CVE-2021-23362
MediumAdvisory
Published 23 Mar 2021In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.3
- base score, highest
- EPSS
- 0.036
- 89th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 147
- of 17,781 indexed, latest versions
- Container images
- 149
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Regular Expression Denial of Service in hosted-git-info
Carried by container images the latest versions of 147 of 17,781 indexed charts deploy, on 149 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| hosted-git-infonpm | 2.1.4, 2.1.5, 2.5.0, 2.6.0+4 more | 2.8.9, 3.0.8 | 149 |
| node-hosted-git-infodeb | 2.5.0-1, 2.8.5-1 | 2.5.0-1ubuntu0.1~esm1, 2.8.5-1ubuntu0.1~esm1 | 4 |
- OSV records
- GHSA-43f8-2h32-f4cjUBUNTU-CVE-2021-23362
- Also known as
- USN-5216-1
Charts affected
147 by stars
Container images carrying it
149 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| galaxy/ | 0267bad550e6 | hosted-git-info | 2.8.9 | 1 |
| graphiteapp/ | 04a0037cc2ae | hosted-git-info | 2.8.9 | 1 |
| gristlabs/ | 6e71b1914a7e | hosted-git-info | 2.8.9 | 1 |
| halkeye/ | 53eb2b3cd4cb | hosted-git-info | 2.8.9 | 1 |
| halkeye/ | 9764d2202130 | hosted-git-info | 2.8.9 | 1 |
| halkeye/ | 7638bfba70b0 | hosted-git-info | 2.8.9 | 1 |
| haveagitgat/ | 1e3f9328327d | hosted-git-info | 2.8.9 | 1 |
| hhaluk/ | a6555953d941 | hosted-git-info | 2.8.9 | 1 |
| hyperledger/ | c65891b6c237 | hosted-git-info | 2.8.9 | 1 |
| i4trust/ | 3e77858e1219 | hosted-git-info | 2.8.9 | 1 |
| ibarreche/ | b7a08274e69f | hosted-git-info | 2.8.9 | 1 |
| ibmcom/ | 240ff499eb5b | hosted-git-info | 2.8.9 | 1 |
| ibmcom/ | e2a86997b36b | hosted-git-info | 2.8.9 | 1 |
| ibmcom/ | 02d882f2836e | hosted-git-info | 2.8.9 | 1 |
| ibmcom/ | b8e8df11072d | hosted-git-info | 2.8.9 | 1 |
| ibmcom/ | b558f2b444ae | hosted-git-info | 2.8.9 | 1 |
| ibmcom/ | ab3fd1fdfa18 | hosted-git-info | 2.8.9 | 1 |
| ibmcom/ | ed5505e5c7ec | hosted-git-info | 2.8.9 | 1 |
| ibmcom/ | e17bdccc5030 | hosted-git-info | 2.8.9 | 1 |
| ibmcom/ | 0762ab1df6c1 | hosted-git-info | 2.8.9 | 1 |
| istio/ | b6a6b88d3578 | hosted-git-info | 2.8.9 | 1 |
| jayfong/ | 163e5d621910 | hosted-git-info | 2.8.9 | 1 |
| jupyterhub/ | c36cf3cc1c99 | hosted-git-info | 2.8.9 | 1 |
| jupyterhub/ | e3e6f3051df8 | hosted-git-info | 2.8.9 | 1 |
| konradkleine/ | 181aad54ee64 | hosted-git-info | 2.8.9 | 1 |
| koumoul/ | 7108d47be3b2 | hosted-git-info | 2.8.9 | 1 |
| koumoul/ | 8eeca2e8285b | hosted-git-info | 2.8.9 | 1 |
| kubesphere/ | f1b5bf878196 | hosted-git-info | 2.8.9 | 1 |
| kvalitetsit/ | 2b99cfa3c5df | hosted-git-info | 2.8.9 | 1 |
| lavandadelpatio/ | 501c3f31e0bc | hosted-git-info | 2.8.9 | 1 |
| linuxserver/ | 45c5fe102ff3 | hosted-git-info | 2.8.9 | 1 |
| linuxserver/ | b801bbcf6386 | hosted-git-info | 2.8.9 | 1 |
| logentries/ | f1f90a236998 | hosted-git-info | 2.8.9 | 1 |
| lsstsqre/ | b75bf8aaafa4 | hosted-git-info node-hosted-git-info | 2.8.9 2.8.5-1ubuntu0.1~esm1 | 1 |
| lsstsqre/ | 5e0ade6bed1c | hosted-git-info | 2.8.9 | 1 |
| markdegroot/ | d8445f2a0de6 | hosted-git-info | 2.8.9 | 1 |
| matrixdotorg/ | 0d37b4d42b47 | hosted-git-info | 2.8.9 | 1 |
| microcks/ | cb72e46a1b3c | hosted-git-info | 2.8.9 | 1 |
| minddocdev/ | 6c60b11a4fa7 | hosted-git-info | 2.8.9 | 1 |
| misskey/ | e08b7c478093 | hosted-git-info | 2.8.9 | 1 |
| mozilla/ | 1da6ff5c4895 | hosted-git-info | 2.8.9 | 1 |
| muluder/ | 43b597a93da7 | hosted-git-info | 2.8.9 | 1 |
| nightscout/ | 00c3b4833f1b | hosted-git-info | 2.8.9 | 1 |
| nodered/ | 070643219ea2 | hosted-git-info | 2.8.9 | 1 |
| omecproject/ | 5715e5648aa0 | hosted-git-info | 2.8.9 | 1 |
| ondrejsika/ | b1fd497416c8 | hosted-git-info | 2.8.9 | 1 |
| openthread/ | f307f59f6432 | hosted-git-info node-hosted-git-info | 2.8.9 2.5.0-1ubuntu0.1~esm1 | 1 |
| openwhisk/ | b695a6ceb406 | hosted-git-info | 2.8.9 | 1 |
| openwhisk/ | c80dba0de3aa | hosted-git-info node-hosted-git-info | 2.8.9 2.5.0-1ubuntu0.1~esm1 | 1 |
| oryd/ | 26347ef0a2de | hosted-git-info | 2.8.9 | 1 |