StackRadar

CVE-2021-35604

Medium

Advisory

Published 20 Oct 2021In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.027
85th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
35
of 17,781 indexed, latest versions
Container images
36
deployed by those charts
Fix available
4 of 6
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 35 of 17,781 indexed charts deploy, on 36 images.

Affected packageAffected versionsFixed inImages
mariadb-10.5deb1:10.5.11-1, 1:10.5.12-0+deb11u11:10.5.15-0+deb11u111
mysql-8.0deb8.0.23-0ubuntu0.20.04.1, 8.0.25-0ubuntu0.20.04.1, 8.0.26-0ubuntu0.20.04.2, 8.0.26-0ubuntu0.20.04.38.0.27-0ubuntu0.20.04.19
mariadbapk10.4.13-r0, 10.4.17-r1, 10.5.8-r0, 10.5.9-r0+2 more10.4.22-r0, 10.5.13-r08
mysql-5.7deb5.7.20-0ubuntu0.16.04.1, 5.7.29-0ubuntu0.18.04.1, 5.7.32-0ubuntu0.18.04.1, 5.7.33-0ubuntu0.18.04.1+1 more5.7.36-0ubuntu0.16.04.1+esm1, 5.7.36-0ubuntu0.18.04.15
mariadb-10.1deb1:10.1.47-0ubuntu0.18.04.1, 1:10.1.48-0ubuntu0.18.04.1no fix listed2
mysql-5.5deb5.5.60-0ubuntu0.14.04.1, 5.5.62-0ubuntu0.14.04.1no fix listed2
OSV records
ALPINE-CVE-2021-35604DEBIAN-CVE-2021-35604UBUNTU-CVE-2021-35604
Also known as
USN-5123-1, USN-5123-2

Charts affected

35 by stars
ChartLatestAffected imagesRadar Score
openvpn-asstenicVerified publisher0.1.91 of 1See more

openvpn-as stenic 0.1.9

1 of the 1 container images this version deploys carry CVE-2021-35604.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
mariadb-10.1@1:10.1.47-0ubuntu0.18.04.1
mysql-5.7@5.7.32-0ubuntu0.18.04.1
no fix listed
5.7.36-0ubuntu0.18.04.1

Open the chart page →

15,592
netris-controllernetrisai2.8.21 of 14See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2021-35604.

Container imageDigestPackageFixed in
graphiteapp/graphite-statsd:1.1.7-604a0037cc2ae
mariadb@10.4.13-r0
10.4.22-r0

Open the chart page →

30,326
zabbix-serveraekondratievVerified publisher1.0.61 of 4See more

zabbix-server aekondratiev 1.0.6

1 of the 4 container images this version deploys carry CVE-2021-35604.

Container imageDigestPackageFixed in
zabbix/zabbix-server-pgsql:ubuntu-5.4.66c946b1f45cd
mysql-8.0@8.0.26-0ubuntu0.20.04.3
8.0.27-0ubuntu0.20.04.1

Open the chart page →

30,668
network-ups-toolsgeek-cookbookVerified publisher6.4.21 of 1See more

network-ups-tools geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2021-35604.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/network-ups-tools:v2.7.4-2479-g86a32237cbd5d4cc1245
mysql-8.0@8.0.25-0ubuntu0.20.04.1
8.0.27-0ubuntu0.20.04.1

Open the chart page →

13,950
huginnutkuozdemirVerified publisher2.2.11 of 4See more

huginn utkuozdemir 2.2.1

1 of the 4 container images this version deploys carry CVE-2021-35604.

Container imageDigestPackageFixed in
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
mysql-5.7@5.7.33-0ubuntu0.18.04.1
5.7.36-0ubuntu0.18.04.1

Open the chart page →

18,137
pact-brokeralmorgvVerified publisher0.1.01 of 1See more

pact-broker almorgv 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-35604.

Container imageDigestPackageFixed in
pactfoundation/pact-broker:2.79.1.112861b0bd4d9
mariadb@10.5.8-r0
10.5.13-r0

Open the chart page →

4,995
db-backupballe-petersen0.1.41 of 1See more

db-backup balle-petersen 0.1.4

1 of the 1 container images this version deploys carry CVE-2021-35604.

