CVE-2021-23358
CriticalAdvisory
Published 29 Mar 2021In the index since 6 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.8
- base score, highest
- EPSS
- 0.041
- 90th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 56
- of 17,781 indexed, latest versions
- Container images
- 54
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Arbitrary Code Execution in underscore
Carried by container images the latest versions of 56 of 17,781 indexed charts deploy, on 54 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| underscorenpm | 1.4.4, 1.5.2, 1.6.0, 1.7.0+6 more | 1.12.1 | 54 |
| underscoredeb | 1.7.0~dfsg-1ubuntu1, 1.8.3~dfsg-1 | 1.7.0~dfsg-1ubuntu1.1, 1.8.3~dfsg-1ubuntu0.1 | 2 |
- OSV records
- GHSA-cf4h-3jhx-xvhqUBUNTU-CVE-2021-23358
- Also known as
- USN-4913-1
Charts affected
56 by stars
Container images carrying it
54 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| pantsel/ | c8172b75607d | underscore | 1.12.1 | 3 |
| martinaif/ | 43bc40a3da0e | underscore | 1.12.1 | 2 |
| mesosphere/ | 3917e82333a9 | underscore | 1.12.1 | 2 |
| migmartri/ | 486aacfd5aa9 | underscore | 1.12.1 | 2 |
| requarks/ | 68f0d1848261 | underscore | 1.12.1 | 2 |
| statsd/ | dab129e74c25 | underscore | 1.12.1 | 2 |
| cryptexlabs/ | ed0bc94fd412 | underscore | 1.12.1 | 1 |
| daskdev/ | 052630f5ca04 | underscore | 1.12.1 | 1 |
| ethereumex/ | a7603aa8df4c | underscore underscore | 1.12.1 1.7.0~dfsg-1ubuntu1.1 | 1 |
| ethereumoptimism/ | e07968a0e686 | underscore | 1.12.1 | 1 |
| ethersphere/ | 7624f11a72ad | underscore | 1.12.1 | 1 |
| fiware/ | a1b6ed4ae84f | underscore | 1.12.1 | 1 |
| fiware/ | fe11f55a926d | underscore | 1.12.1 | 1 |
| governify/ | 6d3d1a5b46a9 | underscore | 1.12.1 | 1 |
| graphiteapp/ | 04a0037cc2ae | underscore | 1.12.1 | 1 |
| ibmcom/ | 02d882f2836e | underscore | 1.12.1 | 1 |
| ibmcom/ | ed5505e5c7ec | underscore | 1.12.1 | 1 |
| interlayhq/ | 423d567d47aa | underscore | 1.12.1 | 1 |
| jayfong/ | 163e5d621910 | underscore | 1.12.1 | 1 |
| konradkleine/ | 181aad54ee64 | underscore | 1.12.1 | 1 |
| kubeflownotebookswg/ | 37300551dea6 | underscore | 1.12.1 | 1 |
| kyleslugg/ | ba8c36dfdfbd | underscore | 1.12.1 | 1 |
| library/ | 2654b1e90413 | underscore | 1.12.1 | 1 |
| library/ | 767230c0f263 | underscore | 1.12.1 | 1 |
| library/ | 83f7bf209844 | underscore | 1.12.1 | 1 |
| library/ | ac533a6988ee | underscore | 1.12.1 | 1 |
| linuxserver/ | b801bbcf6386 | underscore | 1.12.1 | 1 |
| matrixdotorg/ | 0d37b4d42b47 | underscore | 1.12.1 | 1 |
| microcks/ | cb72e46a1b3c | underscore | 1.12.1 | 1 |
| minddocdev/ | 6c60b11a4fa7 | underscore | 1.12.1 | 1 |
| netrisai/ | 6e865080e86c | underscore | 1.12.1 | 1 |
| openhab/ | 29dd2bac8c4b | underscore | 1.12.1 | 1 |
| openthread/ | f307f59f6432 | underscore | 1.12.1 | 1 |
| openwhisk/ | c80dba0de3aa | underscore underscore | 1.12.1 1.8.3~dfsg-1ubuntu0.1 | 1 |
| parithoshj/ | cdca426fea6d | underscore | 1.12.1 | 1 |
| phntom/ | 1b9aafbb62e6 | underscore | 1.12.1 | 1 |
| requarks/ | 8b5865a7386c | underscore | 1.12.1 | 1 |
| shinobisystems/ | 3ca746937856 | underscore | 1.12.1 | 1 |
| shinobisystems/ | c2f5ce2e1067 | underscore | 1.12.1 | 1 |
| stanfordoval/ | 1a63cdccedaf | underscore | 1.12.1 | 1 |
| wekanteam/ | 68a51f0327df | underscore | 1.12.1 | 1 |
| zwavejs/ | 15a6040fb468 | underscore | 1.12.1 | 1 |
| ghcr.io/ | 0635f17c9d2c | underscore | 1.12.1 | 1 |
| ghcr.io/ | e34964e336c1 | underscore | 1.12.1 | 1 |
| ghcr.io/ | 0c5a3398d1e4 | underscore | 1.12.1 | 1 |
| ghcr.io/ | 8ba040e79ca0 | underscore | 1.12.1 | 1 |
| ghcr.io/ | eab9bd0b6986 | underscore | 1.12.1 | 1 |
| ghcr.io/ | ef768f3df5d0 | underscore | 1.12.1 | 1 |
| ghcr.io/ | 58d377933678 | underscore | 1.12.1 | 1 |
| quay.io/ | 10df27bc5560 | underscore | 1.12.1 | 1 |