StackRadar

CVE-2021-36159

Critical

Advisory

Published 3 Aug 2021In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.026
85th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
475
of 17,787 indexed, latest versions
Container images
480
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 475 of 17,787 indexed charts deploy, on 480 images.

Affected packageAffected versionsFixed inImages
apk-toolsapk2.10.4-r1, 2.10.4-r2, 2.10.4-r3, 2.10.5-r0+7 more2.10.7-r0, 2.12.6-r0480
OSV records
ALPINE-CVE-2021-36159

Charts affected

475 by stars
ChartLatestAffected imagesRadar Score
monitorortrozz0.0.11 of 1See more

monitoror trozz 0.0.1

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
monitoror/monitoror:44b88edcf51ff
apk-tools@2.10.5-r1
2.10.7-r0

Open the chart page →

3,109
kiamuswitch6.1.21 of 1See more

kiam uswitch 6.1.2

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
quay.io/uswitch/kiam:v4.0be3a5846922d
apk-tools@2.10.5-r0
2.10.7-r0

Open the chart page →

2,965
transmission-exporterutkuozdemirVerified publisher1.1.01 of 1See more

transmission-exporter utkuozdemir 1.1.0

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
metalmatze/transmission-exporter:0.3.090d6acb6d47d
apk-tools@2.10.4-r2
2.10.7-r0

Open the chart page →

1,646
verhuis-serviceverhuis-service1.0.01 of 3See more

verhuis-service verhuis-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verhuis-service-php:latest66bbaf95a123
apk-tools@2.10.5-r1
2.10.7-r0

Open the chart page →

7,510
verzoekconversieserviceverzoekconversieservice1.0.01 of 3See more

verzoekconversieservice verzoekconversieservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekconversieservice-php:lateste918014fb8d3
apk-tools@2.10.5-r1
2.10.7-r0

Open the chart page →

7,527
verzoekregistratiecomponentverzoekregistratiecomponent1.1.01 of 4See more

verzoekregistratiecomponent verzoekregistratiecomponent 1.1.0

1 of the 4 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekregistratiecomponent-php:latestc4f6c03af5d3
apk-tools@2.10.5-r1
2.10.7-r0

Open the chart page →

7,429
verzoektypecatalogusverzoektypecatalogus1.1.01 of 4See more

verzoektypecatalogus verzoektypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoektypecatalogus-php:latest64f5eb7a398b
apk-tools@2.10.5-r1
2.10.7-r0

Open the chart page →

7,429
volantmqvolantmq0.1.21 of 1See more

volantmq volantmq 0.1.2

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
volantmq/volantmq:v0.4.0-rc.69bfe7857ebc3
apk-tools@2.10.4-r3
2.10.7-r0

Open the chart page →

2,550
base-dependencyvulcanlink1.0.01 of 1See more

base-dependency vulcanlink 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
library/alpine:3.14.0adab3844f497
apk-tools@2.12.5-r1
2.12.6-r0

Open the chart page →

895
alpinewenerme1.0.01 of 1See more

alpine wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
wener/base:3.12.0ef3bd19da190
apk-tools@2.10.5-r1
2.10.7-r0

Open the chart page →

1,263
athens-proxywenerme0.5.21 of 2See more

athens-proxy wenerme 0.5.2

1 of the 2 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
gomods/athens:v0.11.0efb811df7844
apk-tools@2.10.4-r3
2.10.7-r0

Open the chart page →

4,985
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
ghcr.io/banzaicloud/tcheck:latest0147d87c2019
apk-tools@2.10.5-r1
2.10.7-r0

Open the chart page →

10,127
filebrowserwenerme1.0.01 of 1See more

filebrowser wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
filebrowser/filebrowser:v2.13.0c5d0a75a0041
apk-tools@2.12.1-r0
2.12.6-r0

