StackRadarChart IndexLive demo

CVE-2021-28092

High

Advisory

Published 19 Mar 2021In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.022; 81st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 14; of 17,781 indexed, latest versions
Container images: 14; deployed by those charts
Fix available: 1 of 1; affected package

Regular Expression Denial of Service (ReDoS)

Carried by container images the latest versions of 14 of 17,781 indexed charts deploy, on 14 images.

Affected package	Affected versions	Fixed in	Images
is-svgnpm	2.1.0, 3.0.0	4.2.2	14

OSV records: GHSA-7r28-3m3f-r2pr

Charts affected

14 by stars

Chart

Latest

Affected images

Radar Score

1 of 1 See more

misskey alyti 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-28092.

Container image	Digest	Package	Fixed in
misskey/misskey :12.110.1	e08b7c478093	is-svg@2.1.0	4.2.2

Open the chart page →

5,251

1 of 3 See more

testhub teshub 0.1.4

1 of the 3 container images this version deploys carry CVE-2021-28092.

Container image	Digest	Package	Fixed in
testhubio/testhub-frontend :on-prem	e86c2db53be8	is-svg@3.0.0	4.2.2

Open the chart page →

7,517

daskcloudnativeapp

1 of 2 See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry CVE-2021-28092.

Container image	Digest	Package	Fixed in
daskdev/dask-notebook :1.1.0	052630f5ca04	is-svg@2.1.0	4.2.2

Open the chart page →

29,901

developer-dashboardcloud-native-toolkit

1 of 1 See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2021-28092.

Container image	Digest	Package	Fixed in
quay.io/ibmgaragecloud/developer-dashboard :v1.4.4	7a4b9fedc724	is-svg@3.0.0	4.2.2

Open the chart page →

25,456

conduction-uiconduction-ui

1 of 6 See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2021-28092.

Container image	Digest	Package	Fixed in
conduction/conduction-ui-app :dev	d591f5e6f2a9	is-svg@3.0.0	4.2.2

Open the chart page →

12,907

yapijoelee2012

1 of 1 See more

6,454

frontendluiscajl

1 of 1 See more

frontend luiscajl 0.1.7

1 of the 1 container images this version deploys carry CVE-2021-28092.

Container image	Digest	Package	Fixed in
lavandadelpatio/frontend :latest	501c3f31e0bc	is-svg@3.0.0	4.2.2

Open the chart page →

3,651

sample-appmongodb-helm-charts

1 of 2 See more

sample-app mongodb-helm-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-28092.

Container image	Digest	Package	Fixed in
quay.io/mongodb/farm-intro-frontend :0.1	99ccdfd543e1	is-svg@3.0.0	4.2.2

Open the chart page →

6,438

sentence-collectormozilla

1 of 2 See more

sentence-collector mozilla 0.1.2

1 of the 2 container images this version deploys carry CVE-2021-28092.

Container image	Digest	Package	Fixed in
mozilla/sentencecollector :2.0.9	1da6ff5c4895	is-svg@3.0.0	4.2.2

Open the chart page →

6,684

1 of 23 See more

smile ncsa 1.1.0

1 of the 23 container images this version deploys carry CVE-2021-28092.

Container image	Digest	Package	Fixed in
socialmediamacroscope/smile_graphql :0.3.1	c5095e94bc65	is-svg@2.1.0	4.2.2

Open the chart page →

109,294

example-dev-toolsnoygal

1 of 3 See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2021-28092.

Container image	Digest	Package	Fixed in
linuxserver/codimd :latest	b801bbcf6386	is-svg@3.0.0	4.2.2

Open the chart page →

27,465

speedtest-trackersoblivionscall

1 of 1 See more

speedtest-tracker soblivionscall 3.0.4

1 of the 1 container images this version deploys carry CVE-2021-28092.

Container image	Digest	Package	Fixed in
henrywhitaker3/speedtest-tracker :latest	47159a940229	is-svg@3.0.0	4.2.2

Open the chart page →

2,460

cadencewenerme

1 of 5 See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2021-28092.

Container image	Digest	Package	Fixed in
ubercadence/web :v3.29.5	8564a5b44a6d	is-svg@2.1.0	4.2.2

Open the chart page →

10,127

temporalwenerme

1 of 13 See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2021-28092.

Container image	Digest	Package	Fixed in
temporalio/web :1.14.0	33cfa863d8ce	is-svg@2.1.0	4.2.2

Open the chart page →

22,665

Container images carrying it

14 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
conduction/conduction-ui-app :dev	d591f5e6f2a9	is-svg@3.0.0	4.2.2	1
daskdev/dask-notebook :1.1.0	052630f5ca04	is-svg@2.1.0	4.2.2	1
henrywhitaker3/speedtest-tracker :latest	47159a940229	is-svg@3.0.0	4.2.2	1
jayfong/yapi :1.10.2	163e5d621910	is-svg@2.1.0	4.2.2	1
lavandadelpatio/frontend :latest	501c3f31e0bc	is-svg@3.0.0	4.2.2	1
linuxserver/codimd :latest	b801bbcf6386	is-svg@3.0.0	4.2.2	1
misskey/misskey :12.110.1	e08b7c478093	is-svg@2.1.0	4.2.2	1
mozilla/sentencecollector :2.0.9	1da6ff5c4895	is-svg@3.0.0	4.2.2	1
socialmediamacroscope/smile_graphql :0.3.1	c5095e94bc65	is-svg@2.1.0	4.2.2	1
temporalio/web :1.14.0	33cfa863d8ce	is-svg@2.1.0	4.2.2	1
testhubio/testhub-frontend :on-prem	e86c2db53be8	is-svg@3.0.0	4.2.2	1
ubercadence/web :v3.29.5	8564a5b44a6d	is-svg@2.1.0	4.2.2	1
quay.io/ibmgaragecloud/developer-dashboard :v1.4.4	7a4b9fedc724	is-svg@3.0.0	4.2.2	1
quay.io/mongodb/farm-intro-frontend :0.1	99ccdfd543e1	is-svg@3.0.0	4.2.2	1