StackRadar

CVE-2021-41103

Medium

Advisory

Published 4 Oct 2021In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.005
43rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
113
of 17,781 indexed, latest versions
Container images
102
deployed by those charts
Fix available
1 of 1
affected package

Insufficiently restricted permissions on plugin directories

Carried by container images the latest versions of 113 of 17,781 indexed charts deploy, on 102 images.

Affected packageAffected versionsFixed inImages
github.com/containerd/containerdgolangv1.3.0, v1.3.2, v1.3.3, v1.3.4+10 more1.4.11, 1.5.7102
OSV records
GHSA-c2h3-6mxw-7mvq
Also known as
GO-2022-0938

Charts affected

113 by stars
ChartLatestAffected imagesRadar Score
furan2dollarshaveclubVerified publisher0.2.01 of 1See more

furan2 dollarshaveclub 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
dollarshaveclub/furan2:master14a257836529
github.com/containerd/containerd@v1.4.8
1.4.11

Open the chart page →

3,046
drogue-cloud-metricsdrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-metrics drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.26.038d40a760569
github.com/containerd/containerd@v1.4.3
1.4.11

Open the chart page →

13,558
temporaldtrdnk-helm-chartsVerified publisher0.35.01 of 13See more

temporal dtrdnk-helm-charts 0.35.0

1 of the 13 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
github.com/containerd/containerd@v1.5.4
1.5.7

Open the chart page →

20,205
eav-componenteav-component1.0.01 of 3See more

eav-component eav-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eav-component-php:latest24bbca4a52a8
github.com/containerd/containerd@v1.3.2
1.4.11

Open the chart page →

7,255
education-componenteducation-component1.0.01 of 3See more

education-component education-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/education-component-php:latestda6b05a1a601
github.com/containerd/containerd@v1.3.2
1.4.11

Open the chart page →

7,327
eherkenning-uieherkenning-ui1.0.01 of 3See more

eherkenning-ui eherkenning-ui 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eherkenning-ui-php:latestdeed102b4255
github.com/containerd/containerd@v1.3.2
1.4.11

Open the chart page →

7,510
faasnetfaasnet0.0.41 of 5See more

faasnet faasnet 0.0.4

1 of the 5 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
simpleidserver/faasprometheus:0.0.425e378d57d78
github.com/containerd/containerd@v1.5.4
1.5.7

Open the chart page →

7,617
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
github.com/containerd/containerd@v1.3.0
1.4.11

Open the chart page →

14,673
grafregistratiecomponentgrafregistratiecomponent1.0.01 of 3See more

grafregistratiecomponent grafregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/grafregistratiecomponent-php:latest35225eaa87ab
github.com/containerd/containerd@v1.3.2
1.4.11

Open the chart page →

7,510
siembolgresearch0.1.61 of 4See more

siembol gresearch 0.1.6

1 of the 4 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
alpine/k8s:1.18.16a41efe02a041
github.com/containerd/containerd@v1.4.4
1.4.11

Open the chart page →

14,312
instemmingserviceinstemmingservice1.0.01 of 3See more

instemmingservice instemmingservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/instemmingservice-php:latest4ffe222b3e3a
github.com/containerd/containerd@v1.3.2
1.4.11

Open the chart page →

7,510
missing-container-metricsjimdo-missing-container-metrics0.5.01 of 1See more

missing-container-metrics jimdo-missing-container-metrics 0.5.0

1 of the 1 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
dmilhdef/missing-container-metrics:v0.21.0fada1a6e7638
github.com/containerd/containerd@v1.4.4
1.4.11

Open the chart page →

2,409
cadvisorkrakazyabraVerified publisher1.0.11 of 1See more

cadvisor krakazyabra 1.0.1

1 of the 1 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
gcr.io/cadvisor/cadvisor:v0.40.0135327c978de
github.com/containerd/containerd@v1.5.2
1.5.7

Open the chart page →

3,176
apm-serverkube-opsVerified publisher0.1.21 of 1See more

apm-server kube-ops 0.1.2

1 of the 1 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
elastic/apm-server:7.17.6c7a1c63257d0
github.com/containerd/containerd@v1.5.6
1.5.7

Open the chart page →

7,157
promtailkube-opsVerified publisher1.5.11 of 2See more

promtail kube-ops 1.5.1

1 of the 2 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
quay.io/kube-ops/promtail:2.2.134de6387233b
github.com/containerd/containerd@v1.4.1
1.4.11

