StackRadar

CVE-2021-36159

Critical

Advisory

Published 3 Aug 2021In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.026
85th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
475
of 17,787 indexed, latest versions
Container images
480
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 475 of 17,787 indexed charts deploy, on 480 images.

Affected packageAffected versionsFixed inImages
apk-toolsapk2.10.4-r1, 2.10.4-r2, 2.10.4-r3, 2.10.5-r0+7 more2.10.7-r0, 2.12.6-r0480
OSV records
ALPINE-CVE-2021-36159

Charts affected

475 by stars
ChartLatestAffected imagesRadar Score
icinga2-masterschmitzis0.2.02 of 6See more

icinga2-master schmitzis 0.2.0

2 of the 6 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
curlimages/curl:7.73.05329ee280d3d
apk-tools@2.10.5-r0
2.10.7-r0
grafana/grafana:8.0.3696823fbc561
apk-tools@2.12.5-r0
2.12.6-r0

Open the chart page →

3,731
version-checkerschmitzis0.2.21 of 1See more

version-checker schmitzis 0.2.2

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
apk-tools@2.10.5-r1
2.10.7-r0

Open the chart page →

3,023
centralbrainsciencemeshVerified publisher0.0.31 of 5See more

centralbrain sciencemesh 0.0.3

1 of the 5 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
grafana/grafana:7.3.315b977f5207d
apk-tools@2.10.5-r1
2.10.7-r0

Open the chart page →

9,754
seldon-core-analyticsseldon1.17.12 of 8See more

seldon-core-analytics seldon 1.17.1

2 of the 8 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
apk-tools@2.10.5-r0
2.10.7-r0
kiwigrid/k8s-sidecar:0.1.1517b98eecdf6d1
apk-tools@2.10.5-r0
2.10.7-r0

Open the chart page →

10,733
sentry-dbsentry0.9.41 of 10See more

sentry-db sentry 0.9.4

1 of the 10 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
library/rabbitmq:3.8.0-alpine72ff40a31dc4
apk-tools@2.10.4-r2
2.10.7-r0

Open the chart page →

10,972
mailhogsitepilot1.0.21 of 1See more

mailhog sitepilot 1.0.2

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
mailhog/mailhog:v1.0.18d76a3d4ffa3
apk-tools@2.10.5-r1
2.10.7-r0

Open the chart page →

778
pontoonskills-network2.2.01 of 2See more

pontoon skills-network 2.2.0

1 of the 2 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
library/redis:6.0.7-alpine5326e0af4341
apk-tools@2.10.5-r1
2.10.7-r0

Open the chart page →

778
digdagskyoo20030.5.22 of 4See more

digdag skyoo2003 0.5.2

2 of the 4 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
ghcr.io/skyoo2003/digdag:0.0.1821fd6a6f2cd
apk-tools@2.12.1-r0
2.12.6-r0
ghcr.io/skyoo2003/wait-for-it:0.0.11677336db39c
apk-tools@2.12.1-r0
2.12.6-r0

Open the chart page →

6,950
docker-registry-proxyslamdev0.0.91 of 1See more

docker-registry-proxy slamdev 0.0.9

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
rpardini/docker-registry-proxy:0.6.383d5f6a96682
apk-tools@2.10.5-r1
2.10.7-r0

Open the chart page →

848
envoyslamdev0.0.171 of 2See more

envoy slamdev 0.0.17

1 of the 2 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
library/alpine:3.12.4a295107679b0
apk-tools@2.10.5-r1
2.10.7-r0

Open the chart page →

4,705
flux-notifierslamdev0.0.71 of 1See more

flux-notifier slamdev 0.0.7

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
slamdev/flux-notifier:v0.0.8b173d809132d
apk-tools@2.10.5-r0
2.10.7-r0