Container imageDigestPackageFixed in
tobiasbp/db-backup:0.0.314bee6e33a26
mariadb@10.4.13-r0
10.4.22-r0

Open the chart page →

4,814
frontenddemo-application0.1.01 of 1See more

frontend demo-application 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-35604.

Container imageDigestPackageFixed in
azhar008/flaskapplication:latesta1e827b0adea
mariadb-10.5@1:10.5.12-0+deb11u1
1:10.5.15-0+deb11u1

Open the chart page →

3,558
deepstackgeek-cookbookVerified publisher1.5.21 of 2See more

deepstack geek-cookbook 1.5.2

1 of the 2 container images this version deploys carry CVE-2021-35604.

Container imageDigestPackageFixed in
robmarkcole/deepstack-ui:latest410275726459
mariadb-10.5@1:10.5.11-1
1:10.5.15-0+deb11u1

Open the chart page →

5,305
webtreesgeek-cookbookVerified publisher2.2.01 of 1See more

webtrees geek-cookbook 2.2.0

1 of the 1 container images this version deploys carry CVE-2021-35604.

Container imageDigestPackageFixed in
ghcr.io/nathanvaughn/webtrees:2.0.1969423a100fab
mariadb-10.5@1:10.5.12-0+deb11u1
1:10.5.15-0+deb11u1

Open the chart page →

3,646
supersetinseefrlab1.4.01 of 4See more

superset inseefrlab 1.4.0

1 of the 4 container images this version deploys carry CVE-2021-35604.

Container imageDigestPackageFixed in
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
mariadb-10.5@1:10.5.12-0+deb11u1
1:10.5.15-0+deb11u1

Open the chart page →

7,129
opennebulakvaps2.1.15 of 9See more

opennebula kvaps 2.1.1

5 of the 9 container images this version deploys carry CVE-2021-35604.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
mysql-8.0@8.0.26-0ubuntu0.20.04.2
8.0.27-0ubuntu0.20.04.1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
mysql-8.0@8.0.25-0ubuntu0.20.04.1
8.0.27-0ubuntu0.20.04.1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
mysql-8.0@8.0.26-0ubuntu0.20.04.2
8.0.27-0ubuntu0.20.04.1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
mysql-8.0@8.0.26-0ubuntu0.20.04.2
8.0.27-0ubuntu0.20.04.1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
mysql-8.0@8.0.26-0ubuntu0.20.04.2
8.0.27-0ubuntu0.20.04.1

Open the chart page →

113,791
matomot3n1.3.11 of 4See more

matomo t3n 1.3.1

1 of the 4 container images this version deploys carry CVE-2021-35604.

Container imageDigestPackageFixed in
t3nde/matomo:4.3.1-fpm-alpine329ce194393a
mariadb@10.5.11-r0
10.5.13-r0

Open the chart page →

4,264
backupalexanderbadel1.1.01 of 1See more

backup alexanderbadel 1.1.0

1 of the 1 container images this version deploys carry CVE-2021-35604.

Container imageDigestPackageFixed in
ghcr.io/alexanderbabel/database-s3-backup:1.3.33191b771a6f2
mariadb@10.5.12-r0
10.5.13-r0

Open the chart page →

2,803
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2021-35604.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
mysql-5.7@5.7.34-0ubuntu0.18.04.1
5.7.36-0ubuntu0.18.04.1

Open the chart page →

22,891
bnkrbnkr1.0.51 of 2See more

bnkr bnkr 1.0.5

1 of the 2 container images this version deploys carry CVE-2021-35604.

Container imageDigestPackageFixed in
engrmth/bnkr:2.1.06d8464e6f0e8
mysql-8.0@8.0.23-0ubuntu0.20.04.1
8.0.27-0ubuntu0.20.04.1

Open the chart page →

15,253
opensipschetan-opensips0.1.01 of 1See more

opensips chetan-opensips 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-35604.

