StackRadar

CVE-2021-35516

High

Advisory

Published 2 Aug 2021In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.124
96th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
102
of 17,781 indexed, latest versions
Container images
102
deployed by those charts
Fix available
1 of 1
affected package

Improper Handling of Length Parameter Inconsistency in Compress

Carried by container images the latest versions of 102 of 17,781 indexed charts deploy, on 102 images.

Affected packageAffected versionsFixed inImages
commons-compressmaven1.2, 1.4, 1.4.1, 1.8.1+11 more1.21102
OSV records
GHSA-crv7-7245-f45f

Charts affected

102 by stars
ChartLatestAffected imagesRadar Score
neo4jneo4j-helm4.3.2-11 of 1See more

neo4j neo4j-helm 4.3.2-1

1 of the 1 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
library/neo4j:4.3.2-enterprise56a9453c4064
commons-compress@1.20
1.21

Open the chart page →

2,640
sonarqube-ltssonarqubeVerified publisher1.0.16+981 of 4See more

sonarqube-lts sonarqube 1.0.16+98

1 of the 4 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
library/sonarqube:8.9.2-community88cd63154d4b
commons-compress@1.20
1.21

Open the chart page →

4,099
sparkmicrosoft1.0.42 of 3See more

spark microsoft 1.0.4

2 of the 3 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
dbanda/livy:0.80ca125e68e53
commons-compress@1.18
1.21
dbanda/spark:2.4.6d0e6367876ae
commons-compress@1.8.1
1.21

Open the chart page →

13,738
solrpreferred-aiVerified publisher3.2.01 of 3See more

solr preferred-ai 3.2.0

1 of the 3 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
library/solr:8.7.0d124efd81fbb
commons-compress@1.20
1.21

Open the chart page →

6,048
druidwiremindVerified publisher1.22.11 of 3See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
apache/druid:29.0.10cef139b6bf1
commons-compress@1.19
1.21

Open the chart page →

7,930
flinkriskfocus0.2.01 of 1See more

flink riskfocus 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
library/flink:1.11.2-scala_2.121fe4fb22a2a5
commons-compress@1.20
1.21

Open the chart page →

3,235
hivebigdata-chartsVerified publisher0.1.81 of 1See more

hive bigdata-charts 0.1.8

1 of the 1 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
commons-compress@1.19
1.21

Open the chart page →

7,166
cloudflowcloudflow-helm-charts0.0.0-NIGHTLY011220201 of 1See more

cloudflow cloudflow-helm-charts 0.0.0-NIGHTLY01122020

1 of the 1 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
lightbend/cloudflow-operator:0.0.0-NIGHTLY011220202647f396de23
commons-compress@1.8.1
1.21

Open the chart page →

1,886
cmak-operatorcmak-operatorVerified publisher2.2.21 of 3See more

cmak-operator cmak-operator 2.2.2

1 of the 3 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
ghcr.io/eshepelyuk/dckr/cmak-3.0.0.6:1.2.090a34412c6b5
commons-compress@1.9
1.21

Open the chart page →

4,605
hdfsdmwm-bigdataVerified publisher1.0.11 of 2See more

hdfs dmwm-bigdata 1.0.1

1 of the 2 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
gradiant/hdfs:3.2.2e3bf364fe713
commons-compress@1.19
1.21

Open the chart page →

7,948
hivedmwm-bigdataVerified publisher0.1.63 of 5See more

hive dmwm-bigdata 0.1.6

3 of the 5 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
commons-compress@1.4.1
1.21
gradiant/hdfs:2.7.73b28784ba41f
commons-compress@1.4.1
1.21
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
commons-compress@1.4.1
1.21

Open the chart page →

20,837
hive-metastoreheva-helm-chartsVerified publisher0.2.01 of 2See more

hive-metastore heva-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
sslhep/hive-metastore:3.1.39e80af083079
commons-compress@1.4.1
1.21

Open the chart page →

7,335
skywalkingkubesphere-testVerified publisher3.1.01 of 4See more

skywalking kubesphere-test 3.1.0

1 of the 4 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.1.0-es7641237e0299b
commons-compress@1.19
1.21

Open the chart page →

18,042
hive-metastoreslamdev0.0.51 of 2See more

hive-metastore slamdev 0.0.5

1 of the 2 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
commons-compress@1.19
1.21