Open the chart page →

2,015
gke-preemptible-notifierslamdev0.0.61 of 1See more

gke-preemptible-notifier slamdev 0.0.6

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
slamdev/gke-preemptible-notifier:v0.0.3d5d6430108a3
apk-tools@2.10.5-r0
2.10.7-r0

Open the chart page →

2,860
haproxyslamdev0.0.41 of 1See more

haproxy slamdev 0.0.4

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
library/haproxy:2.3.9-alpinefd871b2cf0be
apk-tools@2.12.5-r0
2.12.6-r0

Open the chart page →

699
hetzner-iroboslamdev0.0.51 of 1See more

hetzner-irobo slamdev 0.0.5

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
slamdev/hetzner-irobo:0.0.13ca20c184c55
apk-tools@2.10.5-r1
2.10.7-r0

Open the chart page →

3,754
nginxslamdev0.0.211 of 1See more

nginx slamdev 0.0.21

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
library/nginx:1.19.10-alpine-perl3705b56fe558
apk-tools@2.12.5-r0
2.12.6-r0

Open the chart page →

1,710
octavia-ingress-controllerslamdev0.0.71 of 1See more

octavia-ingress-controller slamdev 0.0.7

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
k8scloudprovider/octavia-ingress-controller:v1.20.26ddf80b34265
apk-tools@2.10.5-r0
2.10.7-r0

Open the chart page →

2,761
pgwebslamdev0.0.81 of 1See more

pgweb slamdev 0.0.8

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
sosedoff/pgweb:0.11.785e0132e0cce
apk-tools@2.10.4-r2
2.10.7-r0

Open the chart page →

600
aafsmo-helm-chart6.0.01 of 14See more

aaf smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
dibi/envsubst:latestfc2d92db8024
apk-tools@2.10.5-r1
2.10.7-r0

Open the chart page →

25,793
dgbuildersmo-helm-chart6.0.01 of 3See more

dgbuilder smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
dibi/envsubst:latestfc2d92db8024
apk-tools@2.10.5-r1
2.10.7-r0

Open the chart page →

28,494
dmaap-listenersmo-helm-chart6.0.01 of 3See more

dmaap-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
dibi/envsubst:latestfc2d92db8024
apk-tools@2.10.5-r1
2.10.7-r0

Open the chart page →

25,793
sdcsmo-helm-chart6.0.01 of 14See more

sdc smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
dibi/envsubst:latestfc2d92db8024
apk-tools@2.10.5-r1
2.10.7-r0

Open the chart page →

25,793
sdnc-ansible-serversmo-helm-chart6.0.01 of 3See more

sdnc-ansible-server smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
dibi/envsubst:latestfc2d92db8024
apk-tools@2.10.5-r1
2.10.7-r0

Open the chart page →

25,793
sdnc-portalsmo-helm-chart6.0.01 of 3See more

sdnc-portal smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
dibi/envsubst:latestfc2d92db8024
apk-tools@2.10.5-r1
2.10.7-r0

Open the chart page →

25,793
ueb-listenersmo-helm-chart6.0.01 of 3See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
dibi/envsubst:latestfc2d92db8024
apk-tools@2.10.5-r1
2.10.7-r0

Open the chart page →

25,793
gar-exportersoftonic0.1.11 of 1See more

gar-exporter softonic 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
softonic/gar-exporter:0.2.1a64d6c0e0ae5
apk-tools@2.10.5-r1
2.10.7-r0

Open the chart page →

2,296
webhook-receiversoftonic2.1.11 of 1See more

webhook-receiver softonic 2.1.1

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
almir/webhook:2.8.01698346f6077
apk-tools@2.10.5-r0
2.10.7-r0

Open the chart page →

1,927
statsd-proxysomeblackmagic0.1.21 of 1See more

statsd-proxy someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
adgoal/statsd-proxy:latest75ed282ad613
apk-tools@2.10.4-r3
2.10.7-r0

