6.4.21 of 1See more

gonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
sentriz/gonic:v0.13.1a74012a6adf3
stdlib@go1.16.4
1.15.13

Open the chart page →

3,525
gotifygeek-cookbookVerified publisher1.2.21 of 1See more

gotify geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
gotify/server:2.1.409c79bc1e403
stdlib@go1.16
1.15.13

Open the chart page →

3,131
haste-servergeek-cookbookVerified publisher3.4.21 of 1See more

haste-server geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
stdlib@go1.15
1.15.13

Open the chart page →

10,994
navidromegeek-cookbookVerified publisher6.4.21 of 1See more

navidrome geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
deluan/navidrome:0.43.04e9ae3bff6aa
stdlib@go1.16.4
1.15.13

Open the chart page →

3,597
nzbhydra2geek-cookbookVerified publisher10.4.21 of 1See more

nzbhydra2 geek-cookbook 10.4.2

1 of the 1 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
stdlib@go1.15
1.15.13

Open the chart page →

17,702
pod-gateway-settergeek-cookbookVerified publisher1.0.01 of 1See more

pod-gateway-setter geek-cookbook 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/gateway-admision-controller:v2.0.00d6d0df98fe4
stdlib@go1.16.4
1.15.13

Open the chart page →

1,641
readarrgeek-cookbookVerified publisher6.4.21 of 1See more

readarr geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/readarr:v0.1.0.715ad943e9309e4
stdlib@go1.15
1.15.13

Open the chart page →

7,768
searxgeek-cookbookVerified publisher5.6.21 of 4See more

searx geek-cookbook 5.6.2

1 of the 4 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
library/caddy:2.2.0-alpine7367adca165f
stdlib@go1.15.2
1.15.13

Open the chart page →

7,470
prometheus-container-resource-exportergkarthiks0.3.11 of 1See more

prometheus-container-resource-exporter gkarthiks 0.3.1

1 of the 1 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
gkarthics/container-resource-exporter:latest6799af333e8a
stdlib@go1.14.7
1.15.13

Open the chart page →

2,218
prometheus-couchdb-exportergkarthiks0.1.31 of 1See more

prometheus-couchdb-exporter gkarthiks 0.1.3

1 of the 1 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
gesellix/couchdb-prometheus-exporter:v27.2.05b891f1fc2b9
stdlib@go1.13.10
1.15.13

Open the chart page →

1,284
whoami-demogpg-dev0.1.01 of 1See more

whoami-demo gpg-dev 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
containous/whoami:latest7d6a3c8f9147
stdlib@go1.14
1.15.13

Open the chart page →

1,279
mimir-openshift-experimentalgrafana2.1.02 of 4See more

mimir-openshift-experimental grafana 2.1.0

2 of the 4 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2021-02-14T04-28-06Z2a374c124d44
stdlib@go1.15.7
1.15.13
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
stdlib@go1.15.7
1.15.13

Open the chart page →

17,759
grafregistratiecomponentgrafregistratiecomponent1.0.01 of 3See more

grafregistratiecomponent grafregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/grafregistratiecomponent-php:latest35225eaa87ab
stdlib@go1.13.10
1.15.13

Open the chart page →

7,510
siembolgresearch0.1.61 of 4See more

siembol gresearch 0.1.6

1 of the 4 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
alpine/k8s:1.18.16a41efe02a041
stdlib@go1.15.2
1.15.13

Open the chart page →

14,312
docker-authhalkeye0.1.11 of 1See more

docker-auth halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
cesanta/docker_auth:1.6.04d16885f3d4c
stdlib@go1.13.7
1.15.13

Open the chart page →

2,374
matrix-media-repohalkeye1.0.51 of 1See more

matrix-media-repo halkeye 1.0.5

1 of the 1 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
turt2live/matrix-media-repo:v1.2.8bfbd459f89a5
stdlib@go1.16.3
1.15.13

Open the chart page →

4,455
whoamihalkeye1.0.11 of 1See more

whoami halkeye 1.0.1

1 of the 1 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
containous/whoami:v1.5.07d6a3c8f9147
stdlib@go1.14
1.15.13

Open the chart page →

1,279
cert-manager-webhook-arvanhbahadorzadeh0.1.11 of 1See more

cert-manager-webhook-arvan hbahadorzadeh 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
hbahadorzadeh/cert-manager-webhook-arvan:latestbf9756b3bc47
stdlib@go1.15.6
1.15.13

