CVE-2021-23362
MediumAdvisory
Published 23 Mar 2021In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.3
- base score, highest
- EPSS
- 0.036
- 89th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 147
- of 17,781 indexed, latest versions
- Container images
- 149
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Regular Expression Denial of Service in hosted-git-info
Carried by container images the latest versions of 147 of 17,781 indexed charts deploy, on 149 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| hosted-git-infonpm | 2.1.4, 2.1.5, 2.5.0, 2.6.0+4 more | 2.8.9, 3.0.8 | 149 |
| node-hosted-git-infodeb | 2.5.0-1, 2.8.5-1 | 2.5.0-1ubuntu0.1~esm1, 2.8.5-1ubuntu0.1~esm1 | 4 |
- OSV records
- GHSA-43f8-2h32-f4cjUBUNTU-CVE-2021-23362
- Also known as
- USN-5216-1
Charts affected
147 by stars
Container images carrying it
149 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| pachyderm/ | 2b27f41d4d02 | hosted-git-info | 2.8.9 | 1 |
| parithoshj/ | cdca426fea6d | hosted-git-info | 2.8.9 | 1 |
| patrickhulce/ | 74b4b6a3954d | hosted-git-info | 2.8.9 | 1 |
| phntom/ | 1b9aafbb62e6 | hosted-git-info | 2.8.9 | 1 |
| polonel/ | 0cf6513f6fe3 | hosted-git-info | 2.8.9 | 1 |
| pysga1996/ | fdeec30ad482 | hosted-git-info | 2.8.9 | 1 |
| rakii8585/ | 026082a515ac | hosted-git-info | 2.8.9 | 1 |
| slagattollas/ | 6dd8ead8e2b1 | hosted-git-info | 2.8.9 | 1 |
| slagattollas/ | 68e7f56393fc | hosted-git-info | 2.8.9 | 1 |
| socialmediamacroscope/ | c5095e94bc65 | hosted-git-info | 2.8.9 | 1 |
| sqlpad/ | d3d2f430dffd | hosted-git-info | 2.8.9 | 1 |
| svtechnmaa/ | 1d71314424aa | hosted-git-info node-hosted-git-info | 2.8.9 2.8.5-1ubuntu0.1~esm1 | 1 |
| taigaio/ | 0bf2d24a57d9 | hosted-git-info | 2.8.9 | 1 |
| temporalio/ | 33cfa863d8ce | hosted-git-info | 2.8.9 | 1 |
| testhubio/ | e86c2db53be8 | hosted-git-info | 2.8.9 | 1 |
| thelounge/ | 639978459c3a | hosted-git-info | 2.8.9 | 1 |
| timothyclarke/ | 22c41e5ca7e2 | hosted-git-info | 2.8.9 | 1 |
| trufflesuite/ | c062707f17f3 | hosted-git-info | 2.8.9 | 1 |
| tzahi12345/ | 3720b856bd2f | hosted-git-info | 2.8.9 | 1 |
| ubercadence/ | 8564a5b44a6d | hosted-git-info | 2.8.9 | 1 |
| wekanteam/ | 68a51f0327df | hosted-git-info | 2.8.9 | 1 |
| willwill/ | d443017aae98 | hosted-git-info | 2.8.9 | 1 |
| wiremind/ | e7048929a676 | hosted-git-info | 2.8.9 | 1 |
| zazuko/ | 054be137de70 | hosted-git-info | 2.8.9 | 1 |
| zooz/ | f491d1f7a865 | hosted-git-info | 2.8.9 | 1 |
| gcr.io/ | 49d458a3650f | hosted-git-info | 2.8.9 | 1 |
| gcr.io/ | 6eb201217a8f | hosted-git-info | 2.8.9 | 1 |
| ghcr.io/ | 0cf25ed621e2 | hosted-git-info | 2.8.9 | 1 |
| ghcr.io/ | 0635f17c9d2c | hosted-git-info | 2.8.9 | 1 |
| ghcr.io/ | e34964e336c1 | hosted-git-info | 2.8.9 | 1 |
| ghcr.io/ | 0c5a3398d1e4 | hosted-git-info | 2.8.9 | 1 |
| ghcr.io/ | 8ba040e79ca0 | hosted-git-info | 2.8.9 | 1 |
| ghcr.io/ | eab9bd0b6986 | hosted-git-info | 2.8.9 | 1 |
| ghcr.io/ | 96f8c08c0c1b | hosted-git-info | 3.0.8 | 1 |
| ghcr.io/ | 451706815103 | hosted-git-info | 2.8.9 | 1 |
| ghcr.io/ | ef768f3df5d0 | hosted-git-info | 2.8.9 | 1 |
| ghcr.io/ | 763daf9caf8e | hosted-git-info | 2.8.9 | 1 |
| ghcr.io/ | 96683c54ae65 | hosted-git-info | 2.8.9 | 1 |
| ghcr.io/ | 33f7976b26a8 | hosted-git-info | 2.8.9 | 1 |
| ghcr.io/ | 542e91e8499c | hosted-git-info | 2.8.9 | 1 |
| ghcr.io/ | 491bb243f555 | hosted-git-info | 2.8.9 | 1 |
| quay.io/ | 10df27bc5560 | hosted-git-info | 2.8.9 | 1 |
| quay.io/ | 7a4b9fedc724 | hosted-git-info | 2.8.9 | 1 |
| quay.io/ | 01c3b7acb301 | hosted-git-info | 2.8.9 | 1 |
| quay.io/ | 041df93e2bac | hosted-git-info | 2.8.9 | 1 |
| quay.io/ | 99ccdfd543e1 | hosted-git-info | 2.8.9 | 1 |
| quay.io/ | c973e166a5dc | hosted-git-info | 2.8.9 | 1 |
| quay.io/ | cb17600883a3 | hosted-git-info | 2.8.9 | 1 |
| registry.gitlab.com/ | fda21b0a0344 | hosted-git-info | 2.8.9 | 1 |