StackRadar

CVE-2021-3520

Critical

Advisory

Published 30 Apr 2021In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.032
87th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
751
of 17,781 indexed, latest versions
Container images
553
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: lz4 security update

Carried by container images the latest versions of 751 of 17,781 indexed charts deploy, on 553 images.

Affected packageAffected versionsFixed inImages
lz4deb0.0~r131-2+b1, 0.0~r131-2ubuntu2, 0.0~r131-2ubuntu3, 1.8.3-1+1 more0.0~r131-2+deb9u1, 0.0~r131-2ubuntu2+esm1, 0.0~r131-2ubuntu3.1, 1.8.3-1+deb10u1+1 more509
lz4apk1.9.2-r0, 1.9.3-r01.9.2-r1, 1.9.3-r15
lz4rpm1.8.0-3.5.1, 1.8.0-lp151.3.3.1, 1.8.1.2-4.el8, 1.8.3-2.el80:1.8.3-3.el8_4, 1.8.0-3.8.1, 1.9.3-2.139
OSV records
ALPINE-CVE-2021-3520UBUNTU-CVE-2021-3520RHSA-2021:2575DLA-2657-1DSA-4919-1openSUSE-SU-2024:11562-1SUSE-SU-2021:1647-1
Also known as
USN-4968-1, USN-4968-2

Charts affected

751 by stars
ChartLatestAffected imagesRadar Score
myfirstchartzikilabVerified publisher0.2.01 of 1See more

myfirstchart zikilab 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kubenginxhelm:0.2.0ae2268dcc930
lz4@1.8.3-1
1.8.3-1+deb10u1

