StackRadar

CVE-2021-3541

Medium

Advisory

Published 18 May 2021In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.020
79th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
286
of 17,781 indexed, latest versions
Container images
194
deployed by those charts
Fix available
3 of 3
affected packages

libxml2 - security update

Carried by container images the latest versions of 286 of 17,781 indexed charts deploy, on 194 images.

Affected packageAffected versionsFixed inImages
libxml2apk2.9.10-r1, 2.9.10-r2, 2.9.10-r3, 2.9.10-r4+3 more2.9.11-r0, 2.9.12-r0104
libxml2deb2.9.4+dfsg1-2.2, 2.9.4+dfsg1-2.2+deb9u1, 2.9.4+dfsg1-2.2+deb9u2, 2.9.4+dfsg1-2.2+deb9u3+2 more2.9.4+dfsg1-2.2+deb9u5, 2.9.10+dfsg-5ubuntu0.20.04.189
libxml2rpm2.9.7-3.25.12.9.7-3.37.11
OSV records
ALPINE-CVE-2021-3541UBUNTU-CVE-2021-3541DLA-2669-1SUSE-SU-2021:1917-1
Also known as
USN-4991-1

Charts affected

286 by stars
ChartLatestAffected imagesRadar Score
sdcsmo-helm-chart6.0.01 of 14See more

sdc smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2021-3541.

Container imageDigestPackageFixed in
dibi/envsubst:latestfc2d92db8024
libxml2@2.9.10-r5
2.9.12-r0

Open the chart page →

25,769
sdnc-ansible-serversmo-helm-chart6.0.01 of 3See more

sdnc-ansible-server smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2021-3541.

Container imageDigestPackageFixed in
dibi/envsubst:latestfc2d92db8024
libxml2@2.9.10-r5
2.9.12-r0

Open the chart page →

25,769
sdnc-portalsmo-helm-chart6.0.01 of 3See more

sdnc-portal smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2021-3541.

Container imageDigestPackageFixed in
dibi/envsubst:latestfc2d92db8024
libxml2@2.9.10-r5
2.9.12-r0

Open the chart page →

25,769
ueb-listenersmo-helm-chart6.0.01 of 3See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2021-3541.

Container imageDigestPackageFixed in
dibi/envsubst:latestfc2d92db8024
libxml2@2.9.10-r5
2.9.12-r0

Open the chart page →

25,769
sonarqubestakaterVerified publisher0.10.31 of 2See more

sonarqube stakater 0.10.3

1 of the 2 container images this version deploys carry CVE-2021-3541.

Container imageDigestPackageFixed in
library/sonarqube:6.7.6-community0ae5169e3d0f
libxml2@2.9.4+dfsg1-2.2+deb9u2
2.9.4+dfsg1-2.2+deb9u5

Open the chart page →

11,841
cost-analyzerstatcan1.82.21 of 9See more

cost-analyzer statcan 1.82.2

1 of the 9 container images this version deploys carry CVE-2021-3541.

Container imageDigestPackageFixed in
gcr.io/kubecost1/frontend:prod-1.82.2ba66607c947c
libxml2@2.9.10-r7
2.9.11-r0

Open the chart page →

16,506
datapusherstatcan1.0.01 of 1See more

datapusher statcan 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-3541.

Container imageDigestPackageFixed in
keitaro/ckan-datapusher:0.0.175bf1a45f45c1
libxml2@2.9.10-r5
2.9.12-r0

Open the chart page →

3,044
pachydermstatcan0.5.12 of 4See more

pachyderm statcan 0.5.1

2 of the 4 container images this version deploys carry CVE-2021-3541.

