CVE-2021-3410

High

Advisory

Published 23 Feb 2021In the index since 8 Sept 2026

Severity: High; worst across findings
CVSS: 7.8; base score, highest
EPSS: 0.006; 45th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 7; of 17,781 indexed, latest versions
Container images: 5; deployed by those charts
Fix available: 1 of 1; affected package

libcaca - security update

Carried by container images the latest versions of 7 of 17,781 indexed charts deploy, on 5 images.

Affected package	Affected versions	Fixed in	Images
libcacadeb	0.99.beta19-2.1ubuntu1, 0.99.beta19-2+b2, 0.99.beta19-2build2~gcc5.2, 0.99.beta19-2ubuntu0.16.04.1+1 more	0.99.beta19-2.1~deb9u2, 0.99.beta19-2.1ubuntu1.20.04.1, 0.99.beta19-2ubuntu0.16.04.2, 0.99.beta19-2ubuntu0.18.04.2	5

OSV records: UBUNTU-CVE-2021-3410 DLA-2584-1
Also known as: USN-4921-1

Charts affected

7 by stars

Chart

Latest

Affected images

Radar Score

stashgeek-cookbook

3.4.2

1 of 1 See more

stash geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2021-3410.

Container image	Digest	Package	Fixed in
stashapp/stash :latest	24dbd7607174	libcaca@0.99.beta19-2.1ubuntu1	0.99.beta19-2.1ubuntu1.20.04.1

Open the chart page →

15,856

webpagetest-agentcloudnativeapp

0.2.0

1 of 1 See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-3410.

Container image	Digest	Package	Fixed in
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	libcaca@0.99.beta19-2build2~gcc5.2	0.99.beta19-2ubuntu0.16.04.2

Open the chart page →

77,758

polyglotncsa

0.1.1

1 of 18 See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2021-3410.

Container image	Digest	Package	Fixed in
ncsapolyglot/converters-avconv :latest	c44b22eb58bb	libcaca@0.99.beta19-2+b2	0.99.beta19-2.1~deb9u2

Open the chart page →

55,726

splashntppool

1.0.4

1 of 1 See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2021-3410.

Container image	Digest	Package	Fixed in
scrapinghub/splash :3.4.1	a5f89bc84606	libcaca@0.99.beta19-2ubuntu0.18.04.1	0.99.beta19-2ubuntu0.18.04.2

Open the chart page →

27,633

cdn-remoteopencord

0.2.4

1 of 3 See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2021-3410.

Container image	Digest	Package	Fixed in
omecproject/cdn-video-repo :1.0.0	d59ccb138ffb	libcaca@0.99.beta19-2ubuntu0.16.04.1	0.99.beta19-2ubuntu0.16.04.2

Open the chart page →

63,223

mcord-cdn-remoteopencord

0.1.6

1 of 2 See more

mcord-cdn-remote opencord 0.1.6

1 of the 2 container images this version deploys carry CVE-2021-3410.

Container image	Digest	Package	Fixed in
omecproject/cdn-video-repo :remote-v3	d59ccb138ffb	libcaca@0.99.beta19-2ubuntu0.16.04.1	0.99.beta19-2ubuntu0.16.04.2

Open the chart page →

42,614

mcord-cdn-remote-freeopencord

0.1.3

1 of 1 See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2021-3410.

Container image	Digest	Package	Fixed in
omecproject/cdn-video-repo :remote-v3	d59ccb138ffb	libcaca@0.99.beta19-2ubuntu0.16.04.1	0.99.beta19-2ubuntu0.16.04.2

Open the chart page →

29,124

Container images carrying it

5 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
omecproject/cdn-video-repo :1.0.0 :remote-v3	d59ccb138ffb	libcaca@0.99.beta19-2ubuntu0.16.04.1	0.99.beta19-2ubuntu0.16.04.2	3
ncsapolyglot/converters-avconv :latest	c44b22eb58bb	libcaca@0.99.beta19-2+b2	0.99.beta19-2.1~deb9u2	1
scrapinghub/splash :3.4.1	a5f89bc84606	libcaca@0.99.beta19-2ubuntu0.18.04.1	0.99.beta19-2ubuntu0.18.04.2	1
stashapp/stash :latest	24dbd7607174	libcaca@0.99.beta19-2.1ubuntu1	0.99.beta19-2.1ubuntu1.20.04.1	1
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	libcaca@0.99.beta19-2build2~gcc5.2	0.99.beta19-2ubuntu0.16.04.2	1