StackRadar

CVE-2021-35331

High

Advisory

Published 5 Jul 2021In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.016
75th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
39
of 17,781 indexed, latest versions
Container images
51
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 39 of 17,781 indexed charts deploy, on 51 images.

Affected packageAffected versionsFixed inImages
tcl8.6deb8.6.13+dfsg-2, 8.6.16+dfsg-1no fix listed51
OSV records
DEBIAN-CVE-2021-35331

Charts affected

39 by stars
ChartLatestAffected imagesRadar Score
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
tcl8.6@8.6.13+dfsg-2
no fix listed

Open the chart page →

96,941
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
tcl8.6@8.6.16+dfsg-1
no fix listed

Open the chart page →

9,316
pretixtechwolf12Verified publisher2026.7.01 of 3See more

pretix techwolf12 2026.7.0

1 of the 3 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
pretix/standalone:2026.7.05df3b7aa852e
tcl8.6@8.6.16+dfsg-1
no fix listed

Open the chart page →

9,770
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
tcl8.6@8.6.16+dfsg-1
no fix listed

Open the chart page →

11,205
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
tcl8.6@8.6.16+dfsg-1
no fix listed

Open the chart page →

11,764
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
tcl8.6@8.6.13+dfsg-2
no fix listed

Open the chart page →

31,844
kyoorubxkubeVerified publisher0.1.102 of 9See more

kyoo rubxkube 0.1.10

2 of the 9 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
tcl8.6@8.6.13+dfsg-2
no fix listed
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
tcl8.6@8.6.13+dfsg-2
no fix listed

Open the chart page →

30,234
mathesarandrenarchyVerified publisher1.8.01 of 1See more

mathesar andrenarchy 1.8.0

1 of the 1 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
mathesar/mathesar:0.12.0091757cb01fe
tcl8.6@8.6.13+dfsg-2
no fix listed

Open the chart page →

7,239
smartorchestratorassist-iot-smart-orchestrator4.0.01 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

1 of the 14 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
tcl8.6@8.6.13+dfsg-2
no fix listed

Open the chart page →

45,363
tetragon-policy-buildercamptocamp30.1.11 of 1See more

tetragon-policy-builder camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
tcl8.6@8.6.13+dfsg-2
no fix listed

Open the chart page →

10,776
pbcore-utilcluster-deploy0.0.11 of 1See more

pbcore-util cluster-deploy 0.0.1

1 of the 1 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
tcl8.6@8.6.13+dfsg-2
no fix listed

Open the chart page →

9,128
wizarrdjjudas21Verified publisher0.1.51 of 1See more

wizarr djjudas21 0.1.5

1 of the 1 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
tcl8.6@8.6.13+dfsg-2
no fix listed

Open the chart page →

14,627
iotaeclipse-aeriosVerified publisher1.0.21 of 4See more

iota eclipse-aerios 1.0.2

1 of the 4 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
tcl8.6@8.6.16+dfsg-1
no fix listed

Open the chart page →

13,391
mod-z3950folio-org0.1.31 of 1See more

mod-z3950 folio-org 0.1.3

1 of the 1 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
folioci/mod-z3950:latest2493041ce880
tcl8.6@8.6.16+dfsg-1
no fix listed

Open the chart page →

2,442
sdtdgeek-cookbookVerified publisher0.3.21 of 1See more

sdtd geek-cookbook 0.3.2

1 of the 1 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
ghcr.io/reitermarkus/7d2d:main39953b387b61
tcl8.6@8.6.16+dfsg-1
no fix listed

Open the chart page →

2,511
chiefonboardinghelmforgeVerified publisher1.1.141 of 3See more

chiefonboarding helmforge 1.1.14

1 of the 3 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
tcl8.6@8.6.16+dfsg-1
no fix listed

Open the chart page →

10,849
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
tcl8.6@8.6.13+dfsg-2
no fix listed

