StackRadar

CVE-2021-3520

Critical

Advisory

Published 30 Apr 2021In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.032
87th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
753
of 17,787 indexed, latest versions
Container images
555
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: lz4 security update

Carried by container images the latest versions of 753 of 17,787 indexed charts deploy, on 555 images.

Affected packageAffected versionsFixed inImages
lz4deb0.0~r131-2+b1, 0.0~r131-2ubuntu2, 0.0~r131-2ubuntu3, 1.8.3-1+1 more0.0~r131-2+deb9u1, 0.0~r131-2ubuntu2+esm1, 0.0~r131-2ubuntu3.1, 1.8.3-1+deb10u1+1 more511
lz4apk1.9.2-r0, 1.9.3-r01.9.2-r1, 1.9.3-r15
lz4rpm1.8.0-3.5.1, 1.8.0-lp151.3.3.1, 1.8.1.2-4.el8, 1.8.3-2.el80:1.8.3-3.el8_4, 1.8.0-3.8.1, 1.9.3-2.139
OSV records
ALPINE-CVE-2021-3520UBUNTU-CVE-2021-3520RHSA-2021:2575DLA-2657-1DSA-4919-1openSUSE-SU-2024:11562-1SUSE-SU-2021:1647-1
Also known as
USN-4968-1, USN-4968-2

Charts affected

753 by stars
ChartLatestAffected imagesRadar Score
repotestrepotest0.1.01 of 1See more

repotest repotest 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1

Open the chart page →

702
testchartsretrun-nginx-chart0.1.01 of 1See more

testcharts retrun-nginx-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1

Open the chart page →

702
bookinforgnu1.0.06 of 7See more

bookinfo rgnu 1.0.0

6 of the 7 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
istio/examples-bookinfo-details-v1:1.14.04c3379923c8a
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1
istio/examples-bookinfo-productpage-v1:1.14.022a0410f35a8
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1
istio/examples-bookinfo-ratings-v1:1.14.0eb0f1a725ca8
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1
istio/examples-bookinfo-reviews-v1:1.14.0ee156b8aefd6
lz4@0.0~r131-2ubuntu2
0.0~r131-2ubuntu2+esm1
istio/examples-bookinfo-reviews-v2:1.14.0eab80bcd2132
lz4@0.0~r131-2ubuntu2
0.0~r131-2ubuntu2+esm1
istio/examples-bookinfo-reviews-v3:1.14.01e37fca43550
lz4@0.0~r131-2ubuntu2
0.0~r131-2ubuntu2+esm1

Open the chart page →

20,480
httpbinrgnu1.0.01 of 1See more

httpbin rgnu 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
citizenstig/httpbin:latestb81c818ccb86
lz4@0.0~r131-2ubuntu2
0.0~r131-2ubuntu2+esm1

Open the chart page →

11,437
istio-bookinforgnu1.0.26 of 7See more

istio-bookinfo rgnu 1.0.2

6 of the 7 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
istio/examples-bookinfo-details-v1:1.14.04c3379923c8a
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1
istio/examples-bookinfo-productpage-v1:1.14.022a0410f35a8
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1
istio/examples-bookinfo-ratings-v1:1.14.0eb0f1a725ca8
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1
istio/examples-bookinfo-reviews-v1:1.14.0ee156b8aefd6
lz4@0.0~r131-2ubuntu2
0.0~r131-2ubuntu2+esm1
istio/examples-bookinfo-reviews-v2:1.14.0eab80bcd2132
lz4@0.0~r131-2ubuntu2
0.0~r131-2ubuntu2+esm1
istio/examples-bookinfo-reviews-v3:1.14.01e37fca43550
lz4@0.0~r131-2ubuntu2
0.0~r131-2ubuntu2+esm1

Open the chart page →

20,480
prometheusrgnu0.1.11 of 3See more

prometheus rgnu 0.1.1

1 of the 3 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
grafana/grafana:6.2.5ab415470454b
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1

Open the chart page →

1,102
pagesroccohiggins-pages1.0.02 of 3See more

pages roccohiggins-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
lz4@1.9.2-2
1.9.2-2ubuntu0.20.04.1
flyway/flyway:6.4.422d97ceb0c47
lz4@0.0~r131-2ubuntu3
0.0~r131-2ubuntu3.1

Open the chart page →

20,233
webrojandinc0.2.61 of 1See more

web rojandinc 0.2.6

1 of the 1 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1

Open the chart page →

702
argocdromholdings1.8.11 of 3See more

argocd romholdings 1.8.1

1 of the 3 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
lz4@1.8.3-1
1.8.3-1+deb10u1

Open the chart page →

10,468
clairromholdings0.1.141 of 2See more

clair romholdings 0.1.14

1 of the 2 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
quay.io/devtron/postgres:11.3ef035ac10498
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1

Open the chart page →

6,237
devtron-enterpriseromholdings48.0.01 of 28See more

devtron-enterprise romholdings 48.0.0

1 of the 28 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
lz4@0.0~r131-2ubuntu2
0.0~r131-2ubuntu2+esm1

