StackRadar

CVE-2021-23437

High

Advisory

Published 3 Sept 2021In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.032
87th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
32
of 17,781 indexed, latest versions
Container images
32
deployed by those charts
Fix available
2 of 2
affected packages

Uncontrolled Resource Consumption in pillow

Carried by container images the latest versions of 32 of 17,781 indexed charts deploy, on 32 images.

Affected packageAffected versionsFixed inImages
pillowpypi2.6.1, 4.3.0, 5.0.0, 5.1.0+11 more8.3.232
pillowdeb5.1.0-1, 5.1.0-1ubuntu0.65.1.0-1ubuntu0.73
OSV records
GHSA-98vv-pw6r-q6q4UBUNTU-CVE-2021-23437PYSEC-2021-317
Also known as
BIT-pillow-2021-23437, SNYK-PYTHON-PILLOW-1319443, USN-5227-1

Charts affected

32 by stars
ChartLatestAffected imagesRadar Score
minecraft-overvieweralphani-helm-chartsVerified publisher0.1.01 of 3See more

minecraft-overviewer alphani-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2021-23437.

Container imageDigestPackageFixed in
mide/minecraft-overviewer:latest4eee0dcb715f
pillow@8.1.2
8.3.2

Open the chart page →

3,380
taigarc-helm-charts0.1.01 of 7See more

taiga rc-helm-charts 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-23437.

Container imageDigestPackageFixed in
taigaio/taiga-back:6.4.29f97323cc150
pillow@8.2.0
8.3.2

Open the chart page →

7,255
deconzgeek-cookbookVerified publisher6.5.21 of 1See more

deconz geek-cookbook 6.5.2

1 of the 1 container images this version deploys carry CVE-2021-23437.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.12.066541bbb78952
pillow@5.4.1
8.3.2

Open the chart page →

3,555
esphomegeek-cookbookVerified publisher8.4.21 of 1See more

esphome geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2021-23437.

Container imageDigestPackageFixed in
esphome/esphome:1.18.03f51ec10e823
pillow@5.4.1
8.3.2

Open the chart page →

3,717
frigategeek-cookbookVerified publisher8.2.21 of 1See more

frigate geek-cookbook 8.2.2

1 of the 1 container images this version deploys carry CVE-2021-23437.

Container imageDigestPackageFixed in
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
pillow@8.1.0
8.3.2

Open the chart page →

10,598
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2021-23437.

Container imageDigestPackageFixed in
apsl/thumbor:6.7.051e2de5c2c70
pillow@5.4.1
8.3.2

Open the chart page →

38,346
weblatedeliveryheroVerified publisher0.3.21 of 3See more

weblate deliveryhero 0.3.2

1 of the 3 container images this version deploys carry CVE-2021-23437.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
pillow@7.2.0
8.3.2

Open the chart page →

7,984
lazylibrariangeek-cookbookVerified publisher7.4.21 of 1See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2021-23437.

Container imageDigestPackageFixed in
linuxserver/lazylibrarian:version-1152df82f93d2560e233
pillow@8.2.0
8.3.2

Open the chart page →

11,662
helm-taigamvitale1989-helm-taigaVerified publisher0.2.51 of 2See more

helm-taiga mvitale1989-helm-taiga 0.2.5

1 of the 2 container images this version deploys carry CVE-2021-23437.

Container imageDigestPackageFixed in
mvitale1989/docker-taiga:20191031-4.2.141504ccda06df
pillow@4.3.0
8.3.2

Open the chart page →

5,104
delugerubxkubeVerified publisher1.2.11 of 1See more

deluge rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2021-23437.

Container imageDigestPackageFixed in
linuxserver/deluge:18.04.10ac871624394
pillow@5.1.0-1ubuntu0.6
pillow@5.1.0
5.1.0-1ubuntu0.7
8.3.2

Open the chart page →

13,541
couchpotatobryanalves0.3.01 of 1See more

couchpotato bryanalves 0.3.0

1 of the 1 container images this version deploys carry CVE-2021-23437.

Container imageDigestPackageFixed in
linuxserver/couchpotato:75e576ee-ls32c4d2766b9eb7
pillow@6.2.1
8.3.2

Open the chart page →

2,018
sickchillbryanalves0.3.01 of 1See more

sickchill bryanalves 0.3.0

1 of the 1 container images this version deploys carry CVE-2021-23437.

