CVE-2021-3518
HighAdvisory
Published 18 May 2021In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.8
- base score, highest
- EPSS
- 0.037
- 89th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 197
- of 17,781 indexed, latest versions
- Container images
- 183
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Nokogiri Implements libxml2 version vulnerable to use-after-free
Carried by container images the latest versions of 197 of 17,781 indexed charts deploy, on 183 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| libxml2apk | 2.9.9-r2, 2.9.9-r3, 2.9.9-r4, 2.9.10-r1+5 more | 2.9.9-r5, 2.9.10-r5, 2.9.10-r6, 2.9.10-r7 | 109 |
| libxml2deb | 2.9.1+dfsg1-3ubuntu4.3, 2.9.1+dfsg1-3ubuntu4.4, 2.9.1+dfsg1-3ubuntu4.12, 2.9.3+dfsg1-1ubuntu0.2+7 more | 2.9.1+dfsg1-3ubuntu4.13+esm2, 2.9.3+dfsg1-1ubuntu0.7+esm1, 2.9.4+dfsg1-6.1ubuntu1.4, 2.9.10+dfsg-5ubuntu0.20.04.1 | 60 |
| nokogirigem | 1.8.2, 1.10.8, 1.10.9, 1.10.10+1 more | 1.11.4 | 15 |
- OSV records
- ALPINE-CVE-2021-3518GHSA-v4f8-2847-rwm7UBUNTU-CVE-2021-3518
- Also known as
- USN-4991-1
Charts affected
197 by stars
Container images carrying it
183 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| owntracks/ | 48cbbb64f347 | libxml2 | 2.9.10-r5 | 1 |
| pactfoundation/ | 12861b0bd4d9 | libxml2 nokogiri | 2.9.10-r7 1.11.4 | 1 |
| phntom/ | 0c75ed6dd606 | libxml2 | 2.9.10-r7 | 1 |
| plexinc/ | b598abb134ad | libxml2 | 2.9.3+dfsg1-1ubuntu0.7+esm1 | 1 |
| pnnlmiscscripts/ | 4eafeb809124 | libxml2 | 2.9.9-r5 | 1 |
| pnnlmiscscripts/ | bbb6940d849f | libxml2 | 2.9.10-r5 | 1 |
| pnnlmiscscripts/ | 03b3fed5bdbc | libxml2 | 2.9.10-r7 | 1 |
| pnnlmiscscripts/ | 2648032cb498 | libxml2 | 2.9.9-r5 | 1 |
| pnnlmiscscripts/ | 8af4c559fff0 | libxml2 | 2.9.10-r5 | 1 |
| pnnlmiscscripts/ | d710d31000ce | libxml2 | 2.9.10-r5 | 1 |
| rancher/ | e66f32d19eb9 | libxml2 | 2.9.3+dfsg1-1ubuntu0.7+esm1 | 1 |
| resouer/ | e2f198b49ba7 | libxml2 | 2.9.1+dfsg1-3ubuntu4.13+esm2 | 1 |
| saiakhil46/ | dc39ce11e5d0 | libxml2 | 2.9.10-r7 | 1 |
| scrapinghub/ | a5f89bc84606 | libxml2 | 2.9.4+dfsg1-6.1ubuntu1.4 | 1 |
| seafileltd/ | 6693911bcc40 | libxml2 | 2.9.10+dfsg-5ubuntu0.20.04.1 | 1 |
| seafileltd/ | 7ac833196f60 | libxml2 | 2.9.10+dfsg-5ubuntu0.20.04.1 | 1 |
| seafileltd/ | ed0fcda5e6a9 | libxml2 | 2.9.10+dfsg-5ubuntu0.20.04.1 | 1 |
| shlinkio/ | c6729db1d3a8 | libxml2 | 2.9.10-r7 | 1 |
| sismics/ | f4b0ef019cf1 | libxml2 | 2.9.4+dfsg1-6.1ubuntu1.4 | 1 |
| sosedoff/ | 85e0132e0cce | libxml2 | 2.9.9-r5 | 1 |
| stashapp/ | 24dbd7607174 | libxml2 | 2.9.10+dfsg-5ubuntu0.20.04.1 | 1 |
| statcan/ | 3921305425b8 | libxml2 | 2.9.10+dfsg-5ubuntu0.20.04.1 | 1 |
| swaggerapi/ | d434cac93813 | libxml2 | 2.9.9-r5 | 1 |
| taigaio/ | 4d367b1e1250 | libxml2 | 2.9.10-r7 | 1 |
| tensorflow/ | 1e3172090703 | libxml2 | 2.9.3+dfsg1-1ubuntu0.7+esm1 | 1 |
| testhubio/ | e86c2db53be8 | libxml2 | 2.9.10-r5 | 1 |
| timescale/ | 7758704d4a14 | libxml2 | 2.9.10-r7 | 1 |
| timothyclarke/ | 22c41e5ca7e2 | libxml2 | 2.9.3+dfsg1-1ubuntu0.7+esm1 | 1 |
| turt2live/ | bfbd459f89a5 | libxml2 | 2.9.10-r7 | 1 |
| vectorim/ | 080e313abd37 | libxml2 | 2.9.10-r6 | 1 |
| vectorim/ | 234bed2ac92a | libxml2 | 2.9.10-r6 | 1 |
| wallabag/ | 5e4c26a7fb4a | libxml2 | 2.9.10-r6 | 1 |
| wavefronthq/ | d1064d28f6eb | libxml2 | 2.9.4+dfsg1-6.1ubuntu1.4 | 1 |
| gcr.io/ | ca5c0f0771c8 | libxml2 | 2.9.10-r7 | 1 |
| gcr.io/ | 96dfb19838b8 | libxml2 | 2.9.10-r7 | 1 |
| gcr.io/ | e8bc6cf08613 | libxml2 | 2.9.3+dfsg1-1ubuntu0.7+esm1 | 1 |
| ghcr.io/ | 2a4667a761d9 | libxml2 | 2.9.10-r5 | 1 |
| ghcr.io/ | c5075f0320cd | libxml2 | 2.9.10-r6 | 1 |
| ghcr.io/ | 94a749392fcf | libxml2 | 2.9.10-r6 | 1 |
| ghcr.io/ | c17f1ba17d36 | libxml2 | 2.9.10-r6 | 1 |
| ghcr.io/ | 03aba499950f | libxml2 | 2.9.10-r6 | 1 |
| ghcr.io/ | deed102b4255 | libxml2 | 2.9.10-r6 | 1 |
| ghcr.io/ | 35225eaa87ab | libxml2 | 2.9.10-r6 | 1 |
| ghcr.io/ | 4ffe222b3e3a | libxml2 | 2.9.10-r6 | 1 |
| ghcr.io/ | 26d91dcbba56 | libxml2 | 2.9.10-r6 | 1 |
| ghcr.io/ | 834b8e1af290 | libxml2 | 2.9.10-r6 | 1 |
| ghcr.io/ | 72aae2080595 | libxml2 | 2.9.10-r6 | 1 |
| ghcr.io/ | ef77f4c089a1 | libxml2 | 2.9.10-r6 | 1 |
| ghcr.io/ | cd9656e6bc2c | libxml2 | 2.9.10-r6 | 1 |
| ghcr.io/ | c22764cbfa97 | libxml2 | 2.9.10-r6 | 1 |