StackRadar

CVE-2021-37533

Medium

Advisory

Published 3 Dec 2022In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.021
80th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
82
of 17,781 indexed, latest versions
Container images
74
deployed by those charts
Fix available
1 of 1
affected package

Apache Commons Net vulnerable to information leakage via malicious server

Carried by container images the latest versions of 82 of 17,781 indexed charts deploy, on 74 images.

Affected packageAffected versionsFixed inImages
commons-netmaven2.0, 2.2, 3.1, 3.2+5 more3.9.074
OSV records
GHSA-cgp8-4m63-fhh5

Charts affected

82 by stars
ChartLatestAffected imagesRadar Score
druiddruid-helmVerified publisher37.0.21 of 3See more

druid druid-helm 37.0.2

1 of the 3 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
commons-net@3.6
3.9.0

Open the chart page →

3,812
hivemq-operatorhivemqOfficialVerified publisher0.11.621 of 2See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
hivemq/hivemq-operator:4.7.10241d6a8e1963
commons-net@3.3
3.9.0

Open the chart page →

7,857
metabasedeliveryheroVerified publisher0.14.41 of 1See more

metabase deliveryhero 0.14.4

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
metabase/metabase:v0.45.21fb334ce4820
commons-net@3.6
3.9.0

Open the chart page →

2,572
hdfsgaffer2.2.11 of 2See more

hdfs gaffer 2.2.1

1 of the 2 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
commons-net@3.6
3.9.0

Open the chart page →

5,357
sparkmicrosoft1.0.42 of 3See more

spark microsoft 1.0.4

2 of the 3 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
dbanda/livy:0.80ca125e68e53
commons-net@2.2
3.9.0
dbanda/spark:2.4.6d0e6367876ae
commons-net@3.6
3.9.0

Open the chart page →

13,738
druidwiremindVerified publisher1.22.11 of 3See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
apache/druid:29.0.10cef139b6bf1
commons-net@3.6
3.9.0

Open the chart page →

7,930
hertzbeathertzbeatOfficialVerified publisher1.8.12 of 4See more

hertzbeat hertzbeat 1.8.1

2 of the 4 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
apache/hertzbeat:1.8.075d48a62748f
commons-net@3.8.0
3.9.0
apache/hertzbeat-collector:1.8.0a2bab1be574c
commons-net@3.8.0
3.9.0

Open the chart page →

14,000
unifi-controllerqonstruktVerified publisher2.6.11 of 1See more

unifi-controller qonstrukt 2.6.1

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:8.0.240ae315a3a456
commons-net@3.8.0
3.9.0

Open the chart page →

10,469
hivebigdata-chartsVerified publisher0.1.81 of 1See more

hive bigdata-charts 0.1.8

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
commons-net@3.6
3.9.0

Open the chart page →

7,166
hdfsdmwm-bigdataVerified publisher1.0.11 of 2See more

hdfs dmwm-bigdata 1.0.1

1 of the 2 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
gradiant/hdfs:3.2.2e3bf364fe713
commons-net@3.6
3.9.0

Open the chart page →

7,948
hivedmwm-bigdataVerified publisher0.1.63 of 5See more

hive dmwm-bigdata 0.1.6

3 of the 5 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
commons-net@3.1
3.9.0
gradiant/hdfs:2.7.73b28784ba41f
commons-net@3.1
3.9.0
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
commons-net@3.1
3.9.0

Open the chart page →

20,837
unifigeek-cookbookVerified publisher5.1.31 of 1See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.4.162b3edc809a3ff
commons-net@3.8.0
3.9.0

Open the chart page →

11,839
hive-metastoreheva-helm-chartsVerified publisher0.2.01 of 2See more

hive-metastore heva-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
sslhep/hive-metastore:3.1.39e80af083079
commons-net@3.6
3.9.0

Open the chart page →

7,335
hive-metastoreslamdev0.0.51 of 2See more

hive-metastore slamdev 0.0.5

1 of the 2 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
commons-net@3.1
3.9.0

Open the chart page →

8,198
vrijbrpvrijbrpVerified publisher0.1.51 of 5See more

vrijbrp vrijbrp 0.1.5

1 of the 5 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
vrijbrp/balie:developbc85c89530b9
commons-net@3.2
3.9.0

Open the chart page →

8,811
aerospike-graphaerospike-helmOfficialVerified publisher3.7.01 of 1See more

aerospike-graph aerospike-helm 3.7.0

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
aerospike/aerospike-graph-service:3.3.1781ba5213efd
commons-net@3.6
3.9.0

