CVE-2021-23343
MediumAdvisory
Published 10 Aug 2021In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.3
- base score, highest
- EPSS
- 0.022
- 82nd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 163
- of 17,781 indexed, latest versions
- Container images
- 159
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Regular Expression Denial of Service in path-parse
Carried by container images the latest versions of 163 of 17,781 indexed charts deploy, on 159 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| path-parsenpm | 1.0.5, 1.0.6 | 1.0.7 | 159 |
- OSV records
- GHSA-hj48-42vr-x3v9
Charts affected
163 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| kurento_webrtc_demostunner | 0.1.0 | 1 of 2See more | 12,460 |
| stunner-kurento-one2one-callstunner | 0.1.0 | 1 of 2See more | 12,460 |
| grafanasvtech-public-helm-charts | 1.0.0 | 1 of 2See more | 10,902 |
| dashkioskt3n | 2.0.0 | 1 of 1See more | 3,827 |
| trudesktechpreta | 1.0.0 | 1 of 3See more | 4,017 |
| thanhvt27-lab-k8sthanh-vtVerified publisher | 0.1.4 | 1 of 5See more | 4,661 |
| csmmth-chartsVerified publisher | 0.1.0 | 1 of 3See more | 3,576 |
| pock-helm-charttinote-chart | 0.1.0 | 1 of 3See more | 6,881 |
| kubernetes-external-secretstrozz | 6.3.0 | 1 of 1See more | 2,838 |
| queryservice-gatewaywbstack | 0.2.0 | 1 of 1See more | 2,559 |
| cadencewenerme | 0.23.0 | 1 of 5See more | 10,127 |
| temporalwenerme | 0.15.1 | 1 of 13See more | 22,665 |
| opendistro-eswitcom-gmbh | 1.13.3 | 1 of 3See more | 5,806 |
Container images carrying it
159 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| felddy/ | 6c5d90b90349 | path-parse | 1.0.7 | 1 |
| fiware/ | fe11f55a926d | path-parse | 1.0.7 | 1 |
| flagsmith/ | df02a29e8b0c | path-parse | 1.0.7 | 1 |
| frappe/ | 2095767a9e82 | path-parse | 1.0.7 | 1 |
| gethue/ | 5702b2c37ff9 | path-parse | 1.0.7 | 1 |
| governify/ | 6d3d1a5b46a9 | path-parse | 1.0.7 | 1 |
| graphiteapp/ | 04a0037cc2ae | path-parse | 1.0.7 | 1 |
| gristlabs/ | 6e71b1914a7e | path-parse | 1.0.7 | 1 |
| halkeye/ | 53eb2b3cd4cb | path-parse | 1.0.7 | 1 |
| halkeye/ | 9764d2202130 | path-parse | 1.0.7 | 1 |
| halkeye/ | 7638bfba70b0 | path-parse | 1.0.7 | 1 |
| haveagitgat/ | 1e3f9328327d | path-parse | 1.0.7 | 1 |
| henrywhitaker3/ | 47159a940229 | path-parse | 1.0.7 | 1 |
| hhaluk/ | a6555953d941 | path-parse | 1.0.7 | 1 |
| i4trust/ | 3e77858e1219 | path-parse | 1.0.7 | 1 |
| ibmcom/ | e2a86997b36b | path-parse | 1.0.7 | 1 |
| ibmcom/ | ed5505e5c7ec | path-parse | 1.0.7 | 1 |
| improwised/ | 97280b55cbd4 | path-parse | 1.0.7 | 1 |
| istio/ | b6a6b88d3578 | path-parse | 1.0.7 | 1 |
| jayfong/ | 163e5d621910 | path-parse | 1.0.7 | 1 |
| jesec/ | 60bd59cfb4eb | path-parse | 1.0.7 | 1 |
| jesec/ | f0c894ec459e | path-parse | 1.0.7 | 1 |
| jupyterhub/ | e3e6f3051df8 | path-parse | 1.0.7 | 1 |
| koumoul/ | 7108d47be3b2 | path-parse | 1.0.7 | 1 |
| kubebb/ | fadac6d52470 | path-parse | 1.0.7 | 1 |
| kubebb/ | 258458311bc9 | path-parse | 1.0.7 | 1 |
| kubeflownotebookswg/ | 37300551dea6 | path-parse | 1.0.7 | 1 |
| kubesphere/ | f1b5bf878196 | path-parse | 1.0.7 | 1 |
| kvalitetsit/ | 2b99cfa3c5df | path-parse | 1.0.7 | 1 |
| lavandadelpatio/ | 501c3f31e0bc | path-parse | 1.0.7 | 1 |
| leeyoongti/ | 21d66cb76352 | path-parse | 1.0.7 | 1 |
| linuxserver/ | a847b5b2d860 | path-parse | 1.0.7 | 1 |
| linuxserver/ | b801bbcf6386 | path-parse | 1.0.7 | 1 |
| lsstsqre/ | b75bf8aaafa4 | path-parse | 1.0.7 | 1 |
| lsstsqre/ | 9ded78e7fe03 | path-parse | 1.0.7 | 1 |
| ltdstudio/ | 0e76c6f4eac0 | path-parse | 1.0.7 | 1 |
| markdegroot/ | d8445f2a0de6 | path-parse | 1.0.7 | 1 |
| matrixdotorg/ | 0d37b4d42b47 | path-parse | 1.0.7 | 1 |
| microcks/ | cb72e46a1b3c | path-parse | 1.0.7 | 1 |
| misskey/ | e08b7c478093 | path-parse | 1.0.7 | 1 |
| mozilla/ | 1da6ff5c4895 | path-parse | 1.0.7 | 1 |
| nightscout/ | 00c3b4833f1b | path-parse | 1.0.7 | 1 |
| ondrejsika/ | b1fd497416c8 | path-parse | 1.0.7 | 1 |
| openhab/ | 29dd2bac8c4b | path-parse | 1.0.7 | 1 |
| openproject/ | 734743d11094 | path-parse | 1.0.7 | 1 |
| openwhisk/ | b695a6ceb406 | path-parse | 1.0.7 | 1 |
| oryd/ | 26347ef0a2de | path-parse | 1.0.7 | 1 |
| parithoshj/ | cdca426fea6d | path-parse | 1.0.7 | 1 |
| patrickhulce/ | 74b4b6a3954d | path-parse | 1.0.7 | 1 |
| phntom/ | a9b1304d6c71 | path-parse | 1.0.7 | 1 |