StackRadar

CVE-2021-32640

Medium

Advisory

Published 28 May 2021In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.028
86th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
67
of 17,781 indexed, latest versions
Container images
59
deployed by those charts
Fix available
1 of 1
affected package

ReDoS in Sec-Websocket-Protocol header

Carried by container images the latest versions of 67 of 17,781 indexed charts deploy, on 59 images.

Affected packageAffected versionsFixed inImages
wsnpm5.2.2, 6.1.3, 6.1.4, 6.2.0+8 more5.2.3, 6.2.2, 7.4.659
OSV records
GHSA-6fc8-4gx4-v693

Charts affected

67 by stars
ChartLatestAffected imagesRadar Score
chatwootchatwootVerified publisher2.0.241 of 3See more

chatwoot chatwoot 2.0.24

1 of the 3 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v4.15.167ebc751c171
ws@6.2.1
6.2.2

Open the chart page →

9,203
code-serverdeploy-code-server1.0.31 of 2See more

code-server deploy-code-server 1.0.3

1 of the 2 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
codercom/code-server:3.10.247605610ad8d
ws@7.4.5
7.4.6

Open the chart page →

4,577
misskeyalytiVerified publisher1.0.01 of 1See more

misskey alyti 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
misskey/misskey:12.110.1e08b7c478093
ws@6.2.1
6.2.2

Open the chart page →

5,251
backstagedeliveryheroVerified publisher0.1.151 of 2See more

backstage deliveryhero 0.1.15

1 of the 2 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
ws@6.2.1
6.2.2

Open the chart page →

8,213
wikijsgeek-cookbookVerified publisher6.4.21 of 1See more

wikijs geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
ws@7.4.4
7.4.6

Open the chart page →

5,946
graphql-gatewaygraphql-gatewayVerified publisher0.1.51 of 1See more

graphql-gateway graphql-gateway 0.1.5

1 of the 1 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
hansehe/graphql-gateway:1.0.458e09540afbc
ws@6.2.1
6.2.2

Open the chart page →

1,660
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
kubeflownotebookswg/centraldashboard:v1.6.137300551dea6
ws@6.2.1
6.2.2

Open the chart page →

96,941
zwavejs2mqttgeek-cookbookVerified publisher5.4.21 of 1See more

zwavejs2mqtt geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
zwavejs/zwavejs2mqtt:5.0.215a6040fb468
ws@7.4.5
7.4.6

Open the chart page →

3,476
flagsmithone-acre-fundVerified publisher0.1.51 of 6See more

flagsmith one-acre-fund 0.1.5

1 of the 6 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
flagsmith/flagsmith-frontend:v2.6.0df02a29e8b0c
ws@6.2.1
6.2.2

Open the chart page →

6,868
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-kbn:latest0570b27bb7c2
ws@7.3.1
7.4.6

Open the chart page →

17,896
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-kbn:latest2297b4350211
ws@7.3.1
7.4.6

Open the chart page →

10,730
data-fairdata354-helmVerified publisher1.1.22 of 12See more

data-fair data354-helm 1.1.2

2 of the 12 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
koumoul/capture:17108d47be3b2
ws@6.2.1
6.2.2
ghcr.io/data-fair/simple-directory:438a4f32fad82
ws@6.1.4
6.2.2

Open the chart page →

38,346
ranetogabisonfire0.1.21 of 1See more

raneto gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/raneto:version-0.16.6ef768f3df5d0
ws@6.2.1
6.2.2

Open the chart page →

2,519
magic-mirrorgeek-cookbookVerified publisher4.4.21 of 1See more

magic-mirror geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
bastilimbach/docker-magicmirror:v2.15.041b0835ab31e
ws@7.4.3
7.4.6

Open the chart page →

4,405
zigbee2mqttgeek-cookbookVerified publisher9.4.21 of 1See more

zigbee2mqtt geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
koenkk/zigbee2mqtt:1.19.15f9129b1ffbc
ws@7.4.5
7.4.6

Open the chart page →

2,173
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
langgenius/dify-api:0.6.11fca918260dd6
ws@7.3.1
7.4.6

