CVE-2021-3521

Medium

Advisory

Published 22 Aug 2022In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.7; base score, highest
EPSS: 0.003; 25th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 55; of 17,781 indexed, latest versions
Container images: 57; deployed by those charts
Fix available: 1 of 2; affected packages

Red Hat Security Advisory: rpm security update

Carried by container images the latest versions of 55 of 17,781 indexed charts deploy, on 57 images.

Affected package	Affected versions	Fixed in	Images
rpmdeb	4.17.0+dfsg1-4build1	no fix listed	1
rpmrpm	4.14.1-lp151.13.10, 4.14.2-9.el8, 4.14.2-25.el8, 4.14.2-26.el8_1+7 more	0:4.14.3-14.el8_4.2, 0:4.14.3-19.el8_5.2, 4.17.1-1.1	56

OSV records: RHSA-2022:0254 RHSA-2022:0368 UBUNTU-CVE-2021-3521 openSUSE-SU-2024:12245-1
Also known as: RHSA-2022:0634

Charts affected

55 by stars

Chart

Latest

Affected images

Radar Score

minio-operatorstatcan

4.1.0

1 of 2 See more

minio-operator statcan 4.1.0

1 of the 2 container images this version deploys carry CVE-2021-3521.

Container image	Digest	Package	Fixed in
minio/operator :v4.1.0	2adc5be088f5	rpm@4.14.3-13.el8	0:4.14.3-14.el8_4.2

Open the chart page →

6,596

hermestouk

0.6.0

1 of 3 See more

hermes touk 0.6.0

1 of the 3 container images this version deploys carry CVE-2021-3521.

Container image	Digest	Package	Fixed in
apicurio/apicurio-registry-kafkasql :2.1.0.Final	a97d67487532	rpm@4.14.3-14.el8_4	0:4.14.3-14.el8_4.2

Open the chart page →

12,455

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2021-3521.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	rpm@4.14.3-14.el8_4	0:4.14.3-14.el8_4.2

Open the chart page →

28,605

miniowenerme

8.0.10

1 of 1 See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2021-3521.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	rpm@4.14.3-4.el8	0:4.14.3-19.el8_5.2

Open the chart page →

6,915

minio-standalonewenerme

1.0.2

1 of 1 See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2021-3521.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	rpm@4.14.3-19.el8	0:4.14.3-19.el8_5.2

