CVE-2021-46312

Medium

Advisory

Published 22 Aug 2023In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.010; 62nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 64; of 17,781 indexed, latest versions
Container images: 73; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 64 of 17,781 indexed charts deploy, on 73 images.

Affected package	Affected versions	Fixed in	Images
djvulibredeb	3.5.27.1-5, 3.5.27.1-14ubuntu0.1, 3.5.28-2, 3.5.28-2.1~deb12u1+3 more	3.5.27.1-5ubuntu0.1+esm3, 3.5.27.1-14ubuntu0.1+esm1, 3.5.28-2.2~deb12u1, 3.5.28-2ubuntu0.22.04.2+1 more	73

OSV records: DEBIAN-CVE-2021-46312 UBUNTU-CVE-2021-46312
Also known as: USN-8054-1

Charts affected

64 by stars

Chart

Latest

Affected images

Radar Score

kresusrm3l

0.2.1

1 of 3 See more

kresus rm3l 0.2.1

1 of the 3 container images this version deploys carry CVE-2021-46312.

Container image	Digest	Package	Fixed in
bnjbvr/kresus :0.22.1	37e216b182c8	djvulibre@3.5.28-2+b1	3.5.28-2.2~deb12u1

Open the chart page →

15,591

safe-stacksafe-global

0.1.0

1 of 9 See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry CVE-2021-46312.

Container image	Digest	Package	Fixed in
gjeanmart/safe-ganache-node :latest	926264c8f2d1	djvulibre@3.5.28-2+b1	3.5.28-2.2~deb12u1

Open the chart page →

19,560

safe-transaction-servicesafe-global

0.1.0

1 of 6 See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2021-46312.

Container image	Digest	Package	Fixed in
gjeanmart/safe-ganache-node :latest	926264c8f2d1	djvulibre@3.5.28-2+b1	3.5.28-2.2~deb12u1

Open the chart page →

16,620

spacecapybara-chartspacecapy

1.0.49

1 of 2 See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry CVE-2021-46312.

Container image	Digest	Package	Fixed in
sashafefler/spacecapybara_app :latest	f96d7804c0ca	djvulibre@3.5.28-2+b1	3.5.28-2.2~deb12u1

Open the chart page →

11,888

stakefishstakefish

0.1.0

1 of 8 See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2021-46312.

Container image	Digest	Package	Fixed in
thongngo3301/stakefish :latest	a341af5976e3	djvulibre@3.5.28-2+b1	3.5.28-2.2~deb12u1

Open the chart page →

20,223

verbasubstratus

0.4.0

1 of 1 See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry CVE-2021-46312.

Container image	Digest	Package	Fixed in
substratusai/verba :v0.4.0-baseURL2	61695be635eb	djvulibre@3.5.28-2+b1	3.5.28-2.2~deb12u1

Open the chart page →

13,390

cronjobt3n

0.1.0

1 of 1 See more

cronjob t3n 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-46312.

Container image	Digest	Package	Fixed in
library/python :3.8	d41127070014	djvulibre@3.5.28-2+b1	3.5.28-2.2~deb12u1

Open the chart page →

11,199

helm-testtest-helm-artifacthub

1.0.0

1 of 2 See more

helm-test test-helm-artifacthub 1.0.0

1 of the 2 container images this version deploys carry CVE-2021-46312.

Container image	Digest	Package	Fixed in
carlosmz87/test_helm_backend :latest	8ffa63aa995d	djvulibre@3.5.28-2+b1	3.5.28-2.2~deb12u1

Open the chart page →

11,648

codegentest-opea

1.0.0

1 of 5 See more

codegen test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2021-46312.

Container image	Digest	Package	Fixed in
opea/codegen-ui :1.0	2bee4eb66f3e	djvulibre@3.5.28-2+b1	3.5.28-2.2~deb12u1

Open the chart page →

28,814

codetranstest-opea

1.0.0

1 of 5 See more

codetrans test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2021-46312.

Container image	Digest	Package	Fixed in
opea/codetrans-ui :1.0	3ef121f34610	djvulibre@3.5.28-2+b1	3.5.28-2.2~deb12u1

Open the chart page →

28,385

docsumtest-opea

1.0.0

1 of 5 See more

docsum test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2021-46312.

Container image	Digest	Package	Fixed in
opea/docsum-ui :1.0	7f854e9bffaf	djvulibre@3.5.28-2+b1	3.5.28-2.2~deb12u1

Open the chart page →

28,858

nextcloudth-charts

0.4.0

1 of 1 See more

nextcloud th-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2021-46312.