Open the chart page →

8,198
hadoopcloudnativeapp1.1.01 of 1See more

hadoop cloudnativeapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
commons-compress@1.4.1
1.21

Open the chart page →

5,772
ignitecloudnativeapp1.0.01 of 1See more

ignite cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
apacheignite/ignite:2.7.0d7deab68b8fa
commons-compress@1.4.1
1.21

Open the chart page →

7,891
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
commons-compress@1.19
1.21

Open the chart page →

38,346
zammaddevplayer0Verified publisher4.0.51 of 4See more

zammad devplayer0 4.0.5

1 of the 4 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
zammad/zammad-docker-compose:zammad-elasticsearch-4.1.0-318274d75a51fc
commons-compress@1.19
1.21

Open the chart page →

6,110
hbasedmwm-bigdataVerified publisher0.1.62 of 5See more

hbase dmwm-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
commons-compress@1.4.1
1.21
gradiant/hdfs:2.7.73b28784ba41f
commons-compress@1.4.1
1.21

Open the chart page →

13,392
hive-metastoredmwm-bigdataVerified publisher0.1.31 of 2See more

hive-metastore dmwm-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
commons-compress@1.4.1
1.21

Open the chart page →

6,882
opentsdbdmwm-bigdataVerified publisher0.1.72 of 6See more

opentsdb dmwm-bigdata 0.1.7

2 of the 6 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
commons-compress@1.4.1
1.21
gradiant/hdfs:2.7.73b28784ba41f
commons-compress@1.4.1
1.21

Open the chart page →

17,511
spinnakerdwardu-helm-charts2.2.61 of 2See more

spinnaker dwardu-helm-charts 2.2.6

1 of the 2 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
commons-compress@1.19
1.21

Open the chart page →

8,752
neo4j-communityequinor-charts1.2.51 of 1See more

neo4j-community equinor-charts 1.2.5

1 of the 1 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
library/neo4j:4.2.4348e3f56faa2
commons-compress@1.20
1.21

Open the chart page →

2,751
pitchforkexpediagroup0.1.41 of 1See more

pitchfork expediagroup 0.1.4

1 of the 1 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
expediagroup/pitchfork:1.314f2cf61e7de9
commons-compress@1.20
1.21

Open the chart page →

3,309
hbasegradiant-bigdataVerified publisher0.1.62 of 5See more

hbase gradiant-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
commons-compress@1.4.1
1.21
gradiant/hdfs:2.7.73b28784ba41f
commons-compress@1.4.1
1.21

Open the chart page →

13,392
gradle-examplegradle-exampleVerified publisher1.1.31 of 1See more

gradle-example gradle-example 1.1.3

1 of the 1 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
quay.io/srcmaxim/gradle-example-app:1.1.37c3fc28746ef
commons-compress@1.20
1.21

Open the chart page →

3,393
stormgresearch1.2.01 of 3See more

storm gresearch 1.2.0

1 of the 3 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
library/storm:2.4.0bd5d420506d6
commons-compress@1.18
1.21

Open the chart page →

6,165
seata-serverheidaodageshiwoVerified publisher1.0.01 of 1See more

seata-server heidaodageshiwo 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
seataio/seata-server:1.5.1ee1ed55f4144
commons-compress@1.19
1.21

Open the chart page →

5,624
hadoopmiuler1.2.21 of 1See more

hadoop miuler 1.2.2

1 of the 1 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
commons-compress@1.4.1
1.21

Open the chart page →

5,772
kafka-managerradar-baseVerified publisher2.3.11 of 1See more

kafka-manager radar-base 2.3.1

1 of the 1 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
radarbase/kafka-manager:1.3.3.181d2af7dd5a4e
commons-compress@1.9
1.21

Open the chart page →

4,000
shinyproxyremche0.6.61 of 2See more

shinyproxy remche 0.6.6

1 of the 2 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
remche/shinyproxy:2.6.18bcda8a04d3b
commons-compress@1.19
1.21

Open the chart page →

3,958
seldon-coreseldon0.2.72 of 3See more

seldon-core seldon 0.2.7

2 of the 3 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
seldonio/apife:0.2.7ba81b17f00eb
commons-compress@1.18
1.21
seldonio/cluster-manager:0.2.729e362bb1ba2
commons-compress@1.18
1.21