Open the chart page →

322
apache-rangerapache-ranger0.1.01 of 2See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
apache/ranger:2.7.076c176e8a0e4
commons-net@3.1
3.9.0

Open the chart page →

7,740
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-thv:latestc8b6c7eaa0cd
commons-net@3.6
3.9.0

Open the chart page →

17,896
distributed-jmetercloudnativeapp1.0.11 of 1See more

distributed-jmeter cloudnativeapp 1.0.1

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
pedrocesarti/jmeter-docker:3.314851f144f57
commons-net@3.6
3.9.0

Open the chart page →

4,532
hadoopcloudnativeapp1.1.01 of 1See more

hadoop cloudnativeapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
commons-net@3.1
3.9.0

Open the chart page →

5,772
ignitecloudnativeapp1.0.01 of 1See more

ignite cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
apacheignite/ignite:2.7.0d7deab68b8fa
commons-net@3.1
3.9.0

Open the chart page →

7,891
hbasedmwm-bigdataVerified publisher0.1.62 of 5See more

hbase dmwm-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
commons-net@3.1
3.9.0
gradiant/hdfs:2.7.73b28784ba41f
commons-net@3.1
3.9.0

Open the chart page →

13,392
hive-metastoredmwm-bigdataVerified publisher0.1.31 of 2See more

hive-metastore dmwm-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
commons-net@3.1
3.9.0

Open the chart page →

6,882
opentsdbdmwm-bigdataVerified publisher0.1.72 of 6See more

opentsdb dmwm-bigdata 0.1.7

2 of the 6 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
commons-net@3.1
3.9.0
gradiant/hdfs:2.7.73b28784ba41f
commons-net@3.1
3.9.0

Open the chart page →

17,511
hbasegradiant-bigdataVerified publisher0.1.62 of 5See more

hbase gradiant-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
commons-net@3.1
3.9.0
gradiant/hdfs:2.7.73b28784ba41f
commons-net@3.1
3.9.0

Open the chart page →

13,392
stormgresearch1.2.01 of 3See more

storm gresearch 1.2.0

1 of the 3 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
library/storm:2.4.0bd5d420506d6
commons-net@3.1
3.9.0

Open the chart page →

6,165
gridgaingridgainOfficialVerified publisher1.0.61 of 1See more

gridgain gridgain 1.0.6

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
gridgain/community:8.9.11d32d182a0e6a
commons-net@3.1
3.9.0

Open the chart page →

4,679
jmeterjmeterVerified publisher1.2.51 of 1See more

jmeter jmeter 1.2.5

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
liukunup/jmeter:5.59c079617a81b
commons-net@3.8.0
3.9.0

Open the chart page →

2,067
magentomagento3.2.31 of 12See more

magento magento 3.2.3

1 of the 12 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
magento/magento-cloud-docker-opensearch:2.5-1.4.059fb6f0f1461
commons-net@3.6
3.9.0

Open the chart page →

13,479
hadoopmiuler1.2.21 of 1See more

hadoop miuler 1.2.2

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
commons-net@3.1
3.9.0

Open the chart page →

5,772
openccuopenccuVerified publisher3.89.81 of 1See more

openccu openccu 3.89.8

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
ghcr.io/openccu/openccu:3.89.8.20260719b2de2ff6e8e0
commons-net@3.3
3.9.0

Open the chart page →

1,916
routrroutr0.0.101 of 2See more

routr routr 0.0.10

1 of the 2 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
fonoster/routr:1.0.0-rc52ca65af17cbc
commons-net@3.6
3.9.0

Open the chart page →

4,983
signserver-cesignserverOfficialVerified publisher2.3.51 of 1See more

signserver-ce signserver 2.3.5

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
keyfactor/signserver-ce:7.3.2798fbbe00283
commons-net@3.6
3.9.0

Open the chart page →

2,406
starwhalestarwhaleVerified publisher0.6.151 of 4See more

starwhale starwhale 0.6.15

1 of the 4 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
ghcr.io/star-whale/server:0.6.158368359c8dd0
commons-net@3.1
3.9.0

Open the chart page →

13,486
graylogt3n1.0.01 of 3See more

graylog t3n 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
graylog2/server:2.4.3-38ff28c66e6c1
commons-net@3.6
3.9.0

