StackRadar

CVE-2021-40528

Medium

Advisory

Published 25 Jun 2021In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.014
71st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
859
of 17,787 indexed, latest versions
Container images
746
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: libgcrypt security update

Carried by container images the latest versions of 859 of 17,787 indexed charts deploy, on 746 images.

Affected packageAffected versionsFixed inImages
libgcrypt20deb1.6.5-2ubuntu0.2, 1.6.5-2ubuntu0.3, 1.6.5-2ubuntu0.4, 1.6.5-2ubuntu0.5+10 more1.6.5-2ubuntu0.6+esm1, 1.7.6-2+deb9u4, 1.8.1-4ubuntu1.3, 1.8.1-4ubuntu1.fips.3+2 more627
libgcryptrpm1.8.2-lp151.9.4.1, 1.8.3-2.el8, 1.8.3-4.el8, 1.8.5-4.el8+1 more0:1.8.5-7.el8_6, 1.10.1-1.171
libgcryptapk1.8.5-r0, 1.8.7-r0, 1.8.8-r01.8.8-r148
OSV records
ALPINE-CVE-2021-40528RHSA-2022:5311UBUNTU-CVE-2021-40528DLA-2691-1openSUSE-SU-2024:12540-1
Also known as
USN-5080-1, USN-5080-2

Charts affected

859 by stars
ChartLatestAffected imagesRadar Score
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2021-40528.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
libgcrypt20@1.7.6-2+deb9u3
1.7.6-2+deb9u4

Open the chart page →

22,665
kibanawiremindVerified publisher8.5.231 of 2See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2021-40528.

Container imageDigestPackageFixed in
library/kibana:8.18.004c0fc150f3a
libgcrypt20@1.8.5-5ubuntu1.1
1.8.5-5ubuntu1.fips.1.1

Open the chart page →

6,323
nginxwiremindVerified publisher2.1.11 of 1See more

nginx wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2021-40528.

Container imageDigestPackageFixed in
library/nginx:1.17-alpine763e7f0188e3
libgcrypt@1.8.5-r0
1.8.8-r1

Open the chart page →

966
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2021-40528.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
libgcrypt@1.8.5-6.el8
0:1.8.5-7.el8_6

Open the chart page →

11,592
upsourcexykongVerified publisher0.1.11 of 1See more

upsource xykong 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-40528.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
libgcrypt20@1.7.6-2+deb9u3
1.7.6-2+deb9u4

Open the chart page →

702
helmexampleycztest0.1.01 of 1See more

helmexample ycztest 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-40528.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
libgcrypt20@1.7.6-2+deb9u3
1.7.6-2+deb9u4

Open the chart page →

702
mychartyi-test-chart0.1.01 of 1See more

mychart yi-test-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-40528.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
libgcrypt20@1.7.6-2+deb9u3
1.7.6-2+deb9u4

Open the chart page →

702
helmexampleyunpeng-helmexample0.1.01 of 1See more

helmexample yunpeng-helmexample 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-40528.

Container imageDigestPackageFixed in
library/nginx:1.16.03e373fd5b8d4
libgcrypt20@1.7.6-2+deb9u3
1.7.6-2+deb9u4

Open the chart page →

702
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2021-40528.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
libgcrypt20@1.8.1-4ubuntu1.3
1.8.1-4ubuntu1.fips.3
yandex/clickhouse-server:21.3.204eccfffb01d7
libgcrypt20@1.8.5-5ubuntu1.1
1.8.5-5ubuntu1.fips.1.1

