StackRadarChart IndexLive demo

CVE-2021-32640

Medium

Advisory

Published 28 May 2021In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.028; 86th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 67; of 17,781 indexed, latest versions
Container images: 59; deployed by those charts
Fix available: 1 of 1; affected package

ReDoS in Sec-Websocket-Protocol header

Carried by container images the latest versions of 67 of 17,781 indexed charts deploy, on 59 images.

Affected package	Affected versions	Fixed in	Images
wsnpm	5.2.2, 6.1.3, 6.1.4, 6.2.0+8 more	5.2.3, 6.2.2, 7.4.6	59

OSV records: GHSA-6fc8-4gx4-v693

Charts affected

67 by stars

Chart

Latest

Affected images

Radar Score

maxcrm-chartsmaxcrm-charts

1 of 4 See more

maxcrm-charts maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2021-32640.

Container image	Digest	Package	Fixed in
chatwoot/chatwoot :v3.1.0	d530ab8c1753	ws@6.2.1	6.2.2

Open the chart page →

5,940

kommandermesosphere-stable

1 of 29 See more

kommander mesosphere-stable 0.39.2

1 of the 29 container images this version deploys carry CVE-2021-32640.

Container image	Digest	Package	Fixed in
mesosphere/kommander :6.100.1	3917e82333a9	ws@7.3.1	7.4.6

Open the chart page →

68,284

opsportalmesosphere-stable

1 of 3 See more

opsportal mesosphere-stable 0.9.5

1 of the 3 container images this version deploys carry CVE-2021-32640.

Container image	Digest	Package	Fixed in
mesosphere/kommander :6.100.1	3917e82333a9	ws@7.3.1	7.4.6

Open the chart page →

7,027

aws-api-gateway-operatormintel

1 of 11 See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2021-32640.

Container image	Digest	Package	Fixed in
opensearchproject/opensearch-dashboards :1.0.0	39695180364b	ws@6.2.1	6.2.2

Open the chart page →

10,603

standard-application-stackmintel

1 of 12 See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry CVE-2021-32640.

Container image	Digest	Package	Fixed in
opensearchproject/opensearch-dashboards :1.0.0	39695180364b	ws@6.2.1	6.2.2

Open the chart page →

10,603

sample-appmongodb-helm-charts

1 of 2 See more

sample-app mongodb-helm-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-32640.

Container image	Digest	Package	Fixed in
quay.io/mongodb/farm-intro-frontend :0.1	99ccdfd543e1	ws@6.2.1	6.2.2

Open the chart page →

6,438

sentence-collectormozilla

1 of 2 See more

sentence-collector mozilla 0.1.2

1 of the 2 container images this version deploys carry CVE-2021-32640.

Container image	Digest	Package	Fixed in
mozilla/sentencecollector :2.0.9	1da6ff5c4895	ws@7.2.5	7.4.6

Open the chart page →

6,684

example-dev-toolsnoygal

1 of 3 See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2021-32640.

Container image	Digest	Package	Fixed in
linuxserver/codimd :latest	b801bbcf6386	ws@6.1.4	6.2.2

Open the chart page →

27,465

myappp4-helm

1 of 6 See more

myapp p4-helm 0.1.0

1 of the 6 container images this version deploys carry CVE-2021-32640.

Container image	Digest	Package	Fixed in
fjvela/urjc-fjvela-server :1.0.5	3c840aebce22	ws@5.2.2	5.2.3

Open the chart page →

19,720

codimdphntom

1 of 3 See more

6,524

practica-helmpractica-helm

1 of 7 See more

practica-helm practica-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-32640.

Container image	Digest	Package	Fixed in
slagattollas/server-practica :latest	6dd8ead8e2b1	ws@5.2.2	5.2.3

Open the chart page →

28,484

1 of 1 See more

5,215

speedtest-trackersoblivionscall

1 of 1 See more

speedtest-tracker soblivionscall 3.0.4

1 of the 1 container images this version deploys carry CVE-2021-32640.

Container image	Digest	Package	Fixed in
henrywhitaker3/speedtest-tracker :latest	47159a940229	ws@6.2.1	6.2.2

Open the chart page →

2,460

pachydermstatcan

1 of 4 See more

pachyderm statcan 0.5.1

1 of the 4 container images this version deploys carry CVE-2021-32640.

Container image	Digest	Package	Fixed in
pachyderm/grpc-proxy :0.4.9	2b27f41d4d02	ws@7.1.2	7.4.6

Open the chart page →

4,967

kubernetes-external-secretstrozz

1 of 1 See more

kubernetes-external-secrets trozz 6.3.0

1 of the 1 container images this version deploys carry CVE-2021-32640.

Container image	Digest	Package	Fixed in
ghcr.io/external-secrets/kubernetes-external-secrets :6.3.0	eab9bd0b6986	ws@7.2.5	7.4.6

Open the chart page →

2,838

wikiwikijs

1 of 2 See more

5,459

opendistro-eswitcom-gmbh

1 of 3 See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry CVE-2021-32640.

