StackRadar

CVE-2021-39293

Unscored

Advisory

Published 18 May 2022In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.069
94th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
683
of 17,787 indexed, latest versions
Container images
692
deployed by those charts
Fix available
1 of 1
affected package

Panic due to crafted inputs in archive/zip

Carried by container images the latest versions of 683 of 17,787 indexed charts deploy, on 692 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+50 more1.16.8692
OSV records
GO-2022-0273
Also known as
BIT-golang-2021-39293

Charts affected

683 by stars
ChartLatestAffected imagesRadar Score
opsportalmesosphere-stable0.9.51 of 3See more

opsportal mesosphere-stable 0.9.5

1 of the 3 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
mesosphere/kubeaddons-addon-initializer:v0.2.09f863160127b
stdlib@go1.13.7
1.16.8

Open the chart page →

7,027
cortexmetakube0.6.01 of 2See more

cortex metakube 0.6.0

1 of the 2 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
quay.io/cortexproject/cortex:v1.9.05d1c2cf4c538
stdlib@go1.16.3
1.16.8

Open the chart page →

4,107
wg-access-servermglants0.4.71 of 1See more

wg-access-server mglants 0.4.7

1 of the 1 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
place1/wg-access-server:v0.4.62b2f3ea80ed6
stdlib@go1.13.8
1.16.8

Open the chart page →

2,745
gogsmhio0.9.21 of 2See more

gogs mhio 0.9.2

1 of the 2 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
gogs/gogs:0.12.1420d53bb7277
stdlib@go1.14.7
1.16.8

Open the chart page →

3,230
pulsarv2milvus-helm2.7.82 of 4See more

pulsarv2 milvus-helm 2.7.8

2 of the 4 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
prom/prometheus:v2.17.242d2395cd719
stdlib@go1.13.10
1.16.8
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.10ebcf7f033b54
stdlib@go1.13.4
1.16.8

Open the chart page →

15,855
cert-manager-webhook-duckdnsmmontesVerified publisher1.2.31 of 1See more

cert-manager-webhook-duckdns mmontes 1.2.3

1 of the 1 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
ebrianne/cert-manager-webhook-duckdns:v1.2.39cd17700c9ec
stdlib@go1.15.13
1.16.8

Open the chart page →

2,847
cockroachdb-operatormmontesVerified publisher0.1.01 of 1See more

cockroachdb-operator mmontes 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
cockroachdb/cockroach-operator:v2.1.0983312754620
stdlib@go1.13.14
1.16.8

Open the chart page →

7,775
mariadbmmontesVerified publisher0.3.01 of 1See more

mariadb mmontes 0.3.0

1 of the 1 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
library/mariadb:10.7.307e06f2e7ae9
stdlib@go1.16.7
1.16.8

Open the chart page →

10,065
mongodbmmontesVerified publisher0.5.01 of 1See more

mongodb mmontes 0.5.0

1 of the 1 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
library/mongo:4.4.1305678ae4e5e1
stdlib@go1.16.7
1.16.8

Open the chart page →

7,109
basic-git-servermoikot0.0.21 of 1See more

basic-git-server moikot 0.0.2

1 of the 1 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
moikot/basic-git-server:0.0.20d941bd30ffa
stdlib@go1.14.9
1.16.8

Open the chart page →

2,954
corednsmoikot1.13.31 of 1See more

coredns moikot 1.13.3

1 of the 1 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
coredns/coredns:1.7.073ca82b4ce82
stdlib@go1.14.4
1.16.8

Open the chart page →

2,547
smartthings-metricsmoikot0.1.01 of 1See more

smartthings-metrics moikot 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
moikot/smartthings-metrics:0.1.08625f53aa9b7
stdlib@go1.14.13
1.16.8

Open the chart page →

1,744
smartthings-metrics-feat-log-detailsmoikot0.0.921 of 1See more

smartthings-metrics-feat-log-details moikot 0.0.92

1 of the 1 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
moikot/smartthings-metrics:feat-log-detailsfb8565140106
stdlib@go1.14.15
1.16.8

