StackRadar

CVE-2021-23727

High

Advisory

Published 29 Dec 2021In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.039
90th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
20
of 17,781 indexed, latest versions
Container images
16
deployed by those charts
Fix available
1 of 1
affected package

OS Command Injection in celery

Carried by container images the latest versions of 20 of 17,781 indexed charts deploy, on 16 images.

Affected packageAffected versionsFixed inImages
celerypypi4.1.0, 4.2.0, 4.3.0, 4.4.0+4 more5.2.216
OSV records
GHSA-q4xr-rc97-m4xx
Also known as
PYSEC-2021-858, SNYK-PYTHON-CELERY-2314953

Charts affected

20 by stars
ChartLatestAffected imagesRadar Score
supersetcloudposse1.2.01 of 1See more

superset cloudposse 1.2.0

1 of the 1 container images this version deploys carry CVE-2021-23727.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
celery@4.3.0
5.2.2

Open the chart page →

5,851
fadicetic0.3.11 of 25See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry CVE-2021-23727.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
celery@4.3.0
5.2.2

Open the chart page →

52,919
taigarc-helm-charts0.1.01 of 7See more

taiga rc-helm-charts 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-23727.

Container imageDigestPackageFixed in
taigaio/taiga-back:6.4.29f97323cc150
celery@4.3.0
5.2.2

Open the chart page →

7,255
weblatedeliveryheroVerified publisher0.3.21 of 3See more

weblate deliveryhero 0.3.2

1 of the 3 container images this version deploys carry CVE-2021-23727.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
celery@4.4.7
5.2.2

Open the chart page →

7,984
helm-taigamvitale1989-helm-taigaVerified publisher0.2.51 of 2See more

helm-taiga mvitale1989-helm-taiga 0.2.5

1 of the 2 container images this version deploys carry CVE-2021-23727.

Container imageDigestPackageFixed in
mvitale1989/docker-taiga:20191031-4.2.141504ccda06df
celery@4.3.0
5.2.2

Open the chart page →

5,104
opencveopencve1.2.01 of 3See more

opencve opencve 1.2.0

1 of the 3 container images this version deploys carry CVE-2021-23727.

Container imageDigestPackageFixed in
cleveritcz/opencve:1.5.0c75c1636e0b7
celery@4.3.0
5.2.2

Open the chart page →

2,097
shynetatrox0.1.11 of 1See more

shynet atrox 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-23727.

Container imageDigestPackageFixed in
milesmcc/shynet:v0.12.0e821e31140f7
celery@5.2.1
5.2.2

Open the chart page →

5,507
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2021-23727.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
celery@4.4.5
5.2.2

Open the chart page →

22,891
supersetcloudnativeapp1.1.61 of 1See more

superset cloudnativeapp 1.1.6

1 of the 1 container images this version deploys carry CVE-2021-23727.

Container imageDigestPackageFixed in
amancevice/superset:0.28.1c8c04bfe3d66
celery@4.2.0
5.2.2

Open the chart page →

5,060
cloudlaunchcloudve0.6.01 of 5See more

cloudlaunch cloudve 0.6.0

1 of the 5 container images this version deploys carry CVE-2021-23727.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
celery@5.1.2
5.2.2

Open the chart page →

12,457
cloudlaunch-servercloudve0.2.01 of 5See more

cloudlaunch-server cloudve 0.2.0

1 of the 5 container images this version deploys carry CVE-2021-23727.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
celery@5.1.2
5.2.2

Open the chart page →

12,131
cloudlaunchservercloudve0.6.01 of 4See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2021-23727.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
celery@5.1.2
5.2.2

Open the chart page →

11,592
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2021-23727.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
celery@4.1.0
5.2.2

Open the chart page →

27,728
datacube-processingdatacube-charts0.1.11 of 2See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2021-23727.

Container imageDigestPackageFixed in
opendatacube/pipelines:wofs-1.225d810e8504b8
celery@4.1.0
5.2.2

Open the chart page →

22,405
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2021-23727.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
celery@4.1.0
5.2.2

Open the chart page →

24,335
weblatehelm-charts-nr0.3.21 of 3See more

weblate helm-charts-nr 0.3.2

1 of the 3 container images this version deploys carry CVE-2021-23727.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
celery@4.4.7
5.2.2

Open the chart page →

7,984
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2021-23727.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
celery@4.4.7
5.2.2

Open the chart page →

16,417
squash-apilsst-sqre0.1.61 of 3See more

squash-api lsst-sqre 0.1.6

1 of the 3 container images this version deploys carry CVE-2021-23727.

Container imageDigestPackageFixed in
lsstsqre/squash-api:0.5.34879415ec6ac
celery@4.4.7
5.2.2

Open the chart page →

6,611
libretimepodzone-chartsVerified publisher0.4.11 of 9See more

libretime podzone-charts 0.4.1

1 of the 9 container images this version deploys carry CVE-2021-23727.

Container imageDigestPackageFixed in
ghcr.io/libretime/libretime-worker:latestd39ff5272b2e
celery@4.4.7
5.2.2

Open the chart page →

11,149
weblateslamdev0.0.111 of 2See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry CVE-2021-23727.

Container imageDigestPackageFixed in
weblate/weblate:3.11.3-182848df56ecd
celery@4.4.0
5.2.2

Open the chart page →

8,694

Container images carrying it

16 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
cloudve/cloudlaunch-server:latest4a3d7fae90bb
celery@5.1.2
5.2.2
3
amancevice/superset:0.35.212a0a9e66550
celery@4.3.0
5.2.2
2
weblate/weblate:4.2.2-169c160d37a3c
celery@4.4.7
5.2.2
2
amancevice/superset:0.28.1c8c04bfe3d66
celery@4.2.0
5.2.2
1
cleveritcz/opencve:1.5.0c75c1636e0b7
celery@4.3.0
5.2.2
1
gethue/hue:4.11.011b649636e68
celery@4.4.7
5.2.2
1
gethue/hue:4.10.05702b2c37ff9
celery@4.4.5
5.2.2
1
lsstsqre/squash-api:0.5.34879415ec6ac
celery@4.4.7
5.2.2
1
milesmcc/shynet:v0.12.0e821e31140f7
celery@5.2.1
5.2.2
1
mvitale1989/docker-taiga:20191031-4.2.141504ccda06df
celery@4.3.0
5.2.2
1
opendatacube/pipelines:wofs-1.225d810e8504b8
celery@4.1.0
5.2.2
1
opendatacube/restcube:latest91870111837c
celery@4.1.0
5.2.2
1
opendatacube/wms:latest1b90cdf68831
celery@4.1.0
5.2.2
1
taigaio/taiga-back:6.4.29f97323cc150
celery@4.3.0
5.2.2
1
weblate/weblate:3.11.3-182848df56ecd
celery@4.4.0
5.2.2
1
ghcr.io/libretime/libretime-worker:latestd39ff5272b2e
celery@4.4.7
5.2.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.