CVE-2021-3517
HighAdvisory
Published 19 May 2021In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.6
- base score, highest
- EPSS
- 0.083
- 95th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 197
- of 17,781 indexed, latest versions
- Container images
- 183
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Nokogiri contains libxml Out-of-bounds Write vulnerability
Carried by container images the latest versions of 197 of 17,781 indexed charts deploy, on 183 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| libxml2apk | 2.9.9-r2, 2.9.9-r3, 2.9.9-r4, 2.9.10-r1+5 more | 2.9.9-r5, 2.9.10-r5, 2.9.10-r6, 2.9.10-r7 | 109 |
| libxml2deb | 2.9.1+dfsg1-3ubuntu4.3, 2.9.1+dfsg1-3ubuntu4.4, 2.9.1+dfsg1-3ubuntu4.12, 2.9.3+dfsg1-1ubuntu0.2+7 more | 2.9.1+dfsg1-3ubuntu4.13+esm2, 2.9.3+dfsg1-1ubuntu0.7+esm1, 2.9.4+dfsg1-6.1ubuntu1.4, 2.9.10+dfsg-5ubuntu0.20.04.1 | 60 |
| nokogirigem | 1.8.2, 1.10.8, 1.10.9, 1.10.10+1 more | 1.11.4 | 15 |
- OSV records
- ALPINE-CVE-2021-3517GHSA-jw9f-hh49-cvp9UBUNTU-CVE-2021-3517
- Also known as
- USN-4991-1
Charts affected
197 by stars
Container images carrying it
183 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| gollumorg/ | 7cd5305a3cf7 | nokogiri | 1.11.4 | 1 |
| graphiteapp/ | 04a0037cc2ae | libxml2 | 2.9.10-r6 | 1 |
| haveagitgat/ | 1e3f9328327d | libxml2 | 2.9.10+dfsg-5ubuntu0.20.04.1 | 1 |
| hmdmph/ | 7f1381fe0f3b | libxml2 | 2.9.10-r6 | 1 |
| huginn/ | c794eddc7b47 | nokogiri | 1.11.4 | 1 |
| hyperledger/ | c65891b6c237 | libxml2 | 2.9.3+dfsg1-1ubuntu0.7+esm1 | 1 |
| ibmcom/ | b5d8c6714dbc | libxml2 | 2.9.3+dfsg1-1ubuntu0.7+esm1 | 1 |
| ibmcom/ | 395e60cc6e3d | libxml2 | 2.9.4+dfsg1-6.1ubuntu1.4 | 1 |
| johnblack77/ | bb53ceb8442e | libxml2 | 2.9.10-r7 | 1 |
| jupyterhub/ | b6b4a1a34bf0 | libxml2 | 2.9.10+dfsg-5ubuntu0.20.04.1 | 1 |
| jupyterhub/ | e3e6f3051df8 | libxml2 | 2.9.10+dfsg-5ubuntu0.20.04.1 | 1 |
| keitaro/ | 5bf1a45f45c1 | libxml2 | 2.9.10-r6 | 1 |
| kennethreitz/ | 599fe5e50731 | libxml2 | 2.9.4+dfsg1-6.1ubuntu1.4 | 1 |
| klausmeyer/ | 430a440d95af | nokogiri | 1.11.4 | 1 |
| kubeoperator/ | be8f0d624640 | libxml2 | 2.9.4+dfsg1-6.1ubuntu1.4 | 1 |
| library/ | 143ec8cc2f3a | libxml2 | 2.9.10-r7 | 1 |
| library/ | f42d935fec5a | libxml2 | 2.9.10-r5 | 1 |
| library/ | 0649f548ea26 | libxml2 | 2.9.9-r5 | 1 |
| library/ | 17ba9c1ca3db | libxml2 | 2.9.10-r5 | 1 |
| library/ | 5aa44b407756 | libxml2 | 2.9.10-r6 | 1 |
| library/ | 763e7f0188e3 | libxml2 | 2.9.10-r5 | 1 |
| library/ | abe5ce652eb7 | libxml2 | 2.9.9-r5 | 1 |
| library/ | 7693f2082c68 | libxml2 | 2.9.10-r6 | 1 |
| linuxserver/ | a847b5b2d860 | libxml2 | 2.9.4+dfsg1-6.1ubuntu1.4 | 1 |
| logiqai/ | 55a574ec5b64 | libxml2 | 2.9.10-r5 | 1 |
| longhornio/ | ede61fe2a472 | libxml2 | 2.9.4+dfsg1-6.1ubuntu1.4 | 1 |
| longhornio/ | 65560eabe3ee | libxml2 | 2.9.10-r7 | 1 |
| lsstsqre/ | 4653f18b5418 | libxml2 | 2.9.9-r5 | 1 |
| lsstsqre/ | 54283318b16b | libxml2 | 2.9.10-r6 | 1 |
| mirrorgitlabcontainers/ | 83599461ef8b | nokogiri | 1.11.4 | 1 |
| mirrorgitlabcontainers/ | 94d1431683fa | nokogiri | 1.11.4 | 1 |
| mirrorgitlabcontainers/ | 9efd73993c34 | nokogiri | 1.11.4 | 1 |
| mirrorgitlabcontainers/ | 30393f990f5c | nokogiri | 1.11.4 | 1 |
| muluder/ | 43b597a93da7 | libxml2 | 2.9.3+dfsg1-1ubuntu0.7+esm1 | 1 |
| ngick8stesting/ | 8dd6dea45be4 | libxml2 | 2.9.3+dfsg1-1ubuntu0.7+esm1 | 1 |
| ngoduykhanh/ | 099371dd9ba6 | libxml2 | 2.9.10-r6 | 1 |
| omecproject/ | b4ae7d0d6b74 | libxml2 | 2.9.4+dfsg1-6.1ubuntu1.4 | 1 |
| omecproject/ | b5ddd36ec20c | libxml2 | 2.9.4+dfsg1-6.1ubuntu1.4 | 1 |
| omecproject/ | 686f8bc37d8c | libxml2 | 2.9.4+dfsg1-6.1ubuntu1.4 | 1 |
| omecproject/ | bcc5f19fd676 | libxml2 | 2.9.4+dfsg1-6.1ubuntu1.4 | 1 |
| omecproject/ | 5715e5648aa0 | libxml2 | 2.9.3+dfsg1-1ubuntu0.7+esm1 | 1 |
| omecproject/ | 64776cb9edb3 | libxml2 | 2.9.3+dfsg1-1ubuntu0.7+esm1 | 1 |
| omecproject/ | d109a8e57e71 | libxml2 | 2.9.3+dfsg1-1ubuntu0.7+esm1 | 1 |
| oomk8s/ | 3adf3d21ad3b | libxml2 | 2.9.3+dfsg1-1ubuntu0.7+esm1 | 1 |
| opendatacube/ | 5d810e8504b8 | libxml2 | 2.9.4+dfsg1-6.1ubuntu1.4 | 1 |
| opendatacube/ | 91870111837c | libxml2 | 2.9.4+dfsg1-6.1ubuntu1.4 | 1 |
| opendatacube/ | 1b90cdf68831 | libxml2 | 2.9.4+dfsg1-6.1ubuntu1.4 | 1 |
| openwhisk/ | c80dba0de3aa | libxml2 | 2.9.4+dfsg1-6.1ubuntu1.4 | 1 |
| openzipkin/ | 672cbc94256b | libxml2 | 2.9.9-r5 | 1 |
| opsmx11/ | 5c50ca123d88 | libxml2 | 2.9.1+dfsg1-3ubuntu4.13+esm2 | 1 |