Open the chart page →

1,732
backendmojaloop0.1.03 of 6See more

backend mojaloop 0.1.0

3 of the 6 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:2.8.1-debian-11-r7b6e381ffd6ae
stdlib@go1.16.7
1.16.8
bitnamilegacy/kafka-exporter-archived:1.3.2e527fbf75dce
stdlib@go1.17
1.16.8
bitnamilegacy/mysqld-exporter:0.13.0a7e14cc919cb
stdlib@go1.16.4
1.16.8

Open the chart page →

16,198
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
oliver006/redis_exporter:v1.14.0d55e056987af
stdlib@go1.15.6
1.16.8

Open the chart page →

25,933
configmapsecretsmozilla0.0.11 of 1See more

configmapsecrets mozilla 0.0.1

1 of the 1 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
mzinc/configmapsecret-controller:v0.5.1eebbcbf2d1f7
stdlib@go1.16.1
1.16.8

Open the chart page →

2,109
approuvezmvisonneau0.1.11 of 1See more

approuvez mvisonneau 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
ghcr.io/mvisonneau/approuvez:v0.1.0441da62e6cb3
stdlib@go1.15.6
1.16.8

Open the chart page →

1,971
authmyaVerified publisher22.4.31 of 1See more

auth mya 22.4.3

1 of the 1 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
cesanta/docker_auth:1.6.04d16885f3d4c
stdlib@go1.13.7
1.16.8

Open the chart page →

2,374
Practica_4_helmmy-heml-appVerified publisher0.1.02 of 7See more

Practica_4_helm my-heml-app 0.1.0

2 of the 7 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
library/mongo:5.0.6-focal8e70544b6c76
stdlib@go1.16.7
1.16.8
library/mysql:8.0.28fc77d54cacef
stdlib@go1.16.7
1.16.8

Open the chart page →

27,721
victoria-metrics-singlenaps0.0.61 of 1See more

victoria-metrics-single naps 0.0.6

1 of the 1 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
victoriametrics/victoria-metrics:v1.34.7b50d5c0153f9
stdlib@go1.14.1
1.16.8

Open the chart page →

1,315
traefik-forward-auth-openidnas-helm-chartsVerified publisher1.0.11 of 1See more

traefik-forward-auth-openid nas-helm-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
thomseddon/traefik-forward-auth:latestb364aa6a4117
stdlib@go1.13.15
1.16.8

Open the chart page →

2,197
incorencsaVerified publisher1.38.01 of 29See more

incore ncsa 1.38.0

1 of the 29 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:4.4.5e3c9d6b4bc92
stdlib@go1.15.8
1.16.8

Open the chart page →

15,369
iamdnetsocVerified publisher0.6.11 of 2See more

iamd netsoc 0.6.1

1 of the 2 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
ghcr.io/netsoc/iamd:1.1.22fe6b69b20d7
stdlib@go1.16.6
1.16.8

Open the chart page →

2,890
shhdnetsocVerified publisher0.1.71 of 1See more

shhd netsoc 0.1.7

1 of the 1 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
ghcr.io/netsoc/shhd:0.1.60bb44992b62c
stdlib@go1.17
1.16.8

Open the chart page →

3,986
webspacednetsocVerified publisher0.2.81 of 2See more

webspaced netsoc 0.2.8

1 of the 2 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
ghcr.io/devplayer0/kubelan:0.2.3b776dae45d08
stdlib@go1.16.5
1.16.8

Open the chart page →

5,193
nominatimnominatim-chart1.3.01 of 3See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
robjuz/postgresql-nominatim:latest805c7bab76df
stdlib@go1.16.5
1.16.8

Open the chart page →

22,658
notification-componentnotification-component1.0.01 of 4See more

notification-component notification-component 1.0.0

1 of the 4 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/notification-component-php:latestcd9656e6bc2c
stdlib@go1.13.10
1.16.8

