CVE-2021-35516
HighAdvisory
Published 2 Aug 2021In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.124
- 96th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 102
- of 17,781 indexed, latest versions
- Container images
- 102
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Improper Handling of Length Parameter Inconsistency in Compress
Carried by container images the latest versions of 102 of 17,781 indexed charts deploy, on 102 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| commons-compressmaven | 1.2, 1.4, 1.4.1, 1.8.1+11 more | 1.21 | 102 |
- OSV records
- GHSA-crv7-7245-f45f
Charts affected
102 by stars
Container images carrying it
102 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| krontechnology/ | 7feef7d2ab42 | commons-compress | 1.21 | 1 |
| kubebb/ | 4d062f20309c | commons-compress | 1.21 | 1 |
| kubebb/ | a3879931dfa1 | commons-compress | 1.21 | 1 |
| ladeit/ | 962b665ffe82 | commons-compress | 1.21 | 1 |
| library/ | 1fe4fb22a2a5 | commons-compress | 1.21 | 1 |
| library/ | 348e3f56faa2 | commons-compress | 1.21 | 1 |
| library/ | a1ba477fa412 | commons-compress | 1.21 | 1 |
| library/ | d4eaa8484246 | commons-compress | 1.21 | 1 |
| library/ | d124efd81fbb | commons-compress | 1.21 | 1 |
| library/ | 88cd63154d4b | commons-compress | 1.21 | 1 |
| library/ | a246bc64207e | commons-compress | 1.21 | 1 |
| library/ | eb2f0be32efd | commons-compress | 1.21 | 1 |
| library/ | bd5d420506d6 | commons-compress | 1.21 | 1 |
| lightbend/ | 2647f396de23 | commons-compress | 1.21 | 1 |
| lightbend/ | 0bedf37f428a | commons-compress | 1.21 | 1 |
| lsmaster/ | 061eb5fbfa00 | commons-compress | 1.21 | 1 |
| mintproject/ | ffbb13f20465 | commons-compress | 1.21 | 1 |
| omecproject/ | b4ae7d0d6b74 | commons-compress | 1.21 | 1 |
| openkm/ | 3bc465a7461b | commons-compress | 1.21 | 1 |
| owasp/ | efc65e702ee1 | commons-compress | 1.21 | 1 |
| radarbase/ | 1d2af7dd5a4e | commons-compress | 1.21 | 1 |
| remche/ | 8bcda8a04d3b | commons-compress | 1.21 | 1 |
| reportportal/ | 9df41f8fb320 | commons-compress | 1.21 | 1 |
| reportportal/ | 9e73114dbd15 | commons-compress | 1.21 | 1 |
| seataio/ | ee1ed55f4144 | commons-compress | 1.21 | 1 |
| seldonio/ | ba81b17f00eb | commons-compress | 1.21 | 1 |
| seldonio/ | eea0d3f578ca | commons-compress | 1.21 | 1 |
| seldonio/ | 29e362bb1ba2 | commons-compress | 1.21 | 1 |
| sismics/ | f4b0ef019cf1 | commons-compress | 1.21 | 1 |
| slamdev/ | b4b029c9b15f | commons-compress | 1.21 | 1 |
| snappydatainc/ | fd4b2070466f | commons-compress | 1.21 | 1 |
| sslhep/ | 9e80af083079 | commons-compress | 1.21 | 1 |
| thehiveproject/ | f4bc64fb8844 | commons-compress | 1.21 | 1 |
| trinodb/ | ee80ab5eeab2 | commons-compress | 1.21 | 1 |
| vlebediantsev/ | 10393a89b4a8 | commons-compress | 1.21 | 1 |
| vlebediantsev/ | df8bf38c535b | commons-compress | 1.21 | 1 |
| vlebediantsev/ | 427af418b75e | commons-compress | 1.21 | 1 |
| vlebediantsev/ | 9319437f3c8f | commons-compress | 1.21 | 1 |
| wavefronthq/ | d1064d28f6eb | commons-compress | 1.21 | 1 |
| xetusoss/ | 88f25242b9ee | commons-compress | 1.21 | 1 |
| zammad/ | 8274d75a51fc | commons-compress | 1.21 | 1 |
| gcr.io/ | 0ee5f968d2ab | commons-compress | 1.21 | 1 |
| ghcr.io/ | aa45adaf59a7 | commons-compress | 1.21 | 1 |
| ghcr.io/ | 90a34412c6b5 | commons-compress | 1.21 | 1 |
| ghcr.io/ | c144bdd688d7 | commons-compress | 1.21 | 1 |
| ghcr.io/ | 8caf5289fe73 | commons-compress | 1.21 | 1 |
| ghcr.io/ | d46ce7b96482 | commons-compress | 1.21 | 1 |
| ghcr.io/ | 821fd6a6f2cd | commons-compress | 1.21 | 1 |
| ghcr.io/ | b83b5b81d4b6 | commons-compress | 1.21 | 1 |
| ghcr.io/ | 7525a57ac3f1 | commons-compress | 1.21 | 1 |