Open the chart page →

3,022
kubernetes-event-exporterhbahadorzadeh0.1.01 of 1See more

kubernetes-event-exporter hbahadorzadeh 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
opsgenie/kubernetes-event-exporter:0.9ecb246e4d260
stdlib@go1.14.7
1.15.13

Open the chart page →

2,630
iofoghelm-chartsVerified publisher0.1.11 of 3See more

iofog helm-charts 0.1.1

1 of the 3 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
iofog/router:2.0.17260cf861479
stdlib@go1.15
1.15.13

Open the chart page →

24,161
aws-s3-proxyhelm-charts-nr0.1.71 of 1See more

aws-s3-proxy helm-charts-nr 0.1.7

1 of the 1 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
pottava/s3-proxy:2.020a0bcb15f76
stdlib@go1.13.7
1.15.13

Open the chart page →

1,323
aws-service-events-exporterhelm-charts-nr1.0.71 of 1See more

aws-service-events-exporter helm-charts-nr 1.0.7

1 of the 1 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
thomasnyambati/aws-service-events-exporter:1.0.01e18a0944ceb
stdlib@go1.15.6
1.15.13

Open the chart page →

1,299
gripmockhelm-charts-nr1.1.31 of 1See more

gripmock helm-charts-nr 1.1.3

1 of the 1 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
tkpd/gripmock:1.10.174441dadcfbd
stdlib@go1.14.6
1.15.13

Open the chart page →

2,793
k8s-cloudwatch-adapterhelm-charts-nr0.2.21 of 1See more

k8s-cloudwatch-adapter helm-charts-nr 0.2.2

1 of the 1 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
chankh/k8s-cloudwatch-adapter:v0.9.0963c44c7f8b1
stdlib@go1.14.5
1.15.13

Open the chart page →

2,468
killgravehelm-charts-nr1.0.21 of 1See more

killgrave helm-charts-nr 1.0.2

1 of the 1 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
friendsofgo/killgrave:0.4.139cfbecca342
stdlib@go1.16.3
1.15.13

Open the chart page →

1,181
labelsmanager-controllerhelm-charts-nr1.0.41 of 1See more

labelsmanager-controller helm-charts-nr 1.0.4

1 of the 1 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
thomasnyambati/labelsmanager-controller:1.0.0148ae3f99fea
stdlib@go1.13.15
1.15.13

Open the chart page →

2,305
prometheus-locust-exporterhelm-charts-nr1.2.31 of 1See more

prometheus-locust-exporter helm-charts-nr 1.2.3

1 of the 1 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
containersol/locust_exporter:v0.4.1a914972d19ad
stdlib@go1.15.8
1.15.13

Open the chart page →

1,276
prometheus-soti-mobicontrol-exporterhelm-charts-nr1.0.31 of 1See more

prometheus-soti-mobicontrol-exporter helm-charts-nr 1.0.3

1 of the 1 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
maxrocketinternet/soti-mobicontrol-exporter:0.61a281b76efa3
stdlib@go1.14
1.15.13

Open the chart page →

1,644
prometheus-statsd-exporterhelm-charts-nr0.1.51 of 1See more

prometheus-statsd-exporter helm-charts-nr 0.1.5

1 of the 1 container images this version deploys carry CVE-2021-33196.

Container imageDigestPackageFixed in
prom/statsd-exporter:v0.18.0d23aca343b86
stdlib@go1.14.7
1.15.13

