StackRadar

CVE-2021-3127

Critical

Advisory

Published 21 May 2021In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.5
base score, highest
EPSS
0.014
72nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
27
of 17,781 indexed, latest versions
Container images
19
deployed by those charts
Fix available
2 of 2
affected packages

nats-io/jwt not enforcing checking of Import token permissions

Carried by container images the latest versions of 27 of 17,781 indexed charts deploy, on 19 images.

Affected packageAffected versionsFixed inImages
github.com/nats-io/jwtgolangv0.3.2, v1.1.01.2.3-0.20210314221642-a826c77dc9d29
github.com/nats-io/nats-server/v2golangv0.0.0-20230518181934-4f2c9a51849d, v0.0.0-20230713200038-97dd7cb07a4f, v0.0.0-20231109212332-0883d32bbcc5, v0.0.0-20231206205519-fa8464d59b0a+8 more2.2.012
OSV records
GHSA-62mh-w5cv-p88cGHSA-j756-f273-xhp4
Also known as
BIT-nats-2021-3127, GHSA-9r5x-fjv3-q6h4, GO-2022-0386

Charts affected

27 by stars
ChartLatestAffected imagesRadar Score
openebsopenebsOfficialVerified publisher4.6.11 of 35See more

openebs openebs 4.6.1

1 of the 35 container images this version deploys carry CVE-2021-3127.

Container imageDigestPackageFixed in
library/nats:2.9.17-alpine1a7b320b2942
github.com/nats-io/nats-server/v2@v0.0.0-20230518181934-4f2c9a51849d
2.2.0

Open the chart page →

23,894
nginx-service-meshnginxVerified publisher2.0.01 of 9See more

nginx-service-mesh nginx 2.0.0

1 of the 9 container images this version deploys carry CVE-2021-3127.

Container imageDigestPackageFixed in
library/nats:2.9-alpined402af4147fc
github.com/nats-io/nats-server/v2@v0.0.0-20240301171717-567baac9e011
2.2.0

Open the chart page →

1,166
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2021-3127.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2020-12-03T05-49-24Z053f103f4894
github.com/nats-io/jwt@v0.3.2
1.2.3-0.20210314221642-a826c77dc9d2

Open the chart page →

107,811
wasmcloud-chartwasmcloud-chartVerified publisher0.7.21 of 2See more

wasmcloud-chart wasmcloud-chart 0.7.2

1 of the 2 container images this version deploys carry CVE-2021-3127.

Container imageDigestPackageFixed in
library/nats:2.10.7-alpine1bcddab51b80
github.com/nats-io/nats-server/v2@v0.0.0-20231206205519-fa8464d59b0a
2.2.0

Open the chart page →

3,456
featurehubfeaturehub4.1.61 of 7See more

featurehub featurehub 4.1.6

1 of the 7 container images this version deploys carry CVE-2021-3127.

Container imageDigestPackageFixed in
library/nats:2.10.5-alpine85319e5e541b
github.com/nats-io/nats-server/v2@v0.0.0-20231109212332-0883d32bbcc5
2.2.0

Open the chart page →

8,240
miniomilvus8.0.171 of 1See more

minio milvus 8.0.17

1 of the 1 container images this version deploys carry CVE-2021-3127.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
github.com/nats-io/jwt@v1.1.0
1.2.3-0.20210314221642-a826c77dc9d2

Open the chart page →

6,915
octopuso7studios-octopus-helm-chartsOfficialVerified publisher1.2.31 of 5See more

octopus o7studios-octopus-helm-charts 1.2.3

1 of the 5 container images this version deploys carry CVE-2021-3127.

Container imageDigestPackageFixed in
library/nats:2.11.9-alpine777787bbb4c7
github.com/nats-io/nats-server/v2@v0.0.0-20250909150505-3c10f160f4d7
2.2.0

Open the chart page →

6,091
ct-singlecalltelemetry0.8.41 of 7See more

ct-single calltelemetry 0.8.4

1 of the 7 container images this version deploys carry CVE-2021-3127.

Container imageDigestPackageFixed in
natsio/nats-box:0.11.09fbf7bf684e4
github.com/nats-io/jwt@v1.1.0
github.com/nats-io/nats-server/v2@v2.1.9
1.2.3-0.20210314221642-a826c77dc9d2
2.2.0

Open the chart page →

10,629
stablecalltelemetry0.7.11 of 9See more

stable calltelemetry 0.7.1

1 of the 9 container images this version deploys carry CVE-2021-3127.

Container imageDigestPackageFixed in
natsio/nats-box:0.11.09fbf7bf684e4
github.com/nats-io/jwt@v1.1.0
github.com/nats-io/nats-server/v2@v2.1.9
1.2.3-0.20210314221642-a826c77dc9d2
2.2.0

Open the chart page →

7,702
stable-hacalltelemetry0.11.41 of 7See more

stable-ha calltelemetry 0.11.4

1 of the 7 container images this version deploys carry CVE-2021-3127.

