StackRadar

CVE-2021-36373

Medium

Advisory

Published 2 Aug 2021In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.025
84th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
28
of 17,781 indexed, latest versions
Container images
25
deployed by those charts
Fix available
1 of 1
affected package

Improper Handling of Length Parameter Inconsistency in Apache Ant

Carried by container images the latest versions of 28 of 17,781 indexed charts deploy, on 25 images.

Affected packageAffected versionsFixed inImages
antmaven1.6.2, 1.6.5, 1.7.0, 1.8.2+9 more1.9.16, 1.10.1125
OSV records
GHSA-q5r4-cfpx-h6fh

Charts affected

28 by stars
ChartLatestAffected imagesRadar Score
solrpreferred-aiVerified publisher3.2.01 of 3See more

solr preferred-ai 3.2.0

1 of the 3 container images this version deploys carry CVE-2021-36373.

Container imageDigestPackageFixed in
library/solr:8.7.0d124efd81fbb
ant@1.8.2
1.9.16

Open the chart page →

6,048
hivebigdata-chartsVerified publisher0.1.81 of 1See more

hive bigdata-charts 0.1.8

1 of the 1 container images this version deploys carry CVE-2021-36373.

Container imageDigestPackageFixed in
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
ant@1.9.1
1.9.16

Open the chart page →

7,166
hivedmwm-bigdataVerified publisher0.1.62 of 5See more

hive dmwm-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2021-36373.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
ant@1.9.1
1.9.16
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
ant@1.6.5
1.9.16

Open the chart page →

20,837
hive-metastoreheva-helm-chartsVerified publisher0.2.01 of 2See more

hive-metastore heva-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2021-36373.

Container imageDigestPackageFixed in
sslhep/hive-metastore:3.1.39e80af083079
ant@1.9.1
1.9.16

Open the chart page →

7,335
hive-metastoreslamdev0.0.51 of 2See more

hive-metastore slamdev 0.0.5

1 of the 2 container images this version deploys carry CVE-2021-36373.

Container imageDigestPackageFixed in
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
ant@1.6.5
1.9.16

Open the chart page →

8,198
hive-metastoredmwm-bigdataVerified publisher0.1.31 of 2See more

hive-metastore dmwm-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2021-36373.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
ant@1.9.1
1.9.16

Open the chart page →

6,882
spinnakerdwardu-helm-charts2.2.61 of 2See more

spinnaker dwardu-helm-charts 2.2.6

1 of the 2 container images this version deploys carry CVE-2021-36373.

Container imageDigestPackageFixed in
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
ant@1.9.13
1.9.16

Open the chart page →

8,752
stormgresearch1.2.01 of 3See more

storm gresearch 1.2.0

1 of the 3 container images this version deploys carry CVE-2021-36373.

Container imageDigestPackageFixed in
library/storm:2.4.0bd5d420506d6
ant@1.9.1
1.9.16

Open the chart page →

6,165
seata-serverheidaodageshiwoVerified publisher1.0.01 of 1See more

seata-server heidaodageshiwo 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-36373.

Container imageDigestPackageFixed in
seataio/seata-server:1.5.1ee1ed55f4144
ant@1.10.6
1.10.11

Open the chart page →

5,624
signserver-cesignserverOfficialVerified publisher2.3.51 of 1See more

signserver-ce signserver 2.3.5

1 of the 1 container images this version deploys carry CVE-2021-36373.

Container imageDigestPackageFixed in
keyfactor/signserver-ce:7.3.2798fbbe00283
ant@1.10.9
1.10.11

Open the chart page →

2,406
ckanstatcan0.0.351 of 8See more

ckan statcan 0.0.35

1 of the 8 container images this version deploys carry CVE-2021-36373.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
ant@1.8.2
1.9.16

Open the chart page →

24,930
rundeckcloudnativeapp0.1.01 of 2See more

rundeck cloudnativeapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-36373.

Container imageDigestPackageFixed in
rundeck/rundeck:3.0.16b13e8059ad72
ant@1.8.3
1.9.16

Open the chart page →

23,665
rundeckdwardu-helm-charts0.3.41 of 2See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2021-36373.

Container imageDigestPackageFixed in
rundeck/rundeck:3.2.74d64fe56f767
ant@1.8.3
1.9.16

Open the chart page →

19,802
mod-copycatfolio-org0.1.31 of 1See more

mod-copycat folio-org 0.1.3

1 of the 1 container images this version deploys carry CVE-2021-36373.

Container imageDigestPackageFixed in
folioci/mod-copycat:latest1513fad2b799
ant@1.9.4
1.9.16

Open the chart page →

1,466
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2021-36373.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
ant@1.10.5
1.10.11

Open the chart page →

18,230
booksonic-airgeek-cookbookVerified publisher6.4.21 of 1See more

booksonic-air geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2021-36373.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
ant@1.10.5
1.10.11

Open the chart page →

19,215
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2021-36373.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
ant@1.7.0
1.9.16

Open the chart page →

27,949
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.81 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2021-36373.

