StackRadar

CVE-2021-33503

High

Advisory

Published 1 Jun 2021In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.033
88th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
159
of 17,781 indexed, latest versions
Container images
165
deployed by those charts
Fix available
3 of 3
affected packages

Catastrophic backtracking in URL authority parser when passed URL containing many @ characters

Carried by container images the latest versions of 159 of 17,781 indexed charts deploy, on 165 images.

Affected packageAffected versionsFixed inImages
urllib3pypi1.7.1, 1.25.2, 1.25.3, 1.25.7+9 more1.26.5148
python-pipdeb20.0.2-5ubuntu1.1, 20.0.2-5ubuntu1.5, 20.0.2-5ubuntu1.620.0.2-5ubuntu1.724
python-urllib3deb1.25.8-2ubuntu0.11.25.8-2ubuntu0.215
OSV records
GHSA-q2q7-5pp4-w6pgUBUNTU-CVE-2021-33503PYSEC-2021-108
Also known as
USN-5812-1

Charts affected

159 by stars
ChartLatestAffected imagesRadar Score
weblatehelm-charts-nr0.3.21 of 3See more

weblate helm-charts-nr 0.3.2

1 of the 3 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
urllib3@1.25.10
1.26.5

Open the chart page →

7,984
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
python-urllib3@1.25.8-2ubuntu0.1
urllib3@1.25.8
1.25.8-2ubuntu0.2
1.26.5

Open the chart page →

18,813
httpbin2022httpbin2022Verified publisher0.1.11 of 1See more

httpbin2022 httpbin2022 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
mshanley80/httpbin2022:latest5b189a70c0fb
python-pip@20.0.2-5ubuntu1.6
20.0.2-5ubuntu1.7

Open the chart page →

8,685
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:1.2.0e4770285aaf7
python-pip@20.0.2-5ubuntu1.6
20.0.2-5ubuntu1.7

Open the chart page →

37,671
gmaintelVerified publisher0.1.01 of 1See more

gma intel 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
python-pip@20.0.2-5ubuntu1.6
20.0.2-5ubuntu1.7

Open the chart page →

7,650
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
python-pip@20.0.2-5ubuntu1.6
python-urllib3@1.25.8-2ubuntu0.1
urllib3@1.25.8
20.0.2-5ubuntu1.7
1.25.8-2ubuntu0.2
1.26.5

Open the chart page →

18,066
map5gintelVerified publisher1.0.01 of 1See more

map5g intel 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
python-pip@20.0.2-5ubuntu1.6
20.0.2-5ubuntu1.7

Open the chart page →

7,650
jx-app-anchorejenkins-x0.0.41 of 2See more

jx-app-anchore jenkins-x 0.0.4

1 of the 2 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.7.1ed9b3badd17c
urllib3@1.25.8
1.26.5

Open the chart page →

9,854
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
python-pip@20.0.2-5ubuntu1.6
20.0.2-5ubuntu1.7

Open the chart page →

16,417
allurekfirfer0.1.81 of 2See more

allure kfirfer 0.1.8

1 of the 2 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.21.08a4d7e9308de
urllib3@1.25.11
1.26.5

Open the chart page →

12,527
kibana-index-pattern-updaterkfirfer0.0.31 of 1See more

kibana-index-pattern-updater kfirfer 0.0.3

1 of the 1 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
kfirfer/kibana-index-pattern-updater:1.0.12e88cfcec5c93
urllib3@1.26.2
1.26.5

Open the chart page →

3,357
specter-desktopkronkltdVerified publisher0.1.01 of 1See more

specter-desktop kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
lncm/specter-desktop:v0.10.4bca14d04397d
urllib3@1.25.10
1.26.5

Open the chart page →

1,850
deepflowkubesphere-stable6.2.6061 of 8See more

deepflow kubesphere-stable 6.2.606

1 of the 8 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
deepflowce/deepflow-app:v6.2.6.5a1888d35e787
urllib3@1.25.11
1.26.5

Open the chart page →

18,316
pulsarkubesphere-stable2.7.131 of 3See more

pulsar kubesphere-stable 2.7.13

1 of the 3 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
python-pip@20.0.2-5ubuntu1.5
20.0.2-5ubuntu1.7

Open the chart page →

14,320
online-boutiquekubesphere-testVerified publisher0.1.02 of 11See more

online-boutique kubesphere-test 0.1.0

2 of the 11 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3360130ab5850
urllib3@1.25.10
1.26.5
gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.35f60c4988859
urllib3@1.25.10
1.26.5

Open the chart page →

26,018
jenkinsleechistest2.7.11 of 2See more

jenkins leechistest 2.7.1

1 of the 2 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.1.193170069ff0976
urllib3@1.25.10
1.26.5