Open the chart page →

20,403
chatwootmaxcrm-chartsVerified publisher1.1.2011 of 4See more

chatwoot maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
ws@6.2.1
6.2.2

Open the chart page →

5,940
Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacionVerified publisher1.0.11 of 6See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

1 of the 6 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
fjvela/urjc-fjvela-server:1.0.53c840aebce22
ws@5.2.2
5.2.3

Open the chart page →

19,187
ackeesudaVerified publisher0.2.11 of 1See more

ackee suda 0.2.1

1 of the 1 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
electerious/ackee:3.2.05e7173fa321c
ws@7.4.5
7.4.6

Open the chart page →

1,602
testhubteshubVerified publisher0.1.41 of 3See more

testhub teshub 0.1.4

1 of the 3 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
testhubio/testhub-frontend:on-preme86c2db53be8
ws@6.2.1
6.2.2

Open the chart page →

7,517
restreamerutkuozdemirVerified publisher1.1.01 of 1See more

restreamer utkuozdemir 1.1.0

1 of the 1 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
datarhei/restreamer:0.6.4655e12f9eeed
ws@7.2.3
7.4.6

Open the chart page →

2,598
wikiwenerme2.2.01 of 2See more

wiki wenerme 2.2.0

1 of the 2 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
requarks/wiki:latest68f0d1848261
ws@7.4.5
7.4.6

Open the chart page →

3,833
openhab-cloudandibraeuVerified publisher1.2.61 of 1See more

openhab-cloud andibraeu 1.2.6

1 of the 1 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
openhab/openhab-cloud:a8138a329dd2bac8c4b
ws@7.4.4
7.4.6

Open the chart page →

3,437
d.vazquezm.2021_helmapphelmVerified publisher1.0.01 of 6See more

d.vazquezm.2021_helm apphelm 1.0.0

1 of the 6 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
davidvmar/urjc-davidvmar-server:1.0.05663f5b24615
ws@5.2.2
5.2.3

Open the chart page →

19,745
opendistro-esbeeinventor1.15.11 of 3See more

opendistro-es beeinventor 1.15.1

1 of the 3 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch-kibana:1.13.2c740d7a89475
ws@6.2.1
6.2.2

Open the chart page →

5,806
kube-slackcloudnativeapp1.0.01 of 1See more

kube-slack cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
willwill/kube-slack:v4.1.1d443017aae98
ws@6.1.3
6.2.2

Open the chart page →

1,937
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
ws@7.1.2
7.4.6

Open the chart page →

25,456
maildevcnieg1.1.11 of 1See more

maildev cnieg 1.1.1

1 of the 1 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
cnieg/maildev:v1.1.998ee05668915
ws@6.1.4
6.2.2

Open the chart page →

2,449
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
conduction/conduction-ui-app:devd591f5e6f2a9
ws@6.2.1
6.2.2

Open the chart page →

12,907
eoloplannerdfa-amm-eoloplannerVerified publisher0.1.01 of 7See more

eoloplanner dfa-amm-eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
ws@5.2.2
5.2.3

Open the chart page →

27,550
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
langgenius/dify-api:1.0.0066035f93856
ws@7.3.1
7.4.6

Open the chart page →

19,224
eoloplannerdreyg-jescribanob-chart-eoloplanner0.1.01 of 7See more

eoloplanner dreyg-jescribanob-chart-eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
ws@5.2.2
5.2.3

Open the chart page →

24,656
amundsenduyet1.1.01 of 7See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
amundsendev/amundsen-frontend:2.1.169e7915e61c1
ws@5.2.2
5.2.3

Open the chart page →

11,174
eolicplantseolicplantsVerified publisher0.1.01 of 7See more

eolicplants eolicplants 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
ws@5.2.2
5.2.3

Open the chart page →

27,291
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.01 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
ws@5.2.2
5.2.3

Open the chart page →

27,256
bzz-token-serviceethersphereVerified publisher0.2.01 of 1See more

bzz-token-service ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
ethersphere/bzz-token-service:latest7624f11a72ad
ws@5.2.2
5.2.3

Open the chart page →

3,260
iotagent-ulfiware0.1.21 of 1See more

iotagent-ul fiware 0.1.2

1 of the 1 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
fiware/iotagent-ul:1.14.0fe11f55a926d
ws@6.2.1
6.2.2