Open the chart page →

9,250

Container images carrying it

746 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
libgcrypt20@1.8.5-5ubuntu1.1
1.8.5-5ubuntu1.fips.1.1
2
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
libgcrypt20@1.8.5-5ubuntu1.1
1.8.5-5ubuntu1.fips.1.1
2
grafana/grafana:6.1.6d66b41cf7e05
libgcrypt20@1.7.6-2+deb9u3
1.7.6-2+deb9u4
2
grafana/promtail:1.5.046e88d390cd6
libgcrypt20@1.7.6-2+deb9u3
1.7.6-2+deb9u4
2
honestica/kube-iptables-tailer:master-91a393242fb939
libgcrypt20@1.8.5-5ubuntu1.1
1.8.5-5ubuntu1.fips.1.1
2
hookiesolutions/webhookie:latest0629694246ba
libgcrypt20@1.8.5-5ubuntu1.1
1.8.5-5ubuntu1.fips.1.1
2
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
libgcrypt20@1.8.5-5ubuntu1.1
1.8.5-5ubuntu1.fips.1.1
2
interlayhq/interbtc:latesta66d0e35e70f
libgcrypt20@1.8.5-5ubuntu1.1
1.8.5-5ubuntu1.fips.1.1
2
interlayhq/interbtc-clients:vault-masterc3e311de67da
libgcrypt20@1.8.5-5ubuntu1.1
1.8.5-5ubuntu1.fips.1.1
2
iomesh/node-disk-exporter:1.8.0f03148764f38
libgcrypt20@1.8.5-5ubuntu1.1
1.8.5-5ubuntu1.fips.1.1
2
istio/examples-bookinfo-details-v1:1.14.04c3379923c8a
libgcrypt20@1.7.6-2+deb9u3
1.7.6-2+deb9u4
2
istio/examples-bookinfo-details-v1:1.15.0fce0bcbff0be
libgcrypt20@1.7.6-2+deb9u3
1.7.6-2+deb9u4
2
istio/examples-bookinfo-productpage-v1:1.15.00a5eb4795952
libgcrypt20@1.7.6-2+deb9u3
1.7.6-2+deb9u4
2
istio/examples-bookinfo-productpage-v1:1.14.022a0410f35a8
libgcrypt20@1.7.6-2+deb9u3
1.7.6-2+deb9u4
2
istio/examples-bookinfo-ratings-v1:1.15.009b9d6958a13
libgcrypt20@1.7.6-2+deb9u3
1.7.6-2+deb9u4
2
istio/examples-bookinfo-ratings-v1:1.14.0eb0f1a725ca8
libgcrypt20@1.7.6-2+deb9u3
1.7.6-2+deb9u4
2
istio/examples-bookinfo-reviews-v1:1.15.040e8aba77c1b
libgcrypt20@1.6.5-2ubuntu0.5
1.6.5-2ubuntu0.6+esm1
2
istio/examples-bookinfo-reviews-v1:1.14.0ee156b8aefd6
libgcrypt20@1.6.5-2ubuntu0.5
1.6.5-2ubuntu0.6+esm1
2
istio/examples-bookinfo-reviews-v2:1.15.0e86d247b7ac2
libgcrypt20@1.6.5-2ubuntu0.5
1.6.5-2ubuntu0.6+esm1
2
istio/examples-bookinfo-reviews-v2:1.14.0eab80bcd2132
libgcrypt20@1.6.5-2ubuntu0.5
1.6.5-2ubuntu0.6+esm1
2
istio/examples-bookinfo-reviews-v3:1.14.01e37fca43550
libgcrypt20@1.6.5-2ubuntu0.5
1.6.5-2ubuntu0.6+esm1
2
istio/examples-bookinfo-reviews-v3:1.15.0e454cab754cf
libgcrypt20@1.6.5-2ubuntu0.5
1.6.5-2ubuntu0.6+esm1
2
istio/kubectl:1.5.10dbb7726d1bf0
libgcrypt20@1.8.1-4ubuntu1.2
1.8.1-4ubuntu1.3
2
istio/proxyv2:1.10.3a78b7a165744
libgcrypt20@1.8.1-4ubuntu1.2
