CVE-2021-37533
MediumAdvisory
Published 3 Dec 2022In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.5
- base score, highest
- EPSS
- 0.021
- 80th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 82
- of 17,781 indexed, latest versions
- Container images
- 74
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Apache Commons Net vulnerable to information leakage via malicious server
Carried by container images the latest versions of 82 of 17,781 indexed charts deploy, on 74 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| commons-netmaven | 2.0, 2.2, 3.1, 3.2+5 more | 3.9.0 | 74 |
- OSV records
- GHSA-cgp8-4m63-fhh5
Charts affected
82 by stars
Container images carrying it
74 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| gradiant/ | 3b28784ba41f | commons-net | 3.9.0 | 7 |
| bde2020/ | 620267768985 | commons-net | 3.9.0 | 4 |
| gradiant/ | a1ee6de94c04 | commons-net | 3.9.0 | 4 |
| gchq/ | 5ec58edbb2db | commons-net | 3.9.0 | 3 |
| apache/ | 0116fb802786 | commons-net | 3.9.0 | 2 |
| danisla/ | 255ba2dd739b | commons-net | 3.9.0 | 2 |
| gradiant/ | aae4f8a21f8b | commons-net | 3.9.0 | 2 |
| gradiant/ | 97657d56e927 | commons-net | 3.9.0 | 2 |
| hyperledger/ | a674d35eec9a | commons-net | 3.9.0 | 2 |
| metabase/ | 1fb334ce4820 | commons-net | 3.9.0 | 2 |
| 5200710/ | e34ab066d2ed | commons-net | 3.9.0 | 1 |
| aerospike/ | 781ba5213efd | commons-net | 3.9.0 | 1 |
| aerospike/ | f35739b97a46 | commons-net | 3.9.0 | 1 |
| apache/ | 0cef139b6bf1 | commons-net | 3.9.0 | 1 |
| apache/ | 75d48a62748f | commons-net | 3.9.0 | 1 |
| apache/ | a2bab1be574c | commons-net | 3.9.0 | 1 |
| apacheignite/ | d7deab68b8fa | commons-net | 3.9.0 | 1 |
| apachepinot/ | 0018bb04ced7 | commons-net | 3.9.0 | 1 |
| apache/ | 76c176e8a0e4 | commons-net | 3.9.0 | 1 |
| assistiot/ | c8b6c7eaa0cd | commons-net | 3.9.0 | 1 |
| assistiot/ | ea254b6d8a31 | commons-net | 3.9.0 | 1 |
| datappeal/ | e38c085a3567 | commons-net | 3.9.0 | 1 |
| dbanda/ | 0ca125e68e53 | commons-net | 3.9.0 | 1 |
| dbanda/ | d0e6367876ae | commons-net | 3.9.0 | 1 |
| deltaio/ | 8b75118187c5 | commons-net | 3.9.0 | 1 |
| dremio/ | 80ed2e3b7c43 | commons-net | 3.9.0 | 1 |
| egdsandaru/ | 681baa1926f4 | commons-net | 3.9.0 | 1 |
| epamedp/ | 49e8fe9c4855 | commons-net | 3.9.0 | 1 |
| farberg/ | 4b4a22487394 | commons-net | 3.9.0 | 1 |
| fimperato/ | 604012b77841 | commons-net | 3.9.0 | 1 |
| fonoster/ | 2ca65af17cbc | commons-net | 3.9.0 | 1 |
| freeipa/ | c87d77342bf5 | commons-net | 3.9.0 | 1 |
| gchq/ | c460bb587d6d | commons-net | 3.9.0 | 1 |
| gocd/ | 2da45cb09d57 | commons-net | 3.9.0 | 1 |
| gradiant/ | e3bf364fe713 | commons-net | 3.9.0 | 1 |
| graylog2/ | 8ff28c66e6c1 | commons-net | 3.9.0 | 1 |
| gridgain/ | d32d182a0e6a | commons-net | 3.9.0 | 1 |
| hazelcast/ | a825ecbe9fda | commons-net | 3.9.0 | 1 |
| hivemq/ | 241d6a8e1963 | commons-net | 3.9.0 | 1 |
| ibmcom/ | e31ff09e8aad | commons-net | 3.9.0 | 1 |
| ibmcom/ | 7e4dc1e27cdf | commons-net | 3.9.0 | 1 |
| ibmcom/ | ed5505e5c7ec | commons-net | 3.9.0 | 1 |
| jacobalberty/ | 4a3616625dda | commons-net | 3.9.0 | 1 |
| jacobalberty/ | b3edc809a3ff | commons-net | 3.9.0 | 1 |
| jacobalberty/ | c409924e2463 | commons-net | 3.9.0 | 1 |
| jenkinsci/ | a1f33f004659 | commons-net | 3.9.0 | 1 |
| keyfactor/ | 798fbbe00283 | commons-net | 3.9.0 | 1 |
| library/ | bd5d420506d6 | commons-net | 3.9.0 | 1 |
| lightbend/ | 0bedf37f428a | commons-net | 3.9.0 | 1 |
| linuxserver/ | 0ae315a3a456 | commons-net | 3.9.0 | 1 |