Open the chart page →

4,423
legendlegend0.1.21 of 1See more

legend legend 0.1.2

1 of the 1 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
ghcr.io/grofers/legend:0.1d6e901ad0ebd
urllib3@1.25.11
1.26.5

Open the chart page →

4,067
neuvectorlifen-chartsVerified publisher1.5.21 of 3See more

neuvector lifen-charts 1.5.2

1 of the 3 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
neuvector/manager:3.2.1f1b7d666eae0
urllib3@1.25.3
1.26.5

Open the chart page →

2,747
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
logiqai/toolbox:2.0.155a574ec5b64
urllib3@1.25.8
1.26.5

Open the chart page →

23,613
nubladolsst-sqre0.9.233 of 5See more

nublado lsst-sqre 0.9.23

3 of the 5 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
lsstsqre/prepuller:latest19c2dfc4e4ff
urllib3@1.26.4
1.26.5
lsstsqre/sciplat-hub:latest5e0ade6bed1c
urllib3@1.26.4
1.26.5
lsstsqre/wfdispatcher:lateste9feb99f524d
urllib3@1.26.4
1.26.5

Open the chart page →

5,786
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
python-pip@20.0.2-5ubuntu1.6
20.0.2-5ubuntu1.7

Open the chart page →

17,779
squash-apilsst-sqre0.1.61 of 3See more

squash-api lsst-sqre 0.1.6

1 of the 3 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
lsstsqre/squash-api:0.5.34879415ec6ac
urllib3@1.26.2
1.26.5

Open the chart page →

6,611
kommandermesosphere-stable0.39.21 of 29See more

kommander mesosphere-stable 0.39.2

1 of the 29 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.3.065095a82d4a1
urllib3@1.26.0
1.26.5

Open the chart page →

68,284
alluremidokura-communityVerified publisher0.1.31 of 2See more

allure midokura-community 0.1.3

1 of the 2 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.19.0cafa03b94dac
urllib3@1.25.11
1.26.5

Open the chart page →

12,847
buildkite-exporterminaVerified publisher0.1.41 of 1See more

buildkite-exporter mina 0.1.4

1 of the 1 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
codaprotocol/buildkite-exporter:0.2.137c68e67a401
urllib3@1.26.3
1.26.5

Open the chart page →

2,599
o1-botminaVerified publisher0.0.31 of 1See more

o1-bot mina 0.0.3

1 of the 1 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
codaprotocol/coda-user-agent:0.1.54ba4dd3a041f
urllib3@1.25.9
1.26.5

Open the chart page →

2,655
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
mintproject/data-catalog:9be70359feabe03ed55bfdbf92c20a7e43ab928b67d2f2103085
urllib3@1.26.2
1.26.5

Open the chart page →

43,341
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
python-pip@20.0.2-5ubuntu1.6
20.0.2-5ubuntu1.7

Open the chart page →

15,675
mozalert-controllermozilla0.4.01 of 1See more

mozalert-controller mozilla 0.4.0

1 of the 1 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
afrank/mozalert-controller:latestd463c37b08d7
urllib3@1.25.10
1.26.5

Open the chart page →

2,969
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
urllib3@1.26.1
1.26.5

Open the chart page →

55,726
nominatimnominatim-chart1.3.01 of 3See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
mediagis/nominatim:3.7c15e941485ef
python-pip@20.0.2-5ubuntu1.6
20.0.2-5ubuntu1.7

Open the chart page →

22,658
zookeeper-helm-chartnotesprojectchart0.1.01 of 1See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
urllib3@1.7.1
1.26.5

Open the chart page →

41,427
anchore-engineopencloudcx1.13.01 of 2See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.10.0bde9eedf639d
urllib3@1.25.9
1.26.5

Open the chart page →

18,023
comacopencord1.0.01 of 9See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
omecproject/kubernetes-synchronizer:comac-1.0.07c17a7b1d1ef
urllib3@1.25.3
1.26.5

Open the chart page →

88,546
comac-platformopencord0.0.171 of 11See more

comac-platform opencord 0.0.17

1 of the 11 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
omecproject/kubernetes-synchronizer:comac-1.0.07c17a7b1d1ef
urllib3@1.25.3
1.26.5

Open the chart page →

26,211
nem-monitoringopencord1.3.221 of 9See more

nem-monitoring opencord 1.3.22

1 of the 9 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.1.20af151f677a63
urllib3@1.25.3
1.26.5

Open the chart page →

4,612
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
openwhisk/ow-utils:1.0.0c80dba0de3aa
urllib3@1.25.11
1.26.5

Open the chart page →

36,215
stocks-nasdaq-crawlerphntom0.0.361 of 1See more

stocks-nasdaq-crawler phntom 0.0.36

1 of the 1 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
phntom/stocks-nasdaq-crawler:0.0.28d2b844700b57
urllib3@1.25.10
1.26.5

