StackRadar

CVE-2021-27291

High

Advisory

Published 17 Mar 2021In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.039
90th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
20
of 17,781 indexed, latest versions
Container images
20
deployed by those charts
Fix available
2 of 2
affected packages

Pygments vulnerable to Regular Expression Denial of Service (ReDoS)

Carried by container images the latest versions of 20 of 17,781 indexed charts deploy, on 20 images.

Affected packageAffected versionsFixed inImages
pygmentspypi2.2.0, 2.3.1, 2.4.2, 2.7.12.7.420
pygmentsdeb2.2.0+dfsg-1, 2.3.1+dfsg-12.2.0+dfsg-1ubuntu0.2, 2.3.1+dfsg-1+deb10u22
OSV records
GHSA-pq64-v7f5-gqh8UBUNTU-CVE-2021-27291DSA-4878-1
Also known as
PYSEC-2021-141, USN-4897-1

Charts affected

20 by stars
ChartLatestAffected imagesRadar Score
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2021-27291.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
pygments@2.3.1
2.7.4

Open the chart page →

32,259
fadicetic0.3.11 of 25See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry CVE-2021-27291.

Container imageDigestPackageFixed in
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
pygments@2.7.1
2.7.4

Open the chart page →

52,919
deconzgeek-cookbookVerified publisher6.5.21 of 1See more

deconz geek-cookbook 6.5.2

1 of the 1 container images this version deploys carry CVE-2021-27291.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.12.066541bbb78952
pygments@2.3.1
2.7.4

Open the chart page →

3,555
flagsmithone-acre-fundVerified publisher0.1.51 of 6See more

flagsmith one-acre-fund 0.1.5

1 of the 6 container images this version deploys carry CVE-2021-27291.

Container imageDigestPackageFixed in
blacktop/httpie:latestfc5e68e2f5ab
pygments@2.2.0
2.7.4

Open the chart page →

6,868
tensorflow-notebookcloudnativeapp0.1.21 of 1See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2021-27291.

Container imageDigestPackageFixed in
tensorflow/tensorflow:1.6.0-devel1e3172090703
pygments@2.2.0
2.7.4

Open the chart page →

36,094
helm-taigamvitale1989-helm-taigaVerified publisher0.2.51 of 2See more

helm-taiga mvitale1989-helm-taiga 0.2.5

1 of the 2 container images this version deploys carry CVE-2021-27291.

Container imageDigestPackageFixed in
mvitale1989/docker-taiga:20191031-4.2.141504ccda06df
pygments@2.2.0
2.7.4

Open the chart page →

5,104
open-notificatiesopen-zaak0.7.01 of 4See more

open-notificaties open-zaak 0.7.0

1 of the 4 container images this version deploys carry CVE-2021-27291.

Container imageDigestPackageFixed in
openzaak/open-notificaties:1.3.02e65313b9b10
pygments@2.4.2
2.7.4

Open the chart page →

2,850
daskcloudnativeapp2.2.11 of 2See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry CVE-2021-27291.

Container imageDigestPackageFixed in
daskdev/dask-notebook:1.1.0052630f5ca04
pygments@2.3.1
2.7.4

Open the chart page →

29,901
distributed-tensorflowcloudnativeapp0.1.11 of 1See more

distributed-tensorflow cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-27291.

Container imageDigestPackageFixed in
cheyang/distributed-tf:1.6.046cc34755493
pygments@2.2.0
2.7.4

Open the chart page →

36,094
galaxy-stablecloudve2.0.01 of 5See more

galaxy-stable cloudve 2.0.0

1 of the 5 container images this version deploys carry CVE-2021-27291.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
pygments@2.2.0
2.7.4

Open the chart page →

70,895
pulsarcnieg1.0.81 of 2See more

pulsar cnieg 1.0.8

1 of the 2 container images this version deploys carry CVE-2021-27291.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.6.14db6ff0b4045
pygments@2.3.1
pygments@2.3.1+dfsg-1
2.7.4
2.3.1+dfsg-1+deb10u2

Open the chart page →

16,860
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2021-27291.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
pygments@2.2.0+dfsg-1
pygments@2.2.0
2.2.0+dfsg-1ubuntu0.2
2.7.4

Open the chart page →

27,728
kube-web-viewdecayofmind0.0.41 of 1See more

kube-web-view decayofmind 0.0.4

1 of the 1 container images this version deploys carry CVE-2021-27291.