Open the chart page →

12,607
intelowlintelowl-helm6.6.1-01-06-20261 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
tcl8.6@8.6.13+dfsg-2
no fix listed

Open the chart page →

17,852
kubeflowkromanow94-kubeflow0.5.12 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

2 of the 30 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
tcl8.6@8.6.13+dfsg-2
no fix listed
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
tcl8.6@8.6.13+dfsg-2
no fix listed

Open the chart page →

70,530
mindsdbkronkltdVerified publisher0.1.01 of 1See more

mindsdb kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
mindsdb/mindsdb:latest163011c09299
tcl8.6@8.6.16+dfsg-1
no fix listed

Open the chart page →

9,620
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
tcl8.6@8.6.13+dfsg-2
no fix listed

Open the chart page →

43,341
mum-discord-botmum-discord-botVerified publisher0.3.71 of 1See more

mum-discord-bot mum-discord-bot 0.3.7

1 of the 1 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
tcl8.6@8.6.13+dfsg-2
no fix listed

Open the chart page →

13,686
smilencsaVerified publisher1.1.04 of 23See more

smile ncsa 1.1.0

4 of the 23 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
tcl8.6@8.6.13+dfsg-2
no fix listed
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
tcl8.6@8.6.13+dfsg-2
no fix listed
socialmediamacroscope/preprocessing:0.1.3ca863306314b
tcl8.6@8.6.13+dfsg-2
no fix listed
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
tcl8.6@8.6.13+dfsg-2
no fix listed

Open the chart page →

109,294
opencost-parquet-exporteropencostVerified publisher0.3.11 of 1See more

opencost-parquet-exporter opencost 0.3.1

1 of the 1 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
tcl8.6@8.6.13+dfsg-2
no fix listed

Open the chart page →

10,978
phronetisphronetis0.1.271 of 2See more

phronetis phronetis 0.1.27

1 of the 2 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
knspar/phronetis-operator:0.1.60c4f0543ee58
tcl8.6@8.6.13+dfsg-2
no fix listed

Open the chart page →

16,196
pingdom-operatorpingdom-operator0.0.201 of 1See more

pingdom-operator pingdom-operator 0.0.20

1 of the 1 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
tcl8.6@8.6.13+dfsg-2
no fix listed

Open the chart page →

11,923
pod-birdspod-birds0.1.01 of 1See more

pod-birds pod-birds 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
teknas09/bird-pod:latest12a1fa85c4aa
tcl8.6@8.6.13+dfsg-2
no fix listed

Open the chart page →

12,912
pyredispyredis-helm0.1.01 of 2See more

pyredis pyredis-helm 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
avinash263/pyredis263:latestaa2b8727f1a6
tcl8.6@8.6.13+dfsg-2
no fix listed

Open the chart page →

14,537
mychartpythonweb0.1.01 of 1See more

mychart pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
tcl8.6@8.6.13+dfsg-2
no fix listed

Open the chart page →

12,566
mypythonpythonweb0.1.01 of 1See more

mypython pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
tcl8.6@8.6.13+dfsg-2
no fix listed

Open the chart page →

12,566
cupsr2dlan-helm-chartsVerified publisher0.1.01 of 1See more

cups r2dlan-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
anujdatar/cups:25.07.01685df04a643b
tcl8.6@8.6.13+dfsg-2
no fix listed

Open the chart page →

7,685
transmissionryuunosukeds31.6.21 of 2See more

transmission ryuunosukeds3 1.6.2

1 of the 2 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
library/python:3.9da5aee29682d
tcl8.6@8.6.16+dfsg-1
no fix listed

Open the chart page →

9,534
spacecapybara-chartspacecapy1.0.491 of 2See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
sashafefler/spacecapybara_app:latestf96d7804c0ca
tcl8.6@8.6.13+dfsg-2
no fix listed