Open the chart page →

682
spinnakerspinnakerVerified publisher2.2.131 of 4See more

spinnaker spinnaker 2.2.13

1 of the 4 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2020-11-25T23-04-07Zbf85c57cdfcc
apk-tools@2.10.5-r1
2.10.7-r0

Open the chart page →

6,836
ecr-cleanersstarcher0.1.1+d13a1ab1 of 1See more

ecr-cleaner sstarcher 0.1.1+d13a1ab

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
sstarcher/ecr-cleaner:0.1.12d43c390cb19
apk-tools@2.10.4-r3
2.10.7-r0

Open the chart page →

2,575
kube-ebs-taggersstarcher0.1.0+7abf4f71 of 1See more

kube-ebs-tagger sstarcher 0.1.0+7abf4f7

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
sstarcher/kube-ebs-tagger:0.1.01f8cae8cfa80
apk-tools@2.10.4-r3
2.10.7-r0

Open the chart page →

3,096
newrelic-operatorsstarcher0.1.0+32463481 of 1See more

newrelic-operator sstarcher 0.1.0+3246348

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
sstarcher/newrelic-operator:0.1.01b702330047f
apk-tools@2.10.4-r2
2.10.7-r0

Open the chart page →

280
analytics-platformstatcan0.0.141 of 3See more

analytics-platform statcan 0.0.14

1 of the 3 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
library/alpine:3.10451eee8bedcb
apk-tools@2.10.6-r0
2.10.7-r0

Open the chart page →

27
cost-analyzerstatcan1.82.25 of 9See more

cost-analyzer statcan 1.82.2

5 of the 9 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
grafana/grafana:7.5.609bb407e26ab
apk-tools@2.10.6-r0
2.10.7-r0
kiwigrid/k8s-sidecar:1.12.089739be9ff38
apk-tools@2.12.5-r0
2.12.6-r0
gcr.io/kubecost1/cost-model:prod-1.82.2989a60847416
apk-tools@2.12.5-r1
2.12.6-r0
gcr.io/kubecost1/frontend:prod-1.82.2ba66607c947c
apk-tools@2.12.1-r0
2.12.6-r0
gcr.io/kubecost1/server:prod-1.82.22b1a3d08caac
apk-tools@2.12.5-r1
2.12.6-r0

Open the chart page →

16,508
datapusherstatcan1.0.01 of 1See more

datapusher statcan 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
keitaro/ckan-datapusher:0.0.175bf1a45f45c1
apk-tools@2.10.5-r1
2.10.7-r0

Open the chart page →

3,044
prometheus-operatorstatcan0.2.23 of 7See more

prometheus-operator statcan 0.2.2

3 of the 7 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
apk-tools@2.10.5-r0
2.10.7-r0
kiwigrid/k8s-sidecar:0.1.1517b98eecdf6d1
apk-tools@2.10.5-r0
2.10.7-r0
squareup/ghostunnel:v1.5.270f4cf270425
apk-tools@2.10.4-r2
2.10.7-r0

Open the chart page →

12,237
vaultstatcan0.1.82 of 2See more

vault statcan 0.1.8

2 of the 2 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
hashicorp/vault-k8s:0.6.05697b85bc69a
apk-tools@2.10.5-r1
2.10.7-r0
library/vault:1.5.4121c1eb16a47
apk-tools@2.10.4-r2
2.10.7-r0

Open the chart page →

4,222
nfs-provisionersupporttools0.11.01 of 1See more

nfs-provisioner supporttools 0.11.0

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
openebs/provisioner-nfs:0.11.04f41dd782761
apk-tools@2.10.5-r1
2.10.7-r0

Open the chart page →

2,673
hcloud-csisyself0.1.11 of 6See more

hcloud-csi syself 0.1.1

1 of the 6 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
hetznercloud/hcloud-csi-driver:1.6.01475d525f9a4
apk-tools@2.12.5-r0
2.12.6-r0