Container imageDigestPackageFixed in
library/nats:2.10.12-alpinebca70839d953
github.com/nats-io/nats-server/v2@v0.0.0-20240312212138-121169ea8675
2.2.0

Open the chart page →

4,705
stigatroncarbide-charts0.4.11 of 10See more

stigatron carbide-charts 0.4.1

1 of the 10 container images this version deploys carry CVE-2021-3127.

Container imageDigestPackageFixed in
library/nats:2.10.5-alpine85319e5e541b
github.com/nats-io/nats-server/v2@v0.0.0-20231109212332-0883d32bbcc5
2.2.0

Open the chart page →

4,423
llo-natseclipse-aeriosVerified publisher1.0.01 of 1See more

llo-nats eclipse-aerios 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-3127.

Container imageDigestPackageFixed in
library/nats:2.11.4c8cd23806eef
github.com/nats-io/nats-server/v2@v0.0.0-20250522132111-4c2fc7f07d97
2.2.0

Open the chart page →

837
degafactlyVerified publisher0.11.131 of 3See more

dega factly 0.11.13

1 of the 3 container images this version deploys carry CVE-2021-3127.

Container imageDigestPackageFixed in
factly/dega-server:0.15.194d21479382e
github.com/nats-io/jwt@v1.1.0
1.2.3-0.20210314221642-a826c77dc9d2

Open the chart page →

5,747
owncloud-ocisgeek-cookbookVerified publisher2.4.21 of 1See more

owncloud-ocis geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2021-3127.

Container imageDigestPackageFixed in
owncloud/ocis:1.7.0d2efcae92c84
github.com/nats-io/jwt@v1.1.0
1.2.3-0.20210314221642-a826c77dc9d2

Open the chart page →

3,236
mimir-openshift-experimentalgrafana2.1.01 of 4See more

mimir-openshift-experimental grafana 2.1.0

1 of the 4 container images this version deploys carry CVE-2021-3127.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
github.com/nats-io/jwt@v1.1.0
1.2.3-0.20210314221642-a826c77dc9d2

Open the chart page →

17,759
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2021-3127.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2020-09-17T04-49-20Ze2b7b633c250
github.com/nats-io/jwt@v0.3.2
1.2.3-0.20210314221642-a826c77dc9d2

Open the chart page →

23,613
magistralamagistrala-devopsVerified publisher0.16.21 of 42See more

magistrala magistrala-devops 0.16.2

1 of the 42 container images this version deploys carry CVE-2021-3127.

Container imageDigestPackageFixed in
library/nats:2.10.17-alpineb7752304692b
github.com/nats-io/nats-server/v2@v0.0.0-20240627223150-b91de0356018
2.2.0

Open the chart page →

24,400
mayastormayastorVerified publisher2.12.11 of 31See more

mayastor mayastor 2.12.1

1 of the 31 container images this version deploys carry CVE-2021-3127.

Container imageDigestPackageFixed in
library/nats:2.9.17-alpine1a7b320b2942
github.com/nats-io/nats-server/v2@v0.0.0-20230518181934-4f2c9a51849d
2.2.0

Open the chart page →

21,064
nutanix-flow-cninutanix-helm-releasesVerified publisher1.1.01 of 7See more

nutanix-flow-cni nutanix-helm-releases 1.1.0

1 of the 7 container images this version deploys carry CVE-2021-3127.

Container imageDigestPackageFixed in
library/nats:2.10-alpineb83efabe3e7d
github.com/nats-io/nats-server/v2@v0.0.0-20250501093519-f91ddd892565
2.2.0

Open the chart page →

4,988
liftbridgepozetron0.1.11 of 1See more

liftbridge pozetron 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-3127.

Container imageDigestPackageFixed in
pozetroninc/liftbridge:v1.1.079fd6b9d93e6
github.com/nats-io/jwt@v0.3.2
1.2.3-0.20210314221642-a826c77dc9d2

Open the chart page →

3,167
serviceexampleserviceexample0.1.01 of 5See more

serviceexample serviceexample 0.1.0

1 of the 5 container images this version deploys carry CVE-2021-3127.

Container imageDigestPackageFixed in
library/nats:2.9.20-alpined6c6ae7df4a0
github.com/nats-io/nats-server/v2@v0.0.0-20230713200038-97dd7cb07a4f
2.2.0

Open the chart page →

5,449
avalanchesnowplow-devopsVerified publisher0.12.11 of 6See more

avalanche snowplow-devops 0.12.1

1 of the 6 container images this version deploys carry CVE-2021-3127.

Container imageDigestPackageFixed in
library/nats:2.10-alpineb83efabe3e7d
github.com/nats-io/nats-server/v2@v0.0.0-20250501093519-f91ddd892565
2.2.0

Open the chart page →

1,329
spinnakerspinnakerVerified publisher2.2.131 of 4See more

spinnaker spinnaker 2.2.13

1 of the 4 container images this version deploys carry CVE-2021-3127.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2020-01-03T19-12-21Zf00aa6ef2b72
github.com/nats-io/jwt@v0.3.2
1.2.3-0.20210314221642-a826c77dc9d2

Open the chart page →

6,836
telegraf-ds-k3stelegraf-ds-k3s1.0.01 of 1See more

telegraf-ds-k3s telegraf-ds-k3s 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-3127.