Container imageDigestPackageFixed in
pachyderm/dash:1.9.094e9a281e5a4
libxml2@2.9.4+dfsg1-2.2+deb9u2
2.9.4+dfsg1-2.2+deb9u5
pachyderm/grpc-proxy:0.4.92b27f41d4d02
libxml2@2.9.4+dfsg1-2.2+deb9u2
2.9.4+dfsg1-2.2+deb9u5

Open the chart page →

4,967
helm-nginxstksrshelm0.1.01 of 1See more

helm-nginx stksrshelm 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3541.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
libxml2@2.9.4+dfsg1-2.2+deb9u2
2.9.4+dfsg1-2.2+deb9u5

Open the chart page →

702
sample-chartsysbee0.1.11 of 1See more

sample-chart sysbee 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-3541.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
libxml2@2.9.4+dfsg1-2.2+deb9u2
2.9.4+dfsg1-2.2+deb9u5

Open the chart page →

702
pi-holet3n1.0.01 of 1See more

pi-hole t3n 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-3541.

Container imageDigestPackageFixed in
pihole/pihole:v4.48c172c4cf344
libxml2@2.9.4+dfsg1-2.2+deb9u2
2.9.4+dfsg1-2.2+deb9u5

Open the chart page →

1,373
taalhuizen-servicetaalhuizen-service1.0.01 of 3See more

taalhuizen-service taalhuizen-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-3541.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/taalhuizen-service-php:latest04f1b7f0d573
libxml2@2.9.10-r4
2.9.12-r0

Open the chart page →

7,480
tama-charttama-chart0.1.11 of 1See more

tama-chart tama-chart 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-3541.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
libxml2@2.9.4+dfsg1-2.2+deb9u2
2.9.4+dfsg1-2.2+deb9u5

Open the chart page →

702
repmanteam-blueVerified publisher0.3.01 of 5See more

repman team-blue 0.3.0

1 of the 5 container images this version deploys carry CVE-2021-3541.

Container imageDigestPackageFixed in
buddy/repman:1.4.0097c897f8b54
libxml2@2.9.10-r3
2.9.12-r0

Open the chart page →

3,993
giropops-senhas-devtechpreta0.1.01 of 1See more

giropops-senhas-dev techpreta 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3541.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
libxml2@2.9.4+dfsg1-2.2+deb9u2
2.9.4+dfsg1-2.2+deb9u5

Open the chart page →

702
giropops-senhas-stgtechpreta0.1.01 of 1See more

giropops-senhas-stg techpreta 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3541.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
libxml2@2.9.4+dfsg1-2.2+deb9u2
2.9.4+dfsg1-2.2+deb9u5

Open the chart page →

702
nginxtest-nginx0.1.01 of 1See more

nginx test-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3541.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
libxml2@2.9.4+dfsg1-2.2+deb9u2
2.9.4+dfsg1-2.2+deb9u5

Open the chart page →

702
nginx-chartstest-nginx-charts0.1.01 of 1See more

nginx-charts test-nginx-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3541.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
libxml2@2.9.4+dfsg1-2.2+deb9u2
2.9.4+dfsg1-2.2+deb9u5

Open the chart page →

702
myapptestrepo0.1.01 of 1See more

myapp testrepo 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3541.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
libxml2@2.9.4+dfsg1-2.2+deb9u2
2.9.4+dfsg1-2.2+deb9u5

Open the chart page →

702
hello-worldthuvu33330.1.01 of 1See more

hello-world thuvu3333 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3541.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
libxml2@2.9.4+dfsg1-2.2+deb9u2
2.9.4+dfsg1-2.2+deb9u5

Open the chart page →

702
pock-helm-charttinote-chart0.1.01 of 3See more

pock-helm-chart tinote-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2021-3541.

Container imageDigestPackageFixed in
denisshav/frontend:latestb97cc69fbac6
libxml2@2.9.10-r6
2.9.11-r0

Open the chart page →

6,881
deis-workflowtohlejezkouska0.1.01 of 1See more

deis-workflow tohlejezkouska 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3541.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
libxml2@2.9.4+dfsg1-2.2+deb9u2
2.9.4+dfsg1-2.2+deb9u5

Open the chart page →

702
mojeaplikacetohlejezkouska0.1.01 of 1See more

mojeaplikace tohlejezkouska 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3541.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
libxml2@2.9.4+dfsg1-2.2+deb9u2
2.9.4+dfsg1-2.2+deb9u5

