StackRadar

CVE-2021-23343

Medium

Advisory

Published 10 Aug 2021In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.022
82nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
163
of 17,781 indexed, latest versions
Container images
159
deployed by those charts
Fix available
1 of 1
affected package

Regular Expression Denial of Service in path-parse

Carried by container images the latest versions of 163 of 17,781 indexed charts deploy, on 159 images.

Affected packageAffected versionsFixed inImages
path-parsenpm1.0.5, 1.0.61.0.7159
OSV records
GHSA-hj48-42vr-x3v9

Charts affected

163 by stars
ChartLatestAffected imagesRadar Score
kurento_webrtc_demostunner0.1.01 of 2See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-23343.

Container imageDigestPackageFixed in
l7mp/kurento-one2one-call-server:latestfd2b2d06fff6
path-parse@1.0.5
1.0.7

Open the chart page →

12,460
stunner-kurento-one2one-callstunner0.1.01 of 2See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-23343.

Container imageDigestPackageFixed in
l7mp/kurento-one2one-call-server:latestfd2b2d06fff6
path-parse@1.0.5
1.0.7

Open the chart page →

12,460
grafanasvtech-public-helm-charts1.0.01 of 2See more

grafana svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2021-23343.

Container imageDigestPackageFixed in
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
path-parse@1.0.6
1.0.7

Open the chart page →

10,902
dashkioskt3n2.0.01 of 1See more

dashkiosk t3n 2.0.0

1 of the 1 container images this version deploys carry CVE-2021-23343.

Container imageDigestPackageFixed in
quay.io/t3n/dashkiosk:v2.7.8c973e166a5dc
path-parse@1.0.6
1.0.7

Open the chart page →

3,827
trudesktechpreta1.0.01 of 3See more

trudesk techpreta 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-23343.

Container imageDigestPackageFixed in
polonel/trudesk:1.2.60cf6513f6fe3
path-parse@1.0.6
1.0.7

Open the chart page →

4,017
thanhvt27-lab-k8sthanh-vtVerified publisher0.1.41 of 5See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2021-23343.

Container imageDigestPackageFixed in
pysga1996/python-redis-web:latestfdeec30ad482
path-parse@1.0.6
1.0.7

Open the chart page →

4,661
csmmth-chartsVerified publisher0.1.01 of 3See more

csmm th-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2021-23343.

Container imageDigestPackageFixed in
catalysm/csmm:latestf003b35f54d9
path-parse@1.0.6
1.0.7

Open the chart page →

3,576
pock-helm-charttinote-chart0.1.01 of 3See more

pock-helm-chart tinote-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2021-23343.

Container imageDigestPackageFixed in
denisshav/backend:latest4cc8dc5a4499
path-parse@1.0.6
1.0.7

Open the chart page →

6,881
kubernetes-external-secretstrozz6.3.01 of 1See more

kubernetes-external-secrets trozz 6.3.0

1 of the 1 container images this version deploys carry CVE-2021-23343.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/kubernetes-external-secrets:6.3.0eab9bd0b6986
path-parse@1.0.6
1.0.7

Open the chart page →

2,838
queryservice-gatewaywbstack0.2.01 of 1See more

queryservice-gateway wbstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-23343.

Container imageDigestPackageFixed in
ghcr.io/wbstack/queryservice-gateway:2.2ab8e2f583e56
path-parse@1.0.6
1.0.7

Open the chart page →

2,559
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2021-23343.

Container imageDigestPackageFixed in
ubercadence/web:v3.29.58564a5b44a6d
path-parse@1.0.6
1.0.7

Open the chart page →

10,127
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2021-23343.

Container imageDigestPackageFixed in
temporalio/web:1.14.033cfa863d8ce
path-parse@1.0.6
1.0.7

Open the chart page →

22,665
opendistro-eswitcom-gmbh1.13.31 of 3See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry CVE-2021-23343.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch-kibana:1.13.2c740d7a89475
path-parse@1.0.6
1.0.7