Container imageDigestPackageFixed in
library/telegraf:1.19.0-alpine794079a7f241
github.com/nats-io/jwt@v0.3.2
github.com/nats-io/nats-server/v2@v2.1.4
1.2.3-0.20210314221642-a826c77dc9d2
2.2.0

Open the chart page →

3,764
the0the0Verified publisher0.9.81 of 9See more

the0 the0 0.9.8

1 of the 9 container images this version deploys carry CVE-2021-3127.

Container imageDigestPackageFixed in
library/nats:2.10-alpineb83efabe3e7d
github.com/nats-io/nats-server/v2@v0.0.0-20250501093519-f91ddd892565
2.2.0

Open the chart page →

7,248
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2021-3127.

Container imageDigestPackageFixed in
library/nats:2.10.7-alpine1bcddab51b80
github.com/nats-io/nats-server/v2@v0.0.0-20231206205519-fa8464d59b0a
2.2.0

Open the chart page →

17,323
miniowenerme8.0.101 of 1See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2021-3127.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
github.com/nats-io/jwt@v1.1.0
1.2.3-0.20210314221642-a826c77dc9d2

Open the chart page →

6,915

Container images carrying it

19 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
library/nats:2.10-alpineb83efabe3e7d
github.com/nats-io/nats-server/v2@v0.0.0-20250501093519-f91ddd892565
2.2.0
3
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
github.com/nats-io/jwt@v1.1.0
1.2.3-0.20210314221642-a826c77dc9d2
3
library/nats:2.9.17-alpine1a7b320b2942
github.com/nats-io/nats-server/v2@v0.0.0-20230518181934-4f2c9a51849d
2.2.0
2
library/nats:2.10.7-alpine1bcddab51b80
github.com/nats-io/nats-server/v2@v0.0.0-20231206205519-fa8464d59b0a
2.2.0
2
library/nats:2.10.5-alpine85319e5e541b
github.com/nats-io/nats-server/v2@v0.0.0-20231109212332-0883d32bbcc5
2.2.0
2
natsio/nats-box:0.11.09fbf7bf684e4
github.com/nats-io/jwt@v1.1.0
github.com/nats-io/nats-server/v2@v2.1.9
1.2.3-0.20210314221642-a826c77dc9d2
2.2.0
2
factly/dega-server:0.15.194d21479382e
github.com/nats-io/jwt@v1.1.0
1.2.3-0.20210314221642-a826c77dc9d2
1
library/nats:2.11.9-alpine777787bbb4c7
github.com/nats-io/nats-server/v2@v0.0.0-20250909150505-3c10f160f4d7
2.2.0
1
library/nats:2.10.17-alpineb7752304692b
github.com/nats-io/nats-server/v2@v0.0.0-20240627223150-b91de0356018
2.2.0
1
library/nats:2.10.12-alpinebca70839d953
github.com/nats-io/nats-server/v2@v0.0.0-20240312212138-121169ea8675
2.2.0
1
library/nats:2.11.4c8cd23806eef
github.com/nats-io/nats-server/v2@v0.0.0-20250522132111-4c2fc7f07d97
2.2.0
1
library/nats:2.9-alpined402af4147fc
github.com/nats-io/nats-server/v2@v0.0.0-20240301171717-567baac9e011
2.2.0
1
library/nats:2.9.20-alpined6c6ae7df4a0
github.com/nats-io/nats-server/v2@v0.0.0-20230713200038-97dd7cb07a4f
2.2.0
1
library/telegraf:1.19.0-alpine794079a7f241
github.com/nats-io/jwt@v0.3.2
github.com/nats-io/nats-server/v2@v2.1.4
1.2.3-0.20210314221642-a826c77dc9d2
2.2.0
1
minio/minio:RELEASE.2020-12-03T05-49-24Z053f103f4894
github.com/nats-io/jwt@v0.3.2
1.2.3-0.20210314221642-a826c77dc9d2
1
minio/minio:RELEASE.2020-09-17T04-49-20Ze2b7b633c250
github.com/nats-io/jwt@v0.3.2
1.2.3-0.20210314221642-a826c77dc9d2
1
minio/minio:RELEASE.2020-01-03T19-12-21Zf00aa6ef2b72
github.com/nats-io/jwt@v0.3.2
1.2.3-0.20210314221642-a826c77dc9d2
1
owncloud/ocis:1.7.0d2efcae92c84
github.com/nats-io/jwt@v1.1.0
1.2.3-0.20210314221642-a826c77dc9d2
1
pozetroninc/liftbridge:v1.1.079fd6b9d93e6
github.com/nats-io/jwt@v0.3.2
1.2.3-0.20210314221642-a826c77dc9d2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.