Container imageDigestPackageFixed in
hjacobs/kube-web-view:20.10.0b44a9cf81a2f
pygments@2.7.1
2.7.4

Open the chart page →

2,264
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2021-27291.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
pygments@2.4.2
2.7.4

Open the chart page →

14,673
backstageirembo-backstage-helmVerified publisher1.0.51 of 3See more

backstage irembo-backstage-helm 1.0.5

1 of the 3 container images this version deploys carry CVE-2021-27291.

Container imageDigestPackageFixed in
roadiehq/community-backstage-image:latestef355bf5b639
pygments@2.3.1
2.7.4

Open the chart page →

7,232
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2021-27291.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
pygments@2.3.1
2.7.4

Open the chart page →

25,933
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-27291.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
pygments@2.3.1
2.7.4

Open the chart page →

15,675
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2021-27291.

Container imageDigestPackageFixed in
ncsapolyglot/converters-ebook-convert:latest438d82cdbdb5
pygments@2.2.0
2.7.4

Open the chart page →

55,726
nominatimnominatim-chart1.3.01 of 3See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry CVE-2021-27291.

Container imageDigestPackageFixed in
mediagis/nominatim:3.7c15e941485ef
pygments@2.3.1
2.7.4

Open the chart page →

22,658
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2021-27291.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
pygments@2.3.1
2.7.4

Open the chart page →

30,687

Container images carrying it

20 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
apachepulsar/pulsar:2.10.03b262ab7a7d9
pygments@2.3.1
2.7.4
1
apachepulsar/pulsar:2.6.14db6ff0b4045
pygments@2.3.1
pygments@2.3.1+dfsg-1
2.7.4
2.3.1+dfsg-1+deb10u2
1
apachepulsar/pulsar:2.9.0d056c89b7131
pygments@2.3.1
2.7.4
1
apachepulsar/pulsar:2.8.2d538416d5afe
pygments@2.3.1
2.7.4
1
blacktop/httpie:latestfc5e68e2f5ab
pygments@2.2.0
2.7.4
1
cheyang/distributed-tf:1.6.046cc34755493
pygments@2.2.0
2.7.4
1
daskdev/dask-notebook:1.1.0052630f5ca04
pygments@2.3.1
2.7.4
1
deconzcommunity/deconz:2.12.066541bbb78952
pygments@2.3.1
2.7.4
1
galaxy/galaxy-init:v18.010267bad550e6
pygments@2.2.0
2.7.4
1
hjacobs/kube-web-view:20.10.0b44a9cf81a2f
pygments@2.7.1
2.7.4
1
jmferrer/azure-devops-agent:latest030f68ec6998
pygments@2.4.2
2.7.4
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
pygments@2.7.1
2.7.4
1
mediagis/nominatim:3.7c15e941485ef
pygments@2.3.1
2.7.4
1
mvitale1989/docker-taiga:20191031-4.2.141504ccda06df
pygments@2.2.0
2.7.4
1
ncsapolyglot/converters-ebook-convert:latest438d82cdbdb5
pygments@2.2.0
2.7.4
1
opendatacube/wms:latest1b90cdf68831
pygments@2.2.0+dfsg-1
pygments@2.2.0
2.2.0+dfsg-1ubuntu0.2
2.7.4
1
openzaak/open-notificaties:1.3.02e65313b9b10
pygments@2.4.2
2.7.4
1
roadiehq/community-backstage-image:latestef355bf5b639
pygments@2.3.1
2.7.4
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
pygments@2.3.1
2.7.4
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
pygments@2.2.0
2.7.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.