Open the chart page →

11,888
servicexssl-hep1.8.510 of 16See more

servicex ssl-hep 1.8.5

10 of the 16 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
library/python:3.1070c9cc675605
tcl8.6@8.6.16+dfsg-1
no fix listed
sslhep/servicex_app:v1.8.51d12f943cec5
tcl8.6@8.6.16+dfsg-1
no fix listed
sslhep/servicex_code_gen_atlas_xaod:v1.8.5e7aff7f97b89
tcl8.6@8.6.16+dfsg-1
no fix listed
sslhep/servicex_code_gen_func_adl_uproot:v1.8.5b01b8ee966ed
tcl8.6@8.6.16+dfsg-1
no fix listed
sslhep/servicex_code_gen_python:v1.8.50e4175a4e1eb
tcl8.6@8.6.16+dfsg-1
no fix listed
sslhep/servicex_code_gen_raw_uproot:v1.8.5671980005c57
tcl8.6@8.6.16+dfsg-1
no fix listed
sslhep/servicex_code_gen_topcp:v1.8.5596db2abdd09
tcl8.6@8.6.16+dfsg-1
no fix listed
sslhep/servicex-did-finder-atlasopenmagic:v1.8.554aaf1721d03
tcl8.6@8.6.16+dfsg-1
no fix listed
sslhep/servicex-did-finder-cernopendata:v1.8.52cb88ceab5bb
tcl8.6@8.6.16+dfsg-1
no fix listed
sslhep/servicex-did-finder-xrootd:v1.8.5c284442b44e3
tcl8.6@8.6.16+dfsg-1
no fix listed

Open the chart page →

66,266
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
tcl8.6@8.6.13+dfsg-2
no fix listed

Open the chart page →

20,223
verbasubstratusVerified publisher0.4.01 of 1See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
substratusai/verba:v0.4.0-baseURL261695be635eb
tcl8.6@8.6.13+dfsg-2
no fix listed

Open the chart page →

13,390
nagvissvtech-public-helm-charts1.0.01 of 1See more

nagvis svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
tcl8.6@8.6.13+dfsg-2
no fix listed

Open the chart page →

9,102
cronjobt3n0.1.01 of 1See more

cronjob t3n 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
library/python:3.8d41127070014
tcl8.6@8.6.13+dfsg-2
no fix listed

Open the chart page →

11,199
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2021-35331.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
tcl8.6@8.6.13+dfsg-2
no fix listed

