CVE-2021-33194
HighAdvisory
Published 17 Feb 2022In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.075
- 94th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 536
- of 17,787 indexed, latest versions
- Container images
- 575
- deployed by those charts
- Fix available
- 1 of 1
- affected package
golang.org/x/net/html Infinite Loop vulnerability
Carried by container images the latest versions of 536 of 17,787 indexed charts deploy, on 575 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| golang.org/ | v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+82 more | 0.0.0-20210520170846-37e1c6afe023 | 575 |
- OSV records
- GHSA-83g2-8m93-v3w7
- Also known as
- BIT-golang-2021-33194, GO-2021-0238
Charts affected
536 by stars
Container images carrying it
575 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 8e7b44bbd123 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| ghcr.io/ | 5e409a6332b4 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| ghcr.io/ | 0b2a41c2a43e | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| ghcr.io/ | ded797477896 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| ghcr.io/ | e949b0f733f0 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| ghcr.io/ | a544a71c6e3b | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| ghcr.io/ | 441da62e6cb3 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| ghcr.io/ | 0bb44992b62c | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| ghcr.io/ | 3311a30b8fe6 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| ghcr.io/ | 5a10cd095699 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| ghcr.io/ | 0fae829caf29 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| ghcr.io/ | d06892218680 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| ghcr.io/ | ef5e31333821 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| ghcr.io/ | 119e24f24b1d | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| ghcr.io/ | f681e0343a31 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| ghcr.io/ | 3491a0f31c4a | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| mcr.microsoft.com/ | ec1803037ed9 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| mcr.microsoft.com/ | f55f30876129 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| mcr.microsoft.com/ | fc5d14e9f26f | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| mcr.microsoft.com/ | 667b1b1ea1e4 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| mcr.microsoft.com/ | 7997e0f236bc | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| mcr.microsoft.com/ | b7d82802cca8 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| public.ecr.aws/ | 67b89ae52240 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| public.ecr.aws/ | 02aed3370fce | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| public.ecr.aws/ | b32c99e7bc45 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| public.ecr.aws/ | cac3ed9a9826 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| public.ecr.aws/ | ae59d222fd87 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| quay.io/ | 5b6701d8fb31 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| quay.io/ | cdefc81c6b2e | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| quay.io/ | d6fd2a9e3273 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| quay.io/ | 13aaae779248 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| quay.io/ | 5d1c2cf4c538 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| quay.io/ | fe2e2e5a2751 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| quay.io/ | a3b9a07648b6 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| quay.io/ | 9663f06adcb1 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| quay.io/ | 71cb50263c3b | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| quay.io/ | c010246124c2 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| quay.io/ | e7b6203ccb37 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| quay.io/ | a20c44021a5d | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| quay.io/ | e1642bf8e933 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| quay.io/ | 595c548dee6f | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| quay.io/ | 81b2d775edad | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| quay.io/ | ada7edd90bec | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| quay.io/ | fd798a5a773e | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| quay.io/ | e045b26eb6df | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| quay.io/ | 09d52508fee9 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| quay.io/ | 15fa0ed662b1 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| quay.io/ | 36ce77526145 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| quay.io/ | 4fbd63194674 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |
| quay.io/ | 34de6387233b | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 | 1 |