Open the chart page →

13,798
wavefront-adapter-for-istiowavefront0.1.41 of 2See more

wavefront-adapter-for-istio wavefront 0.1.4

1 of the 2 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
wavefronthq/proxy:9.2d1064d28f6eb
commons-compress@1.19
1.21

Open the chart page →

15,970
chart-app-vidapp-vid-chartVerified publisher0.0.71 of 2See more

chart-app-vid app-vid-chart 0.0.7

1 of the 2 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
fimperato/sparkvid-api:1.0.5-RELEASE604012b77841
commons-compress@1.4.1
1.21

Open the chart page →

8,866
tsoragecetic0.4.111 of 8See more

tsorage cetic 0.4.11

1 of the 8 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:5.0.1c87b1c07fb53
commons-compress@1.8.1
1.21

Open the chart page →

12,018
neo4jcloudnativeapp1.0.01 of 1See more

neo4j cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
library/neo4j:3.4.5-enterprisea1ba477fa412
commons-compress@1.16.1
1.21

Open the chart page →

2,837
spark-history-servercloudnativeapp1.0.01 of 3See more

spark-history-server cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
lightbend/spark-history-server:2.4.00bedf37f428a
commons-compress@1.8.1
1.21

Open the chart page →

14,066
pulsarcnieg1.0.82 of 2See more

pulsar cnieg 1.0.8

2 of the 2 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.6.14db6ff0b4045
commons-compress@1.19
1.21
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
commons-compress@1.8.1
1.21

Open the chart page →

16,860
cp-helm-chartscp-helm-charts0.6.15 of 8See more

cp-helm-charts cp-helm-charts 0.6.1

5 of the 8 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
commons-compress@1.19
1.21
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
commons-compress@1.19
1.21
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
commons-compress@1.19
1.21
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
commons-compress@1.19
1.21
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
commons-compress@1.19
1.21

Open the chart page →

58,857
apache-ranger-admindata-platform-stableVerified publisher0.2.01 of 2See more

apache-ranger-admin data-platform-stable 0.2.0

1 of the 2 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
commons-compress@1.4.1
1.21

Open the chart page →

8,245
spark-standalonedmwm-bigdataVerified publisher0.1.01 of 2See more

spark-standalone dmwm-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
gradiant/spark:2.4.4-python-alpine97657d56e927
commons-compress@1.8.1
1.21

Open the chart page →

6,147
amundsenduyet1.1.01 of 7See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
library/neo4j:3.3.0d4eaa8484246
commons-compress@1.12
1.21

Open the chart page →

11,174
spark-shuffleduyet0.2.01 of 1See more

spark-shuffle duyet 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
snappydatainc/spark-shuffle:v2.2.0-kubernetes-0.5.1fd4b2070466f
commons-compress@1.4.1
1.21

Open the chart page →

5,639
papermcgabibbo970.1.111 of 1See more

papermc gabibbo97 0.1.11

1 of the 1 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
gabibbo97/papermc:1.15.241d276a37570
commons-compress@1.4.1
1.21

Open the chart page →

157
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
commons-compress@1.20
1.21

Open the chart page →

18,230
komgageek-cookbookVerified publisher2.4.21 of 1See more

komga geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
gotson/komga:0.99.49b15ea6bfc30
commons-compress@1.20
1.21

Open the chart page →

12,581
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
commons-compress@1.19
1.21

Open the chart page →

27,949
teedygeek-cookbookVerified publisher6.2.01 of 1See more

teedy geek-cookbook 6.2.0

1 of the 1 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
sismics/docs:v1.10f4b0ef019cf1
commons-compress@1.18
1.21

Open the chart page →

26,944
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.81 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
jingking/geonetwork-hnap:4.2.843e74ab234e1
commons-compress@1.9
1.21

Open the chart page →

34,754
hdfsgradiant-bigdataVerified publisher0.1.101 of 2See more

hdfs gradiant-bigdata 0.1.10

1 of the 2 container images this version deploys carry CVE-2021-35516.