Container imageDigestPackageFixed in
chetangautamm/repo:Opensips_Buildb4b94155ff5a
mysql-5.5@5.5.62-0ubuntu0.14.04.1
no fix listed

Open the chart page →

30,140
robot-shopcloud-native-toolkit1.1.11 of 12See more

robot-shop cloud-native-toolkit 1.1.1

1 of the 12 container images this version deploys carry CVE-2021-35604.

Container imageDigestPackageFixed in
robotshop/rs-payment:latest774b52c6180d
mariadb-10.5@1:10.5.11-1
1:10.5.15-0+deb11u1

Open the chart page →

29,555
galaxy-stablecloudve2.0.01 of 5See more

galaxy-stable cloudve 2.0.0

1 of the 5 container images this version deploys carry CVE-2021-35604.

Container imageDigestPackageFixed in
galaxy/galaxy-stable:v18.018e577a626dfd
mysql-5.5@5.5.60-0ubuntu0.14.04.1
no fix listed

Open the chart page →

70,895
tinyproxy-exporterdoubanVerified publisher0.1.21 of 1See more

tinyproxy-exporter douban 0.1.2

1 of the 1 container images this version deploys carry CVE-2021-35604.

Container imageDigestPackageFixed in
ghcr.io/leoquote/tinyproxy_exporter:master6b4103d88dbb
mariadb-10.5@1:10.5.11-1
1:10.5.15-0+deb11u1

Open the chart page →

3,421
smeejasfanzynoodle0.0.11 of 1See more

smeejas fanzynoodle 0.0.1

1 of the 1 container images this version deploys carry CVE-2021-35604.

Container imageDigestPackageFixed in
fanzynoodle/smeejas:0.0.15f9916c1a287
mariadb-10.5@1:10.5.12-0+deb11u1
1:10.5.15-0+deb11u1

Open the chart page →

4,127
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2021-35604.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
mysql-8.0@8.0.26-0ubuntu0.20.04.2
8.0.27-0ubuntu0.20.04.1

Open the chart page →

24,293
wallabaggeek-cookbookVerified publisher7.2.01 of 1See more

wallabag geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2021-35604.

Container imageDigestPackageFixed in
wallabag/wallabag:2.4.25e4c26a7fb4a
mariadb@10.4.17-r1
10.4.22-r0

Open the chart page →

4,358
jisortjisort0.4.11 of 7See more

jisort jisort 0.4.1

1 of the 7 container images this version deploys carry CVE-2021-35604.

Container imageDigestPackageFixed in
litmuschaos/mysql-client:latest251afd8fc039
mariadb@10.4.13-r0
10.4.22-r0

Open the chart page →

1,826
large-systems-djangolarge-systems-djangoVerified publisher1.0.01 of 1See more

large-systems-django large-systems-django 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-35604.

Container imageDigestPackageFixed in
ha33ona/python:test6affdfc644d0
mariadb-10.5@1:10.5.12-0+deb11u1
1:10.5.15-0+deb11u1

Open the chart page →

3,891
face-recognitionmoreillonVerified publisher0.2.41 of 3See more

face-recognition moreillon 0.2.4

1 of the 3 container images this version deploys carry CVE-2021-35604.

Container imageDigestPackageFixed in
moreillon/face-recognition-fastapi:x86bacb2ddd8394
mariadb-10.5@1:10.5.12-0+deb11u1
1:10.5.15-0+deb11u1

Open the chart page →

8,556
betydbncsaVerified publisher0.6.11 of 4See more

betydb ncsa 0.6.1

1 of the 4 container images this version deploys carry CVE-2021-35604.

Container imageDigestPackageFixed in
pecan/bety:5.4.1f825d480cd62
mariadb-10.5@1:10.5.11-1
1:10.5.15-0+deb11u1

Open the chart page →

9,542
pecanncsaVerified publisher0.6.21 of 15See more

pecan ncsa 0.6.2

1 of the 15 container images this version deploys carry CVE-2021-35604.

Container imageDigestPackageFixed in
pecan/bety:5.4.1f825d480cd62
mariadb-10.5@1:10.5.11-1
1:10.5.15-0+deb11u1

Open the chart page →

14,154
liquidsoapnorth141.0.01 of 1See more

liquidsoap north14 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-35604.