Open the chart page →

3,174
nats-account-serverwenerme0.8.11 of 1See more

nats-account-server wenerme 0.8.1

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
natsio/nats-account-server:1.0.0a3381560aab6
apk-tools@2.12.5-r1
2.12.6-r0

Open the chart page →

2,634
sambawenerme1.0.01 of 1See more

samba wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
wener/samba:4.13.39a42bae466d4
apk-tools@2.12.0-r4
2.12.6-r0

Open the chart page →

2,555
temporalwenerme0.15.13 of 13See more

temporal wenerme 0.15.1

3 of the 13 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
curlimages/curl:7.68.099a8e9629b3a
apk-tools@2.10.4-r2
2.10.7-r0
grafana/grafana:6.7.11ff3999e0fc0
apk-tools@2.10.4-r2
2.10.7-r0
temporalio/web:1.14.033cfa863d8ce
apk-tools@2.10.6-r0
2.10.7-r0

Open the chart page →

22,665
traefikwenerme9.1.11 of 1See more

traefik wenerme 9.1.1

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
library/traefik:2.2.8f5af5a5ce17f
apk-tools@2.10.5-r0
2.10.7-r0

Open the chart page →

3,369
wireguardwireguard-bananas1.5.01 of 1See more

wireguard wireguard-bananas 1.5.0

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
place1/wg-access-server:v0.4.62b2f3ea80ed6
apk-tools@2.10.4-r2
2.10.7-r0

Open the chart page →

2,745
dex-k8s-authenticatorwiremindVerified publisher1.7.01 of 1See more

dex-k8s-authenticator wiremind 1.7.0

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
mintel/dex-k8s-authenticator:1.4.0caf71cee7b9a
apk-tools@2.10.4-r2
2.10.7-r0

Open the chart page →

2,791
docker-hub-rate-limit-exporterwiremindVerified publisher0.3.01 of 1See more

docker-hub-rate-limit-exporter wiremind 0.3.0

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
viadee/docker-hub-rate-limit-exporter:version-1.52e27e3b3ee56
apk-tools@2.10.5-r1
2.10.7-r0

Open the chart page →

1,843
nginxwiremindVerified publisher2.1.11 of 1See more

nginx wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
library/nginx:1.17-alpine763e7f0188e3
apk-tools@2.10.5-r0
2.10.7-r0

Open the chart page →

966
apicurio-registry-sqlwitcom-gmbh0.1.01 of 1See more

apicurio-registry-sql witcom-gmbh 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-jpa:1.3.2.Final44eeddd3562c
apk-tools@2.10.5-r0
2.10.7-r0

Open the chart page →

3,424
docker-hub-exporterwyrihaximusnetVerified publisher0.5.51 of 1See more

docker-hub-exporter wyrihaximusnet 0.5.5

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
jessestuart/docker-hub-exporter:d05df48b8bdc671e36f
apk-tools@2.10.6-r0
2.10.7-r0

Open the chart page →

27
rcloneymrs0.1.41 of 2See more

rclone ymrs 0.1.4

1 of the 2 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
quay.io/simplyzee/kube-rclone:v1.52.389a0c23d5ad3
apk-tools@2.10.5-r1
2.10.7-r0

Open the chart page →

1,198
version-checkerymrs0.2.31 of 1See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
apk-tools@2.10.5-r1
2.10.7-r0

