StackRadar

CVE-2021-3520

Critical

Advisory

Published 30 Apr 2021In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.032
87th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
751
of 17,787 indexed, latest versions
Container images
553
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: lz4 security update

Carried by container images the latest versions of 751 of 17,787 indexed charts deploy, on 553 images.

Affected packageAffected versionsFixed inImages
lz4deb0.0~r131-2+b1, 0.0~r131-2ubuntu2, 0.0~r131-2ubuntu3, 1.8.3-1+1 more0.0~r131-2+deb9u1, 0.0~r131-2ubuntu2+esm1, 0.0~r131-2ubuntu3.1, 1.8.3-1+deb10u1+1 more509
lz4apk1.9.2-r0, 1.9.3-r01.9.2-r1, 1.9.3-r15
lz4rpm1.8.0-3.5.1, 1.8.0-lp151.3.3.1, 1.8.1.2-4.el8, 1.8.3-2.el80:1.8.3-3.el8_4, 1.8.0-3.8.1, 1.9.3-2.139
OSV records
ALPINE-CVE-2021-3520UBUNTU-CVE-2021-3520RHSA-2021:2575DLA-2657-1DSA-4919-1openSUSE-SU-2024:11562-1SUSE-SU-2021:1647-1
Also known as
USN-4968-1, USN-4968-2

Charts affected

751 by stars
ChartLatestAffected imagesRadar Score
myfirstchartzikilabVerified publisher0.2.01 of 1See more

myfirstchart zikilab 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-3520.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kubenginxhelm:0.2.0ae2268dcc930
lz4@1.8.3-1
1.8.3-1+deb10u1