Open the chart page →

5,806

Container images carrying it

159 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
mojaloop/event-sidecar:v11.0.189b8ab71b74b
path-parse@1.0.6
1.0.7
5
oscarsotosanchez/server:v1.06e2e1279126b
path-parse@1.0.6
1.0.7
4
oscarsotosanchez/weatherservice:v1.0911ec961d10b
path-parse@1.0.6
1.0.7
4
dgraph/dgraph:v21.12.03b55ea83fffe
path-parse@1.0.6
1.0.7
3
frankescobar/allure-docker-service-ui:7.0.3:latest4ebd8b4ef340
path-parse@1.0.6
1.0.7
3
mojaloop/account-lookup-service:v11.8.0b06d3287ea82
path-parse@1.0.6
1.0.7
3
pantsel/konga:latestc8172b75607d
path-parse@1.0.5
1.0.7
3
amazon/opendistro-for-elasticsearch-kibana:1.13.2c740d7a89475
path-parse@1.0.6
1.0.7
2
chatwoot/chatwoot:v3.1.0d530ab8c1753
path-parse@1.0.6
1.0.7
2
fjvela/urjc-fjvela-external-service:1.0.1a8ebe5ca13fc
path-parse@1.0.6
1.0.7
2
fjvela/urjc-fjvela-server:1.0.53c840aebce22
path-parse@1.0.6
1.0.7
2
governify/assets-manager:v1.4.12987672448c7
path-parse@1.0.6
1.0.7
2
governify/director:v1.4.0608c6940bb98
path-parse@1.0.6
1.0.7
2
governify/registry:v3.4.0d3f37f4f8168
path-parse@1.0.6
1.0.7
2
governify/render:v2.2.0daeca1ce28e6
path-parse@1.0.6
1.0.7
2
governify/reporter:v2.2.038595913458f
path-parse@1.0.6
1.0.7
2
gradiant/open5gs-webui:2.7.5fbd10c017541
path-parse@1.0.6
1.0.7
2
istio/examples-bookinfo-ratings-v1:1.15.009b9d6958a13
path-parse@1.0.6
1.0.7
2
istio/examples-bookinfo-ratings-v1:1.14.0eb0f1a725ca8
path-parse@1.0.6
1.0.7
2
koenkk/zigbee2mqtt:1.19.15f9129b1ffbc
path-parse@1.0.6
1.0.7
2
l7mp/kurento-one2one-call-server:latestfd2b2d06fff6
path-parse@1.0.5
1.0.7
2
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
path-parse@1.0.6
1.0.7
2
mesosphere/kommander:6.100.13917e82333a9
path-parse@1.0.6
1.0.7
2
mojaloop/central-ledger:v13.14.01abc8a7aa71c
path-parse@1.0.6
1.0.7
2
mojaloop/ml-api-adapter:v11.1.6fb71d233c742
path-parse@1.0.6
1.0.7
2
statsd/statsd:v0.8.6dab129e74c25
path-parse@1.0.6
1.0.7
2
taskrabbit/elasticsearch-dump:latestc967fe68b9c7
path-parse@1.0.6
1.0.7
2
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
path-parse@1.0.6
1.0.7
2
adrianberger/fluxcd-webui:latest76848c0d2780
path-parse@1.0.6
1.0.7
1
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
path-parse@1.0.6
1.0.7
1
amazon/opendistro-for-elasticsearch-kibana:1.4.05126e2e79a1f
path-parse@1.0.5
1.0.7
1
amundsendev/amundsen-frontend:2.1.169e7915e61c1
path-parse@1.0.5
1.0.7
1
aolde/bredbandskollen-prometheus-exporter:1.0.2dc61ee713720
path-parse@1.0.6
1.0.7
1
assistiot/cybersecurity-monitoring_id-kbn:latest2297b4350211
path-parse@1.0.6
1.0.7
1
assistiot/cybersecurity-monitoring_ir-kbn:latest0570b27bb7c2
path-parse@1.0.6
1.0.7
1
aureliengasser/http-folder:1.1.111c4318c2571
path-parse@1.0.6
1.0.7
1
bastilimbach/docker-magicmirror:v2.15.041b0835ab31e
path-parse@1.0.6
1.0.7
1
bluerange/bluerange-mosquitto:25f1bfbba84832
path-parse@1.0.6
1.0.7
1
catalysm/csmm:latestf003b35f54d9
path-parse@1.0.6
1.0.7
1
chatwoot/chatwoot:v4.15.167ebc751c171
path-parse@1.0.6
1.0.7
1
cnieg/maildev:v1.1.998ee05668915
path-parse@1.0.6
1.0.7
1
conduction/conduction-ui-app:devd591f5e6f2a9
path-parse@1.0.6
1.0.7
1
datarhei/restreamer:0.6.4655e12f9eeed
path-parse@1.0.6
1.0.7
1
davidvmar/urjc-davidvmar-external-service:1.0.02a68e9ac7f09
path-parse@1.0.6
1.0.7
1
davidvmar/urjc-davidvmar-server:1.0.05663f5b24615
path-parse@1.0.6
1.0.7
1
decayofmind/hubot:3.3.21e18e92fe694
path-parse@1.0.6
1.0.7
1
denisshav/backend:latest4cc8dc5a4499
path-parse@1.0.6
1.0.7
1
eameti/node-app:latestf36642affa86
path-parse@1.0.6
1.0.7
1
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
path-parse@1.0.5
1.0.7
1
ethersphere/bzz-token-service:latest7624f11a72ad
path-parse@1.0.6
1.0.7
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.