Open the chart page →

2,910
dashkioskt3n2.0.01 of 1See more

dashkiosk t3n 2.0.0

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
quay.io/t3n/dashkiosk:v2.7.8c973e166a5dc
apk-tools@2.10.4-r3
2.10.7-r0

Open the chart page →

3,827
gtmetrix-bqt3n1.0.01 of 1See more

gtmetrix-bq t3n 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
t3nde/gtmetrix-bq:0.2.0d2939e9a719b
apk-tools@2.10.5-r0
2.10.7-r0

Open the chart page →

1,287
taalhuizen-servicetaalhuizen-service1.0.01 of 3See more

taalhuizen-service taalhuizen-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/taalhuizen-service-php:latest04f1b7f0d573
apk-tools@2.10.5-r1
2.10.7-r0

Open the chart page →

7,480
repmanteam-blueVerified publisher0.3.01 of 5See more

repman team-blue 0.3.0

1 of the 5 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
buddy/repman:1.4.0097c897f8b54
apk-tools@2.10.5-r0
2.10.7-r0

Open the chart page →

4,004
telegraf-ds-k3stelegraf-ds-k3s1.0.01 of 1See more

telegraf-ds-k3s telegraf-ds-k3s 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
library/telegraf:1.19.0-alpine794079a7f241
apk-tools@2.10.6-r0
2.10.7-r0

Open the chart page →

3,764
temporaltemporal0.28.92 of 13See more

temporal temporal 0.28.9

2 of the 13 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
curlimages/curl:7.68.099a8e9629b3a
apk-tools@2.10.4-r2
2.10.7-r0
grafana/grafana:6.7.11ff3999e0fc0
apk-tools@2.10.4-r2
2.10.7-r0

Open the chart page →

21,004
tezos-nodetezos-nodeVerified publisher1.0.01 of 4See more

tezos-node tezos-node 1.0.0

1 of the 4 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
ecadlabs/tezos_exporter:latest4bcbe5d1cdd2
apk-tools@2.12.5-r1
2.12.6-r0

Open the chart page →

5,321
pock-helm-charttinote-chart0.1.02 of 3See more

pock-helm-chart tinote-chart 0.1.0

2 of the 3 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
denisshav/backend:latest4cc8dc5a4499
apk-tools@2.10.6-r0
2.10.7-r0
denisshav/frontend:latestb97cc69fbac6
apk-tools@2.12.5-r0
2.12.6-r0

Open the chart page →

6,881
grafanatnh5.3.01 of 1See more

grafana tnh 5.3.0

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
apk-tools@2.10.5-r0
2.10.7-r0

Open the chart page →

3,191
jenkinstnh2.7.11 of 2See more

jenkins tnh 2.7.1

1 of the 2 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.1.193170069ff0976
apk-tools@2.10.5-r1
2.10.7-r0

Open the chart page →

4,434
trouw-servicetrouw-service1.0.01 of 3See more

trouw-service trouw-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/trouw-service-php:latestf745e2870692
apk-tools@2.10.5-r1
2.10.7-r0

Open the chart page →

7,510
kubernetes-external-secretstrozz6.3.01 of 1See more

kubernetes-external-secrets trozz 6.3.0

1 of the 1 container images this version deploys carry CVE-2021-36159.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/kubernetes-external-secrets:6.3.0eab9bd0b6986
apk-tools@2.10.5-r0
2.10.7-r0