Open the chart page →

66,542
dgraphromholdings0.0.201 of 1See more

dgraph romholdings 0.0.20

1 of the 1 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
lz4@1.9.2-2
1.9.2-2ubuntu0.20.04.1

Open the chart page →

11,957
pagesronan-pages1.0.02 of 3See more

pages ronan-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
lz4@1.9.2-2
1.9.2-2ubuntu0.20.04.1
flyway/flyway:6.4.422d97ceb0c47
lz4@0.0~r131-2ubuntu3
0.0~r131-2ubuntu3.1

Open the chart page →

20,233
myfirstchartrumburakgit-helm-charts-repo0.2.01 of 1See more

myfirstchart rumburakgit-helm-charts-repo 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kubenginxhelm:0.2.0ae2268dcc930
lz4@1.8.3-1
1.8.3-1+deb10u1

Open the chart page →

1,138
test-helm-app2saam-helm-test0.1.01 of 1See more

test-helm-app2 saam-helm-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
asdkant/fastapi-hello-world:latesta23d8bf7c885
lz4@1.8.3-1
1.8.3-1+deb10u1

Open the chart page →

2,771
testsaber0.1.01 of 1See more

test saber 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1

Open the chart page →

702
myfirstchartsabogithub-helm-charts-repo0.2.01 of 1See more

myfirstchart sabogithub-helm-charts-repo 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kubenginxhelm:0.2.0ae2268dcc930
lz4@1.8.3-1
1.8.3-1+deb10u1

Open the chart page →

1,138
myfirstchartsalomonguttmann-helm-charts-repository0.2.01 of 1See more

myfirstchart salomonguttmann-helm-charts-repository 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kubenginxhelm:0.2.0ae2268dcc930
lz4@1.8.3-1
1.8.3-1+deb10u1

Open the chart page →

1,138
pagessamanvithkaranth1.0.02 of 3See more

pages samanvithkaranth 1.0.0

2 of the 3 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
lz4@1.9.2-2
1.9.2-2ubuntu0.20.04.1
flyway/flyway:6.4.422d97ceb0c47
lz4@0.0~r131-2ubuntu3
0.0~r131-2ubuntu3.1

Open the chart page →

20,233
sample-nginxsample-chartsVerified publisher0.1.31 of 1See more

sample-nginx sample-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1

Open the chart page →

702
repotestsample-helm-chart0.1.01 of 1See more

repotest sample-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1

Open the chart page →

702
pagessarubits-pages1.0.02 of 3See more

pages sarubits-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
lz4@1.9.2-2
1.9.2-2ubuntu0.20.04.1
flyway/flyway:6.4.422d97ceb0c47
lz4@0.0~r131-2ubuntu3
0.0~r131-2ubuntu3.1

Open the chart page →

20,233
openldapschoolguys-helmcharts0.1.31 of 1See more

openldap schoolguys-helmcharts 0.1.3

1 of the 1 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
osixia/openldap:1.5.018742e9c449c
lz4@1.8.3-1
1.8.3-1+deb10u1

Open the chart page →

3,313
ldap-instance-configsciencebox0.0.11 of 1See more

ldap-instance-config sciencebox 0.0.1

1 of the 1 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
osixia/openldap:1.5.018742e9c449c
lz4@1.8.3-1
1.8.3-1+deb10u1

Open the chart page →

3,313
my-app-helmsekarrepoVerified publisher0.1.01 of 1See more

my-app-helm sekarrepo 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1

Open the chart page →

702
my-nginx-app1sekarrepoVerified publisher0.1.01 of 1See more

my-nginx-app1 sekarrepo 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1

Open the chart page →

702
pagessekharpkube1.0.02 of 3See more

pages sekharpkube 1.0.0

2 of the 3 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
lz4@1.9.2-2
1.9.2-2ubuntu0.20.04.1
flyway/flyway:6.4.422d97ceb0c47
lz4@0.0~r131-2ubuntu3
0.0~r131-2ubuntu3.1

Open the chart page →

20,233
seldon-core-loadtestingseldon0.2.01 of 1See more

seldon-core-loadtesting seldon 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
seldonio/locust-core:0.81d0da98a2d76
lz4@0.0~r131-2ubuntu2
0.0~r131-2ubuntu2+esm1

Open the chart page →

23,022
sentry-dbsentry0.9.41 of 10See more

sentry-db sentry 0.9.4

1 of the 10 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
yandex/clickhouse-server:19.16d210dc69321e
lz4@0.0~r131-2ubuntu3
0.0~r131-2ubuntu3.1

Open the chart page →

10,972
pagesshrutiujlan-pages1.0.02 of 3See more

pages shrutiujlan-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
lz4@1.9.2-2
1.9.2-2ubuntu0.20.04.1
flyway/flyway:6.4.422d97ceb0c47
lz4@0.0~r131-2ubuntu3
0.0~r131-2ubuntu3.1

Open the chart page →

20,233
nginxshubhamtatvamasiVerified publisher0.1.121 of 1See more

nginx shubhamtatvamasi 0.1.12

1 of the 1 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
library/nginx:1.19.68e1095642250
lz4@1.8.3-1
1.8.3-1+deb10u1