1.8.1-4ubuntu1.3
2
library/cassandra:3.11.65aa8400b4b3b
libgcrypt20@1.8.1-4ubuntu1.2
1.8.1-4ubuntu1.3
2
library/elasticsearch:7.17.35e6ac15bf6a5
libgcrypt20@1.8.5-5ubuntu1.1
1.8.5-5ubuntu1.fips.1.1
2
library/mongo:5.041108d183e97
libgcrypt20@1.8.5-5ubuntu1.1
1.8.5-5ubuntu1.fips.1.1
2
library/mongo:4.2.358b25d51baa1
libgcrypt20@1.8.1-4ubuntu1.2
1.8.1-4ubuntu1.3
2
library/nginx:1.19-alpine07ab71a2c8e4
libgcrypt@1.8.7-r0
1.8.8-r1
2
library/nginx:1.13.12b1d09e971889
libgcrypt20@1.7.6-2+deb9u2
1.7.6-2+deb9u4
2
library/postgres:11.5b3770d9c4ef1
libgcrypt20@1.7.6-2+deb9u3
1.7.6-2+deb9u4
2
library/postgres:12.4-alpinee27594243877
libgcrypt@1.8.5-r0
1.8.8-r1
2
library/ubuntu:16.04:xenial1f1a2d56de1d
libgcrypt20@1.6.5-2ubuntu0.6
1.6.5-2ubuntu0.6+esm1
2
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
libgcrypt20@1.6.5-2ubuntu0.5
1.6.5-2ubuntu0.6+esm1
2
mbentley/omada-controller:4.3f4e682274bed
libgcrypt20@1.8.1-4ubuntu1.3
1.8.1-4ubuntu1.fips.3
2
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
libgcrypt20@1.8.5-5ubuntu1
1.8.5-5ubuntu1.1
2
minio/operator:v4.3.754393e03f3b2
libgcrypt@1.8.5-6.el8
0:1.8.5-7.el8_6
2
nachomillangarcia/prometheus_aws_cost_exporter:lateste4ce056f2d6d
libgcrypt20@1.7.6-2+deb9u3
1.7.6-2+deb9u4
2
neilpeterson/azure-vote-front:v384062718347c
libgcrypt20@1.7.6-2+deb9u2
1.7.6-2+deb9u4
2
ngick8stesting/c3po-mmeinit:latest1e764eab77b4
libgcrypt20@1.8.1-4ubuntu1
1.8.1-4ubuntu1.3
2
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
libgcrypt20@1.8.5-5ubuntu1.1
1.8.5-5ubuntu1.fips.1.1
2
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
libgcrypt20@1.6.5-2ubuntu0.5
1.6.5-2ubuntu0.6+esm1
2
osixia/openldap:1.2.4d212a12aa728
libgcrypt20@1.7.6-2+deb9u3
1.7.6-2+deb9u4
2
rodolpheche/wiremock:2.26.03be08a386092
libgcrypt20@1.7.6-2+deb9u3
1.7.6-2+deb9u4
2
sealife/fritzbox-exporter:1.0f5cc2f0f4c9b
libgcrypt@1.8.5-r0
1.8.8-r1
2
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
libgcrypt20@1.8.5-5ubuntu1.1
1.8.5-5ubuntu1.fips.1.1
2
solsson/kafka-prometheus-jmx-exporter6f82e2b0464f
libgcrypt20@1.7.6-2+deb9u3
1.7.6-2+deb9u4
2
statsd/statsd:v0.8.6dab129e74c25
libgcrypt20@1.7.6-2+deb9u3
1.7.6-2+deb9u4
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
libgcrypt20@1.8.5-5ubuntu1.1
1.8.5-5ubuntu1.fips.1.1
2
gcr.io/google_containers/kubernetes-dashboard-init-amd64:v1.0.0fbe12aa24de6
libgcrypt20@1.6.5-2ubuntu0.3
1.6.5-2ubuntu0.6+esm1
2

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.