StackRadar

CVE-2021-37533

Medium

Advisory

Published 3 Dec 2022In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.021
80th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
82
of 17,781 indexed, latest versions
Container images
74
deployed by those charts
Fix available
1 of 1
affected package

Apache Commons Net vulnerable to information leakage via malicious server

Carried by container images the latest versions of 82 of 17,781 indexed charts deploy, on 74 images.

Affected packageAffected versionsFixed inImages
commons-netmaven2.0, 2.2, 3.1, 3.2+5 more3.9.074
OSV records
GHSA-cgp8-4m63-fhh5

Charts affected

82 by stars
ChartLatestAffected imagesRadar Score
druiddruid-helmVerified publisher37.0.21 of 3See more

druid druid-helm 37.0.2

1 of the 3 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
commons-net@3.6
3.9.0

Open the chart page →

3,812
hivemq-operatorhivemqOfficialVerified publisher0.11.621 of 2See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
hivemq/hivemq-operator:4.7.10241d6a8e1963
commons-net@3.3
3.9.0

Open the chart page →

7,857
metabasedeliveryheroVerified publisher0.14.41 of 1See more

metabase deliveryhero 0.14.4

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
metabase/metabase:v0.45.21fb334ce4820
commons-net@3.6
3.9.0

Open the chart page →

2,572
hdfsgaffer2.2.11 of 2See more

hdfs gaffer 2.2.1

1 of the 2 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
commons-net@3.6
3.9.0

Open the chart page →

5,357
sparkmicrosoft1.0.42 of 3See more

spark microsoft 1.0.4

2 of the 3 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
dbanda/livy:0.80ca125e68e53
commons-net@2.2
3.9.0
dbanda/spark:2.4.6d0e6367876ae
commons-net@3.6
3.9.0

Open the chart page →

13,738
druidwiremindVerified publisher1.22.11 of 3See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
apache/druid:29.0.10cef139b6bf1
commons-net@3.6
3.9.0

Open the chart page →

7,930
hertzbeathertzbeatOfficialVerified publisher1.8.12 of 4See more

hertzbeat hertzbeat 1.8.1

2 of the 4 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
apache/hertzbeat:1.8.075d48a62748f
commons-net@3.8.0
3.9.0
apache/hertzbeat-collector:1.8.0a2bab1be574c
commons-net@3.8.0
3.9.0

Open the chart page →

14,000
unifi-controllerqonstruktVerified publisher2.6.11 of 1See more

unifi-controller qonstrukt 2.6.1

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:8.0.240ae315a3a456
commons-net@3.8.0
3.9.0

Open the chart page →

10,469
hivebigdata-chartsVerified publisher0.1.81 of 1See more

hive bigdata-charts 0.1.8

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
commons-net@3.6
3.9.0

Open the chart page →

7,166
hdfsdmwm-bigdataVerified publisher1.0.11 of 2See more

hdfs dmwm-bigdata 1.0.1

1 of the 2 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
gradiant/hdfs:3.2.2e3bf364fe713
commons-net@3.6
3.9.0

Open the chart page →

7,948
hivedmwm-bigdataVerified publisher0.1.63 of 5See more

hive dmwm-bigdata 0.1.6

3 of the 5 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
commons-net@3.1
3.9.0
gradiant/hdfs:2.7.73b28784ba41f
commons-net@3.1
3.9.0
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
commons-net@3.1
3.9.0

Open the chart page →

20,837
unifigeek-cookbookVerified publisher5.1.31 of 1See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.4.162b3edc809a3ff
commons-net@3.8.0
3.9.0

Open the chart page →

11,839
hive-metastoreheva-helm-chartsVerified publisher0.2.01 of 2See more

hive-metastore heva-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
sslhep/hive-metastore:3.1.39e80af083079
commons-net@3.6
3.9.0

Open the chart page →

7,335
hive-metastoreslamdev0.0.51 of 2See more

hive-metastore slamdev 0.0.5

1 of the 2 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
commons-net@3.1
3.9.0

Open the chart page →

8,198
vrijbrpvrijbrpVerified publisher0.1.51 of 5See more

vrijbrp vrijbrp 0.1.5

1 of the 5 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
vrijbrp/balie:developbc85c89530b9
commons-net@3.2
3.9.0

Open the chart page →

8,811
aerospike-graphaerospike-helmOfficialVerified publisher3.7.01 of 1See more

aerospike-graph aerospike-helm 3.7.0

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
aerospike/aerospike-graph-service:3.3.1781ba5213efd
commons-net@3.6
3.9.0

Open the chart page →

322
apache-rangerapache-ranger0.1.01 of 2See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
apache/ranger:2.7.076c176e8a0e4
commons-net@3.1
3.9.0

Open the chart page →

7,740
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-thv:latestc8b6c7eaa0cd
commons-net@3.6
3.9.0

Open the chart page →

17,896
distributed-jmetercloudnativeapp1.0.11 of 1See more

distributed-jmeter cloudnativeapp 1.0.1

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
pedrocesarti/jmeter-docker:3.314851f144f57
commons-net@3.6
3.9.0