Container imageDigestPackageFixed in
jingking/geonetwork-hnap:4.2.843e74ab234e1
ant@1.6.5
1.9.16

Open the chart page →

34,754
hivegradiant-bigdataVerified publisher0.1.62 of 5See more

hive gradiant-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2021-36373.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
ant@1.9.1
1.9.16
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
ant@1.6.5
1.9.16

Open the chart page →

20,837
hive-metastoregradiant-bigdataVerified publisher0.1.31 of 2See more

hive-metastore gradiant-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2021-36373.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
ant@1.9.1
1.9.16

Open the chart page →

6,882
ibm-microclimateibm-charts0.1.02 of 8See more

ibm-microclimate ibm-charts 0.1.0

2 of the 8 container images this version deploys carry CVE-2021-36373.

Container imageDigestPackageFixed in
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
ant@1.8.4
1.9.16
ibmcom/microclimate-theia:lateste17bdccc5030
ant@1.6.5
1.9.16

Open the chart page →

57,669
jenkinsjenkins-x0.10.381 of 2See more

jenkins jenkins-x 0.10.38

1 of the 2 container images this version deploys carry CVE-2021-36373.

Container imageDigestPackageFixed in
jenkinsci/jenkins:2.67a1f33f004659
ant@1.9.2
1.9.16

Open the chart page →

10,682
crowdmoxVerified publisher2.4.31 of 3See more

crowd mox 2.4.3

1 of the 3 container images this version deploys carry CVE-2021-36373.

Container imageDigestPackageFixed in
atlassian/crowd:5.2.2ebf761c7d437
ant@1.6.2
1.9.16

Open the chart page →

5,663
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2021-36373.

Container imageDigestPackageFixed in
ncsapolyglot/converters-unoconv:latest1d9cebe3022b
ant@1.10.5
1.10.11

Open the chart page →

55,726
archivaslamdev0.0.71 of 2See more

archiva slamdev 0.0.7

1 of the 2 container images this version deploys carry CVE-2021-36373.

Container imageDigestPackageFixed in
xetusoss/archiva:v2.2.588f25242b9ee
ant@1.8.3
1.9.16

Open the chart page →

6,907
atlassian-confluencesomeblackmagic3.4.11 of 1See more

atlassian-confluence someblackmagic 3.4.1

1 of the 1 container images this version deploys carry CVE-2021-36373.

Container imageDigestPackageFixed in
atlassian/confluence-server:7.10.03b9222ab32ef
ant@1.10.9
1.10.11

Open the chart page →

13,605
fdi-dotstatsuite-sfs-solrstatcan1.0.21 of 4See more

fdi-dotstatsuite-sfs-solr statcan 1.0.2

1 of the 4 container images this version deploys carry CVE-2021-36373.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
ant@1.8.2
1.9.16

Open the chart page →

6,065
solrstatcan1.5.101 of 3See more

solr statcan 1.5.10

1 of the 3 container images this version deploys carry CVE-2021-36373.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
ant@1.8.2
1.9.16

Open the chart page →

8,806

Container images carrying it

25 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
bde2020/hive:2.3.2-postgresql-metastore620267768985
ant@1.9.1
1.9.16
4
library/solr:8.11.18c5f7881cebb
ant@1.8.2
1.9.16
3
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
ant@1.6.5
1.9.16
2
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
ant@1.9.1
1.9.16
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
ant@1.10.5
1.10.11
1
atlassian/confluence-server:7.10.03b9222ab32ef
ant@1.10.9
1.10.11
1
atlassian/crowd:5.2.2ebf761c7d437
ant@1.6.2
1.9.16
1
folioci/mod-copycat:latest1513fad2b799
ant@1.9.4
1.9.16
1
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
ant@1.8.4
1.9.16
1
ibmcom/microclimate-theia:lateste17bdccc5030
ant@1.6.5
1.9.16
1
jenkinsci/jenkins:2.67a1f33f004659
ant@1.9.2
1.9.16
1
jingking/geonetwork-hnap:4.2.843e74ab234e1
ant@1.6.5
1.9.16
1
keyfactor/signserver-ce:7.3.2798fbbe00283
ant@1.10.9
1.10.11
1
library/solr:8.7.0d124efd81fbb
ant@1.8.2
1.9.16
1
library/storm:2.4.0bd5d420506d6
ant@1.9.1
1.9.16
1
ncsapolyglot/converters-unoconv:latest1d9cebe3022b
ant@1.10.5
1.10.11
1
openkm/openkm-ce:6.3.113bc465a7461b
ant@1.7.0
1.9.16
1
rundeck/rundeck:3.2.74d64fe56f767
ant@1.8.3
1.9.16
1
rundeck/rundeck:3.0.16b13e8059ad72
ant@1.8.3
1.9.16
1
seataio/seata-server:1.5.1ee1ed55f4144
ant@1.10.6
1.10.11
1
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
ant@1.6.5
1.9.16
1
sslhep/hive-metastore:3.1.39e80af083079
ant@1.9.1
1.9.16
1
xetusoss/archiva:v2.2.588f25242b9ee
ant@1.8.3
1.9.16
1
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
ant@1.9.13
1.9.16
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
ant@1.10.5
1.10.11
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.