Open the chart page →

7,527
giteanovum-rgi-charts2.1.31 of 3See more

gitea novum-rgi-charts 2.1.3

1 of the 3 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
gitea/gitea:1.13.0d5ab14cd29af
stdlib@go1.15.5
1.16.8

Open the chart page →

4,861
nfs-server-provisionernovum-rgi-charts1.1.21 of 1See more

nfs-server-provisioner novum-rgi-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
stdlib@go1.13.4
1.16.8

Open the chart page →

2,806
aspromokgoloveVerified publisher2.0.01 of 1See more

asprom okgolove 2.0.0

1 of the 1 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
okgolove/asprom:1.10.1974d2e5eb150
stdlib@go1.14.11
1.16.8

Open the chart page →

1,869
hive-metastoreolehrgfVerified publisher0.1.01 of 1See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
stdlib@go1.13.4
1.16.8

Open the chart page →

8,540
exposecontrollerolli-aiVerified publisher1.0.51 of 1See more

exposecontroller olli-ai 1.0.5

1 of the 1 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
olliai/exposecontroller:1.0.5a470d96525e4
stdlib@go1.16.3
1.16.8

Open the chart page →

2,861
apicurioone-acre-fundVerified publisher2.3.01 of 5See more

apicurio one-acre-fund 2.3.0

1 of the 5 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.4.0-debian-11-r237e7ebb082031
stdlib@go1.16.7
1.16.8

Open the chart page →

18,667
one-green-coreone-green-coreVerified publisher0.0.71 of 8See more

one-green-core one-green-core 0.0.7

1 of the 8 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
library/influxdb:2.0.8ba10ac9ba17a
stdlib@go1.16.5
1.16.8

Open the chart page →

9,558
anchore-engineopencloudcx1.13.01 of 2See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.10.0bde9eedf639d
stdlib@go1.16.3
1.16.8

Open the chart page →

18,023
bbsimopencord4.8.111 of 1See more

bbsim opencord 4.8.11

1 of the 1 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
voltha/bbsim:1.16.7d90403d58016
stdlib@go1.13.8
1.16.8

Open the chart page →

3,900
bbsim-sadis-serveropencord0.3.51 of 1See more

bbsim-sadis-server opencord 0.3.5

1 of the 1 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
voltha/bbsim-sadis-server:0.4.0762b272d439e
stdlib@go1.16.3
1.16.8

Open the chart page →

3,714
nem-monitoringopencord1.3.221 of 9See more

nem-monitoring opencord 1.3.22

1 of the 9 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
stdlib@go1.13.1
1.16.8

Open the chart page →

4,612
volthaopencord2.14.02 of 2See more

voltha opencord 2.14.0

2 of the 2 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
voltha/voltha-ofagent-go:2.1.68feb9ef89e97
stdlib@go1.16.3
1.16.8
voltha/voltha-rw-core:3.4.87a325316fe59
stdlib@go1.16.3
1.16.8

Open the chart page →

3,811
voltha-infraopencord2.14.02 of 10See more

voltha-infra opencord 2.14.0

2 of the 10 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
opencord/onos-classic-helm-utils:0.1.00d693ba85fd6
stdlib@go1.16.5
1.16.8
voltha/bbsim-sadis-server:0.3.5259fc3a03f4e
stdlib@go1.16.3
1.16.8

Open the chart page →

41,044
voltha-stackopencord2.14.02 of 4See more

voltha-stack opencord 2.14.0

2 of the 4 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
voltha/voltha-ofagent-go:2.1.68feb9ef89e97
stdlib@go1.16.3
1.16.8
voltha/voltha-rw-core:3.4.87a325316fe59
stdlib@go1.16.3
1.16.8

Open the chart page →

5,539
openldapopenldap0.1.11 of 2See more

openldap openldap 0.1.1

1 of the 2 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
osixia/openldap:1.5.018742e9c449c
stdlib@go1.15.5
1.16.8