Open the chart page →

702
helmexampletomsuehelmexample0.1.01 of 1See more

helmexample tomsuehelmexample 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3541.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
libxml2@2.9.4+dfsg1-2.2+deb9u2
2.9.4+dfsg1-2.2+deb9u5

Open the chart page →

702
trouw-servicetrouw-service1.0.01 of 3See more

trouw-service trouw-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-3541.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/trouw-service-php:latestf745e2870692
libxml2@2.9.10-r4
2.9.12-r0

Open the chart page →

7,510
verhuis-serviceverhuis-service1.0.01 of 3See more

verhuis-service verhuis-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-3541.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verhuis-service-php:latest66bbaf95a123
libxml2@2.9.10-r4
2.9.12-r0

Open the chart page →

7,510
verzoekconversieserviceverzoekconversieservice1.0.01 of 3See more

verzoekconversieservice verzoekconversieservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-3541.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekconversieservice-php:lateste918014fb8d3
libxml2@2.9.10-r4
2.9.12-r0

Open the chart page →

7,528
verzoekregistratiecomponentverzoekregistratiecomponent1.1.01 of 4See more

verzoekregistratiecomponent verzoekregistratiecomponent 1.1.0

1 of the 4 container images this version deploys carry CVE-2021-3541.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekregistratiecomponent-php:latestc4f6c03af5d3
libxml2@2.9.10-r4
2.9.12-r0

Open the chart page →

7,429
verzoektypecatalogusverzoektypecatalogus1.1.01 of 4See more

verzoektypecatalogus verzoektypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2021-3541.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoektypecatalogus-php:latest64f5eb7a398b
libxml2@2.9.10-r4
2.9.12-r0

Open the chart page →

7,429
nginx-file-browserwarjiang0.1.21 of 1See more

nginx-file-browser warjiang 0.1.2

1 of the 1 container images this version deploys carry CVE-2021-3541.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
libxml2@2.9.4+dfsg1-2.2+deb9u2
2.9.4+dfsg1-2.2+deb9u5

Open the chart page →

702
queryservice-gatewaywbstack0.2.01 of 1See more

queryservice-gateway wbstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-3541.

Container imageDigestPackageFixed in
ghcr.io/wbstack/queryservice-gateway:2.2ab8e2f583e56
libxml2@2.9.4+dfsg1-2.2+deb9u4
2.9.4+dfsg1-2.2+deb9u5

Open the chart page →

2,559
nginxwiremindVerified publisher2.1.11 of 1See more

nginx wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2021-3541.

Container imageDigestPackageFixed in
library/nginx:1.17-alpine763e7f0188e3
libxml2@2.9.10-r2
2.9.12-r0

Open the chart page →

966
upsourcexykongVerified publisher0.1.11 of 1See more

upsource xykong 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-3541.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
libxml2@2.9.4+dfsg1-2.2+deb9u2
2.9.4+dfsg1-2.2+deb9u5

Open the chart page →

702
helmexampleycztest0.1.01 of 1See more

helmexample ycztest 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3541.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
libxml2@2.9.4+dfsg1-2.2+deb9u2
2.9.4+dfsg1-2.2+deb9u5

Open the chart page →

702
mychartyi-test-chart0.1.01 of 1See more

mychart yi-test-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3541.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
libxml2@2.9.4+dfsg1-2.2+deb9u2
2.9.4+dfsg1-2.2+deb9u5

Open the chart page →

702
helmexampleyunpeng-helmexample0.1.01 of 1See more

helmexample yunpeng-helmexample 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3541.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
libxml2@2.9.4+dfsg1-2.2+deb9u2
2.9.4+dfsg1-2.2+deb9u5