Open the chart page →

6,138

Container images carrying it

57 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	rpm@4.14.3-4.el8	0:4.14.3-19.el8_5.2	3
quay.io/devtron/calico-networking :node-v3.19.1	bc4aa22272ef	rpm@4.14.3-13.el8	0:4.14.3-14.el8_4.2	3
quay.io/devtron/clair :4.3.6	75fb847ac045	rpm@4.14.3-19.el8	0:4.14.3-19.el8_5.2	3
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	rpm@4.14.3-19.el8	0:4.14.3-19.el8_5.2	3
minio/operator :v4.3.7	54393e03f3b2	rpm@4.14.3-19.el8	0:4.14.3-19.el8_5.2	2
quay.io/opencloudio/ibm-mongodb :4.0.24	d8c631a6dc43	rpm@4.14.3-13.el8	0:4.14.3-14.el8_4.2	2
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	rpm@4.14.3-14.el8_4.3	0:4.14.3-19.el8_5.2	2
quay.io/openshift/origin-cli :4.8	bb5e052770e5	rpm@4.14.3-14.el8_4.3	0:4.14.3-19.el8_5.2	2
anchore/anchore-engine :v0.10.0	bde9eedf639d	rpm@4.14.3-13.el8	0:4.14.3-14.el8_4.2	1
anchore/anchore-engine :v0.7.1	ed9b3badd17c	rpm@4.14.2-26.el8_1	0:4.14.3-19.el8_5.2	1
apicurio/apicurio-registry-kafkasql :2.1.0.Final	a97d67487532	rpm@4.14.3-14.el8_4	0:4.14.3-14.el8_4.2	1
bsgrigorov/helm-operator :latest	45ab095f09c8	rpm@4.14.3-4.el8	0:4.14.3-19.el8_5.2	1
cfcontainerization/cf-operator :v2.3.0-0.g27a91cdf	82fa261c18a8	rpm@4.14.1-lp151.13.10	4.17.1-1.1	1
cfcontainerization/quarks-job :v0.0.0-0.g70ae34b	58fb1c173a46	rpm@4.14.1-lp151.13.10	4.17.1-1.1	1
checkmk/check-mk-community :2.5.0p6	c11b422210c4	rpm@4.17.0+dfsg1-4build1	no fix listed	1
cockroachdb/cockroach-operator :v2.1.0	983312754620	rpm@4.14.3-14.el8_4	0:4.14.3-14.el8_4.2	1
confluentinc/cp-enterprise-control-center :6.1.0	f2975d507a2a	rpm@4.14.3-4.el8	0:4.14.3-19.el8_5.2	1
confluentinc/cp-enterprise-kafka :6.1.0	8f1544df1f48	rpm@4.14.3-4.el8	0:4.14.3-19.el8_5.2	1
confluentinc/cp-kafka-connect :6.1.0	4bc70a83ca6f	rpm@4.14.3-4.el8	0:4.14.3-19.el8_5.2	1
confluentinc/cp-kafka-rest :6.1.0	b0b7aa26254a	rpm@4.14.3-4.el8	0:4.14.3-19.el8_5.2	1
confluentinc/cp-ksqldb-server :6.1.0	ee403d5b9090	rpm@4.14.3-4.el8	0:4.14.3-19.el8_5.2	1
confluentinc/cp-schema-registry :6.1.0	b651d4b6185a	rpm@4.14.3-4.el8	0:4.14.3-19.el8_5.2	1
confluentinc/cp-zookeeper :6.1.0	78c190f4472c	rpm@4.14.3-4.el8	0:4.14.3-19.el8_5.2	1
craftypath/sops-operator :v0.8.0	402a0024c732	rpm@4.14.3-13.el8	0:4.14.3-14.el8_4.2	1
ctron/hawkbit-operator :0.1.4	8fdea8f76499	rpm@4.14.2-37.el8	0:4.14.3-19.el8_5.2	1
datadog/extendeddaemonset :v0.8.0	513a4377aed5	rpm@4.14.3-19.el8	0:4.14.3-19.el8_5.2	1
datawire/ambassador-operator :v1.3.0	f95ae710d75c	rpm@4.14.3-14.el8_4	0:4.14.3-14.el8_4.2	1
ibmcom/ibmcloud-object-storage-driver :1.8.16	c796a4c693b4	rpm@4.14.2-37.el8	0:4.14.3-19.el8_5.2	1
ibmcom/ibmcloud-object-storage-plugin :1.8.16	9c73804b37a3	rpm@4.14.2-37.el8	0:4.14.3-19.el8_5.2	1
ibmcom/ibm-enterprise-mongodb-ppc64le :4.4	d28bf361327a	rpm@4.14.3-4.el8	0:4.14.3-19.el8_5.2	1
ibmcom/opencontent-common-utils :1.1.2	cd5065df7304	rpm@4.14.2-9.el8	0:4.14.3-19.el8_5.2	1
minio/mc :RELEASE.2021-02-14T04-28-06Z	2a374c124d44	rpm@4.14.3-4.el8	0:4.14.3-19.el8_5.2	1
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	rpm@4.14.3-19.el8	0:4.14.3-19.el8_5.2	1
minio/operator :v4.1.0	2adc5be088f5	rpm@4.14.3-13.el8	0:4.14.3-14.el8_4.2	1
pnnlmiscscripts/gitlab-runner-operator :0.1.3-1	155131891741	rpm@4.14.2-25.el8	0:4.14.3-19.el8_5.2	1
seldonio/seldon-request-logger :1.11.2	4e985d2006a8	rpm@4.14.3-14.el8_4	0:4.14.3-14.el8_4.2	1
ghcr.io/ctron/ditto-operator :0.4.0	61a9bb81b85c	rpm@4.14.3-19.el8	0:4.14.3-19.el8_5.2	1
ghcr.io/ctron/streamsheets-base :2.4.0	0cf25ed621e2	rpm@4.14.3-14.el8_4	0:4.14.3-14.el8_4.2	1
ghcr.io/ctron/streamsheets-gateway :2.4.0	0635f17c9d2c	rpm@4.14.3-14.el8_4	0:4.14.3-14.el8_4.2	1
ghcr.io/ctron/streamsheets-service-graphs :2.4.0	e34964e336c1	rpm@4.14.3-14.el8_4	0:4.14.3-14.el8_4.2	1
ghcr.io/ctron/streamsheets-service-machines :2.4.0	0c5a3398d1e4	rpm@4.14.3-14.el8_4	0:4.14.3-14.el8_4.2	1
ghcr.io/ctron/streamsheets-service-streams :2.4.0	8ba040e79ca0	rpm@4.14.3-14.el8_4	0:4.14.3-14.el8_4.2	1
ghcr.io/jenkins-x/nexus :0.1.37	8caf5289fe73	rpm@4.14.2-37.el8	0:4.14.3-19.el8_5.2	1
quay.io/backube/scribe :0.2.0	cdefc81c6b2e	rpm@4.14.3-13.el8	0:4.14.3-14.el8_4.2	1
quay.io/ctrontesting/iofog-controller :latest	10df27bc5560	rpm@4.14.3-14.el8_4	0:4.14.3-14.el8_4.2	1
quay.io/eformat/jenkins-agent-graalvm :latest	a3b9a07648b6	rpm@4.14.3-14.el8_4	0:4.14.3-14.el8_4.2	1
quay.io/fiware/canis-major :1.5.15	bb40472e4ff5	rpm@4.14.3-19.el8	0:4.14.3-19.el8_5.2	1
quay.io/fiware/orion-ld :1.0.1	ea838e5b4051	rpm@4.14.3-14.el8_4	0:4.14.3-19.el8_5.2	1
quay.io/ibmgaragecloud/developer-dashboard :v1.4.4	7a4b9fedc724	rpm@4.14.2-37.el8	0:4.14.3-19.el8_5.2	1
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	rpm@4.14.3-14.el8_4	0:4.14.3-14.el8_4.2	1