Open the chart page →

8,063
spark-operatorwikimedia2.2.71 of 1See more

spark-operator wikimedia 2.2.7

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
commons-net@3.6
3.9.0

Open the chart page →

7,835
graphserviceaerospike-helmVerified publisher3.3.01 of 1See more

graphservice aerospike-helm 3.3.0

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
aerospike/aerospike-graph-service:3.3.0f35739b97a46
commons-net@3.6
3.9.0

Open the chart page →

453
chart-app-vidapp-vid-chartVerified publisher0.0.71 of 2See more

chart-app-vid app-vid-chart 0.0.7

1 of the 2 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
fimperato/sparkvid-api:1.0.5-RELEASE604012b77841
commons-net@3.1
3.9.0

Open the chart page →

8,866
sdn-controllerassist-iot-sdn-controller2.4.01 of 1See more

sdn-controller assist-iot-sdn-controller 2.4.0

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
assistiot/sdn_controller:2.4.0ea254b6d8a31
commons-net@3.5
3.9.0

Open the chart page →

7,936
axelor-open-suiteaxelor-open-suiteVerified publisher7.2.581 of 2See more

axelor-open-suite axelor-open-suite 7.2.58

1 of the 2 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
pmoscode/axelor-open-suite:v7.2.57a58f4d762f5c
commons-net@2.0
3.9.0

Open the chart page →

9,722
gocdcloudnativeapp1.9.21 of 2See more

gocd cloudnativeapp 1.9.2

1 of the 2 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
gocd/gocd-server:v19.3.02da45cb09d57
commons-net@2.0
3.9.0

Open the chart page →

9,144
spark-history-servercloudnativeapp1.0.01 of 3See more

spark-history-server cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
lightbend/spark-history-server:2.4.00bedf37f428a
commons-net@3.1
3.9.0

Open the chart page →

14,066
unificloudnativeapp0.4.21 of 1See more

unifi cloudnativeapp 0.4.2

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
jacobalberty/unifi:5.10.19c409924e2463
commons-net@3.6
3.9.0

Open the chart page →

22,442
sumo-besu-genesisconsensys0.1.751 of 1See more

sumo-besu-genesis consensys 0.1.75

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
commons-net@3.8.0
3.9.0

Open the chart page →

7,963
sumo-besu-nodeconsensys0.1.751 of 4See more

sumo-besu-node consensys 0.1.75

1 of the 4 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
commons-net@3.8.0
3.9.0

Open the chart page →

7,963
apache-ranger-admindata-platform-stableVerified publisher0.2.01 of 2See more

apache-ranger-admin data-platform-stable 0.2.0

1 of the 2 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
commons-net@3.6
3.9.0

Open the chart page →

8,245
spark-standalonedmwm-bigdataVerified publisher0.1.01 of 2See more

spark-standalone dmwm-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
gradiant/spark:2.4.4-python-alpine97657d56e927
commons-net@3.1
3.9.0

Open the chart page →

6,147
spark-shuffleduyet0.2.01 of 1See more

spark-shuffle duyet 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
snappydatainc/spark-shuffle:v2.2.0-kubernetes-0.5.1fd4b2070466f
commons-net@2.2
3.9.0

Open the chart page →

5,639
gerrit-operatorepmdedpVerified publisher2.25.01 of 2See more

gerrit-operator epmdedp 2.25.0

1 of the 2 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
epamedp/edp-gerrit:3.14.249e8fe9c4855
commons-net@3.6
3.9.0

Open the chart page →

1,159
accumulogaffer2.2.12 of 4See more

accumulo gaffer 2.2.1

2 of the 4 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
gchq/accumulo:2.0.1c460bb587d6d
commons-net@3.6
3.9.0
gchq/hdfs:3.3.35ec58edbb2db
commons-net@3.6
3.9.0