Open the chart page →

1,138

Container images carrying it

553 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
amancevice/superset:0.28.1c8c04bfe3d66
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1
1
amartinm82/planner:v2.01184353ff57b
lz4@1.8.3-1
1.8.3-1+deb10u1
1
amundsendev/amundsen-frontend:2.1.169e7915e61c1
lz4@1.8.3-1
1.8.3-1+deb10u1
1
amundsendev/amundsen-metadata:2.5.44d98eb21f5f9
lz4@1.8.3-1
1.8.3-1+deb10u1
1
amundsendev/amundsen-search:2.4.099dda9502c3e
lz4@1.8.3-1
1.8.3-1+deb10u1
1
anchore/anchore-engine:v0.10.0bde9eedf639d
lz4@1.8.3-2.el8
0:1.8.3-3.el8_4
1
anchore/anchore-engine:v0.7.1ed9b3badd17c
lz4@1.8.1.2-4.el8
0:1.8.3-3.el8_4
1
aolde/bredbandskollen-prometheus-exporter:1.0.2dc61ee713720
lz4@1.8.3-1
1.8.3-1+deb10u1
1
apache/couchdb:2.39f895c8ae371
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1
1
apache/iotdb:0.11.28647309f95d1
lz4@1.8.3-1
1.8.3-1+deb10u1
1
apache/nifi-registry:1.14.0090b7f87ec7f
lz4@1.8.3-1
1.8.3-1+deb10u1
1
apache/nifi-registry:0.8.0974efa2f21da
lz4@1.8.3-1
1.8.3-1+deb10u1
1
apachepulsar/pulsar:2.6.14db6ff0b4045
lz4@1.8.3-1
1.8.3-1+deb10u1
1
apsl/thumbor:6.7.051e2de5c2c70
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1
1
aquasec/kube-hunter:1950bf607ce9308
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1
1
argoproj/argocd:v1.2.1b0230853357d
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1
1
arilot/docker-bitcoind:0.17.127a4f7e0f9f1
lz4@0.0~r131-2ubuntu2
0.0~r131-2ubuntu2+esm1
1
asdkant/fastapi-hello-world:latesta23d8bf7c885
lz4@1.8.3-1
1.8.3-1+deb10u1
1
assistiot/fl_repository:latest0fce3ea719a5
lz4@1.8.3-1
1.8.3-1+deb10u1
1
assistiot/fl_training_collector:latest792715dd3084
lz4@1.8.3-1
1.8.3-1+deb10u1
1
badsmoke/wunderground_exporter:0.0.5c54c004f24cc
lz4@1.8.3-1
1.8.3-1+deb10u1
1
bastilimbach/docker-magicmirror:v2.15.041b0835ab31e
lz4@1.8.3-1
1.8.3-1+deb10u1
1
beastob/foldingathome-arm64:7.6.21a90086a2c53e
lz4@1.8.3-1
1.8.3-1+deb10u1
1
benbusby/whoogle-search:0.5.4f77f7e6e4ad2
lz4@1.8.3-1
1.8.3-1+deb10u1
1
beubi/webencryptor:latesta02c2e200920
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1
1
bitnamilegacy/kubectl:1.18.850c5c23d5e8c
lz4@1.8.3-1
1.8.3-1+deb10u1
1
bitnamilegacy/mongodb:3.6.213e51da56fc54
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1
1
bitnamilegacy/mongodb:4.4.5e3c9d6b4bc92
lz4@1.8.3-1
1.8.3-1+deb10u1
1
bitnamilegacy/postgresql:11.8.0c3f10b41989f
lz4@1.8.3-1
1.8.3-1+deb10u1
1
bivas/presto:0.19605545994f806
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1
1
brannondorsey/fah:7.5.17bd011904534
lz4@1.8.3-1
1.8.3-1+deb10u1
1
brannondorsey/mprime:p95v303b62f957f0839c2
lz4@1.8.3-1
1.8.3-1+deb10u1
1
bryanalves/honeywell_exporter:0.0.1195f73dce8b21
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1
1
bryanalves/smart_exporter:0.2af47dfbb9413
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1
1
bsgrigorov/helm-operator:latest45ab095f09c8
lz4@1.8.3-2.el8
0:1.8.3-3.el8_4
1
camptocamp/ekorre:0.1.035c91d5fda04
lz4@1.8.3-1
1.8.3-1+deb10u1
1
camptocamp/pghoard:10bff736b15623
lz4@0.0~r131-2+b1
0.0~r131-2+deb9u1
1
camptocamp/puppet-catalog-diff-viewer:0.6.078b77c838569
lz4@1.8.3-1
1.8.3-1+deb10u1
1
cdignam/kodiak:v0.54.05a6a55b39cee
lz4@1.8.3-1
1.8.3-1+deb10u1
1
ceticasbl/pg-ldap-sync:latest6c0aa7567145
lz4@1.8.3-1
1.8.3-1+deb10u1
1
ceticasbl/tsimulus-saas:0.1.18bc34ce180d0c
lz4@1.8.3-1
1.8.3-1+deb10u1
1
cfcontainerization/cf-operator:v2.3.0-0.g27a91cdf82fa261c18a8
lz4@1.8.0-lp151.3.3.1
1.9.3-2.1
1
cfcontainerization/quarks-job:v0.0.0-0.g70ae34b58fb1c173a46
lz4@1.8.0-lp151.3.3.1
1.9.3-2.1
1
cfcontainerization/quarks-job:v0.0.124-g03faac87366b11c5fa5
lz4@1.8.0-3.5.1
1.8.0-3.8.1
1
cfcontainerization/quarks-secret:v0.0.677-ga060bb643131dbc0c8f
lz4@1.8.0-3.5.1
1.8.0-3.8.1
1
chetangautamm/repo:sipp.v3e7f7049e1544
lz4@1.9.2-2
1.9.2-2ubuntu0.20.04.1
1
cheyang/distributed-tf:1.6.046cc34755493
lz4@0.0~r131-2ubuntu2
0.0~r131-2ubuntu2+esm1
1
citizenstig/httpbin:latestb81c818ccb86
lz4@0.0~r131-2ubuntu2
0.0~r131-2ubuntu2+esm1
1
ckulka/baikal:0.8.0aedb1f4f3fa0
lz4@1.8.3-1
1.8.3-1+deb10u1
1
cloudve/janis-terminal:latestaf56e77ca587
lz4@0.0~r131-2ubuntu3
0.0~r131-2ubuntu3.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.