Open the chart page →

1,386
wordpressshubham-wordpress0.1.01 of 1See more

wordpress shubham-wordpress 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1

Open the chart page →

702
parkingsikalabs0.1.01 of 1See more

parking sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
ondrejsika/parking:latestb1fd497416c8
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1

Open the chart page →

3,696
bagetsimcube1.0.51 of 1See more

baget simcube 1.0.5

1 of the 1 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
loicsharma/baget:0b46f0ec87216e1dc6839277712ee07c1c2b611aa880c78ae80b
lz4@1.8.3-1
1.8.3-1+deb10u1

Open the chart page →

1,687
first-appsimple-helm-chart0.1.01 of 1See more

first-app simple-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
leeyoongti/first-app:1.0.021d66cb76352
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1

Open the chart page →

2,154
site-usbsite-usb0.1.01 of 1See more

site-usb site-usb 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
norskel/site-usb:id45fd6798558d
lz4@1.8.3-1
1.8.3-1+deb10u1

Open the chart page →

1,695
envoyslamdev0.0.171 of 2See more

envoy slamdev 0.0.17

1 of the 2 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.18.2e8b37c1d7578
lz4@0.0~r131-2ubuntu3
0.0~r131-2ubuntu3.1

Open the chart page →

4,705
fluentdslamdev0.0.61 of 1See more

fluentd slamdev 0.0.6

1 of the 1 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
fluent/fluentd-kubernetes-daemonset:v1.11.5-debian-forward-1.00717111a3362
lz4@1.8.3-1
1.8.3-1+deb10u1

Open the chart page →

1,384
weblateslamdev0.0.111 of 2See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
weblate/weblate:3.11.3-182848df56ecd
lz4@1.8.3-1
1.8.3-1+deb10u1

Open the chart page →

8,697
aafsmo-helm-chart6.0.01 of 14See more

aaf smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
lz4@0.0~r131-2ubuntu2
0.0~r131-2ubuntu2+esm1

Open the chart page →

25,793
aaismo-helm-chart6.0.02 of 14See more

aai smo-helm-chart 6.0.0

2 of the 14 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
aaionap/haproxy:1.4.089c1078a1b23
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1
oomk8s/readiness-check:2.0.2875814cc853d
lz4@0.0~r131-2ubuntu2
0.0~r131-2ubuntu2+esm1

Open the chart page →

25,827
dgbuildersmo-helm-chart6.0.01 of 3See more

dgbuilder smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
lz4@0.0~r131-2ubuntu2
0.0~r131-2ubuntu2+esm1

Open the chart page →

28,494
dmaap-listenersmo-helm-chart6.0.01 of 3See more

dmaap-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
lz4@0.0~r131-2ubuntu2
0.0~r131-2ubuntu2+esm1

Open the chart page →

25,793
elasticsearchsmo-helm-chart6.0.01 of 5See more

elasticsearch smo-helm-chart 6.0.0

1 of the 5 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
lz4@0.0~r131-2ubuntu2
0.0~r131-2ubuntu2+esm1

Open the chart page →

24,800
logsmo-helm-chart6.0.01 of 6See more

log smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
lz4@0.0~r131-2ubuntu2
0.0~r131-2ubuntu2+esm1

Open the chart page →

29,244
mariadb-initsmo-helm-chart6.0.01 of 2See more

mariadb-init smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
lz4@0.0~r131-2ubuntu2
0.0~r131-2ubuntu2+esm1

Open the chart page →

24,800
msbsmo-helm-chart6.0.01 of 6See more

msb smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
lz4@0.0~r131-2ubuntu2
0.0~r131-2ubuntu2+esm1

Open the chart page →

27,501
multicloudsmo-helm-chart6.0.01 of 14See more

multicloud smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
oomk8s/ubuntu-init:1.0.03adf3d21ad3b
lz4@0.0~r131-2ubuntu2
0.0~r131-2ubuntu2+esm1

Open the chart page →

9,442
pndasmo-helm-chart6.0.01 of 3See more

pnda smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
lz4@0.0~r131-2ubuntu2
0.0~r131-2ubuntu2+esm1

Open the chart page →

27,501
pombasmo-helm-chart6.0.01 of 17See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
lz4@0.0~r131-2ubuntu2
0.0~r131-2ubuntu2+esm1

Open the chart page →

29,244

Container images carrying it

555 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/opsmxpublic/bitnami-redis:5.0.7-debian-10-r09a8d95ca0bd9
lz4@1.8.3-1
1.8.3-1+deb10u1
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
lz4@0.0~r131-2ubuntu2
0.0~r131-2ubuntu2+esm1
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb:4.4.5cf72810d33f5
lz4@1.8.3-2.el8
0:1.8.3-3.el8_4
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
lz4@1.9.2-2
1.9.2-2ubuntu0.20.04.1
1
registry.gitlab.com/open-forms/design-catalogue:latestf21f19346b29
lz4@1.8.3-1
1.8.3-1+deb10u1
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.