CVE-2021-26701
CriticalAdvisory
Published 21 Apr 2021In the index since 8 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.8
- base score, highest
- EPSS
- 0.301
- 98th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 19
- of 17,781 indexed, latest versions
- Container images
- 16
- deployed by those charts
- Fix available
- 1 of 1
- affected package
.NET Core Remote Code Execution Vulnerability
Carried by container images the latest versions of 19 of 17,781 indexed charts deploy, on 16 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| System.Text.Encodings.Webnuget | 4.0.5.0, 4.4.0, 4.5.0, 4.6.25220.01.+2 more | 4.5.1, 4.7.2, 5.0.1 | 16 |
- OSV records
- GHSA-ghhp-997w-qr28
- Also known as
- BIT-dotnet-2021-26701, BIT-dotnet-sdk-2021-26701
Charts affected
19 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| powershelluniversaldigitalhubVerified publisher | 0.1.2 | 1 of 1See more | 6,940 |
| reservation-appreservation-app | 1.0.9 | 1 of 4See more | 6,639 |
| ombibryanalves | 0.4.0 | 1 of 1See more | 10,776 |
| seqcloudnativeapp | 1.0.0 | 1 of 1See more | 10,541 |
| kafkamagicdysnixVerified publisher | 0.2.3 | 1 of 1See more | 1,906 |
| faasnetfaasnet | 0.0.4 | 1 of 5See more | 7,617 |
| lidarrgeek-cookbookVerified publisher | 14.2.2 | 1 of 1See more | 14,283 |
| readarrgeek-cookbookVerified publisher | 6.4.2 | 1 of 1See more | 7,768 |
| helm-chart-samplehelm-chart-sampleVerified publisher | 0.1.0 | 1 of 2See more | 964 |
| external-scaler-azure-cosmos-dbkedacore | 0.1.0 | 1 of 1See more | 1,186 |
| nbxplorerkronkltdVerified publisher | 0.1.5 | 1 of 2See more | 1,669 |
| myfirstdockerkubermyrepo | 0.1.0 | 1 of 1See more | 1,455 |
| polyglotncsaVerified publisher | 0.1.1 | 1 of 18See more | 55,726 |
| bagetsimcube | 1.0.5 | 1 of 1See more | 1,687 |
| voteappvoting-app-helm-charts-repoVerified publisher | 1.0.0 | 1 of 5See more | 8,262 |
| workerappvoting-app-helm-charts-repoVerified publisher | 1.0.0 | 1 of 1See more | 3,329 |
| voteappvoting-app-helm-charts-repo-cloudVerified publisher | 1.0.0 | 1 of 5See more | 8,262 |
| workerappvoting-app-helm-charts-repo-cloudVerified publisher | 1.0.0 | 1 of 1See more | 3,329 |
| webencryptorwebencryptor | 1.1.0 | 1 of 1See more | 1,968 |
Container images carrying it
16 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| kodekloud/ | 741e3aaaa812 | System.Text.Encodings.Web | 4.7.2 | 4 |
| beubi/ | a02c2e200920 | System.Text.Encodings.Web | 4.5.1 | 1 |
| craigwillis/ | ae317d7e4724 | System.Text.Encodings.Web | 4.5.1 | 1 |
| datalust/ | 9c731bb207a6 | System.Text.Encodings.Web | 4.5.1 | 1 |
| digitsy/ | f91d7f56b55d | System.Text.Encodings.Web | 4.5.1 | 1 |
| ironmansoftware/ | 1943c73cce31 | System.Text.Encodings.Web | 4.5.1 | 1 |
| karatejb/ | f11ac24b23b9 | System.Text.Encodings.Web | 5.0.1 | 1 |
| kodalisri/ | 202268d66e1a | System.Text.Encodings.Web | 4.5.1 | 1 |
| linuxserver/ | 2fbb21fb4903 | System.Text.Encodings.Web | 4.5.1 | 1 |
| loicsharma/ | a880c78ae80b | System.Text.Encodings.Web | 4.7.2 | 1 |
| nicolasdorier/ | ee70dba03ec2 | System.Text.Encodings.Web | 4.5.1 | 1 |
| simpleidserver/ | 53c159ea49ca | System.Text.Encodings.Web | 5.0.1 | 1 |
| zbalogh/ | 09a51b809674 | System.Text.Encodings.Web | 5.0.1 | 1 |
| ghcr.io/ | 54ebc1f90963 | System.Text.Encodings.Web | 4.5.1 | 1 |
| ghcr.io/ | ad943e9309e4 | System.Text.Encodings.Web | 5.0.1 | 1 |
| ghcr.io/ | 4985d164ead9 | System.Text.Encodings.Web | 4.5.1 | 1 |