Container imageDigestPackageFixed in
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
pillow@6.2.1
8.3.2

Open the chart page →

2,504
frigatebryopsida0.2.11 of 2See more

frigate bryopsida 0.2.1

1 of the 2 container images this version deploys carry CVE-2021-23437.

Container imageDigestPackageFixed in
blakeblackshear/frigate:0.11.18330b0a265b8
pillow@8.1.2
8.3.2

Open the chart page →

2,573
check-mkcloudnativeapp0.2.11 of 1See more

check-mk cloudnativeapp 0.2.1

1 of the 1 container images this version deploys carry CVE-2021-23437.

Container imageDigestPackageFixed in
nlmacamp/check_mk:latest5dbb8589f824
pillow@5.0.0
8.3.2

Open the chart page →

2,408
daskcloudnativeapp2.2.12 of 2See more

dask cloudnativeapp 2.2.1

2 of the 2 container images this version deploys carry CVE-2021-23437.

Container imageDigestPackageFixed in
daskdev/dask:1.1.04ecd7bc35500
pillow@5.3.0
8.3.2
daskdev/dask-notebook:1.1.0052630f5ca04
pillow@5.4.1
8.3.2

Open the chart page →

29,901
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-23437.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
pillow@5.0.0
8.3.2

Open the chart page →

77,758
webpagetest-servercloudnativeapp0.2.11 of 1See more

webpagetest-server cloudnativeapp 0.2.1

1 of the 1 container images this version deploys carry CVE-2021-23437.

Container imageDigestPackageFixed in
timothyclarke/wptserver:2018-03-0840a80ced8031
pillow@2.6.1
8.3.2

Open the chart page →

3,716
couchpotatocronce0.0.11 of 1See more

couchpotato cronce 0.0.1

1 of the 1 container images this version deploys carry CVE-2021-23437.

Container imageDigestPackageFixed in
linuxserver/couchpotato:75e576ee-ls389cd8d5fb1ac
pillow@5.4.1
8.3.2

Open the chart page →

3,871
yadmscronce0.3.02 of 2See more

yadms cronce 0.3.0

2 of the 2 container images this version deploys carry CVE-2021-23437.

Container imageDigestPackageFixed in
mcronce/yadms-ftp:latestf820ef2e3c26
pillow@7.0.0
8.3.2
mcronce/yadms-web:latestc03c1c7f5aa9
pillow@7.0.0
8.3.2

Open the chart page →

2,500
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2021-23437.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
pillow@5.1.0-1
pillow@5.1.0
5.1.0-1ubuntu0.7
8.3.2

Open the chart page →

27,728
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2021-23437.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
pillow@7.2.0
8.3.2

Open the chart page →

18,863
delugegeek-cookbookVerified publisher5.4.21 of 1See more

deluge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2021-23437.

Container imageDigestPackageFixed in
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
pillow@5.1.0-1ubuntu0.6
pillow@5.1.0
5.1.0-1ubuntu0.7
8.3.2

Open the chart page →

13,551
mylargeek-cookbookVerified publisher4.4.21 of 1See more

mylar geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2021-23437.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/mylar3:version-v0.5.3b96f0e97ab3f
pillow@6.2.2
8.3.2

Open the chart page →

1,423
pyloadgeek-cookbookVerified publisher6.4.21 of 1See more

pyload geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2021-23437.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/pyload:version-5de90278d3c87933a5fd
pillow@6.2.2
8.3.2

Open the chart page →

1,236
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2021-23437.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
pillow@8.3.1
8.3.2

Open the chart page →

24,293
weblatehelm-charts-nr0.3.21 of 3See more

weblate helm-charts-nr 0.3.2

1 of the 3 container images this version deploys carry CVE-2021-23437.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
pillow@7.2.0
8.3.2

Open the chart page →

7,984
erpnextimprowisedVerified publisher3.3.01 of 3See more

erpnext improwised 3.3.0

1 of the 3 container images this version deploys carry CVE-2021-23437.

Container imageDigestPackageFixed in
improwised/erpnext-worker:v13.4.197280b55cbd4
pillow@8.2.0
8.3.2

Open the chart page →

6,501
frigatek8s-home-lab-repo9.1.11 of 1See more

frigate k8s-home-lab-repo 9.1.1

1 of the 1 container images this version deploys carry CVE-2021-23437.

Container imageDigestPackageFixed in
blakeblackshear/frigate:0.11.18330b0a265b8
pillow@8.1.2
8.3.2

Open the chart page →

2,370
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2021-23437.