Open the chart page →

3,337
nightscoutgeek-cookbookVerified publisher1.2.21 of 1See more

nightscout geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
ws@7.4.3
7.4.6

Open the chart page →

4,043
theloungegeek-cookbookVerified publisher3.4.21 of 1See more

thelounge geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
thelounge/thelounge:4.2.0-alpine639978459c3a
ws@7.3.1
7.4.6

Open the chart page →

2,689
Governify-Bluejaygovernify0.1.01 of 12See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
governify/assets-manager:v1.4.12987672448c7
ws@6.2.0
6.2.2

Open the chart page →

22,512
Governify-Falcongovernify0.1.01 of 10See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
governify/assets-manager:v1.4.12987672448c7
ws@6.2.0
6.2.2

Open the chart page →

24,319
hubothalkeye0.0.11 of 1See more

hubot halkeye 0.0.1

1 of the 1 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
halkeye/hubot:latest9764d2202130
ws@6.2.1
6.2.2

Open the chart page →

2,116
irslackdhalkeye0.1.01 of 1See more

irslackd halkeye 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
halkeye/irslackd:latest7638bfba70b0
ws@5.2.2
5.2.3

Open the chart page →

2,064
zigbee2mqtthelm-chart-roeiVerified publisher1.19.01 of 1See more

zigbee2mqtt helm-chart-roei 1.19.0

1 of the 1 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
koenkk/zigbee2mqtt:1.19.15f9129b1ffbc
ws@7.4.5
7.4.6

Open the chart page →

2,173
streamsheetshelm-chartsVerified publisher0.2.34 of 8See more

streamsheets helm-charts 0.2.3

4 of the 8 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
ws@6.2.1
6.2.2
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
ws@5.2.2
5.2.3
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
ws@5.2.2
5.2.3
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
ws@6.2.1
6.2.2

Open the chart page →

89,959
backstagehelm-charts-nr0.1.151 of 2See more

backstage helm-charts-nr 0.1.15

1 of the 2 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
ws@6.2.1
6.2.2

Open the chart page →

8,213
wikijshomeenterpriseinc1.4.01 of 1See more

wikijs homeenterpriseinc 1.4.0

1 of the 1 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
requarks/wiki:canary-2.5.2438b5865a7386c
ws@7.4.5
7.4.6

Open the chart page →

4,253
cloudshellinseefrlab4.3.01 of 2See more

cloudshell inseefrlab 4.3.0

1 of the 2 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
inseefrlab/shelly:cloudshell31f04ca7436b
ws@6.1.4
6.2.2

Open the chart page →

10,494
kubeflowkromanow94-kubeflow0.5.11 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

1 of the 30 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
kubeflownotebookswg/centraldashboard:v1.9.2af55c22ef5de
ws@6.2.1
6.2.2

Open the chart page →

70,530
frontendluiscajl0.1.71 of 1See more

frontend luiscajl 0.1.7

1 of the 1 container images this version deploys carry CVE-2021-32640.

Container imageDigestPackageFixed in
lavandadelpatio/frontend:latest501c3f31e0bc
ws@6.2.1
6.2.2