Container imageDigestPackageFixed in
ghcr.io/savonet/liquidsoap:v2.0.19e08148e1055
mariadb-10.5@1:10.5.12-0+deb11u1
1:10.5.15-0+deb11u1

Open the chart page →

2,954
freeradiusopencord1.0.41 of 1See more

freeradius opencord 1.0.4

1 of the 1 container images this version deploys carry CVE-2021-35604.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.0.2121c8bfa904d8
mysql-5.7@5.7.29-0ubuntu0.18.04.1
5.7.36-0ubuntu0.18.04.1

Open the chart page →

15,702
sebaopencord1.0.01 of 17See more

seba opencord 1.0.0

1 of the 17 container images this version deploys carry CVE-2021-35604.

Container imageDigestPackageFixed in
tpdock/freeradius:2.2.93da600c95a49
mysql-5.7@5.7.20-0ubuntu0.16.04.1
5.7.36-0ubuntu0.16.04.1+esm1

Open the chart page →

93,855
voltha-infraopencord2.14.01 of 10See more

voltha-infra opencord 2.14.0

1 of the 10 container images this version deploys carry CVE-2021-35604.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.0.2121c8bfa904d8
mysql-5.7@5.7.29-0ubuntu0.18.04.1
5.7.36-0ubuntu0.18.04.1

Open the chart page →

41,044
open-vpnopenvpn0.0.11 of 1See more

open-vpn openvpn 0.0.1

1 of the 1 container images this version deploys carry CVE-2021-35604.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
mariadb-10.1@1:10.1.47-0ubuntu0.18.04.1
mysql-5.7@5.7.32-0ubuntu0.18.04.1
no fix listed
5.7.36-0ubuntu0.18.04.1

Open the chart page →

15,592
dolibarrraphaelVerified publisher0.0.11 of 1See more

dolibarr raphael 0.0.1

1 of the 1 container images this version deploys carry CVE-2021-35604.

Container imageDigestPackageFixed in
monogramm/docker-dolibarr:13.0-alpine5afd99523984
mariadb@10.5.9-r0
10.5.13-r0

Open the chart page →

3,466
wbaas-backupwbstack0.1.01 of 1See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-35604.

Container imageDigestPackageFixed in
ghcr.io/wmde/wbaas-backup:v0.1.78e6a9516eac0
mariadb-10.1@1:10.1.48-0ubuntu0.18.04.1
no fix listed

Open the chart page →

9,743

Container images carrying it

36 by charts deploying them

A fixed version is listed for 4 of the 6 affected packages.

