StackRadar

CVE-2021-43816

High

Advisory

Published 6 Jan 2022In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
8.0
base score, highest
EPSS
0.017
76th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
20
of 17,781 indexed, latest versions
Container images
16
deployed by those charts
Fix available
1 of 1
affected package

Unprivileged pod using `hostPath` can side-step active LSM when it is SELinux

Carried by container images the latest versions of 20 of 17,781 indexed charts deploy, on 16 images.

Affected packageAffected versionsFixed inImages
github.com/containerd/containerdgolangv1.5.1, v1.5.2, v1.5.4, v1.5.5+3 more1.5.916
OSV records
GHSA-mvff-h3cj-wj9c
Also known as
GO-2022-0278

Charts affected

20 by stars
ChartLatestAffected imagesRadar Score
temporallemontechVerified publisher0.37.01 of 13See more

temporal lemontech 0.37.0

1 of the 13 container images this version deploys carry CVE-2021-43816.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
github.com/containerd/containerd@v1.5.4
1.5.9

Open the chart page →

14,893
openshift-consoleav1o-chartsVerified publisher0.3.61 of 1See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2021-43816.

Container imageDigestPackageFixed in
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
github.com/containerd/containerd@v1.5.7
1.5.9

Open the chart page →

9,052
traefik-meshtraefikOfficialVerified publisher4.1.11 of 7See more

traefik-mesh traefik 4.1.1

1 of the 7 container images this version deploys carry CVE-2021-43816.

Container imageDigestPackageFixed in
library/traefik:v2.57d5a6ae66572
github.com/containerd/containerd@v1.5.8
1.5.9

Open the chart page →

9,257
voice-biometricslumenvox2.0.12 of 26See more

voice-biometrics lumenvox 2.0.1

2 of the 26 container images this version deploys carry CVE-2021-43816.

Container imageDigestPackageFixed in
library/traefik:v2.57d5a6ae66572
github.com/containerd/containerd@v1.5.8
1.5.9
lumenvox/cloud-license:2.0.09a69862e1248
github.com/containerd/containerd@v1.5.5
1.5.9

Open the chart page →

70,741
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-43816.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/containerd/containerd@v1.5.1
1.5.9

Open the chart page →

25,151
iteration-zerocloud-native-toolkit0.2.01 of 1See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-43816.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
github.com/containerd/containerd@v1.5.1
1.5.9

Open the chart page →

6,921
temporaldtrdnk-helm-chartsVerified publisher0.35.01 of 13See more

temporal dtrdnk-helm-charts 0.35.0

1 of the 13 container images this version deploys carry CVE-2021-43816.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
github.com/containerd/containerd@v1.5.4
1.5.9

Open the chart page →

20,205
faasnetfaasnet0.0.41 of 5See more

faasnet faasnet 0.0.4

1 of the 5 container images this version deploys carry CVE-2021-43816.

Container imageDigestPackageFixed in
simpleidserver/faasprometheus:0.0.425e378d57d78
github.com/containerd/containerd@v1.5.4
1.5.9

Open the chart page →

7,617
librephotosk8sonlabVerified publisher1.1.61 of 7See more

librephotos k8sonlab 1.1.6

1 of the 7 container images this version deploys carry CVE-2021-43816.

Container imageDigestPackageFixed in
alpine/k8s:1.22.600ac10bcb759
github.com/containerd/containerd@v1.5.7
1.5.9

Open the chart page →

14,801
cadvisorkrakazyabraVerified publisher1.0.11 of 1See more

cadvisor krakazyabra 1.0.1

1 of the 1 container images this version deploys carry CVE-2021-43816.

Container imageDigestPackageFixed in
gcr.io/cadvisor/cadvisor:v0.40.0135327c978de
github.com/containerd/containerd@v1.5.2
1.5.9

Open the chart page →

3,176
apm-serverkube-opsVerified publisher0.1.21 of 1See more

apm-server kube-ops 0.1.2

1 of the 1 container images this version deploys carry CVE-2021-43816.

Container imageDigestPackageFixed in
elastic/apm-server:7.17.6c7a1c63257d0
github.com/containerd/containerd@v1.5.6
1.5.9

Open the chart page →

7,157
mattermost-calls-offloadermattermostVerified publisher0.2.11 of 1See more

mattermost-calls-offloader mattermost 0.2.1

1 of the 1 container images this version deploys carry CVE-2021-43816.