Open the chart page →

5,293
opscruiseopenshift0.35.1002 of 11See more

opscruise openshift 0.35.100

2 of the 11 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
grafana/loki:2.0.077e138f81a8e
stdlib@go1.14.2
1.16.8
grafana/promtail:2.0.05fd12edcc694
stdlib@go1.14.2
1.16.8

Open the chart page →

8,201
orderregistratiecomponentorderregistratiecomponent1.0.01 of 3See more

orderregistratiecomponent orderregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/orderregistratiecomponent-php:latestd17257e4fa27
stdlib@go1.13.10
1.16.8

Open the chart page →

7,492
kubernetes-taggeroxyno-zetaVerified publisher1.1.21 of 1See more

kubernetes-tagger oxyno-zeta 1.1.2

1 of the 1 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
oxynozeta/kubernetes-tagger:1.3.0a153c386f5af
stdlib@go1.17
1.16.8

Open the chart page →

1,826
scaleway-webhookparticuleio0.0.11 of 1See more

scaleway-webhook particuleio 0.0.1

1 of the 1 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
scaleway/cert-manager-webhook-scaleway:v0.0.1dcc14608d000
stdlib@go1.15.2
1.16.8

Open the chart page →

2,347
codimdphntom0.1.121 of 3See more

codimd phntom 0.1.12

1 of the 3 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
phntom/codimd:2.4.31b9aafbb62e6
stdlib@go1.16
1.16.8

Open the chart page →

6,524
kochiphntom1.1.41 of 1See more

kochi phntom 1.1.4

1 of the 1 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
phntom/kochi:1.1.33b82358bd56e
stdlib@go1.15.5
1.16.8

Open the chart page →

2,963
mindavphntom0.1.61 of 2See more

mindav phntom 0.1.6

1 of the 2 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
phntom/mindav:0.1.7-kix35695f546abbb
stdlib@go1.16.2
1.16.8

Open the chart page →

4,158
npre-essentialsphntom0.1.602 of 22See more

npre-essentials phntom 0.1.60

2 of the 22 container images this version deploys carry CVE-2021-39293.

Container imageDigestPackageFixed in
abutaha/aws-es-proxy:v1.1190ed2d1dfc8
stdlib@go1.14.1
1.16.8
phntom/kochi:1.1.33b82358bd56e
stdlib@go1.15.5
1.16.8