Container image	Digest	Package	Fixed in
library/nextcloud :31.0.6-apache	588609d76b21	djvulibre@3.5.28-2	3.5.28-2.2~deb12u1

Open the chart page →

10,086

tfy-distributortruefoundry

0.0.1

1 of 4 See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2021-46312.

Container image	Digest	Package	Fixed in
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	djvulibre@3.5.28-2+b1	3.5.28-2.2~deb12u1

Open the chart page →

17,323

demo-backendv2fly

0.0.3

1 of 1 See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2021-46312.

Container image	Digest	Package	Fixed in
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	djvulibre@3.5.28-2+b1	3.5.28-2.2~deb12u1

Open the chart page →

14,358

Container images carrying it

73 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
gcr.io/ml-pipeline/metadata-writer :2.3.0	9bcfd2abc361	djvulibre@3.5.28-2+b1	3.5.28-2.2~deb12u1	1
ghcr.io/astriaorg/astrotrek :0.1.0	5889bea38e56	djvulibre@3.5.28-2+b1	3.5.28-2.2~deb12u1	1
ghcr.io/camptocamp/tetragon-policy-builder :master	0e99f12bb040	djvulibre@3.5.28-2+b1	3.5.28-2.2~deb12u1	1
ghcr.io/cosmo-workspace/dev-code-server :v0.0.3	16fda01ae58a	djvulibre@3.5.28-2+b1	3.5.28-2.2~deb12u1	1
ghcr.io/drewburr-labs/mum-discord-bot :3.1.2	6e82914e1051	djvulibre@3.5.28-2+b1	3.5.28-2.2~deb12u1	1
ghcr.io/graphprotocol/availability-oracle :sha-28312fd	472a25038957	djvulibre@3.5.28-2+b1	3.5.28-2.2~deb12u1	1
ghcr.io/kvaps/opennebula :v5.12.0.4-1	e28e0e7de11b	djvulibre@3.5.27.1-14ubuntu0.1	3.5.27.1-14ubuntu0.1+esm1	1
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4	01563adc95fd	djvulibre@3.5.27.1-14ubuntu0.1	3.5.27.1-14ubuntu0.1+esm1	1
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4-1	2b92df1143b9	djvulibre@3.5.27.1-14ubuntu0.1	3.5.27.1-14ubuntu0.1+esm1	1
ghcr.io/kvaps/opennebula-flow :v5.12.0.4-1	600221f0f43f	djvulibre@3.5.27.1-14ubuntu0.1	3.5.27.1-14ubuntu0.1+esm1	1
ghcr.io/kvaps/opennebula-gate :v5.12.0.4-1	a85e03d8bc1d	djvulibre@3.5.27.1-14ubuntu0.1	3.5.27.1-14ubuntu0.1+esm1	1
ghcr.io/libreconnect/ferriscompany :0.1.0-rc6	ed86db9f0efe	djvulibre@3.5.28-2+b1	3.5.28-2.2~deb12u1	1
ghcr.io/nefelim4ag/pingdom-operator :0.0.15	f8c7afdcf439	djvulibre@3.5.28-2+b1	3.5.28-2.2~deb12u1	1
ghcr.io/opencost/opencost-parquet-exporter :v0.2.1	ce85ef0ce665	djvulibre@3.5.28-2+b1	3.5.28-2.2~deb12u1	1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui :0.2.1-5d668c1	ed07e7ca098d	djvulibre@3.5.28-2+b1	3.5.28-2.2~deb12u1	1
ghcr.io/wizarrrr/wizarr :4.2.0-beta.3	d19d886d5090	djvulibre@3.5.28-2+b1	3.5.28-2.2~deb12u1	1
ghcr.io/zoriya/kyoo_autosync :4.7.1	fbba58ddb1a6	djvulibre@3.5.28-2+b1	3.5.28-2.2~deb12u1	1
ghcr.io/zoriya/kyoo_scanner :4.7.1	7dc0ee57b628	djvulibre@3.5.28-2+b1	3.5.28-2.2~deb12u1	1
public.ecr.aws/jtekt-corporation/image-storage-service :v1.16.17	b1493760c716	djvulibre@3.5.28-2+b1	3.5.28-2.2~deb12u1	1
public.ecr.aws/jtekt-corporation/shinsei-manager :v2.8.1	5cd62142d6ed	djvulibre@3.5.28-2+b1	3.5.28-2.2~deb12u1	1
public.ecr.aws/jtekt-corporation/time-series-storage-service :v1.5.1	046ef5c9ed50	djvulibre@3.5.28-2+b1	3.5.28-2.2~deb12u1	1
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	djvulibre@3.5.28-2+b1	3.5.28-2.2~deb12u1	1
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	djvulibre@3.5.28-2+b1	3.5.28-2.2~deb12u1	1