Container imageDigestPackageFixed in
mattermost/calls-offloader:v0.9.0b440b282599e
github.com/containerd/containerd@v1.5.7
1.5.9

Open the chart page →

1,414
one-green-coreone-green-coreVerified publisher0.0.71 of 8See more

one-green-core one-green-core 0.0.7

1 of the 8 container images this version deploys carry CVE-2021-43816.

Container imageDigestPackageFixed in
library/telegraf:1.20.428e98eece020
github.com/containerd/containerd@v1.5.7
1.5.9

Open the chart page →

9,558
redhat-trusted-application-pipelineopenshift1.0.21 of 2See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2021-43816.

Container imageDigestPackageFixed in
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/containerd/containerd@v1.5.1
1.5.9

Open the chart page →

8,599
loki-stackphntom2.10.21 of 2See more

loki-stack phntom 2.10.2

1 of the 2 container images this version deploys carry CVE-2021-43816.

Container imageDigestPackageFixed in
grafana/promtail:2.4.2626900031c4e
github.com/containerd/containerd@v1.5.4
1.5.9

Open the chart page →

5,708
loki-stackpyalive-cdmswebappVerified publisher2.6.51 of 4See more

loki-stack pyalive-cdmswebapp 2.6.5

1 of the 4 container images this version deploys carry CVE-2021-43816.

Container imageDigestPackageFixed in
grafana/promtail:2.4.2626900031c4e
github.com/containerd/containerd@v1.5.4
1.5.9

Open the chart page →

6,525
gitlab-operatorrock8sVerified publisher0.7.01 of 2See more

gitlab-operator rock8s 0.7.0

1 of the 2 container images this version deploys carry CVE-2021-43816.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
github.com/containerd/containerd@v1.5.7
1.5.9

Open the chart page →

5,422
ed-traefik2scaleway-charts0.2.01 of 1See more

ed-traefik2 scaleway-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-43816.

Container imageDigestPackageFixed in
library/traefik:2.5.62f603f8d3abe
github.com/containerd/containerd@v1.5.8
1.5.9

Open the chart page →

3,160
temporaltemporal0.28.91 of 13See more

temporal temporal 0.28.9

1 of the 13 container images this version deploys carry CVE-2021-43816.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
github.com/containerd/containerd@v1.5.4
1.5.9

Open the chart page →

21,005
monitoringthl-chartsVerified publisher0.1.11 of 10See more

monitoring thl-charts 0.1.1

1 of the 10 container images this version deploys carry CVE-2021-43816.

Container imageDigestPackageFixed in
grafana/promtail:2.4.2626900031c4e
github.com/containerd/containerd@v1.5.4
1.5.9

Open the chart page →

18,908

Container images carrying it

16 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
grafana/promtail:2.4.2626900031c4e
github.com/containerd/containerd@v1.5.4
1.5.9
3
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
github.com/containerd/containerd@v1.5.4
1.5.9
3
library/traefik:v2.57d5a6ae66572
github.com/containerd/containerd@v1.5.8
1.5.9
2
alpine/k8s:1.22.600ac10bcb759
github.com/containerd/containerd@v1.5.7
1.5.9
1
elastic/apm-server:7.17.6c7a1c63257d0
github.com/containerd/containerd@v1.5.6
1.5.9
1
library/telegraf:1.20.428e98eece020
github.com/containerd/containerd@v1.5.7
1.5.9
1
library/traefik:2.5.62f603f8d3abe
github.com/containerd/containerd@v1.5.8
1.5.9
1
lumenvox/cloud-license:2.0.09a69862e1248
github.com/containerd/containerd@v1.5.5
1.5.9
1
mattermost/calls-offloader:v0.9.0b440b282599e
github.com/containerd/containerd@v1.5.7
1.5.9
1
simpleidserver/faasprometheus:0.0.425e378d57d78
github.com/containerd/containerd@v1.5.4
1.5.9
1
gcr.io/cadvisor/cadvisor:v0.40.0135327c978de
github.com/containerd/containerd@v1.5.2
1.5.9
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
github.com/containerd/containerd@v1.5.1
1.5.9
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/containerd/containerd@v1.5.1
1.5.9
1
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
github.com/containerd/containerd@v1.5.7
1.5.9
1
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/containerd/containerd@v1.5.1
1.5.9
1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
github.com/containerd/containerd@v1.5.7
1.5.9
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.