Open the chart page →

702

Container images carrying it

194 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
mirrorgitlabcontainers/gitlab-shell:v13.3.09f3654f1eafc
libxml2@2.9.4+dfsg1-2.2+deb9u2
2.9.4+dfsg1-2.2+deb9u5
1
mirrorgitlabcontainers/gitlab-sidekiq-ce:v13.2.294d1431683fa
libxml2@2.9.4+dfsg1-2.2+deb9u2
2.9.4+dfsg1-2.2+deb9u5
1
mirrorgitlabcontainers/gitlab-task-runner-ce:v13.2.29efd73993c34
libxml2@2.9.4+dfsg1-2.2+deb9u2
2.9.4+dfsg1-2.2+deb9u5
1
mirrorgitlabcontainers/gitlab-webservice-ce:v13.2.230393f990f5c
libxml2@2.9.4+dfsg1-2.2+deb9u2
2.9.4+dfsg1-2.2+deb9u5
1
monogramm/docker-dolibarr:13.0-alpine5afd99523984
libxml2@2.9.10-r7
2.9.11-r0
1
mvitale1989/docker-taiga:20191031-4.2.141504ccda06df
libxml2@2.9.4+dfsg1-2.2+deb9u2
2.9.4+dfsg1-2.2+deb9u5
1
ncsapolyglot/converters-avconv:latestc44b22eb58bb
libxml2@2.9.4+dfsg1-2.2+deb9u1
2.9.4+dfsg1-2.2+deb9u5
1
neilpeterson/aks-helloworld:v1fb47732ef36b
libxml2@2.9.4+dfsg1-2.2+deb9u1
2.9.4+dfsg1-2.2+deb9u5
1
neilpeterson/chart-tweet:latest64fd8dab075f
libxml2@2.9.4+dfsg1-2.2+deb9u1
2.9.4+dfsg1-2.2+deb9u5
1
neilpeterson/process-tweet:latest39ce9f92e899
libxml2@2.9.4+dfsg1-2.2+deb9u2
2.9.4+dfsg1-2.2+deb9u5
1
ngoduykhanh/powerdns-admin:0.2.3099371dd9ba6
libxml2@2.9.10-r5
2.9.12-r0
1
nodered/node-red-docker:0.19.6-v8070643219ea2
libxml2@2.9.4+dfsg1-2.2+deb9u2
2.9.4+dfsg1-2.2+deb9u5
1
ondrejsika/parking:latestb1fd497416c8
libxml2@2.9.4+dfsg1-2.2+deb9u4
2.9.4+dfsg1-2.2+deb9u5
1
opencord/onos-classic-helm-utils:0.1.00d693ba85fd6
libxml2@2.9.10-r6
2.9.12-r0
1
opencord/voltha-kafka-dump:6.1.31d9ee8ce7fab
libxml2@2.9.4+dfsg1-2.2+deb9u2
2.9.4+dfsg1-2.2+deb9u5
1
openwhisk/alarmprovider:2.2.0b695a6ceb406
libxml2@2.9.4+dfsg1-2.2+deb9u2
2.9.4+dfsg1-2.2+deb9u5
1
osixia/phpldapadmin:0.7.058cce1b08592
libxml2@2.9.4+dfsg1-2.2
2.9.4+dfsg1-2.2+deb9u5
1
owntracks/frontend:2.12.048cbbb64f347
libxml2@2.9.10-r4
2.9.12-r0
1
pachyderm/dash:1.9.094e9a281e5a4
libxml2@2.9.4+dfsg1-2.2+deb9u2
2.9.4+dfsg1-2.2+deb9u5
1
pachyderm/grpc-proxy:0.4.92b27f41d4d02
libxml2@2.9.4+dfsg1-2.2+deb9u2
2.9.4+dfsg1-2.2+deb9u5
1
pactfoundation/pact-broker:2.79.1.112861b0bd4d9
libxml2@2.9.10-r6
2.9.11-r0
1
phntom/keeweb:1.17.4-kix10c75ed6dd606
libxml2@2.9.10-r6
2.9.11-r0
1
pihole/pihole:v4.48c172c4cf344
libxml2@2.9.4+dfsg1-2.2+deb9u2
2.9.4+dfsg1-2.2+deb9u5
1
pnnlmiscscripts/anaconda:20200421-1700-nginx-1bbb6940d849f