Open the chart page →

2,838

Container images carrying it

480 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/skyoo2003/digdag:0.0.1821fd6a6f2cd
apk-tools@2.12.1-r0
2.12.6-r0
1
ghcr.io/skyoo2003/wait-for-it:0.0.11677336db39c
apk-tools@2.12.1-r0
2.12.6-r0
1
ghcr.io/tauffer-consulting/domino-frontend:latesta923b86a0903
apk-tools@2.12.5-r0
2.12.6-r0
1
public.ecr.aws/jtekt-corporation/ecr-pullsecret-renewer:latest442cc3b32935
apk-tools@2.10.5-r1
2.10.7-r0
1
quay.io/apicurio/apicurio-registry-kube-sync:1.0.170ef31840269
apk-tools@2.10.5-r0
2.10.7-r0
1
quay.io/chriscowley/openldap_exporter:v2.1.16c308e9732e1
apk-tools@2.12.0-r4
2.12.6-r0
1
quay.io/cortexproject/cortex:v1.9.05d1c2cf4c538
apk-tools@2.12.5-r0
2.12.6-r0
1
quay.io/eclipse/che-devfile-registry:nightly5d25d47d6e17
apk-tools@2.10.5-r1
2.10.7-r0
1
quay.io/eclipse/che-plugin-registry:nightlya88add0f8c93
apk-tools@2.12.5-r0
2.12.6-r0
1
quay.io/fairwinds/clamav:v0.0.3e12bdddaa81d
apk-tools@2.10.4-r3
2.10.7-r0
1
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
apk-tools@2.12.5-r0
2.12.6-r0
1
quay.io/jetstack/kube-oidc-proxy:v0.3.0e045b26eb6df
apk-tools@2.10.4-r2
2.10.7-r0
1
quay.io/kiwigrid/k8s-sidecar:1.10.718feb3906286
apk-tools@2.12.1-r0
2.12.6-r0
1
quay.io/kube-ops/promtail-cri-autoconfig:1.0.1eaa71a8cadef
apk-tools@2.10.6-r0
2.10.7-r0
1
quay.io/kubernetes-ingress-controller/nginx-ingress-controller:0.32.0251e733bf41c
apk-tools@2.10.5-r0
2.10.7-r0
1
quay.io/kubernetes-ingress-controller/nginx-ingress-controller:0.30.0b312c91d0de6
apk-tools@2.10.4-r3
2.10.7-r0
1
quay.io/kubernetes-multicluster/kubefed:v0.7.06d56f69b15a3
apk-tools@2.12.1-r0
2.12.6-r0
1
quay.io/metallb/controller:v0.10.221164241c045
apk-tools@2.12.5-r0
2.12.6-r0
1
quay.io/metallb/speaker:v0.10.258cb99053bb3
apk-tools@2.12.5-r0
2.12.6-r0
1
quay.io/oauth2-proxy/oauth2-proxy:v6.1.1791aef35b8d1
apk-tools@2.10.5-r0
2.10.7-r0
1
quay.io/oauth2-proxy/oauth2-proxy:v7.1.3ecd26b74a01f
apk-tools@2.12.1-r0
2.12.6-r0
1
quay.io/opsmxpublic/k8s-decoder:halfec086394aa9
apk-tools@2.12.1-r0
2.12.6-r0
1
quay.io/opsmxpublic/oes-pre-configure:v29b052fbb046f
apk-tools@2.10.5-r1
2.10.7-r0
1
quay.io/opstree/druid-exporter:v0.83f6d9885cfe2
apk-tools@2.10.5-r1
2.10.7-r0
1
quay.io/renokico/laravel-helm-demo:octane-0.6.0cad83090c58f
apk-tools@2.10.6-r0
2.10.7-r0
1
quay.io/simplyzee/kube-rclone:v1.52.389a0c23d5ad3
apk-tools@2.10.5-r1
2.10.7-r0
1
quay.io/srcmaxim/gradle-example-app:1.1.37c3fc28746ef
apk-tools@2.12.5-r0
2.12.6-r0
1
quay.io/t3n/dashkiosk:v2.7.8c973e166a5dc
apk-tools@2.10.4-r3
2.10.7-r0
1
quay.io/uswitch/kiam:v4.0be3a5846922d
apk-tools@2.10.5-r0
2.10.7-r0
1
registry.gitlab.com/arm-research/smarter/smarter-device-manager:v1.20.7864fc338571e
apk-tools@2.12.5-r0
2.12.6-r0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.