Open the chart page →

3,023

Container images carrying it

480 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/skyoo2003/digdag:0.0.1821fd6a6f2cd
apk-tools@2.12.1-r0
2.12.6-r0
1
ghcr.io/skyoo2003/wait-for-it:0.0.11677336db39c
apk-tools@2.12.1-r0
2.12.6-r0
1
ghcr.io/tauffer-consulting/domino-frontend:latesta923b86a0903
apk-tools@2.12.5-r0
2.12.6-r0
1
public.ecr.aws/jtekt-corporation/ecr-pullsecret-renewer:latest442cc3b32935
apk-tools@2.10.5-r1
2.10.7-r0
1
quay.io/apicurio/apicurio-registry-kube-sync:1.0.170ef31840269
apk-tools@2.10.5-r0
2.10.7-r0
1
quay.io/chriscowley/openldap_exporter:v2.1.16c308e9732e1
apk-tools@2.12.0-r4
2.12.6-r0
1
quay.io/cortexproject/cortex:v1.9.05d1c2cf4c538
apk-tools@2.12.5-r0
2.12.6-r0
1
quay.io/eclipse/che-devfile-registry:nightly5d25d47d6e17
apk-tools@2.10.5-r1
2.10.7-r0
1
quay.io/eclipse/che-plugin-registry:nightlya88add0f8c93
apk-tools@2.12.5-r0
2.12.6-r0
1
quay.io/fairwinds/clamav:v0.0.3e12bdddaa81d
apk-tools@2.10.4-r3
2.10.7-r0
1
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
apk-tools@2.12.5-r0
2.12.6-r0
1
quay.io/jetstack/kube-oidc-proxy:v0.3.0e045b26eb6df
apk-tools@2.10.4-r2
2.10.7-r0
1
quay.io/kiwigrid/k8s-sidecar:1.10.718feb3906286
apk-tools@2.12.1-r0
2.12.6-r0
1
quay.io/kube-ops/promtail-cri-autoconfig:1.0.1eaa71a8cadef
apk-tools@2.10.6-r0
2.10.7-r0
1
quay.io/kubernetes-ingress-controller/nginx-ingress-controller:0.32.0251e733bf41c
apk-tools@2.10.5-r0
2.10.7-r0
1
quay.io/kubernetes-ingress-controller/nginx-ingress-controller:0.30.0b312c91d0de6
apk-tools@2.10.4-r3
2.10.7-r0
1
quay.io/kubernetes-multicluster/kubefed:v0.7.06d56f69b15a3
apk-tools@2.12.1-r0
2.12.6-r0
1
quay.io/metallb/controller:v0.10.221164241c045
apk-tools@2.12.5-r0
2.12.6-r0
1
quay.io/metallb/speaker:v0.10.258cb99053bb3
apk-tools@2.12.5-r0
2.12.6-r0
1
quay.io/oauth2-proxy/oauth2-proxy:v6.1.1791aef35b8d1
apk-tools@2.10.5-r0
2.10.7-r0
1
quay.io/oauth2-proxy/oauth2-proxy:v7.1.3ecd26b74a01f
apk-tools@2.12.1-r0
2.12.6-r0
1
quay.io/opsmxpublic/k8s-decoder:halfec086394aa9
apk-tools@2.12.1-r0
2.12.6-r0
1
quay.io/opsmxpublic/oes-pre-configure:v29b052fbb046f
apk-tools@2.10.5-r1
2.10.7-r0
1
quay.io/opstree/druid-exporter:v0.83f6d9885cfe2
apk-tools@2.10.5-r1
2.10.7-r0
1
quay.io/renokico/laravel-helm-demo:octane-0.6.0cad83090c58f
apk-tools@2.10.6-r0
2.10.7-r0
1
quay.io/simplyzee/kube-rclone:v1.52.389a0c23d5ad3
apk-tools@2.10.5-r1
2.10.7-r0
1
quay.io/srcmaxim/gradle-example-app:1.1.37c3fc28746ef
apk-tools@2.12.5-r0
2.12.6-r0
1
quay.io/t3n/dashkiosk:v2.7.8c973e166a5dc
apk-tools@2.10.4-r3
2.10.7-r0
1
quay.io/uswitch/kiam:v4.0be3a5846922d
apk-tools@2.10.5-r0
2.10.7-r0
1
registry.gitlab.com/arm-research/smarter/smarter-device-manager:v1.20.7864fc338571e
apk-tools@2.12.5-r0
2.12.6-r0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.