StackRadarChart IndexLive demo

CVE-2021-23343

Medium

Advisory

Published 10 Aug 2021In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.022; 82nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 163; of 17,781 indexed, latest versions
Container images: 159; deployed by those charts
Fix available: 1 of 1; affected package

Regular Expression Denial of Service in path-parse

Carried by container images the latest versions of 163 of 17,781 indexed charts deploy, on 159 images.

Affected package	Affected versions	Fixed in	Images
path-parsenpm	1.0.5, 1.0.6	1.0.7	159

OSV records: GHSA-hj48-42vr-x3v9

Charts affected

163 by stars

Chart

Latest

Affected images

Radar Score

kurento_webrtc_demostunner

1 of 2 See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-23343.

Container image	Digest	Package	Fixed in
l7mp/kurento-one2one-call-server :latest	fd2b2d06fff6	path-parse@1.0.5	1.0.7

Open the chart page →

12,460

stunner-kurento-one2one-callstunner

1 of 2 See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-23343.

Container image	Digest	Package	Fixed in
l7mp/kurento-one2one-call-server :latest	fd2b2d06fff6	path-parse@1.0.5	1.0.7

Open the chart page →

12,460

grafanasvtech-public-helm-charts

1 of 2 See more

grafana svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2021-23343.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_grafana :v1.2.2	1d71314424aa	path-parse@1.0.6	1.0.7

Open the chart page →

10,902

1 of 1 See more

dashkiosk t3n 2.0.0

1 of the 1 container images this version deploys carry CVE-2021-23343.

Container image	Digest	Package	Fixed in
quay.io/t3n/dashkiosk :v2.7.8	c973e166a5dc	path-parse@1.0.6	1.0.7

Open the chart page →

3,827

trudesktechpreta

1 of 3 See more

trudesk techpreta 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23343.

Container image	Digest	Package	Fixed in
polonel/trudesk :1.2.6	0cf6513f6fe3	path-parse@1.0.6	1.0.7

Open the chart page →

4,017

thanhvt27-lab-k8sthanh-vt

1 of 5 See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2021-23343.

Container image	Digest	Package	Fixed in
pysga1996/python-redis-web :latest	fdeec30ad482	path-parse@1.0.6	1.0.7

Open the chart page →

4,661

csmmth-charts

1 of 3 See more

csmm th-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2021-23343.

Container image	Digest	Package	Fixed in
catalysm/csmm :latest	f003b35f54d9	path-parse@1.0.6	1.0.7

Open the chart page →

3,576

pock-helm-charttinote-chart

1 of 3 See more

pock-helm-chart tinote-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2021-23343.

Container image	Digest	Package	Fixed in
denisshav/backend :latest	4cc8dc5a4499	path-parse@1.0.6	1.0.7

Open the chart page →

6,881

kubernetes-external-secretstrozz

1 of 1 See more

kubernetes-external-secrets trozz 6.3.0

1 of the 1 container images this version deploys carry CVE-2021-23343.

Container image	Digest	Package	Fixed in
ghcr.io/external-secrets/kubernetes-external-secrets :6.3.0	eab9bd0b6986	path-parse@1.0.6	1.0.7

Open the chart page →

2,838

queryservice-gatewaywbstack

1 of 1 See more

queryservice-gateway wbstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-23343.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/queryservice-gateway :2.2	ab8e2f583e56	path-parse@1.0.6	1.0.7

Open the chart page →

2,559

cadencewenerme

1 of 5 See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2021-23343.

Container image	Digest	Package	Fixed in
ubercadence/web :v3.29.5	8564a5b44a6d	path-parse@1.0.6	1.0.7

Open the chart page →

10,127

temporalwenerme

1 of 13 See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2021-23343.

Container image	Digest	Package	Fixed in
temporalio/web :1.14.0	33cfa863d8ce	path-parse@1.0.6	1.0.7

Open the chart page →

22,665

opendistro-eswitcom-gmbh

1 of 3 See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry CVE-2021-23343.

Container image	Digest	Package	Fixed in
amazon/opendistro-for-elasticsearch-kibana :1.13.2	c740d7a89475	path-parse@1.0.6	1.0.7

Open the chart page →

5,806

Container images carrying it

159 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
quay.io/ibmgaragecloud/developer-dashboard :v1.4.4	7a4b9fedc724	path-parse@1.0.6	1.0.7	1
quay.io/ibmgaragecloud/nodejs :latest	01c3b7acb301	path-parse@1.0.6	1.0.7	1
quay.io/ibmgaragecloud/slack-notifications :latest	041df93e2bac	path-parse@1.0.6	1.0.7	1
quay.io/mongodb/farm-intro-frontend :0.1	99ccdfd543e1	path-parse@1.0.6	1.0.7	1
quay.io/renokico/laravel-helm-demo :octane-0.6.0	cad83090c58f	path-parse@1.0.6	1.0.7	1
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	path-parse@1.0.6	1.0.7	1
quay.io/t3n/dashkiosk :v2.7.8	c973e166a5dc	path-parse@1.0.6	1.0.7	1
quay.io/wekan/wekan :v5.65	cb17600883a3	path-parse@1.0.6	1.0.7	1
registry.gitlab.com/infinitydon/registry/open5gs-webui :v2.2.2	fda21b0a0344	path-parse@1.0.6	1.0.7	1