Open the chart page →

1,138

Container images carrying it

553 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
istio/examples-bookinfo-productpage-v1:1.14.022a0410f35a8
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1
2
istio/examples-bookinfo-ratings-v1:1.15.009b9d6958a13
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1
2
istio/examples-bookinfo-ratings-v1:1.14.0eb0f1a725ca8
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1
2
istio/examples-bookinfo-reviews-v1:1.15.040e8aba77c1b
lz4@0.0~r131-2ubuntu2
0.0~r131-2ubuntu2+esm1
2
istio/examples-bookinfo-reviews-v1:1.14.0ee156b8aefd6
lz4@0.0~r131-2ubuntu2
0.0~r131-2ubuntu2+esm1
2
istio/examples-bookinfo-reviews-v2:1.15.0e86d247b7ac2
lz4@0.0~r131-2ubuntu2
0.0~r131-2ubuntu2+esm1
2
istio/examples-bookinfo-reviews-v2:1.14.0eab80bcd2132
lz4@0.0~r131-2ubuntu2
0.0~r131-2ubuntu2+esm1
2
istio/examples-bookinfo-reviews-v3:1.14.01e37fca43550
lz4@0.0~r131-2ubuntu2
0.0~r131-2ubuntu2+esm1
2
istio/examples-bookinfo-reviews-v3:1.15.0e454cab754cf
lz4@0.0~r131-2ubuntu2
0.0~r131-2ubuntu2+esm1
2
istio/kubectl:1.5.10dbb7726d1bf0
lz4@0.0~r131-2ubuntu3
0.0~r131-2ubuntu3.1
2
larribas/mlflow:1.9.105ccb0b46bfb
lz4@1.8.3-1
1.8.3-1+deb10u1
2
library/cassandra:3.11.65aa8400b4b3b
lz4@0.0~r131-2ubuntu3
0.0~r131-2ubuntu3.1
2
library/mongo:4.2.358b25d51baa1
lz4@0.0~r131-2ubuntu3
0.0~r131-2ubuntu3.1
2
library/mysql:5.7.3032f9d9a069f7
lz4@1.8.3-1
1.8.3-1+deb10u1
2
library/mysql:8.0.199643e9fbd633
lz4@1.8.3-1
1.8.3-1+deb10u1
2
library/nginx:1.176fff55753e3b
lz4@1.8.3-1
1.8.3-1+deb10u1
2
library/nginx:1.13.12b1d09e971889
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1
2
library/postgres:11.5b3770d9c4ef1
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1
2
library/ubuntu:16.04:xenial1f1a2d56de1d
lz4@0.0~r131-2ubuntu2
0.0~r131-2ubuntu2+esm1
2
library/zookeeper:3.6.180ad2170ad62
lz4@1.8.3-1
1.8.3-1+deb10u1
2
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
lz4@0.0~r131-2ubuntu2
0.0~r131-2ubuntu2+esm1
2
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
lz4@1.8.3-1
1.8.3-1+deb10u1
2
martinaif/backstage-k8s-demo-frontend:test1f07fbe15e5b5
lz4@1.8.3-1
1.8.3-1+deb10u1
2
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
lz4@1.9.2-2
1.9.2-2ubuntu0.20.04.1
2
nachomillangarcia/prometheus_aws_cost_exporter:lateste4ce056f2d6d
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1
2
ncsa/checks:1.0.0abf6300b57b7
lz4@1.8.3-1
1.8.3-1+deb10u1
2
neilpeterson/azure-vote-front:v384062718347c
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1
2
ngick8stesting/c3po-mmeinit:latest1e764eab77b4
lz4@0.0~r131-2ubuntu3
0.0~r131-2ubuntu3.1
2
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
lz4@0.0~r131-2ubuntu2
0.0~r131-2ubuntu2+esm1
2
openmf/community-app:latest496b60a51f28
lz4@1.8.3-1
1.8.3-1+deb10u1
2
osixia/openldap:1.4.0ccd95cc6e61e
lz4@1.8.3-1
1.8.3-1+deb10u1
2
osixia/openldap:1.2.4d212a12aa728
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1
2
radondb/pgpool:4.2.2-debian-10-r1801ef77b5b87
lz4@1.8.3-1
1.8.3-1+deb10u1
2
radondb/postgresql-repmgr:11.11.0-debian-r1bcfb7f67c6f5
lz4@1.8.3-1
1.8.3-1+deb10u1
2
rodolpheche/wiremock:2.26.03be08a386092
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1
2
solsson/kafka-prometheus-jmx-exporter6f82e2b0464f
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1
2
statsd/statsd:v0.8.6dab129e74c25
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1
2
ujamii/prometheus-sentry-exporter:0.5.06243197349e1
lz4@1.8.3-1
1.8.3-1+deb10u1
2
weblate/weblate:4.2.2-169c160d37a3c
lz4@1.8.3-1
1.8.3-1+deb10u1
2
gcr.io/google_containers/kubernetes-dashboard-init-amd64:v1.0.0fbe12aa24de6
lz4@0.0~r131-2ubuntu2
0.0~r131-2ubuntu2+esm1
2
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
lz4@0.0~r131-2ubuntu3
0.0~r131-2ubuntu3.1
2
quay.io/opencloudio/ibm-mongodb:4.0.24d8c631a6dc43
lz4@1.8.3-2.el8
0:1.8.3-3.el8_4
2
a10networks/acos-prometheus-exporter:latest8dc58d434d71
lz4@0.0~r131-2ubuntu3
0.0~r131-2ubuntu3.1
1
aaionap/haproxy:1.4.089c1078a1b23
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1
1
adferrand/backuppc:4.4.06fea97b02758
lz4@1.9.2-r0
1.9.2-r1
1
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
lz4@1.9.2-2
1.9.2-2ubuntu0.20.04.1
1
aerospike/aerospike-server:4.5.0.55bec98d46c8a
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1
1
afrank/mozalert-controller:latestd463c37b08d7
lz4@1.8.3-1
1.8.3-1+deb10u1
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
lz4@1.9.2-2
1.9.2-2ubuntu0.20.04.1
1
alphayax/phpmemcachedadmin:latestc284977f027a
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.