Open the chart page →

1,315

Container images carrying it

546 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
crowdfox/external-service-operator:v1.1.06fa7e8063d27
stdlib@go1.14.2
1.15.13
1
csiplugin/csi-neonsan:v1.2.21fa83d45417f
stdlib@go1.14.4
1.15.13
1
csiplugin/snapshot-controller:v4.0.000fcc441ea9f
stdlib@go1.15
1.15.13
1
ctrox/csi-s3:v1.2.0-rc.23c72862bea3c
stdlib@go1.15.8
1.15.13
1
dabealu/zookeeper-exporter:latest86106fec315f
stdlib@go1.14.15
1.15.13
1
datadog/agent:7.22.08f20e56b5311
stdlib@go1.13.11
1.15.13
1
datadog/operator:0.3.117f08a860090
stdlib@go1.15.2
1.15.13
1
datappeal/hive-metastore:lateste38c085a3567
stdlib@go1.13.4
1.15.13
1
datawire/aes:2.0.3-ea07f8fe4f4f8e
stdlib@go1.15
1.15.13
1
datawire/aes:1.13.62beb65062c8b
stdlib@go1.15
1.15.13
1
datawire/emissary:2.0.2-ea9716efbdd24b
stdlib@go1.15
1.15.13
1
deluan/navidrome:0.43.04e9ae3bff6aa
stdlib@go1.16.4
1.15.13
1
devspacecloud/manager:0.3.349c397413f7b
stdlib@go1.13.8
1.15.13
1
dirathea/pipelinewise-operator:v0.5.08d4c9f773ae1
stdlib@go1.15.8
1.15.13
1
dnsforge/xteve:latest4d9a685c8c28
stdlib@go1.16.2
1.15.13
1
douz/overlord:latestf2bc7fc068c1
stdlib@go1.14.5
1.15.13
1
drone/kubernetes-secrets:latest206df2280ecf
stdlib@go1.13.15
1.15.13
1
duplicati/duplicati:2.0.5.111_canary_2020-09-268660f0eda7c9
stdlib@go1.14.4
1.15.13
1
duyetdev/applause-btn:latest25e59d223eaa
stdlib@go1.14.9
1.15.13
1
ekofr/pihole-exporter:0.0.109fdad6f352e0
stdlib@go1.14.7
1.15.13
1
elastisys/kube-bench-metrics:0.1.6509b94f1da55
stdlib@go1.15.7
1.15.13
1
engrmth/bnkr:2.1.06d8464e6f0e8
stdlib@go1.15.8
1.15.13
1
envoyproxy/ratelimit:v1.4.071081616da3e
stdlib@go1.14
1.15.13
1
envoyproxy/ratelimit:6f5de117b6cb6e16f8c9
stdlib@go1.14.13
1.15.13
1
envoyproxy/ratelimit:4d2efd61ede09a75a84c
stdlib@go1.14.15
1.15.13
1
etejeda/butlerci:0.1.0737d58183abc
stdlib@go1.16.3
1.15.13
1
factly/dega-api:0.15.166fafc7b0a17
stdlib@go1.16.2
1.15.13
1
factly/dega-server:0.15.194d21479382e
stdlib@go1.16.2
1.15.13
1
factly/kavach-server:0.22.3be85ff1b9bd3
stdlib@go1.16.2
1.15.13
1
factly/vidcheck-server:0.12.087064eb0463c
stdlib@go1.14.2
1.15.13
1
filebrowser/filebrowser:v2.13.0c5d0a75a0041
stdlib@go1.16.2
1.15.13
1
fluxcd/helm-controller:v0.9.092b891e495d8
stdlib@go1.15.10
1.15.13
1
fluxcd/source-controller:v0.10.031a8c79a6803
stdlib@go1.15.10
1.15.13
1
gabekangas/owncast:0.0.797461aedb580
stdlib@go1.15.2
1.15.13
1
garugaru/presto-exporter:cb666560e9e82d5ae36aef1e663c3d7f51cca9fc5201314c28f3
stdlib@go1.14.13
1.15.13
1
garugaru/presto-loadbalancer:v0.1.589d66d117029
stdlib@go1.15.2
1.15.13
1
gesellix/couchdb-prometheus-exporter:v27.2.05b891f1fc2b9
stdlib@go1.13.10
1.15.13
1
gitea/gitea:1.12.485416d6f65fe
stdlib@go1.14.8
1.15.13
1
gitea/gitea:1.13.0d5ab14cd29af
stdlib@go1.15.5
1.15.13
1
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
stdlib@go1.16.2
1.15.13
1
gitlab/gitlab-runner:alpine-v13.2.1fd7e5dfb9f30
stdlib@go1.13.8
1.15.13
1
gkarthics/container-resource-exporter:latest6799af333e8a
stdlib@go1.14.7
1.15.13
1
gogs/gogs:0.12.30195b095d0b2
stdlib@go1.14.7
1.15.13
1
gogs/gogs:0.12.1420d53bb7277
stdlib@go1.14.7
1.15.13
1
goharbor/notary-server-photon:v2.5.3fd91a4a1273f
stdlib@go1.14.15
1.15.13
1
goharbor/notary-signer-photon:v2.5.3a92b51aa7d6e
stdlib@go1.14.15
1.15.13
1
golift/unifi-poller:2.0.0cafac968b540
stdlib@go1.13.7
1.15.13
1
gomods/athens:v0.8.1d714c7ff0231
stdlib@go1.13.4
1.15.13
1
gomods/athens:v0.11.0efb811df7844
stdlib@go1.13.10
1.15.13
1
gophish/gophish:0.12.18a57cd171999
stdlib@go1.15.2
1.15.13
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.