CVE-2021-35517
HighAdvisory
Published 2 Aug 2021In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.106
- 96th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 102
- of 17,781 indexed, latest versions
- Container images
- 102
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Improper Handling of Length Parameter Inconsistency in Compress
Carried by container images the latest versions of 102 of 17,781 indexed charts deploy, on 102 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| commons-compressmaven | 1.2, 1.4, 1.4.1, 1.8.1+11 more | 1.21 | 102 |
- OSV records
- GHSA-xqfj-vm6h-2x34
Charts affected
102 by stars
Container images carrying it
102 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| gradiant/ | 3b28784ba41f | commons-compress | 1.21 | 7 |
| bde2020/ | 620267768985 | commons-compress | 1.21 | 4 |
| gradiant/ | a1ee6de94c04 | commons-compress | 1.21 | 4 |
| apachepulsar/ | b341ef76a852 | commons-compress | 1.21 | 2 |
| danisla/ | 255ba2dd739b | commons-compress | 1.21 | 2 |
| gradiant/ | aae4f8a21f8b | commons-compress | 1.21 | 2 |
| gradiant/ | 97657d56e927 | commons-compress | 1.21 | 2 |
| library/ | 56a9453c4064 | commons-compress | 1.21 | 2 |
| linuxserver/ | 9932d6759112 | commons-compress | 1.21 | 2 |
| 5200710/ | e34ab066d2ed | commons-compress | 1.21 | 1 |
| airsonicadvanced/ | f7cbafac2806 | commons-compress | 1.21 | 1 |
| apache/ | 0cef139b6bf1 | commons-compress | 1.21 | 1 |
| apacheignite/ | d7deab68b8fa | commons-compress | 1.21 | 1 |
| apachepulsar/ | 4db6ff0b4045 | commons-compress | 1.21 | 1 |
| apache/ | 641237e0299b | commons-compress | 1.21 | 1 |
| apicurio/ | 44eeddd3562c | commons-compress | 1.21 | 1 |
| apicurio/ | a97d67487532 | commons-compress | 1.21 | 1 |
| atlassian/ | 3b9222ab32ef | commons-compress | 1.21 | 1 |
| atlassian/ | 37bc46cbec1a | commons-compress | 1.21 | 1 |
| confluentinc/ | f2975d507a2a | commons-compress | 1.21 | 1 |
| confluentinc/ | 1bbda887bc53 | commons-compress | 1.21 | 1 |
| confluentinc/ | c87b1c07fb53 | commons-compress | 1.21 | 1 |
| confluentinc/ | 4bc70a83ca6f | commons-compress | 1.21 | 1 |
| confluentinc/ | b0b7aa26254a | commons-compress | 1.21 | 1 |
| confluentinc/ | ee403d5b9090 | commons-compress | 1.21 | 1 |
| confluentinc/ | b651d4b6185a | commons-compress | 1.21 | 1 |
| datappeal/ | e38c085a3567 | commons-compress | 1.21 | 1 |
| dbanda/ | 0ca125e68e53 | commons-compress | 1.21 | 1 |
| dbanda/ | d0e6367876ae | commons-compress | 1.21 | 1 |
| deltaio/ | 8b75118187c5 | commons-compress | 1.21 | 1 |
| egdsandaru/ | 681baa1926f4 | commons-compress | 1.21 | 1 |
| expediagroup/ | 4f2cf61e7de9 | commons-compress | 1.21 | 1 |
| farberg/ | 4b4a22487394 | commons-compress | 1.21 | 1 |
| fimperato/ | 604012b77841 | commons-compress | 1.21 | 1 |
| gabibbo97/ | 41d276a37570 | commons-compress | 1.21 | 1 |
| gotson/ | 9b15ea6bfc30 | commons-compress | 1.21 | 1 |
| gradiant/ | e3bf364fe713 | commons-compress | 1.21 | 1 |
| gurolakman/ | 9abb3882bcbd | commons-compress | 1.21 | 1 |
| gurolakman/ | 6537e8ed8de8 | commons-compress | 1.21 | 1 |
| gurolakman/ | ce23b20a8a17 | commons-compress | 1.21 | 1 |
| gurolakman/ | b22e746edd5d | commons-compress | 1.21 | 1 |
| gurolakman/ | bf18525c5ad9 | commons-compress | 1.21 | 1 |
| gurolakman/ | 8739565c3ea2 | commons-compress | 1.21 | 1 |
| ibmcom/ | ce9d2a564273 | commons-compress | 1.21 | 1 |
| ibmcom/ | a6748792da26 | commons-compress | 1.21 | 1 |
| ibmcom/ | e31ff09e8aad | commons-compress | 1.21 | 1 |
| ibmcom/ | ab3fd1fdfa18 | commons-compress | 1.21 | 1 |
| ibmcom/ | e17bdccc5030 | commons-compress | 1.21 | 1 |
| jenkinsci/ | a1f33f004659 | commons-compress | 1.21 | 1 |
| jingking/ | 43e74ab234e1 | commons-compress | 1.21 | 1 |