Open the chart page →

26,840

Container images carrying it

692 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
jmferrer/azure-devops-agent:latest030f68ec6998
stdlib@go1.13.5
1.16.8
1
joeelliott/cert-exporter:v2.7.0b4acd14642d0
stdlib@go1.14.15
1.16.8
1
k8scloudprovider/octavia-ingress-controller:v1.20.26ddf80b34265
stdlib@go1.15
1.16.8
1
keptncontrib/prometheus-service:0.6.029969dd547de
stdlib@go1.13.7
1.16.8
1
keptn/distributor:0.8.36bc3df9e0d6a
stdlib@go1.16.2
1.16.8
1
keptn/distributor:0.8.472e17527a4f9
stdlib@go1.16.2
1.16.8
1
keptnsandbox/job-executor-service:0.1.36e6d323dd7ae
stdlib@go1.16.2
1.16.8
1
keyporttech/csi-driver-nfs:2.0.05bd7955ea2f1
stdlib@go1.14.2
1.16.8
1
kfserving/kfserving-controller:v0.6.163d79d04c2e3
stdlib@go1.14.14
1.16.8
1
kiosksh/kiosk:0.2.11501725ba2025
stdlib@go1.15.7
1.16.8
1
kubeflowkatib/katib-db-manager:v0.12.0db88bf09d88e
stdlib@go1.13.3
1.16.8
1
kubemod/kubemod:v0.13.0cadca39288ad
stdlib@go1.14.7
1.16.8
1
kubeoperator/webkubectl:v2.4.0be8f0d624640
stdlib@go1.14
1.16.8
1
kubesphere/fluentbit-operator:v0.9.0b87db3c57cb3
stdlib@go1.13.15
1.16.8
1
kubesphere/fluent-operator:v1.0.2702df77228c6
stdlib@go1.16.6
1.16.8
1
kubesphere/openelb:v0.5.0b5b665c4672c
stdlib@go1.15.15
1.16.8
1
kubesphere/openelb:v0.4.4ed7311a0f9e4
stdlib@go1.15.15
1.16.8
1
kubesphere/porter:v0.4.38d1ed5ee1d2e
stdlib@go1.15.15
1.16.8
1
kudobuilder/controller:v0.9.069072d979708
stdlib@go1.13
1.16.8
1
kvalitetsit/metadoc-web:mainf57e7553f5bd
stdlib@go1.16
1.16.8
1
kvalitetsit/nsp-prometheus-exporter:1.0.190b397ff954ec
stdlib@go1.15.3
1.16.8
1
layer5/meshery-cpx:stable-latest8c20a8a1d6a4
stdlib@go1.13.1
1.16.8
1
layer5/meshery-nsm:stable-latestebd6a8faf21f
stdlib@go1.15.12
1.16.8
1
library/caddy:2.2.0-alpine7367adca165f
stdlib@go1.15.2
1.16.8
1
library/caddy:2.4.5874405536b3e
stdlib@go1.17
1.16.8
1
library/caddy:2.4.2-alpinefbc51bcf1ab0
stdlib@go1.16.5
1.16.8
1
library/chronograf:1.9.496d8a3f65a4f
stdlib@go1.16.4
1.16.8
1
library/influxdb:2.0.8ba10ac9ba17a
stdlib@go1.16.5
1.16.8
1
library/mariadb:10.7.307e06f2e7ae9
stdlib@go1.16.7
1.16.8
1
library/mariadb:10.11.21c33370a599c
stdlib@go1.16.7
1.16.8
1
library/mariadb:10.8.2-focal490f01279be1
stdlib@go1.16.7
1.16.8
1
library/mariadb:10.79a48ac9f196f
stdlib@go1.16.7
1.16.8
1
library/mariadb:10.10.2bfc25a68e113
stdlib@go1.16.7
1.16.8
1
library/mariadb:10.6.15e22328f4d714
stdlib@go1.16.7
1.16.8
1
library/mariadb:10.9.4fbb8456ebdb1
stdlib@go1.16.7
1.16.8
1
library/mongo:4.4.1305678ae4e5e1
stdlib@go1.16.7
1.16.8
1
library/mongo:4.4-bionic3d0e6df9fd5b
stdlib@go1.16.3
1.16.8
1
library/mysql:8.0.303c1aab708f6e
stdlib@go1.16.7
1.16.8
1
library/postgres:13.703652c675ae1
stdlib@go1.16.7
1.16.8
1
library/postgres:14.32d1e636f0778
stdlib@go1.16.7
1.16.8
1
library/redis:7.0.4091a7b5de688
stdlib@go1.16.7
1.16.8
1
library/telegraf:1.19.0-alpine794079a7f241
stdlib@go1.16.5
1.16.8
1
library/telegraf:1.19-alpineaddb86c0c520
stdlib@go1.16.6
1.16.8
1
library/traefik:2.4.8eda951fd29a8
stdlib@go1.16.2
1.16.8
1
library/traefik:2.2.8f5af5a5ce17f
stdlib@go1.14.6
1.16.8
1
linuxserver/calibre-web:version-0.6.12938810eca3d3
stdlib@go1.16.7
1.16.8
1
livekit/livekit-recorder:v0.3.13ecf1409c75e0
stdlib@go1.16.2
1.16.8
1
lmierzwa/karma:v0.503751e5eed656
stdlib@go1.13.4
1.16.8
1
lmierzwa/karma:v0.70d417abe7ddb5
stdlib@go1.15.2
1.16.8
1
loftsh/directclusterendpoint:1.14.0310cc7d690f5
stdlib@go1.16.6
1.16.8
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.