StackRadar

CVE-2021-3656

High

Advisory

Published 16 Aug 2021In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.007
50th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
38
of 17,805 indexed, latest versions
Container images
34
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 38 of 17,805 indexed charts deploy, on 34 images.

Affected packageAffected versionsFixed inImages
linuxdeb4.15.0-38.41, 4.15.0-46.49, 4.15.0-50.54, 4.15.0-74.84+19 more4.15.0-156.163, 5.4.0-84.9434
OSV records
UBUNTU-CVE-2021-3656
Also known as
USN-5071-1, USN-5073-1

Charts affected

38 by stars
ChartLatestAffected imagesRadar Score
openvpn-asstenicVerified publisher0.1.91 of 1See more

openvpn-as stenic 0.1.9

1 of the 1 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
linux@4.15.0-126.129
4.15.0-156.163

Open the chart page →

81,408
fadicetic0.3.11 of 25See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
linux@5.4.0-62.70
5.4.0-84.94

Open the chart page →

131,978
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
istio/proxyv2:1.9.687a9db561d2e
linux@4.15.0-144.148
4.15.0-156.163

Open the chart page →

161,742
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
linux@5.4.0-81.91
5.4.0-84.94

Open the chart page →

100,496
huginnutkuozdemirVerified publisher2.2.11 of 4See more

huginn utkuozdemir 2.2.1

1 of the 4 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
linux@4.15.0-135.139
4.15.0-156.163

Open the chart page →

83,467
open-elevationbeeinventor0.1.01 of 2See more

open-elevation beeinventor 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
openelevation/open-elevation:latest82fb21612e86
linux@5.4.0-80.90
5.4.0-84.94

Open the chart page →

89,690
pysequilabiodatageeks0.1.31 of 7See more

pysequila biodatageeks 0.1.3

1 of the 7 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:0.9.1ec78bdae0fed
linux@4.15.0-96.97
4.15.0-156.163

Open the chart page →

87,544
flink-operatorflink-operator0.1.11 of 2See more

flink-operator flink-operator 0.1.1

1 of the 2 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
linux@4.15.0-88.88
4.15.0-156.163

Open the chart page →

80,210
games-on-whalesgeek-cookbookVerified publisher1.8.21 of 7See more

games-on-whales geek-cookbook 1.8.2

1 of the 7 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
linux@5.4.0-81.91
5.4.0-84.94

Open the chart page →

111,317
cniistio1.10.31 of 1See more

cni istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
istio/install-cni:1.10.32232f365aed6
linux@4.15.0-147.151
4.15.0-156.163

Open the chart page →

74,740
discoveryistio1.10.31 of 1See more

discovery istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
istio/pilot:1.10.3e7e110a421c2
linux@4.15.0-147.151
4.15.0-156.163

Open the chart page →

74,815
egressistio1.10.31 of 1See more

egress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
linux@4.15.0-147.151
4.15.0-156.163

Open the chart page →

74,761
ingressistio1.10.31 of 1See more

ingress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
linux@4.15.0-147.151
4.15.0-156.163

Open the chart page →

74,761
operatoristio1.10.31 of 1See more

operator istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
istio/operator:1.10.3655eefa11c84
linux@4.15.0-147.151
4.15.0-156.163

Open the chart page →

75,013
opennebulakvaps2.1.12 of 9See more

opennebula kvaps 2.1.1

2 of the 9 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
linux@5.4.0-80.90
5.4.0-84.94
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
linux@5.4.0-80.90
5.4.0-84.94

Open the chart page →

267,067
ckanstatcan0.0.351 of 8See more

ckan statcan 0.0.35

1 of the 8 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
statcan/ckan:2.93921305425b8
linux@5.4.0-74.83
5.4.0-84.94

Open the chart page →

102,633
acos-prometheus-exporter-helm-charta10-prometheus-exporter0.1.01 of 1See more

acos-prometheus-exporter-helm-chart a10-prometheus-exporter 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
a10networks/acos-prometheus-exporter:latest8dc58d434d71
linux@4.15.0-101.102
4.15.0-156.163

Open the chart page →

78,772
open5gsadaptivenetlabVerified publisher1.0.31 of 3See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
linux@5.4.0-67.75
5.4.0-84.94

Open the chart page →

104,003
games-on-whalesangelnu2.0.01 of 7See more

games-on-whales angelnu 2.0.0

1 of the 7 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
linux@5.4.0-81.91
5.4.0-84.94

Open the chart page →

118,218
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
linux@4.15.0-144.148
4.15.0-156.163

Open the chart page →

87,392
sippchetan-opensips0.1.01 of 1See more

sipp chetan-opensips 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
chetangautamm/repo:sipp.v3e7f7049e1544
linux@5.4.0-65.73
5.4.0-84.94

Open the chart page →

91,190
janisterminalcloudve0.1.01 of 2See more

janisterminal cloudve 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
cloudve/janis-terminal:latestaf56e77ca587
linux@4.15.0-106.107
4.15.0-156.163

Open the chart page →

80,967
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
linux@4.15.0-50.54
4.15.0-156.163

Open the chart page →

98,005
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
linux@4.15.0-117.118
4.15.0-156.163

Open the chart page →

85,083
datacube-processingdatacube-charts0.1.11 of 2See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
opendatacube/pipelines:wofs-1.225d810e8504b8
linux@4.15.0-46.49
4.15.0-156.163

Open the chart page →

93,053
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
linux@4.15.0-50.54
4.15.0-156.163

Open the chart page →

94,612
eg-edge-stackdatawire0.0.11 of 7See more

eg-edge-stack datawire 0.0.1

1 of the 7 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
linux@4.15.0-112.113
4.15.0-156.163