Open the chart page →

4,532
hadoopcloudnativeapp1.1.01 of 1See more

hadoop cloudnativeapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
commons-net@3.1
3.9.0

Open the chart page →

5,772
ignitecloudnativeapp1.0.01 of 1See more

ignite cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
apacheignite/ignite:2.7.0d7deab68b8fa
commons-net@3.1
3.9.0

Open the chart page →

7,891
hbasedmwm-bigdataVerified publisher0.1.62 of 5See more

hbase dmwm-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
commons-net@3.1
3.9.0
gradiant/hdfs:2.7.73b28784ba41f
commons-net@3.1
3.9.0

Open the chart page →

13,392
hive-metastoredmwm-bigdataVerified publisher0.1.31 of 2See more

hive-metastore dmwm-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
commons-net@3.1
3.9.0

Open the chart page →

6,882
opentsdbdmwm-bigdataVerified publisher0.1.72 of 6See more

opentsdb dmwm-bigdata 0.1.7

2 of the 6 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
commons-net@3.1
3.9.0
gradiant/hdfs:2.7.73b28784ba41f
commons-net@3.1
3.9.0

Open the chart page →

17,511
hbasegradiant-bigdataVerified publisher0.1.62 of 5See more

hbase gradiant-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
commons-net@3.1
3.9.0
gradiant/hdfs:2.7.73b28784ba41f
commons-net@3.1
3.9.0

Open the chart page →

13,392
stormgresearch1.2.01 of 3See more

storm gresearch 1.2.0

1 of the 3 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
library/storm:2.4.0bd5d420506d6
commons-net@3.1
3.9.0

Open the chart page →

6,165
gridgaingridgainOfficialVerified publisher1.0.61 of 1See more

gridgain gridgain 1.0.6

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
gridgain/community:8.9.11d32d182a0e6a
commons-net@3.1
3.9.0

Open the chart page →

4,679
jmeterjmeterVerified publisher1.2.51 of 1See more

jmeter jmeter 1.2.5

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
liukunup/jmeter:5.59c079617a81b
commons-net@3.8.0
3.9.0

Open the chart page →

2,067
magentomagento3.2.31 of 12See more

magento magento 3.2.3

1 of the 12 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
magento/magento-cloud-docker-opensearch:2.5-1.4.059fb6f0f1461
commons-net@3.6
3.9.0

Open the chart page →

13,479
hadoopmiuler1.2.21 of 1See more

hadoop miuler 1.2.2

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
commons-net@3.1
3.9.0

Open the chart page →

5,772
openccuopenccuVerified publisher3.89.81 of 1See more

openccu openccu 3.89.8

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
ghcr.io/openccu/openccu:3.89.8.20260719b2de2ff6e8e0
commons-net@3.3
3.9.0

Open the chart page →

1,916
routrroutr0.0.101 of 2See more

routr routr 0.0.10

1 of the 2 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
fonoster/routr:1.0.0-rc52ca65af17cbc
commons-net@3.6
3.9.0

Open the chart page →

4,983
signserver-cesignserverOfficialVerified publisher2.3.51 of 1See more

signserver-ce signserver 2.3.5

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
keyfactor/signserver-ce:7.3.2798fbbe00283
commons-net@3.6
3.9.0

Open the chart page →

2,406
starwhalestarwhaleVerified publisher0.6.151 of 4See more

starwhale starwhale 0.6.15

1 of the 4 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
ghcr.io/star-whale/server:0.6.158368359c8dd0
commons-net@3.1
3.9.0

Open the chart page →

13,486
graylogt3n1.0.01 of 3See more

graylog t3n 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
graylog2/server:2.4.3-38ff28c66e6c1
commons-net@3.6
3.9.0

Open the chart page →

8,063
spark-operatorwikimedia2.2.71 of 1See more

spark-operator wikimedia 2.2.7

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
commons-net@3.6
3.9.0

Open the chart page →

7,835
graphserviceaerospike-helmVerified publisher3.3.01 of 1See more

graphservice aerospike-helm 3.3.0

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
aerospike/aerospike-graph-service:3.3.0f35739b97a46
commons-net@3.6
3.9.0

Open the chart page →

453
chart-app-vidapp-vid-chartVerified publisher0.0.71 of 2See more

chart-app-vid app-vid-chart 0.0.7

1 of the 2 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
fimperato/sparkvid-api:1.0.5-RELEASE604012b77841
commons-net@3.1
3.9.0

Open the chart page →

8,866
sdn-controllerassist-iot-sdn-controller2.4.01 of 1See more

sdn-controller assist-iot-sdn-controller 2.4.0

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
assistiot/sdn_controller:2.4.0ea254b6d8a31
commons-net@3.5
3.9.0