Open the chart page →

1,845
seafilephybros-helm-charts4.0.11 of 1See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.97ac833196f60
python-pip@20.0.2-5ubuntu1.6
python-urllib3@1.25.8-2ubuntu0.1
urllib3@1.25.8
20.0.2-5ubuntu1.7
1.25.8-2ubuntu0.2
1.26.5

Open the chart page →

22,084
gitlab-runner-operatorpnnl-miscscripts0.1.61 of 1See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
urllib3@1.25.8
1.26.5

Open the chart page →

11,151
reportportalreportportal5.7.22 of 8See more

reportportal reportportal 5.7.2

2 of the 8 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
reportportal/service-auto-analyzer:5.7.295ada4a216ce
urllib3@1.25.11
1.26.5
reportportal/service-metrics-gatherer:1.1.202a0e6dc11161
urllib3@1.25.11
1.26.5

Open the chart page →

25,737
argocdromholdings1.8.11 of 3See more

argocd romholdings 1.8.1

1 of the 3 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
urllib3@1.25.11
1.26.5

Open the chart page →

10,466
seldon-core-analyticsseldon1.17.11 of 8See more

seldon-core-analytics seldon 1.17.1

1 of the 8 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.1.1517b98eecdf6d1
urllib3@1.25.9
1.26.5

Open the chart page →

10,733
seldon-core-loadtestingseldon0.2.01 of 1See more

seldon-core-loadtesting seldon 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
seldonio/locust-core:0.81d0da98a2d76
urllib3@1.25.3
1.26.5

Open the chart page →

23,007
seldon-deployseldon1.4.01 of 2See more

seldon-deploy seldon 1.4.0

1 of the 2 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
seldonio/seldon-request-logger:1.11.24e985d2006a8
urllib3@1.25.9
1.26.5

Open the chart page →

21,997
digdagskyoo20030.5.21 of 4See more

digdag skyoo2003 0.5.2

1 of the 4 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
ghcr.io/skyoo2003/digdag:0.0.1821fd6a6f2cd
urllib3@1.26.2
1.26.5

Open the chart page →

6,949
marge-botslamdev0.0.11 of 1See more

marge-bot slamdev 0.0.1

1 of the 1 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.11.07235809b43b3
urllib3@1.26.3
1.26.5

Open the chart page →

1,426
weblateslamdev0.0.111 of 2See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
weblate/weblate:3.11.3-182848df56ecd
urllib3@1.25.8
1.26.5

Open the chart page →

8,694
gar-exportersoftonic0.1.11 of 1See more

gar-exporter softonic 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
softonic/gar-exporter:0.2.1a64d6c0e0ae5
urllib3@1.25.11
1.26.5

Open the chart page →

2,296
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2021-33503.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
python-pip@20.0.2-5ubuntu1.6
python-urllib3@1.25.8-2ubuntu0.1
urllib3@1.25.8
20.0.2-5ubuntu1.7
1.25.8-2ubuntu0.2
1.26.5

Open the chart page →

30,687

Container images carrying it

165 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
urllib3@1.25.8
1.26.5
1
ghcr.io/alexanderbabel/database-s3-backup:1.3.33191b771a6f2
urllib3@1.25.11
1.26.5
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
urllib3@1.25.8
1.26.5
1
ghcr.io/grofers/legend:0.1d6e901ad0ebd
urllib3@1.25.11
1.26.5
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
python-urllib3@1.25.8-2ubuntu0.1
urllib3@1.25.8
1.25.8-2ubuntu0.2
1.26.5
1
ghcr.io/linuxserver/mylar3:version-v0.5.3b96f0e97ab3f
urllib3@1.26.2
1.26.5
1
ghcr.io/linuxserver/tvheadend:version-eb59284b66c4c9e18e40
urllib3@1.25.9
1.26.5
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
python-pip@20.0.2-5ubuntu1.6
20.0.2-5ubuntu1.7
1
ghcr.io/skyoo2003/digdag:0.0.1821fd6a6f2cd
urllib3@1.26.2
1.26.5
1
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
python-pip@20.0.2-5ubuntu1.6
20.0.2-5ubuntu1.7
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
python-pip@20.0.2-5ubuntu1.6
20.0.2-5ubuntu1.7
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
python-urllib3@1.25.8-2ubuntu0.1
urllib3@1.25.8
1.25.8-2ubuntu0.2
1.26.5
1
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
urllib3@1.26.2
1.26.5
1
quay.io/kiwigrid/k8s-sidecar:1.10.718feb3906286
urllib3@1.25.11
1.26.5
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
python-pip@20.0.2-5ubuntu1.1
20.0.2-5ubuntu1.7
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.