Container imageDigestPackageFixed inUsed by
freeradius/freeradius-server:3.0.2121c8bfa904d8
mysql-5.7@5.7.29-0ubuntu0.18.04.1
5.7.36-0ubuntu0.18.04.1
2
pecan/bety:5.4.1f825d480cd62
mariadb-10.5@1:10.5.11-1
1:10.5.15-0+deb11u1
2
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
mariadb-10.1@1:10.1.47-0ubuntu0.18.04.1
mysql-5.7@5.7.32-0ubuntu0.18.04.1
no fix listed
5.7.36-0ubuntu0.18.04.1
2
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
mariadb-10.5@1:10.5.12-0+deb11u1
1:10.5.15-0+deb11u1
1
azhar008/flaskapplication:latesta1e827b0adea
mariadb-10.5@1:10.5.12-0+deb11u1
1:10.5.15-0+deb11u1
1
chetangautamm/repo:Opensips_Buildb4b94155ff5a
mysql-5.5@5.5.62-0ubuntu0.14.04.1
no fix listed
1
engrmth/bnkr:2.1.06d8464e6f0e8
mysql-8.0@8.0.23-0ubuntu0.20.04.1
8.0.27-0ubuntu0.20.04.1
1
fanzynoodle/smeejas:0.0.15f9916c1a287
mariadb-10.5@1:10.5.12-0+deb11u1
1:10.5.15-0+deb11u1
1
galaxy/galaxy-stable:v18.018e577a626dfd
mysql-5.5@5.5.60-0ubuntu0.14.04.1
no fix listed
1
gethue/hue:4.10.05702b2c37ff9
mysql-5.7@5.7.34-0ubuntu0.18.04.1
5.7.36-0ubuntu0.18.04.1
1
graphiteapp/graphite-statsd:1.1.7-604a0037cc2ae
mariadb@10.4.13-r0
10.4.22-r0
1
ha33ona/python:test6affdfc644d0
mariadb-10.5@1:10.5.12-0+deb11u1
1:10.5.15-0+deb11u1
1
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
mysql-5.7@5.7.33-0ubuntu0.18.04.1
5.7.36-0ubuntu0.18.04.1
1
litmuschaos/mysql-client:latest251afd8fc039
mariadb@10.4.13-r0
10.4.22-r0
1
monogramm/docker-dolibarr:13.0-alpine5afd99523984
mariadb@10.5.9-r0
10.5.13-r0
1
moreillon/face-recognition-fastapi:x86bacb2ddd8394
mariadb-10.5@1:10.5.12-0+deb11u1
1:10.5.15-0+deb11u1
1
pactfoundation/pact-broker:2.79.1.112861b0bd4d9
mariadb@10.5.8-r0
10.5.13-r0
1
robmarkcole/deepstack-ui:latest410275726459
mariadb-10.5@1:10.5.11-1
1:10.5.15-0+deb11u1
1
robotshop/rs-payment:latest774b52c6180d
mariadb-10.5@1:10.5.11-1
1:10.5.15-0+deb11u1
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
mysql-8.0@8.0.26-0ubuntu0.20.04.2
8.0.27-0ubuntu0.20.04.1
1
t3nde/matomo:4.3.1-fpm-alpine329ce194393a
mariadb@10.5.11-r0
10.5.13-r0
1
tobiasbp/db-backup:0.0.314bee6e33a26
mariadb@10.4.13-r0
10.4.22-r0
1
tpdock/freeradius:2.2.93da600c95a49
mysql-5.7@5.7.20-0ubuntu0.16.04.1
5.7.36-0ubuntu0.16.04.1+esm1
1
wallabag/wallabag:2.4.25e4c26a7fb4a
mariadb@10.4.17-r1
10.4.22-r0
1
zabbix/zabbix-server-pgsql:ubuntu-5.4.66c946b1f45cd
mysql-8.0@8.0.26-0ubuntu0.20.04.3
8.0.27-0ubuntu0.20.04.1
1
ghcr.io/alexanderbabel/database-s3-backup:1.3.33191b771a6f2
mariadb@10.5.12-r0
10.5.13-r0
1
ghcr.io/k8s-at-home/network-ups-tools:v2.7.4-2479-g86a32237cbd5d4cc1245
mysql-8.0@8.0.25-0ubuntu0.20.04.1
8.0.27-0ubuntu0.20.04.1
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
mysql-8.0@8.0.26-0ubuntu0.20.04.2
8.0.27-0ubuntu0.20.04.1
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
mysql-8.0@8.0.25-0ubuntu0.20.04.1
8.0.27-0ubuntu0.20.04.1
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
mysql-8.0@8.0.26-0ubuntu0.20.04.2
8.0.27-0ubuntu0.20.04.1
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
mysql-8.0@8.0.26-0ubuntu0.20.04.2
8.0.27-0ubuntu0.20.04.1
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
mysql-8.0@8.0.26-0ubuntu0.20.04.2
8.0.27-0ubuntu0.20.04.1
1
ghcr.io/leoquote/tinyproxy_exporter:master6b4103d88dbb
mariadb-10.5@1:10.5.11-1
1:10.5.15-0+deb11u1
1
ghcr.io/nathanvaughn/webtrees:2.0.1969423a100fab
mariadb-10.5@1:10.5.12-0+deb11u1
1:10.5.15-0+deb11u1
1
ghcr.io/savonet/liquidsoap:v2.0.19e08148e1055
mariadb-10.5@1:10.5.12-0+deb11u1
1:10.5.15-0+deb11u1
1
ghcr.io/wmde/wbaas-backup:v0.1.78e6a9516eac0
mariadb-10.1@1:10.1.48-0ubuntu0.18.04.1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.