Open the chart page →

3,651

Container images carrying it

59 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
oscarsotosanchez/server:v1.06e2e1279126b
ws@5.2.2
5.2.3
4
amazon/opendistro-for-elasticsearch-kibana:1.13.2c740d7a89475
ws@6.2.1
6.2.2
2
chatwoot/chatwoot:v3.1.0d530ab8c1753
ws@6.2.1
6.2.2
2
fjvela/urjc-fjvela-server:1.0.53c840aebce22
ws@5.2.2
5.2.3
2
governify/assets-manager:v1.4.12987672448c7
ws@6.2.0
6.2.2
2
koenkk/zigbee2mqtt:1.19.15f9129b1ffbc
ws@7.4.5
7.4.6
2
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
ws@6.2.1
6.2.2
2
mesosphere/kommander:6.100.13917e82333a9
ws@7.3.1
7.4.6
2
opensearchproject/opensearch-dashboards:1.0.039695180364b
ws@6.2.1
6.2.2
2
requarks/wiki:2:latest68f0d1848261
ws@7.4.5
7.4.6
2
amundsendev/amundsen-frontend:2.1.169e7915e61c1
ws@5.2.2
5.2.3
1
assistiot/cybersecurity-monitoring_id-kbn:latest2297b4350211
ws@7.3.1
7.4.6
1
assistiot/cybersecurity-monitoring_ir-kbn:latest0570b27bb7c2
ws@7.3.1
7.4.6
1
bastilimbach/docker-magicmirror:v2.15.041b0835ab31e
ws@7.4.3
7.4.6
1
chatwoot/chatwoot:v4.15.167ebc751c171
ws@6.2.1
6.2.2
1
cnieg/maildev:v1.1.998ee05668915
ws@6.1.4
6.2.2
1
codercom/code-server:3.10.247605610ad8d
ws@7.4.5
7.4.6
1
conduction/conduction-ui-app:devd591f5e6f2a9
ws@6.2.1
6.2.2
1
datarhei/restreamer:0.6.4655e12f9eeed
ws@7.2.3
7.4.6
1
davidvmar/urjc-davidvmar-server:1.0.05663f5b24615
ws@5.2.2
5.2.3
1
electerious/ackee:3.2.05e7173fa321c
ws@7.4.5
7.4.6
1
ethersphere/bzz-token-service:latest7624f11a72ad
ws@5.2.2
5.2.3
1
fiware/iotagent-ul:1.14.0fe11f55a926d
ws@6.2.1
6.2.2
1
flagsmith/flagsmith-frontend:v2.6.0df02a29e8b0c
ws@6.2.1
6.2.2
1
gristlabs/grist:0.7.96e71b1914a7e
ws@7.4.4
7.4.6
1
halkeye/hubot:latest9764d2202130
ws@6.2.1
6.2.2
1
halkeye/irslackd:latest7638bfba70b0
ws@5.2.2
5.2.3
1
hansehe/graphql-gateway:1.0.458e09540afbc
ws@6.2.1
6.2.2
1
henrywhitaker3/speedtest-tracker:latest47159a940229
ws@6.2.1
6.2.2
1
inseefrlab/shelly:cloudshell31f04ca7436b
ws@6.1.4
6.2.2
1
koumoul/capture:17108d47be3b2
ws@6.2.1
6.2.2
1
kubeflownotebookswg/centraldashboard:v1.6.137300551dea6
ws@6.2.1
6.2.2
1
kubeflownotebookswg/centraldashboard:v1.9.2af55c22ef5de
ws@6.2.1
6.2.2
1
langgenius/dify-api:1.0.0066035f93856
ws@7.3.1
7.4.6
1
langgenius/dify-api:0.6.11fca918260dd6
ws@7.3.1
7.4.6
1
lavandadelpatio/frontend:latest501c3f31e0bc
ws@6.2.1
6.2.2
1
linuxserver/codimd:latestb801bbcf6386
ws@6.1.4
6.2.2
1
misskey/misskey:12.110.1e08b7c478093
ws@6.2.1
6.2.2
1
mozilla/sentencecollector:2.0.91da6ff5c4895
ws@7.2.5
7.4.6
1
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
ws@7.4.3
7.4.6
1
openhab/openhab-cloud:a8138a329dd2bac8c4b
ws@7.4.4
7.4.6
1
pachyderm/grpc-proxy:0.4.92b27f41d4d02
ws@7.1.2
7.4.6
1
phntom/codimd:2.4.31b9aafbb62e6
ws@6.1.4
6.2.2
1
requarks/wiki:canary-2.5.2438b5865a7386c
ws@7.4.5
7.4.6
1
slagattollas/server-practica:latest6dd8ead8e2b1
ws@5.2.2
5.2.3
1
testhubio/testhub-frontend:on-preme86c2db53be8
ws@6.2.1
6.2.2
1
thelounge/thelounge:4.2.0-alpine639978459c3a
ws@7.3.1
7.4.6
1
willwill/kube-slack:v4.1.1d443017aae98
ws@6.1.3
6.2.2
1
zwavejs/zwavejs2mqtt:5.0.215a6040fb468
ws@7.4.5
7.4.6
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
ws@6.2.1
6.2.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.