Open the chart page →

14,358

Container images carrying it

51 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/python:3.7eedf63967cdb
tcl8.6@8.6.13+dfsg-2
no fix listed
2
qichenxu4pd/pythonexample:1.0f3a8502bc21b
tcl8.6@8.6.13+dfsg-2
no fix listed
2
anujdatar/cups:25.07.01685df04a643b
tcl8.6@8.6.13+dfsg-2
no fix listed
1
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
tcl8.6@8.6.13+dfsg-2
no fix listed
1
avinash263/pyredis263:latestaa2b8727f1a6
tcl8.6@8.6.13+dfsg-2
no fix listed
1
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
tcl8.6@8.6.16+dfsg-1
no fix listed
1
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
tcl8.6@8.6.16+dfsg-1
no fix listed
1
folioci/mod-z3950:latest2493041ce880
tcl8.6@8.6.16+dfsg-1
no fix listed
1
intelowlproject/intelowl:v6.6.10b22e547ea6b
tcl8.6@8.6.13+dfsg-2
no fix listed
1
knspar/phronetis-operator:0.1.60c4f0543ee58
tcl8.6@8.6.13+dfsg-2
no fix listed
1
library/python:3.1070c9cc675605
tcl8.6@8.6.16+dfsg-1
no fix listed
1
library/python:3.8d41127070014
tcl8.6@8.6.13+dfsg-2
no fix listed
1
library/python:3.9da5aee29682d
tcl8.6@8.6.16+dfsg-1
no fix listed
1
mathesar/mathesar:0.12.0091757cb01fe
tcl8.6@8.6.13+dfsg-2
no fix listed
1
mindsdb/mindsdb:latest163011c09299
tcl8.6@8.6.16+dfsg-1
no fix listed
1
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
tcl8.6@8.6.13+dfsg-2
no fix listed
1
muhammedgamal/fp23:latest74b4cd69b6fa
tcl8.6@8.6.13+dfsg-2
no fix listed
1
pretix/standalone:2026.7.05df3b7aa852e
tcl8.6@8.6.16+dfsg-1
no fix listed
1
sashafefler/spacecapybara_app:latestf96d7804c0ca
tcl8.6@8.6.13+dfsg-2
no fix listed
1
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
tcl8.6@8.6.13+dfsg-2
no fix listed
1
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
tcl8.6@8.6.13+dfsg-2
no fix listed
1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
tcl8.6@8.6.13+dfsg-2
no fix listed
1
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
tcl8.6@8.6.13+dfsg-2
no fix listed
1
sslhep/servicex_app:v1.8.51d12f943cec5
tcl8.6@8.6.16+dfsg-1
no fix listed
1
sslhep/servicex_code_gen_atlas_xaod:v1.8.5e7aff7f97b89
tcl8.6@8.6.16+dfsg-1
no fix listed
1
sslhep/servicex_code_gen_func_adl_uproot:v1.8.5b01b8ee966ed
tcl8.6@8.6.16+dfsg-1
no fix listed
1
sslhep/servicex_code_gen_python:v1.8.50e4175a4e1eb
tcl8.6@8.6.16+dfsg-1
no fix listed
1
sslhep/servicex_code_gen_raw_uproot:v1.8.5671980005c57
tcl8.6@8.6.16+dfsg-1
no fix listed
1
sslhep/servicex_code_gen_topcp:v1.8.5596db2abdd09
tcl8.6@8.6.16+dfsg-1
no fix listed
1
sslhep/servicex-did-finder-atlasopenmagic:v1.8.554aaf1721d03
tcl8.6@8.6.16+dfsg-1
no fix listed
1
sslhep/servicex-did-finder-cernopendata:v1.8.52cb88ceab5bb
tcl8.6@8.6.16+dfsg-1
no fix listed
1
sslhep/servicex-did-finder-xrootd:v1.8.5c284442b44e3
tcl8.6@8.6.16+dfsg-1
no fix listed
1
substratusai/verba:v0.4.0-baseURL261695be635eb
tcl8.6@8.6.13+dfsg-2
no fix listed
1
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
tcl8.6@8.6.13+dfsg-2
no fix listed
1
teknas09/bird-pod:latest12a1fa85c4aa
tcl8.6@8.6.13+dfsg-2
no fix listed
1
thongngo3301/stakefish:latesta341af5976e3
tcl8.6@8.6.13+dfsg-2
no fix listed
1
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
tcl8.6@8.6.13+dfsg-2
no fix listed
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
tcl8.6@8.6.13+dfsg-2
no fix listed
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
tcl8.6@8.6.13+dfsg-2
no fix listed
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
tcl8.6@8.6.16+dfsg-1
no fix listed
1
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
tcl8.6@8.6.16+dfsg-1
no fix listed
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
tcl8.6@8.6.16+dfsg-1
no fix listed
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
tcl8.6@8.6.13+dfsg-2
no fix listed
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
tcl8.6@8.6.13+dfsg-2
no fix listed
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
tcl8.6@8.6.13+dfsg-2
no fix listed
1
ghcr.io/reitermarkus/7d2d:main39953b387b61
tcl8.6@8.6.16+dfsg-1
no fix listed
1
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
tcl8.6@8.6.13+dfsg-2
no fix listed
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
tcl8.6@8.6.13+dfsg-2
no fix listed
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
tcl8.6@8.6.13+dfsg-2
no fix listed
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
tcl8.6@8.6.13+dfsg-2
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.