Open the chart page →

16,892

Container images carrying it

74 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
gradiant/hdfs:2.7.73b28784ba41f
commons-net@3.1
3.9.0
7
bde2020/hive:2.3.2-postgresql-metastore620267768985
commons-net@3.1
3.9.0
4
gradiant/hbase-base:2.0.1a1ee6de94c04
commons-net@3.1
3.9.0
4
gchq/hdfs:3.3.35ec58edbb2db
commons-net@3.6
3.9.0
3
apache/druid:37.0.00116fb802786
commons-net@3.6
3.9.0
2
danisla/hadoop:2.9.0255ba2dd739b
commons-net@3.1
3.9.0
2
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
commons-net@3.1
3.9.0
2
gradiant/spark:2.4.4-python-alpine97657d56e927
commons-net@3.1
3.9.0
2
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
commons-net@3.8.0
3.9.0
2
metabase/metabase:v0.45.21fb334ce4820
commons-net@3.6
3.9.0
2
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
commons-net@3.6
3.9.0
1
aerospike/aerospike-graph-service:3.3.1781ba5213efd
commons-net@3.6
3.9.0
1
aerospike/aerospike-graph-service:3.3.0f35739b97a46
commons-net@3.6
3.9.0
1
apache/druid:29.0.10cef139b6bf1
commons-net@3.6
3.9.0
1
apache/hertzbeat:1.8.075d48a62748f
commons-net@3.8.0
3.9.0
1
apache/hertzbeat-collector:1.8.0a2bab1be574c
commons-net@3.8.0
3.9.0
1
apacheignite/ignite:2.7.0d7deab68b8fa
commons-net@3.1
3.9.0
1
apachepinot/pinot:latest-jdk110018bb04ced7
commons-net@3.1
3.9.0
1
apache/ranger:2.7.076c176e8a0e4
commons-net@3.1
3.9.0
1
assistiot/cybersecurity-monitoring_ir-thv:latestc8b6c7eaa0cd
commons-net@3.6
3.9.0
1
assistiot/sdn_controller:2.4.0ea254b6d8a31
commons-net@3.5
3.9.0
1
datappeal/hive-metastore:lateste38c085a3567
commons-net@3.6
3.9.0
1
dbanda/livy:0.80ca125e68e53
commons-net@2.2
3.9.0
1
dbanda/spark:2.4.6d0e6367876ae
commons-net@3.6
3.9.0
1
deltaio/delta-sharing-server:0.2.08b75118187c5
commons-net@3.1
3.9.0
1
dremio/dremio-oss:24.1.080ed2e3b7c43
commons-net@3.1
3.9.0
1
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
commons-net@3.6
3.9.0
1
epamedp/edp-gerrit:3.14.249e8fe9c4855
commons-net@3.6
3.9.0
1
farberg/apache-knox-docker:1.6.14b4a22487394
commons-net@3.7.2
3.9.0
1
fimperato/sparkvid-api:1.0.5-RELEASE604012b77841
commons-net@3.1
3.9.0
1
fonoster/routr:1.0.0-rc52ca65af17cbc
commons-net@3.6
3.9.0
1
freeipa/freeipa-server:fedora-37-4.10.1c87d77342bf5
commons-net@3.6
3.9.0
1
gchq/accumulo:2.0.1c460bb587d6d
commons-net@3.6
3.9.0
1
gocd/gocd-server:v19.3.02da45cb09d57
commons-net@2.0
3.9.0
1
gradiant/hdfs:3.2.2e3bf364fe713
commons-net@3.6
3.9.0
1
graylog2/server:2.4.3-38ff28c66e6c1
commons-net@3.6
3.9.0
1
gridgain/community:8.9.11d32d182a0e6a
commons-net@3.1
3.9.0
1
hazelcast/hazelcast-jet:4.5.3a825ecbe9fda
commons-net@3.6
3.9.0
1
hivemq/hivemq-operator:4.7.10241d6a8e1963
commons-net@3.3
3.9.0
1
ibmcom/bai-flink-dev:19.0.2e31ff09e8aad
commons-net@3.1
3.9.0
1
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
commons-net@3.3
3.9.0
1
ibmcom/microclimate-portal:latested5505e5c7ec
commons-net@3.6
3.9.0
1
jacobalberty/unifi:v7.1.664a3616625dda
commons-net@3.6
3.9.0
1
jacobalberty/unifi:v7.4.162b3edc809a3ff
commons-net@3.8.0
3.9.0
1
jacobalberty/unifi:5.10.19c409924e2463
commons-net@3.6
3.9.0
1
jenkinsci/jenkins:2.67a1f33f004659
commons-net@3.1
3.9.0
1
keyfactor/signserver-ce:7.3.2798fbbe00283
commons-net@3.6
3.9.0
1
library/storm:2.4.0bd5d420506d6
commons-net@3.1
3.9.0
1
lightbend/spark-history-server:2.4.00bedf37f428a
commons-net@3.1
3.9.0
1
linuxserver/unifi-controller:8.0.240ae315a3a456
commons-net@3.8.0
3.9.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.