CVE-2021-35516

High

Advisory

Published 2 Aug 2021In the index since 6 Sept 2026

Improper Handling of Length Parameter Inconsistency in Compress

Carried by container images the latest versions of 102 of 17,781 indexed charts deploy, on 102 images.

Affected package	Affected versions	Fixed in	Images
commons-compressmaven	1.2, 1.4, 1.4.1, 1.8.1+11 more	1.21	102

102 by stars

Chart

Latest

Affected images

Radar Score

sonarqubewebencryptor

1 of the 3 container images this version deploys carry CVE-2021-35516.

Container image	Digest	Package	Fixed in
library/sonarqube :8.2-community	a246bc64207e	commons-compress@1.18	1.21

5,460

1 of the 1 container images this version deploys carry CVE-2021-35516.

Container image	Digest	Package	Fixed in
apicurio/apicurio-registry-jpa :1.3.2.Final	44eeddd3562c	commons-compress@1.20	1.21

3,424

102 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
quay.io/newrelic/synthetics-minion :2.2.21	98c26e1b8f70	commons-compress@1.19	1.21	1
quay.io/srcmaxim/gradle-example-app :1.1.3	7c3fc28746ef	commons-compress@1.20	1.21	1