Open the chart page →

4,149
cranekubesphere-stable0.5.21 of 3See more

crane kubesphere-stable 0.5.2

1 of the 3 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
gocrane/craned:v0.5.1a1400909118c
github.com/containerd/containerd@v1.4.4
1.4.11

Open the chart page →

8,883
kvkkvkservice0.1.01 of 4See more

kvk kvkservice 0.1.0

1 of the 4 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
conduction/kvk-php:dev8f177f9f8a7b
github.com/containerd/containerd@v1.3.2
1.4.11

Open the chart page →

8,534
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
kubeoperator/webkubectl:v2.4.0be8f0d624640
github.com/containerd/containerd@v1.3.2
1.4.11

Open the chart page →

26,356
ocatiecataloguslocatiecatalogus1.0.01 of 3See more

ocatiecatalogus locatiecatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/ocatiecatalogus-php:latestc22764cbfa97
github.com/containerd/containerd@v1.3.2
1.4.11

Open the chart page →

7,510
devspace-cloudloftVerified publisher0.3.31 of 8See more

devspace-cloud loft 0.3.3

1 of the 8 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
devspacecloud/manager:0.3.349c397413f7b
github.com/containerd/containerd@v1.3.2
1.4.11

Open the chart page →

9,880
kioskloftVerified publisher0.2.111 of 1See more

kiosk loft 0.2.11

1 of the 1 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
kiosksh/kiosk:0.2.11501725ba2025
github.com/containerd/containerd@v1.4.3
1.4.11

Open the chart page →

3,086
loggingcomponentloggingcomponent1.0.01 of 3See more

loggingcomponent loggingcomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/loggingcomponent-php:latest834b8e1af290
github.com/containerd/containerd@v1.3.2
1.4.11

Open the chart page →

7,492
logicservicelogicservice1.0.01 of 4See more

logicservice logicservice 1.0.0

1 of the 4 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/logicservice-php:latest72aae2080595
github.com/containerd/containerd@v1.3.2
1.4.11

Open the chart page →

7,499
medewerkercatalogusmedewerkercatalogus1.0.01 of 3See more

medewerkercatalogus medewerkercatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/medewerkercatalogus-php:latest1ea5412bed26
github.com/containerd/containerd@v1.3.2
1.4.11

Open the chart page →

7,327
memo-componentmemo-component1.0.01 of 3See more

memo-component memo-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/memo-component-php:latestef77f4c089a1
github.com/containerd/containerd@v1.3.2
1.4.11

Open the chart page →

7,510
traefik2mesosphere9.18.01 of 1See more

traefik2 mesosphere 9.18.0

1 of the 1 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
library/traefik:2.4.8eda951fd29a8
github.com/containerd/containerd@v1.3.2
1.4.11

Open the chart page →

3,341
kommandermesosphere-stable0.39.22 of 29See more

kommander mesosphere-stable 0.39.2

2 of the 29 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
mesosphere/kommander-federation-utility-apiserver:v0.21.2f9b769c65e24
github.com/containerd/containerd@v1.4.1-0.20210113014526-124fc14a469e
1.4.11
thanosio/thanos:v0.15.0b12d5c31bf5a
github.com/containerd/containerd@v1.3.4
1.4.11

Open the chart page →

68,284
notification-componentnotification-component1.0.01 of 4See more

notification-component notification-component 1.0.0

1 of the 4 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/notification-component-php:latestcd9656e6bc2c
github.com/containerd/containerd@v1.3.2
1.4.11

Open the chart page →

7,527
anchore-engineopencloudcx1.13.01 of 2See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.10.0bde9eedf639d
github.com/containerd/containerd@v1.3.4
1.4.11

Open the chart page →

18,023
voltha-infraopencord2.14.01 of 10See more

voltha-infra opencord 2.14.0

1 of the 10 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
opencord/onos-classic-helm-utils:0.1.00d693ba85fd6
github.com/containerd/containerd@v1.4.4
1.4.11

Open the chart page →

41,044
opscruiseopenshift0.35.1001 of 11See more

opscruise openshift 0.35.100

1 of the 11 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
grafana/promtail:2.0.05fd12edcc694
github.com/containerd/containerd@v1.3.4
1.4.11

Open the chart page →

8,201
redhat-trusted-application-pipelineopenshift1.0.21 of 2See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/containerd/containerd@v1.5.1
1.5.7

Open the chart page →

8,599
orderregistratiecomponentorderregistratiecomponent1.0.01 of 3See more

orderregistratiecomponent orderregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/orderregistratiecomponent-php:latestd17257e4fa27
github.com/containerd/containerd@v1.3.2
1.4.11