Container image	Digest	Package	Fixed in
amazon/opendistro-for-elasticsearch-kibana :1.13.2	c740d7a89475	ws@6.2.1	6.2.2

Open the chart page →

5,806

Container images carrying it

59 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
oscarsotosanchez/server :v1.0	6e2e1279126b	ws@5.2.2	5.2.3	4
amazon/opendistro-for-elasticsearch-kibana :1.13.2	c740d7a89475	ws@6.2.1	6.2.2	2
chatwoot/chatwoot :v3.1.0	d530ab8c1753	ws@6.2.1	6.2.2	2
fjvela/urjc-fjvela-server :1.0.5	3c840aebce22	ws@5.2.2	5.2.3	2
governify/assets-manager :v1.4.1	2987672448c7	ws@6.2.0	6.2.2	2
koenkk/zigbee2mqtt :1.19.1	5f9129b1ffbc	ws@7.4.5	7.4.6	2
martinaif/backstage-k8s-demo-backend :test1	43bc40a3da0e	ws@6.2.1	6.2.2	2
mesosphere/kommander :6.100.1	3917e82333a9	ws@7.3.1	7.4.6	2
opensearchproject/opensearch-dashboards :1.0.0	39695180364b	ws@6.2.1	6.2.2	2
requarks/wiki :2 :latest	68f0d1848261	ws@7.4.5	7.4.6	2
amundsendev/amundsen-frontend :2.1.1	69e7915e61c1	ws@5.2.2	5.2.3	1
assistiot/cybersecurity-monitoring_id-kbn :latest	2297b4350211	ws@7.3.1	7.4.6	1
assistiot/cybersecurity-monitoring_ir-kbn :latest	0570b27bb7c2	ws@7.3.1	7.4.6	1
bastilimbach/docker-magicmirror :v2.15.0	41b0835ab31e	ws@7.4.3	7.4.6	1
chatwoot/chatwoot :v4.15.1	67ebc751c171	ws@6.2.1	6.2.2	1
cnieg/maildev :v1.1.9	98ee05668915	ws@6.1.4	6.2.2	1
codercom/code-server :3.10.2	47605610ad8d	ws@7.4.5	7.4.6	1
conduction/conduction-ui-app :dev	d591f5e6f2a9	ws@6.2.1	6.2.2	1
datarhei/restreamer :0.6.4	655e12f9eeed	ws@7.2.3	7.4.6	1
davidvmar/urjc-davidvmar-server :1.0.0	5663f5b24615	ws@5.2.2	5.2.3	1
electerious/ackee :3.2.0	5e7173fa321c	ws@7.4.5	7.4.6	1
ethersphere/bzz-token-service :latest	7624f11a72ad	ws@5.2.2	5.2.3	1
fiware/iotagent-ul :1.14.0	fe11f55a926d	ws@6.2.1	6.2.2	1
flagsmith/flagsmith-frontend :v2.6.0	df02a29e8b0c	ws@6.2.1	6.2.2	1
gristlabs/grist :0.7.9	6e71b1914a7e	ws@7.4.4	7.4.6	1
halkeye/hubot :latest	9764d2202130	ws@6.2.1	6.2.2	1
halkeye/irslackd :latest	7638bfba70b0	ws@5.2.2	5.2.3	1
hansehe/graphql-gateway :1.0.4	58e09540afbc	ws@6.2.1	6.2.2	1
henrywhitaker3/speedtest-tracker :latest	47159a940229	ws@6.2.1	6.2.2	1
inseefrlab/shelly :cloudshell	31f04ca7436b	ws@6.1.4	6.2.2	1
koumoul/capture :1	7108d47be3b2	ws@6.2.1	6.2.2	1
kubeflownotebookswg/centraldashboard :v1.6.1	37300551dea6	ws@6.2.1	6.2.2	1
kubeflownotebookswg/centraldashboard :v1.9.2	af55c22ef5de	ws@6.2.1	6.2.2	1
langgenius/dify-api :1.0.0	066035f93856	ws@7.3.1	7.4.6	1
langgenius/dify-api :0.6.11	fca918260dd6	ws@7.3.1	7.4.6	1
lavandadelpatio/frontend :latest	501c3f31e0bc	ws@6.2.1	6.2.2	1
linuxserver/codimd :latest	b801bbcf6386	ws@6.1.4	6.2.2	1
misskey/misskey :12.110.1	e08b7c478093	ws@6.2.1	6.2.2	1
mozilla/sentencecollector :2.0.9	1da6ff5c4895	ws@7.2.5	7.4.6	1
nightscout/cgm-remote-monitor :14.2.5	00c3b4833f1b	ws@7.4.3	7.4.6	1
openhab/openhab-cloud :a8138a3	29dd2bac8c4b	ws@7.4.4	7.4.6	1
pachyderm/grpc-proxy :0.4.9	2b27f41d4d02	ws@7.1.2	7.4.6	1
phntom/codimd :2.4.3	1b9aafbb62e6	ws@6.1.4	6.2.2	1
requarks/wiki :canary-2.5.243	8b5865a7386c	ws@7.4.5	7.4.6	1
slagattollas/server-practica :latest	6dd8ead8e2b1	ws@5.2.2	5.2.3	1
testhubio/testhub-frontend :on-prem	e86c2db53be8	ws@6.2.1	6.2.2	1
thelounge/thelounge :4.2.0-alpine	639978459c3a	ws@7.3.1	7.4.6	1
willwill/kube-slack :v4.1.1	d443017aae98	ws@6.1.3	6.2.2	1
zwavejs/zwavejs2mqtt :5.0.2	15a6040fb468	ws@7.4.5	7.4.6	1
ghcr.io/ctron/streamsheets-gateway :2.4.0	0635f17c9d2c	ws@6.2.1	6.2.2	1