Open the chart page →

82,228
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
linux@5.4.0-80.90
5.4.0-84.94

Open the chart page →

100,897
kovi-appkovi-charts0.8.11 of 1See more

kovi-app kovi-charts 0.8.1

1 of the 1 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
kennethreitz/httpbin:latest599fe5e50731
linux@4.15.0-38.41
4.15.0-156.163

Open the chart page →

85,879
pulsarkubesphere-stable2.7.131 of 3See more

pulsar kubesphere-stable 2.7.13

1 of the 3 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
linux@5.4.0-77.86
5.4.0-84.94

Open the chart page →

91,441
splashntppoolVerified publisher1.0.41 of 1See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
scrapinghub/splash:3.4.1a5f89bc84606
linux@4.15.0-74.84
4.15.0-156.163

Open the chart page →

95,380
omec-control-planeopencord0.1.311 of 8See more

omec-control-plane opencord 0.1.31

1 of the 8 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
omecproject/mme-exporter:paging-latestbcc5f19fd676
linux@4.15.0-88.88
4.15.0-156.163

Open the chart page →

108,522
open-vpnopenvpn0.0.11 of 1See more

open-vpn openvpn 0.0.1

1 of the 1 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
linux@4.15.0-126.129
4.15.0-156.163

Open the chart page →

81,408
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
openwhisk/ow-utils:1.0.0c80dba0de3aa
linux@4.15.0-122.124
4.15.0-156.163

Open the chart page →

102,109
istio-discoverytemp-charts0.3.31 of 1See more

istio-discovery temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
istio/pilot:1.10.0294ca55bd1cc
linux@4.15.0-143.147
4.15.0-156.163

Open the chart page →

75,271
istio-ingresstemp-charts0.3.31 of 1See more

istio-ingress temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.088c6c693e67a
linux@4.15.0-143.147
4.15.0-156.163

Open the chart page →

75,217
emissary-ingresswener8.12.21 of 2See more

emissary-ingress wener 8.12.2

1 of the 2 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
linux@4.15.0-112.113
4.15.0-156.163

Open the chart page →

77,221
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2021-3656.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
linux@4.15.0-112.113
4.15.0-156.163

Open the chart page →

77,221

Container images carrying it

34 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
istio/kubectl:1.5.10dbb7726d1bf0
linux@4.15.0-112.113
4.15.0-156.163
3
istio/proxyv2:1.10.3a78b7a165744
linux@4.15.0-147.151
4.15.0-156.163
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
linux@5.4.0-81.91
5.4.0-84.94
2
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
linux@4.15.0-126.129
4.15.0-156.163
2
a10networks/acos-prometheus-exporter:latest8dc58d434d71
linux@4.15.0-101.102
4.15.0-156.163
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
linux@5.4.0-81.91
5.4.0-84.94
1
chetangautamm/repo:sipp.v3e7f7049e1544
linux@5.4.0-65.73
5.4.0-84.94
1
cloudve/janis-terminal:latestaf56e77ca587
linux@4.15.0-106.107
4.15.0-156.163
1
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
linux@4.15.0-117.118
4.15.0-156.163
1
gethue/hue:4.10.05702b2c37ff9
linux@4.15.0-144.148
4.15.0-156.163
1
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
linux@4.15.0-135.139
4.15.0-156.163
1
istio/install-cni:1.10.32232f365aed6
linux@4.15.0-147.151
4.15.0-156.163
1
istio/operator:1.10.3655eefa11c84
linux@4.15.0-147.151
4.15.0-156.163
1
istio/pilot:1.10.0294ca55bd1cc
linux@4.15.0-143.147
4.15.0-156.163
1
istio/pilot:1.10.3e7e110a421c2
linux@4.15.0-147.151
4.15.0-156.163
1
istio/proxyv2:1.9.687a9db561d2e
linux@4.15.0-144.148
4.15.0-156.163
1
istio/proxyv2:1.10.088c6c693e67a
linux@4.15.0-143.147
4.15.0-156.163
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
linux@5.4.0-62.70
5.4.0-84.94
1
jupyterhub/k8s-hub:0.9.1ec78bdae0fed
linux@4.15.0-96.97
4.15.0-156.163
1
kennethreitz/httpbin:latest599fe5e50731
linux@4.15.0-38.41
4.15.0-156.163
1
omecproject/mme-exporter:paging-latestbcc5f19fd676
linux@4.15.0-88.88
4.15.0-156.163
1
opendatacube/pipelines:wofs-1.225d810e8504b8
linux@4.15.0-46.49
4.15.0-156.163
1
opendatacube/restcube:latest91870111837c
linux@4.15.0-50.54
4.15.0-156.163
1
opendatacube/wms:latest1b90cdf68831
linux@4.15.0-50.54
4.15.0-156.163
1
openelevation/open-elevation:latest82fb21612e86
linux@5.4.0-80.90
5.4.0-84.94
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
linux@4.15.0-122.124
4.15.0-156.163
1
scrapinghub/splash:3.4.1a5f89bc84606
linux@4.15.0-74.84
4.15.0-156.163
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
linux@5.4.0-80.90
5.4.0-84.94
1
statcan/ckan:2.93921305425b8
linux@5.4.0-74.83
5.4.0-84.94
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
linux@5.4.0-77.86
5.4.0-84.94
1
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
linux@4.15.0-88.88
4.15.0-156.163
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
linux@5.4.0-80.90
5.4.0-84.94
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
linux@5.4.0-80.90
5.4.0-84.94
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
linux@5.4.0-67.75
5.4.0-84.94
1

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.