StackRadar

CVE-2021-23343

Medium

Advisory

Published 10 Aug 2021In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.022
82nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
163
of 17,781 indexed, latest versions
Container images
159
deployed by those charts
Fix available
1 of 1
affected package

Regular Expression Denial of Service in path-parse

Carried by container images the latest versions of 163 of 17,781 indexed charts deploy, on 159 images.

Affected packageAffected versionsFixed inImages
path-parsenpm1.0.5, 1.0.61.0.7159
OSV records
GHSA-hj48-42vr-x3v9

Charts affected

163 by stars
ChartLatestAffected imagesRadar Score
kurento_webrtc_demostunner0.1.01 of 2See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-23343.

Container imageDigestPackageFixed in
l7mp/kurento-one2one-call-server:latestfd2b2d06fff6
path-parse@1.0.5
1.0.7

Open the chart page →

12,460
stunner-kurento-one2one-callstunner0.1.01 of 2See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-23343.

Container imageDigestPackageFixed in
l7mp/kurento-one2one-call-server:latestfd2b2d06fff6
path-parse@1.0.5
1.0.7

Open the chart page →

12,460
grafanasvtech-public-helm-charts1.0.01 of 2See more

grafana svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2021-23343.

Container imageDigestPackageFixed in
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
path-parse@1.0.6
1.0.7

Open the chart page →

10,902
dashkioskt3n2.0.01 of 1See more

dashkiosk t3n 2.0.0

1 of the 1 container images this version deploys carry CVE-2021-23343.

Container imageDigestPackageFixed in
quay.io/t3n/dashkiosk:v2.7.8c973e166a5dc
path-parse@1.0.6
1.0.7

Open the chart page →

3,827
trudesktechpreta1.0.01 of 3See more

trudesk techpreta 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23343.

Container imageDigestPackageFixed in
polonel/trudesk:1.2.60cf6513f6fe3
path-parse@1.0.6
1.0.7

Open the chart page →

4,017
thanhvt27-lab-k8sthanh-vtVerified publisher0.1.41 of 5See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2021-23343.

Container imageDigestPackageFixed in
pysga1996/python-redis-web:latestfdeec30ad482
path-parse@1.0.6
1.0.7

Open the chart page →

4,661
csmmth-chartsVerified publisher0.1.01 of 3See more

csmm th-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2021-23343.

Container imageDigestPackageFixed in
catalysm/csmm:latestf003b35f54d9
path-parse@1.0.6
1.0.7

Open the chart page →

3,576
pock-helm-charttinote-chart0.1.01 of 3See more

pock-helm-chart tinote-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2021-23343.

Container imageDigestPackageFixed in
denisshav/backend:latest4cc8dc5a4499
path-parse@1.0.6
1.0.7

Open the chart page →

6,881
kubernetes-external-secretstrozz6.3.01 of 1See more

kubernetes-external-secrets trozz 6.3.0

1 of the 1 container images this version deploys carry CVE-2021-23343.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/kubernetes-external-secrets:6.3.0eab9bd0b6986
path-parse@1.0.6
1.0.7

Open the chart page →

2,838
queryservice-gatewaywbstack0.2.01 of 1See more

queryservice-gateway wbstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-23343.

Container imageDigestPackageFixed in
ghcr.io/wbstack/queryservice-gateway:2.2ab8e2f583e56
path-parse@1.0.6
1.0.7

Open the chart page →

2,559
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2021-23343.

Container imageDigestPackageFixed in
ubercadence/web:v3.29.58564a5b44a6d
path-parse@1.0.6
1.0.7

Open the chart page →

10,127
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2021-23343.

Container imageDigestPackageFixed in
temporalio/web:1.14.033cfa863d8ce
path-parse@1.0.6
1.0.7

Open the chart page →

22,665
opendistro-eswitcom-gmbh1.13.31 of 3See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry CVE-2021-23343.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch-kibana:1.13.2c740d7a89475
path-parse@1.0.6
1.0.7