Open the chart page →

7,936
axelor-open-suiteaxelor-open-suiteVerified publisher7.2.581 of 2See more

axelor-open-suite axelor-open-suite 7.2.58

1 of the 2 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
pmoscode/axelor-open-suite:v7.2.57a58f4d762f5c
commons-net@2.0
3.9.0

Open the chart page →

9,722
gocdcloudnativeapp1.9.21 of 2See more

gocd cloudnativeapp 1.9.2

1 of the 2 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
gocd/gocd-server:v19.3.02da45cb09d57
commons-net@2.0
3.9.0

Open the chart page →

9,144
spark-history-servercloudnativeapp1.0.01 of 3See more

spark-history-server cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
lightbend/spark-history-server:2.4.00bedf37f428a
commons-net@3.1
3.9.0

Open the chart page →

14,066
unificloudnativeapp0.4.21 of 1See more

unifi cloudnativeapp 0.4.2

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
jacobalberty/unifi:5.10.19c409924e2463
commons-net@3.6
3.9.0

Open the chart page →

22,442
sumo-besu-genesisconsensys0.1.751 of 1See more

sumo-besu-genesis consensys 0.1.75

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
commons-net@3.8.0
3.9.0

Open the chart page →

7,963
sumo-besu-nodeconsensys0.1.751 of 4See more

sumo-besu-node consensys 0.1.75

1 of the 4 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
commons-net@3.8.0
3.9.0

Open the chart page →

7,963
apache-ranger-admindata-platform-stableVerified publisher0.2.01 of 2See more

apache-ranger-admin data-platform-stable 0.2.0

1 of the 2 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
commons-net@3.6
3.9.0

Open the chart page →

8,245
spark-standalonedmwm-bigdataVerified publisher0.1.01 of 2See more

spark-standalone dmwm-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
gradiant/spark:2.4.4-python-alpine97657d56e927
commons-net@3.1
3.9.0

Open the chart page →

6,147
spark-shuffleduyet0.2.01 of 1See more

spark-shuffle duyet 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
snappydatainc/spark-shuffle:v2.2.0-kubernetes-0.5.1fd4b2070466f
commons-net@2.2
3.9.0

Open the chart page →

5,639
gerrit-operatorepmdedpVerified publisher2.25.01 of 2See more

gerrit-operator epmdedp 2.25.0

1 of the 2 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
epamedp/edp-gerrit:3.14.249e8fe9c4855
commons-net@3.6
3.9.0

Open the chart page →

1,159
accumulogaffer2.2.12 of 4See more

accumulo gaffer 2.2.1

2 of the 4 container images this version deploys carry CVE-2021-37533.

Container imageDigestPackageFixed in
gchq/accumulo:2.0.1c460bb587d6d
commons-net@3.6
3.9.0
gchq/hdfs:3.3.35ec58edbb2db
commons-net@3.6
3.9.0

Open the chart page →

16,892

Container images carrying it

74 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
linuxserver/unifi-controller:7.3.83ab105cc50322
commons-net@3.8.0
3.9.0
1
liukunup/jmeter:5.59c079617a81b
commons-net@3.8.0
3.9.0
1
magento/magento-cloud-docker-opensearch:2.5-1.4.059fb6f0f1461
commons-net@3.6
3.9.0
1
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
commons-net@3.6
3.9.0
1
onosproject/onos:2.2.144914a8d4b3f
commons-net@3.5
3.9.0
1
openhab/openhab:3.2.0d0aa4af452c1
commons-net@3.7.2
3.9.0
1
pedrocesarti/jmeter-docker:3.314851f144f57
commons-net@3.6
3.9.0
1
pmoscode/axelor-open-suite:v7.2.57a58f4d762f5c
commons-net@2.0
3.9.0
1
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
commons-net@3.1
3.9.0
1
snappydatainc/spark-shuffle:v2.2.0-kubernetes-0.5.1fd4b2070466f
commons-net@2.2
3.9.0
1
sslhep/hive-metastore:3.1.39e80af083079
commons-net@3.6
3.9.0
1
trinodb/trino:45038c6f24ab1a4
commons-net@3.6
3.9.0
1
trinodb/trino:405ee80ab5eeab2
commons-net@3.6
3.9.0
1
voltha/voltha-onos:5.1.8e038acb950d3
commons-net@3.5
3.9.0
1
vrijbrp/balie:developbc85c89530b9
commons-net@3.2
3.9.0
1
ghcr.io/fleeksoft/hbase/hbase-base:2.4.13.2c144bdd688d7
commons-net@3.1
3.9.0
1
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
commons-net@3.6
3.9.0
1
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
commons-net@3.3
3.9.0
1
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
commons-net@3.6
3.9.0
1
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
commons-net@3.6
3.9.0
1
ghcr.io/openccu/openccu:3.89.8.20260719b2de2ff6e8e0
commons-net@3.3
3.9.0
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
commons-net@3.1
3.9.0
1
quay.io/freeipa/freeipa-server:fedora-39-4.11.1d422ee50c2c3
commons-net@3.8.0
3.9.0
1
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
commons-net@3.6
3.9.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.