libxml2@2.9.10-r2
2.9.12-r0
1
pnnlmiscscripts/k8s-node-image:1.16.15-nginx-903b3fed5bdbc
libxml2@2.9.10-r6
2.9.11-r0
1
pnnlmiscscripts/k8s-node-image:1.14.10-nginx-78af4c559fff0
libxml2@2.9.10-r2
2.9.12-r0
1
pnnlmiscscripts/k8s-node-image:1.15.12-nginx-5d710d31000ce
libxml2@2.9.10-r4
2.9.12-r0
1
rakii8585/angular-node-webapp:latest026082a515ac
libxml2@2.9.4+dfsg1-2.2+deb9u3
2.9.4+dfsg1-2.2+deb9u5
1
raykrueger/riemann:0.2.14c8baf3de57bb
libxml2@2.9.4+dfsg1-2.2+deb9u1
2.9.4+dfsg1-2.2+deb9u5
1
saiakhil46/pizza-app:main-1ffbdf3dc39ce11e5d0
libxml2@2.9.10-r6
2.9.11-r0
1
seafileltd/seafile-mc:9.0.106693911bcc40
libxml2@2.9.10+dfsg-5
2.9.10+dfsg-5ubuntu0.20.04.1
1
seafileltd/seafile-mc:9.0.97ac833196f60
libxml2@2.9.10+dfsg-5
2.9.10+dfsg-5ubuntu0.20.04.1
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
libxml2@2.9.10+dfsg-5
2.9.10+dfsg-5ubuntu0.20.04.1
1
shlinkio/shlink:2.7.1c6729db1d3a8
libxml2@2.9.10-r6
2.9.11-r0
1
slagattollas/server-practica:latest6dd8ead8e2b1
libxml2@2.9.4+dfsg1-2.2+deb9u3
2.9.4+dfsg1-2.2+deb9u5
1
stashapp/stash:latest24dbd7607174
libxml2@2.9.10+dfsg-5
2.9.10+dfsg-5ubuntu0.20.04.1
1
statcan/ckan:2.93921305425b8
libxml2@2.9.10+dfsg-5
2.9.10+dfsg-5ubuntu0.20.04.1
1
taigaio/taiga-front:6.4.24d367b1e1250
libxml2@2.9.10-r6
2.9.11-r0
1
testhubio/testhub-frontend:on-preme86c2db53be8
libxml2@2.9.10-r2
2.9.12-r0
1
timescale/timescaledb-postgis:latest-pg127758704d4a14
libxml2@2.9.10-r6
2.9.11-r0
1
turt2live/matrix-media-repo:v1.2.8bfbd459f89a5
libxml2@2.9.10-r6
2.9.11-r0
1
vectorim/riot-web:v1.7.8080e313abd37
libxml2@2.9.10-r4
2.9.12-r0
1
vectorim/riot-web:v1.7.16234bed2ac92a
libxml2@2.9.10-r5
2.9.12-r0
1
vromero/activemq-artemis:2.16.0408d6a46b153
libxml2@2.9.4+dfsg1-2.2+deb9u3
2.9.4+dfsg1-2.2+deb9u5
1
wallabag/wallabag:2.4.25e4c26a7fb4a
libxml2@2.9.10-r5
2.9.12-r0
1
gcr.io/google-samples/microservices-demo/frontend:v0.2.3ca5c0f0771c8
libxml2@2.9.10-r6
2.9.11-r0
1
gcr.io/kubecost1/frontend:prod-1.81.096dfb19838b8
libxml2@2.9.10-r6
2.9.11-r0
1
gcr.io/kubecost1/frontend:prod-1.82.2ba66607c947c
libxml2@2.9.10-r7
2.9.11-r0
1
ghcr.io/adfinis/customer-center/frontend:3.3.52a4667a761d9
libxml2@2.9.10-r4
2.9.12-r0
1
ghcr.io/cfcontainerizationbot/kubecf-kubectl:v1.19.261daa1bba5cb
libxml2@2.9.7-3.25.1
2.9.7-3.37.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.