Open the chart page →

7,492
pet-battle-infrapetbattle1.0.321 of 2See more

pet-battle-infra petbattle 1.0.32

1 of the 2 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.8bb5e052770e5
github.com/containerd/containerd@v1.4.3
1.4.11

Open the chart page →

15,466
pet-battle-tournamentpetbattle1.0.401 of 3See more

pet-battle-tournament petbattle 1.0.40

1 of the 3 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.8bb5e052770e5
github.com/containerd/containerd@v1.4.3
1.4.11

Open the chart page →

15,466
loki-stackphntom2.10.21 of 2See more

loki-stack phntom 2.10.2

1 of the 2 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
grafana/promtail:2.4.2626900031c4e
github.com/containerd/containerd@v1.5.4
1.5.7

Open the chart page →

5,708
gitlab-runner-operatorpnnl-miscscripts0.1.61 of 1See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
github.com/containerd/containerd@v1.3.2
1.4.11

Open the chart page →

11,151
procestypecatalogusprocestypecatalogus1.1.01 of 4See more

procestypecatalogus procestypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/procestypecatalogus-php:latest956c4fb64796
github.com/containerd/containerd@v1.3.2
1.4.11

Open the chart page →

7,429
productenendienstencatalogusproductenendienstencatalogus1.0.01 of 3See more

productenendienstencatalogus productenendienstencatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/productenendienstencatalogus-php:latest7242da105081
github.com/containerd/containerd@v1.3.2
1.4.11

Open the chart page →

7,510
panproto-application-nldesign0.1.01 of 5See more

pan proto-application-nldesign 0.1.0

1 of the 5 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
conduction/pan-php:dev24f03c57568f
github.com/containerd/containerd@v1.3.2
1.4.11

Open the chart page →

8,725
proto-component-commongroundproto-component-commonground1.0.01 of 3See more

proto-component-commonground proto-component-commonground 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/proto-component-commonground-php:latesteb36ead1954e
github.com/containerd/containerd@v1.3.2
1.4.11

Open the chart page →

7,510
loki-stackpyalive-cdmswebappVerified publisher2.6.51 of 4See more

loki-stack pyalive-cdmswebapp 2.6.5

1 of the 4 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
grafana/promtail:2.4.2626900031c4e
github.com/containerd/containerd@v1.5.4
1.5.7

Open the chart page →

6,525
ansible-automation-platformredhat-cop0.0.91 of 1See more

ansible-automation-platform redhat-cop 0.0.9

1 of the 1 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.7464a3af4dfe0
github.com/containerd/containerd@v1.3.2
1.4.11

Open the chart page →

15,291
argocd-operatorredhat-cop1.2.21 of 1See more

argocd-operator redhat-cop 1.2.2

1 of the 1 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.7464a3af4dfe0
github.com/containerd/containerd@v1.3.2
1.4.11

Open the chart page →

15,291
ploigosredhat-cop0.0.91 of 2See more

ploigos redhat-cop 0.0.9

1 of the 2 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.66722d5041b47
github.com/containerd/containerd@v1.3.3
1.4.11

Open the chart page →

11,437
stackrox-chartredhat-cop0.0.101 of 1See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
github.com/containerd/containerd@v1.4.3
1.4.11

Open the chart page →

29,227
review-componentreview-component1.0.01 of 3See more

review-component review-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/review-component-php:latestafe623824b82
github.com/containerd/containerd@v1.3.2
1.4.11

Open the chart page →

7,491
argocdromholdings1.8.11 of 3See more

argocd romholdings 1.8.1

1 of the 3 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/containerd/containerd@v1.3.4
1.4.11

Open the chart page →

10,466
centralbrainsciencemeshVerified publisher0.0.31 of 5See more

centralbrain sciencemesh 0.0.3

1 of the 5 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.22.1b899dbd1b901
github.com/containerd/containerd@v1.3.4
1.4.11

Open the chart page →

9,754
allurestakaterVerified publisher1.0.11 of 1See more

allure stakater 1.0.1

1 of the 1 container images this version deploys carry CVE-2021-41103.

Container imageDigestPackageFixed in
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
github.com/containerd/containerd@v1.4.3
1.4.11

Open the chart page →

28,165

Container images carrying it

102 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/containerd/containerd@v1.5.1
1.5.7
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
github.com/containerd/containerd@v1.4.3
1.4.11
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.