Container imageDigestPackageFixed in
gradiant/hdfs:2.7.73b28784ba41f
commons-compress@1.4.1
1.21

Open the chart page →

7,073

Container images carrying it

102 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
gradiant/hdfs:2.7.73b28784ba41f
commons-compress@1.4.1
1.21
7
bde2020/hive:2.3.2-postgresql-metastore620267768985
commons-compress@1.4.1
1.21
4
gradiant/hbase-base:2.0.1a1ee6de94c04
commons-compress@1.4.1
1.21
4
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
commons-compress@1.8.1
1.21
2
danisla/hadoop:2.9.0255ba2dd739b
commons-compress@1.4.1
1.21
2
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
commons-compress@1.4.1
1.21
2
gradiant/spark:2.4.4-python-alpine97657d56e927
commons-compress@1.8.1
1.21
2
library/neo4j:4.3.2-enterprise56a9453c4064
commons-compress@1.20
1.21
2
linuxserver/ubooquity:2.1.2-ls369932d6759112
commons-compress@1.13
1.21
2
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
commons-compress@1.19
1.21
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
commons-compress@1.20
1.21
1
apache/druid:29.0.10cef139b6bf1
commons-compress@1.19
1.21
1
apacheignite/ignite:2.7.0d7deab68b8fa
commons-compress@1.4.1
1.21
1
apachepulsar/pulsar:2.6.14db6ff0b4045
commons-compress@1.19
1.21
1
apache/skywalking-oap-server:8.1.0-es7641237e0299b
commons-compress@1.19
1.21
1
apicurio/apicurio-registry-jpa:1.3.2.Final44eeddd3562c
commons-compress@1.20
1.21
1
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
commons-compress@1.20
1.21
1
atlassian/confluence-server:7.10.03b9222ab32ef
commons-compress@1.9
1.21
1
atlassian/jira-software:8.14.037bc46cbec1a
commons-compress@1.8.1
1.21
1
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
commons-compress@1.19
1.21
1
confluentinc/cp-kafka:5.4.01bbda887bc53
commons-compress@1.19
1.21
1
confluentinc/cp-kafka:5.0.1c87b1c07fb53
commons-compress@1.8.1
1.21
1
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
commons-compress@1.19
1.21
1
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
commons-compress@1.19
1.21
1
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
commons-compress@1.19
1.21
1
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
commons-compress@1.19
1.21
1
datappeal/hive-metastore:lateste38c085a3567
commons-compress@1.4.1
1.21
1
dbanda/livy:0.80ca125e68e53
commons-compress@1.18
1.21
1
dbanda/spark:2.4.6d0e6367876ae
commons-compress@1.8.1
1.21
1
deltaio/delta-sharing-server:0.2.08b75118187c5
commons-compress@1.19
1.21
1
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
commons-compress@1.4.1
1.21
1
expediagroup/pitchfork:1.314f2cf61e7de9
commons-compress@1.20
1.21
1
farberg/apache-knox-docker:1.6.14b4a22487394
commons-compress@1.20
1.21
1
fimperato/sparkvid-api:1.0.5-RELEASE604012b77841
commons-compress@1.4.1
1.21
1
gabibbo97/papermc:1.15.241d276a37570
commons-compress@1.4.1
1.21
1
gotson/komga:0.99.49b15ea6bfc30
commons-compress@1.20
1.21
1
gradiant/hdfs:3.2.2e3bf364fe713
commons-compress@1.19
1.21
1
gurolakman/smsf-configuration:1.0.49abb3882bcbd
commons-compress@1.19
1.21
1
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
commons-compress@1.19
1.21
1
gurolakman/smsf-momt:1.0.4ce23b20a8a17
commons-compress@1.19
1.21
1
gurolakman/smsf-registration:1.0.4b22e746edd5d
commons-compress@1.19
1.21
1
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
commons-compress@1.19
1.21
1
gurolakman/ussigw-core:1.0.48739565c3ea2
commons-compress@1.19
1.21
1
ibmcom/app-nav-api:1.0.1ce9d2a564273
commons-compress@1.18
1.21
1
ibmcom/app-nav-was-controller:1.0.1a6748792da26
commons-compress@1.9
1.21
1
ibmcom/bai-flink-dev:19.0.2e31ff09e8aad
commons-compress@1.18
1.21
1
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
commons-compress@1.11
1.21
1
ibmcom/microclimate-theia:lateste17bdccc5030
commons-compress@1.11
1.21
1
jenkinsci/jenkins:2.67a1f33f004659
commons-compress@1.10
1.21
1
jingking/geonetwork-hnap:4.2.843e74ab234e1
commons-compress@1.9
1.21
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.