Open the chart page →

5,806

Container images carrying it

159 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
phntom/codimd:2.4.31b9aafbb62e6
path-parse@1.0.6
1.0.7
1
polonel/trudesk:1.2.60cf6513f6fe3
path-parse@1.0.6
1.0.7
1
pysga1996/python-redis-web:latestfdeec30ad482
path-parse@1.0.6
1.0.7
1
rakii8585/angular-node-webapp:latest026082a515ac
path-parse@1.0.6
1.0.7
1
refar/apm-portal:v5.7.1dcca8e4477a6
path-parse@1.0.6
1.0.7
1
roadiehq/community-backstage-image:latestef355bf5b639
path-parse@1.0.6
1.0.7
1
robotshop/rs-cart:latest388349d5cb3c
path-parse@1.0.6
1.0.7
1
robotshop/rs-catalogue:latestd545747c1b97
path-parse@1.0.6
1.0.7
1
robotshop/rs-user:latestea509182c180
path-parse@1.0.6
1.0.7
1
shahanafarooqui/rtl:0.11.0d0cd3d868aca
path-parse@1.0.6
1.0.7
1
slagattollas/server-practica:latest6dd8ead8e2b1
path-parse@1.0.6
1.0.7
1
slagattollas/weatherservice-practica:latest68e7f56393fc
path-parse@1.0.6
1.0.7
1
socialmediamacroscope/smile_server:0.3.31a528c794270
path-parse@1.0.6
1.0.7
1
sqlpad/sqlpad:6.7d3d2f430dffd
path-parse@1.0.6
1.0.7
1
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
path-parse@1.0.6
1.0.7
1
taigaio/taiga-events:6.4.00bf2d24a57d9
path-parse@1.0.6
1.0.7
1
temporalio/web:1.14.033cfa863d8ce
path-parse@1.0.6
1.0.7
1
testhubio/testhub-frontend:on-preme86c2db53be8
path-parse@1.0.6
1.0.7
1
thelounge/thelounge:4.2.0-alpine639978459c3a
path-parse@1.0.6
1.0.7
1
tooljet/tooljet-ce:v1.18.0c85a4720e42e
path-parse@1.0.6
1.0.7
1
trufflesuite/ganache-cli:v6.12.2c062707f17f3
path-parse@1.0.6
1.0.7
1
tzahi12345/youtubedl-material:4.23720b856bd2f
path-parse@1.0.6
1.0.7
1
ubercadence/web:v3.29.58564a5b44a6d
path-parse@1.0.6
1.0.7
1
wekanteam/wekan:v4.2268a51f0327df
path-parse@1.0.6
1.0.7
1
wiremind/scrapoxy:lateste7048929a676
path-parse@1.0.6
1.0.7
1
zazuko/trifid:2.3.7054be137de70
path-parse@1.0.6
1.0.7
1
zooz/predator:1.6f491d1f7a865
path-parse@1.0.6
1.0.7
1
zwavejs/zwavejs2mqtt:5.0.215a6040fb468
path-parse@1.0.6
1.0.7
1
gcr.io/google-samples/microservices-demo/currencyservice:v0.2.349d458a3650f
path-parse@1.0.6
1.0.7
1
gcr.io/google-samples/microservices-demo/paymentservice:v0.2.36eb201217a8f
path-parse@1.0.6
1.0.7
1
ghcr.io/ctron/streamsheets-base:2.4.00cf25ed621e2
path-parse@1.0.6
1.0.7
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
path-parse@1.0.6
1.0.7
1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
path-parse@1.0.6
1.0.7
1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
path-parse@1.0.6
1.0.7
1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
path-parse@1.0.6
1.0.7
1
ghcr.io/external-secrets/kubernetes-external-secrets:6.3.0eab9bd0b6986
path-parse@1.0.6
1.0.7
1
ghcr.io/flaresolverr/flaresolverr:v1.2.896f8c08c0c1b
path-parse@1.0.6
1.0.7
1
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
path-parse@1.0.6
1.0.7
1
ghcr.io/leoquote/mergeable:latest451706815103
path-parse@1.0.6
1.0.7
1
ghcr.io/linuxserver/raneto:version-0.16.6ef768f3df5d0
path-parse@1.0.6
1.0.7
1
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
path-parse@1.0.6
1.0.7
1
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
path-parse@1.0.6
1.0.7
1
ghcr.io/mmontes11/iot-back:v3.11.096683c54ae65
path-parse@1.0.6
1.0.7
1
ghcr.io/mmontes11/iot-biot:v3.11.033f7976b26a8
path-parse@1.0.6
1.0.7
1
ghcr.io/mmontes11/iot-thing:v3.11.0542e91e8499c
path-parse@1.0.6
1.0.7
1
ghcr.io/mmontes11/iot-worker:v3.11.0491bb243f555
path-parse@1.0.6
1.0.7
1
ghcr.io/sct/overseerr:1.26.1254d16af8f71
path-parse@1.0.6
1.0.7
1
ghcr.io/wbstack/queryservice-gateway:2.2ab8e2f583e56
path-parse@1.0.6
1.0.7
1
quay.io/ctrontesting/iofog-controller:latest10df27bc5560
path-parse@1.0.6
1.0.7
1
quay.io/hewlettpackardenterprise/squest:2.8.465694109877e
path-parse@1.0.6
1.0.7
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.