StackRadar

CVE-2021-29272

Medium

Advisory

Published 18 May 2021In the index since 8 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.009
59th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
10
of 17,781 indexed, latest versions
Container images
12
deployed by those charts
Fix available
1 of 1
affected package

Cross-site scripting in bluemonday

Carried by container images the latest versions of 10 of 17,781 indexed charts deploy, on 12 images.

Affected packageAffected versionsFixed inImages
github.com/microcosm-cc/bluemondaygolangv1.0.0, v1.0.1, v1.0.2, v1.0.3-0.20191119130333-0a75d7616912+1 more1.0.512
OSV records
GHSA-3x58-xr87-2fcj
Also known as
GO-2022-0762

Charts affected

10 by stars
ChartLatestAffected imagesRadar Score
giteakeyporttech0.2.101 of 4See more

gitea keyporttech 0.2.10

1 of the 4 container images this version deploys carry CVE-2021-29272.

Container imageDigestPackageFixed in
gitea/gitea:1.12.485416d6f65fe
github.com/microcosm-cc/bluemonday@v1.0.3-0.20191119130333-0a75d7616912
1.0.5

Open the chart page →

5,408
atlantistrozz3.12.111 of 1See more

atlantis trozz 3.12.11

1 of the 1 container images this version deploys carry CVE-2021-29272.

Container imageDigestPackageFixed in
runatlantis/atlantis:v0.16.145fbaf7e207c
github.com/microcosm-cc/bluemonday@v1.0.1
1.0.5

Open the chart page →

5,280
commentoduyet0.2.01 of 2See more

commento duyet 0.2.0

1 of the 2 container images this version deploys carry CVE-2021-29272.

Container imageDigestPackageFixed in
registry.gitlab.com/commento/commento:v1.8.0e0ab1fc86761
github.com/microcosm-cc/bluemonday@v1.0.0
1.0.5

Open the chart page →

2,679
haven-complinacy-dashboardjolle-devVerified publisher1.0.01 of 2See more

haven-complinacy-dashboard jolle-dev 1.0.0

1 of the 2 container images this version deploys carry CVE-2021-29272.

Container imageDigestPackageFixed in
j0113/haven-compliancy-dashboard:1.3696cb8ca9f4e
github.com/microcosm-cc/bluemonday@v1.0.2
1.0.5

Open the chart page →

3,840
gogskeyporttech0.1.31 of 3See more

gogs keyporttech 0.1.3

1 of the 3 container images this version deploys carry CVE-2021-29272.

Container imageDigestPackageFixed in
gogs/gogs:0.12.30195b095d0b2
github.com/microcosm-cc/bluemonday@v1.0.4
1.0.5

Open the chart page →

3,523
kubeaddons-catalogmesosphere0.1.161 of 2See more

kubeaddons-catalog mesosphere 0.1.16

1 of the 2 container images this version deploys carry CVE-2021-29272.

Container imageDigestPackageFixed in
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
github.com/microcosm-cc/bluemonday@v1.0.2
1.0.5

Open the chart page →

12,010
kommandermesosphere-stable0.39.23 of 29See more

kommander mesosphere-stable 0.39.2

3 of the 29 container images this version deploys carry CVE-2021-29272.

Container imageDigestPackageFixed in
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
github.com/microcosm-cc/bluemonday@v1.0.2
1.0.5
gcr.io/kubecost1/cost-model:prod-1.81.067f4f162da8d
github.com/microcosm-cc/bluemonday@v1.0.2
1.0.5
gcr.io/kubecost1/server:prod-1.81.0a348db3e4d74
github.com/microcosm-cc/bluemonday@v1.0.4
1.0.5

Open the chart page →

68,284
gogsmhio0.9.21 of 2See more

gogs mhio 0.9.2

1 of the 2 container images this version deploys carry CVE-2021-29272.

Container imageDigestPackageFixed in
gogs/gogs:0.12.1420d53bb7277
github.com/microcosm-cc/bluemonday@v1.0.4
1.0.5

Open the chart page →

3,230
giteanovum-rgi-charts2.1.31 of 3See more

gitea novum-rgi-charts 2.1.3

1 of the 3 container images this version deploys carry CVE-2021-29272.

Container imageDigestPackageFixed in
gitea/gitea:1.13.0d5ab14cd29af
github.com/microcosm-cc/bluemonday@v1.0.3-0.20191119130333-0a75d7616912
1.0.5

Open the chart page →

4,861
cost-analyzerstatcan1.82.22 of 9See more

cost-analyzer statcan 1.82.2

2 of the 9 container images this version deploys carry CVE-2021-29272.

Container imageDigestPackageFixed in
gcr.io/kubecost1/cost-model:prod-1.82.2989a60847416
github.com/microcosm-cc/bluemonday@v1.0.2
1.0.5
gcr.io/kubecost1/server:prod-1.82.22b1a3d08caac
github.com/microcosm-cc/bluemonday@v1.0.4
1.0.5

Open the chart page →

16,506

Container images carrying it

12 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
github.com/microcosm-cc/bluemonday@v1.0.2
1.0.5
2
gitea/gitea:1.12.485416d6f65fe
github.com/microcosm-cc/bluemonday@v1.0.3-0.20191119130333-0a75d7616912
1.0.5
1
gitea/gitea:1.13.0d5ab14cd29af
github.com/microcosm-cc/bluemonday@v1.0.3-0.20191119130333-0a75d7616912
1.0.5
1
gogs/gogs:0.12.30195b095d0b2
github.com/microcosm-cc/bluemonday@v1.0.4
1.0.5
1
gogs/gogs:0.12.1420d53bb7277
github.com/microcosm-cc/bluemonday@v1.0.4
1.0.5
1
j0113/haven-compliancy-dashboard:1.3696cb8ca9f4e
github.com/microcosm-cc/bluemonday@v1.0.2
1.0.5
1
runatlantis/atlantis:v0.16.145fbaf7e207c
github.com/microcosm-cc/bluemonday@v1.0.1
1.0.5
1
gcr.io/kubecost1/cost-model:prod-1.81.067f4f162da8d
github.com/microcosm-cc/bluemonday@v1.0.2
1.0.5
1
gcr.io/kubecost1/cost-model:prod-1.82.2989a60847416
github.com/microcosm-cc/bluemonday@v1.0.2
1.0.5
1
gcr.io/kubecost1/server:prod-1.82.22b1a3d08caac
github.com/microcosm-cc/bluemonday@v1.0.4
1.0.5
1
gcr.io/kubecost1/server:prod-1.81.0a348db3e4d74
github.com/microcosm-cc/bluemonday@v1.0.4
1.0.5
1
registry.gitlab.com/commento/commento:v1.8.0e0ab1fc86761
github.com/microcosm-cc/bluemonday@v1.0.0
1.0.5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.