StackRadarChart IndexLive demo

CVE-2021-32640

Medium

Advisory

Published 28 May 2021In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.028; 86th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 67; of 17,781 indexed, latest versions
Container images: 59; deployed by those charts
Fix available: 1 of 1; affected package

ReDoS in Sec-Websocket-Protocol header

Carried by container images the latest versions of 67 of 17,781 indexed charts deploy, on 59 images.

Affected package	Affected versions	Fixed in	Images
wsnpm	5.2.2, 6.1.3, 6.1.4, 6.2.0+8 more	5.2.3, 6.2.2, 7.4.6	59

OSV records: GHSA-6fc8-4gx4-v693

Charts affected

67 by stars

Chart

Latest

Affected images

Radar Score

maxcrm-chartsmaxcrm-charts

1 of 4 See more

maxcrm-charts maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2021-32640.

Container image	Digest	Package	Fixed in
chatwoot/chatwoot :v3.1.0	d530ab8c1753	ws@6.2.1	6.2.2

Open the chart page →

5,940

kommandermesosphere-stable

1 of 29 See more

kommander mesosphere-stable 0.39.2

1 of the 29 container images this version deploys carry CVE-2021-32640.

Container image	Digest	Package	Fixed in
mesosphere/kommander :6.100.1	3917e82333a9	ws@7.3.1	7.4.6

Open the chart page →

68,284

opsportalmesosphere-stable

1 of 3 See more

opsportal mesosphere-stable 0.9.5

1 of the 3 container images this version deploys carry CVE-2021-32640.

Container image	Digest	Package	Fixed in
mesosphere/kommander :6.100.1	3917e82333a9	ws@7.3.1	7.4.6

Open the chart page →

7,027

aws-api-gateway-operatormintel

1 of 11 See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2021-32640.

Container image	Digest	Package	Fixed in
opensearchproject/opensearch-dashboards :1.0.0	39695180364b	ws@6.2.1	6.2.2

Open the chart page →

10,603

standard-application-stackmintel

1 of 12 See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry CVE-2021-32640.

Container image	Digest	Package	Fixed in
opensearchproject/opensearch-dashboards :1.0.0	39695180364b	ws@6.2.1	6.2.2

Open the chart page →

10,603

sample-appmongodb-helm-charts

1 of 2 See more

sample-app mongodb-helm-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-32640.

Container image	Digest	Package	Fixed in
quay.io/mongodb/farm-intro-frontend :0.1	99ccdfd543e1	ws@6.2.1	6.2.2

Open the chart page →

6,438

sentence-collectormozilla

1 of 2 See more

sentence-collector mozilla 0.1.2

1 of the 2 container images this version deploys carry CVE-2021-32640.

Container image	Digest	Package	Fixed in
mozilla/sentencecollector :2.0.9	1da6ff5c4895	ws@7.2.5	7.4.6

Open the chart page →

6,684

example-dev-toolsnoygal

1 of 3 See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2021-32640.

Container image	Digest	Package	Fixed in
linuxserver/codimd :latest	b801bbcf6386	ws@6.1.4	6.2.2

Open the chart page →

27,465

myappp4-helm

1 of 6 See more

myapp p4-helm 0.1.0

1 of the 6 container images this version deploys carry CVE-2021-32640.

Container image	Digest	Package	Fixed in
fjvela/urjc-fjvela-server :1.0.5	3c840aebce22	ws@5.2.2	5.2.3

Open the chart page →

19,720

codimdphntom

1 of 3 See more

6,524

practica-helmpractica-helm

1 of 7 See more

practica-helm practica-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-32640.

Container image	Digest	Package	Fixed in
slagattollas/server-practica :latest	6dd8ead8e2b1	ws@5.2.2	5.2.3

Open the chart page →

28,484

1 of 1 See more

5,215

speedtest-trackersoblivionscall

1 of 1 See more

speedtest-tracker soblivionscall 3.0.4

1 of the 1 container images this version deploys carry CVE-2021-32640.

Container image	Digest	Package	Fixed in
henrywhitaker3/speedtest-tracker :latest	47159a940229	ws@6.2.1	6.2.2

Open the chart page →

2,460

pachydermstatcan

1 of 4 See more

pachyderm statcan 0.5.1

1 of the 4 container images this version deploys carry CVE-2021-32640.

Container image	Digest	Package	Fixed in
pachyderm/grpc-proxy :0.4.9	2b27f41d4d02	ws@7.1.2	7.4.6

Open the chart page →

4,967

kubernetes-external-secretstrozz

1 of 1 See more

kubernetes-external-secrets trozz 6.3.0

1 of the 1 container images this version deploys carry CVE-2021-32640.

Container image	Digest	Package	Fixed in
ghcr.io/external-secrets/kubernetes-external-secrets :6.3.0	eab9bd0b6986	ws@7.2.5	7.4.6

Open the chart page →

2,838

wikiwikijs

1 of 2 See more

5,459

opendistro-eswitcom-gmbh

1 of 3 See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry CVE-2021-32640.

Container image	Digest	Package	Fixed in
amazon/opendistro-for-elasticsearch-kibana :1.13.2	c740d7a89475	ws@6.2.1	6.2.2

Open the chart page →

5,806

Container images carrying it

59 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/ctron/streamsheets-service-graphs :2.4.0	e34964e336c1	ws@5.2.2	5.2.3	1
ghcr.io/ctron/streamsheets-service-machines :2.4.0	0c5a3398d1e4	ws@5.2.2	5.2.3	1
ghcr.io/ctron/streamsheets-service-streams :2.4.0	8ba040e79ca0	ws@6.2.1	6.2.2	1
ghcr.io/data-fair/simple-directory :4	38a4f32fad82	ws@6.1.4	6.2.2	1
ghcr.io/external-secrets/kubernetes-external-secrets :6.3.0	eab9bd0b6986	ws@7.2.5	7.4.6	1
ghcr.io/linuxserver/raneto :version-0.16.6	ef768f3df5d0	ws@6.2.1	6.2.2	1
ghcr.io/linuxserver/wikijs :version-2.5.201	58d377933678	ws@7.4.4	7.4.6	1
quay.io/ibmgaragecloud/developer-dashboard :v1.4.4	7a4b9fedc724	ws@7.1.2	7.4.6	1
quay.io/mongodb/farm-intro-frontend :0.1	99ccdfd543e1	ws@6.2.1	6.2.2	1