Container imageDigestPackageFixed in
ncsapolyglot/converters-ebook-convert:latest438d82cdbdb5
pillow@5.2.0
8.3.2

Open the chart page →

55,726
splashntppoolVerified publisher1.0.41 of 1See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2021-23437.

Container imageDigestPackageFixed in
scrapinghub/splash:3.4.1a5f89bc84606
pillow@5.4.1
8.3.2

Open the chart page →

27,633
weblateslamdev0.0.111 of 2See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry CVE-2021-23437.

Container imageDigestPackageFixed in
weblate/weblate:3.11.3-182848df56ecd
pillow@5.4.1
8.3.2

Open the chart page →

8,694
frigatesmarthallVerified publisher1.0.61 of 1See more

frigate smarthall 1.0.6

1 of the 1 container images this version deploys carry CVE-2021-23437.

Container imageDigestPackageFixed in
ghcr.io/blakeblackshear/frigate:0.12.0c862771e38e8
pillow@8.1.2
8.3.2

Open the chart page →

2,243

Container images carrying it

32 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
blakeblackshear/frigate:0.11.18330b0a265b8
pillow@8.1.2
8.3.2
2
weblate/weblate:4.2.2-169c160d37a3c
pillow@7.2.0
8.3.2
2
apsl/thumbor:6.7.051e2de5c2c70
pillow@5.4.1
8.3.2
1
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
pillow@8.1.0
8.3.2
1
daskdev/dask:1.1.04ecd7bc35500
pillow@5.3.0
8.3.2
1
daskdev/dask-notebook:1.1.0052630f5ca04
pillow@5.4.1
8.3.2
1
deconzcommunity/deconz:2.12.066541bbb78952
pillow@5.4.1
8.3.2
1
esphome/esphome:1.18.03f51ec10e823
pillow@5.4.1
8.3.2
1
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
pillow@7.2.0
8.3.2
1
improwised/erpnext-worker:v13.4.197280b55cbd4
pillow@8.2.0
8.3.2
1
linuxserver/couchpotato:75e576ee-ls389cd8d5fb1ac
pillow@5.4.1
8.3.2
1
linuxserver/couchpotato:75e576ee-ls32c4d2766b9eb7
pillow@6.2.1
8.3.2
1
linuxserver/deluge:18.04.10ac871624394
pillow@5.1.0-1ubuntu0.6
pillow@5.1.0
5.1.0-1ubuntu0.7
8.3.2
1
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
pillow@5.1.0-1ubuntu0.6
pillow@5.1.0
5.1.0-1ubuntu0.7
8.3.2
1
linuxserver/lazylibrarian:version-1152df82f93d2560e233
pillow@8.2.0
8.3.2
1
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
pillow@6.2.1
8.3.2
1
mcronce/yadms-ftp:latestf820ef2e3c26
pillow@7.0.0
8.3.2
1
mcronce/yadms-web:latestc03c1c7f5aa9
pillow@7.0.0
8.3.2
1
mide/minecraft-overviewer:latest4eee0dcb715f
pillow@8.1.2
8.3.2
1
mvitale1989/docker-taiga:20191031-4.2.141504ccda06df
pillow@4.3.0
8.3.2
1
ncsapolyglot/converters-ebook-convert:latest438d82cdbdb5
pillow@5.2.0
8.3.2
1
nlmacamp/check_mk:latest5dbb8589f824
pillow@5.0.0
8.3.2
1
opendatacube/wms:latest1b90cdf68831
pillow@5.1.0-1
pillow@5.1.0
5.1.0-1ubuntu0.7
8.3.2
1
scrapinghub/splash:3.4.1a5f89bc84606
pillow@5.4.1
8.3.2
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
pillow@8.3.1
8.3.2
1
taigaio/taiga-back:6.4.29f97323cc150
pillow@8.2.0
8.3.2
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
pillow@5.0.0
8.3.2
1
timothyclarke/wptserver:2018-03-0840a80ced8031
pillow@2.6.1
8.3.2
1
weblate/weblate:3.11.3-182848df56ecd
pillow@5.4.1
8.3.2
1
ghcr.io/blakeblackshear/frigate:0.12.0c862771e38e8
pillow@8.1.2
8.3.2
1
ghcr.io/linuxserver/mylar3:version-v0.5.3b96f0e97ab3f
pillow@6.2.2
8.3.2
1
ghcr.io/linuxserver/pyload:version-5de90278d3c87933a5fd
pillow@6.2.2
8.3.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.