StackRadar

CVE-2021-33621

High

Advisory

Published 18 Nov 2022In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.024
83rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
22
of 17,781 indexed, latest versions
Container images
26
deployed by those charts
Fix available
4 of 4
affected packages

HTTP response splitting in CGI

Carried by container images the latest versions of 22 of 17,781 indexed charts deploy, on 26 images.

Affected packageAffected versionsFixed inImages
cgigem0.1.0, 0.1.0.1, 0.2.0, 0.2.1+1 more0.1.0.2, 0.2.2, 0.3.524
ruby2.7deb2.7.0-5ubuntu1.4, 2.7.0-5ubuntu1.52.7.0-5ubuntu1.85
ruby2.3deb2.3.1-2~16.04.52.3.1-2~ubuntu16.04.16+esm42
rubybitnami2.7.4-12.7.71
OSV records
BIT-ruby-2021-33621GHSA-vc47-6rqg-c7f5UBUNTU-CVE-2021-33621
Also known as
BIT-ruby-min-2021-33621, USN-5806-1, USN-5806-3

Charts affected

22 by stars
ChartLatestAffected imagesRadar Score
puppetserverpuppetserver9.5.21 of 5See more

puppetserver puppetserver 9.5.2

1 of the 5 container images this version deploys carry CVE-2021-33621.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
cgi@0.2.0
0.2.2

Open the chart page →

14,184
uffizzi-appuffizzi-app1.3.01 of 14See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2021-33621.

Container imageDigestPackageFixed in
uffizzi/app:latest66e9e3937c60
cgi@0.1.0.1
0.1.0.2

Open the chart page →

19,337
gollumgeek-cookbookVerified publisher3.4.21 of 3See more

gollum geek-cookbook 3.4.2

1 of the 3 container images this version deploys carry CVE-2021-33621.

Container imageDigestPackageFixed in
gollumorg/gollum:latest7cd5305a3cf7
cgi@0.1.0
0.1.0.2

Open the chart page →

4,629
docker-registry-browsergmelilloVerified publisher0.1.21 of 1See more

docker-registry-browser gmelillo 0.1.2

1 of the 1 container images this version deploys carry CVE-2021-33621.

Container imageDigestPackageFixed in
klausmeyer/docker-registry-browser:1.3.5430a440d95af
cgi@0.1.0
0.1.0.2

Open the chart page →

4,108
openprojecthomeenterpriseinc0.5.01 of 1See more

openproject homeenterpriseinc 0.5.0

1 of the 1 container images this version deploys carry CVE-2021-33621.

Container imageDigestPackageFixed in
openproject/community:12.0.2734743d11094
cgi@0.1.0
0.1.0.2

Open the chart page →

6,810
opennebulakvaps2.1.15 of 9See more

opennebula kvaps 2.1.1

5 of the 9 container images this version deploys carry CVE-2021-33621.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
cgi@0.1.0
ruby2.7@2.7.0-5ubuntu1.5
0.1.0.2
2.7.0-5ubuntu1.8
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
cgi@0.1.0
ruby2.7@2.7.0-5ubuntu1.4
0.1.0.2
2.7.0-5ubuntu1.8
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
cgi@0.1.0
ruby2.7@2.7.0-5ubuntu1.5
0.1.0.2
2.7.0-5ubuntu1.8
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
cgi@0.1.0
ruby2.7@2.7.0-5ubuntu1.5
0.1.0.2
2.7.0-5ubuntu1.8
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
cgi@0.1.0
ruby2.7@2.7.0-5ubuntu1.5
0.1.0.2
2.7.0-5ubuntu1.8

Open the chart page →

113,791
bookinfobasictechno0.1.01 of 6See more

bookinfo basictechno 0.1.0

1 of the 6 container images this version deploys carry CVE-2021-33621.

Container imageDigestPackageFixed in
istio/examples-bookinfo-details-v1:1.17.02b081e3c86dd
cgi@0.1.0
0.1.0.2

Open the chart page →

20,671
prometheus-puppetdb-sdcamptocamp38.0.21 of 2See more

prometheus-puppetdb-sd camptocamp3 8.0.2

1 of the 2 container images this version deploys carry CVE-2021-33621.

Container imageDigestPackageFixed in
puppet/puppet-agent:7.14.00b6fd9a6b7da
cgi@0.1.0.1
0.1.0.2

Open the chart page →

6,143
puppetservercamptocamp31.0.11 of 2See more

puppetserver camptocamp3 1.0.1

1 of the 2 container images this version deploys carry CVE-2021-33621.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
cgi@0.2.0
0.2.2

Open the chart page →

5,886
pact-brokercloud-native-toolkit0.3.01 of 1See more

pact-broker cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2021-33621.

Container imageDigestPackageFixed in
pactfoundation/pact-broker:2.101.0.0a3021fc42834
cgi@0.1.0.1
0.1.0.2

Open the chart page →

2,814
yelbfairwinds-incubator0.1.11 of 5See more

yelb fairwinds-incubator 0.1.1

1 of the 5 container images this version deploys carry CVE-2021-33621.

Container imageDigestPackageFixed in
quay.io/fairwinds/yelb-appserver:v0.6.0fae21f06131f
cgi@0.1.0
ruby@2.7.4-1
0.1.0.2
2.7.7

Open the chart page →

5,089
icinga2g0dscookie0.2.01 of 1See more

icinga2 g0dscookie 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-33621.

Container imageDigestPackageFixed in
ghcr.io/g0dscookie/icinga2:2.13.5da81246ccfc9
cgi@0.1.0
0.1.0.2

Open the chart page →

4,428
docker-registry-browsergtaylor0.4.41 of 1See more

docker-registry-browser gtaylor 0.4.4

1 of the 1 container images this version deploys carry CVE-2021-33621.

Container imageDigestPackageFixed in
klausmeyer/docker-registry-browser:1.4.0bdc4c6b8595b
cgi@0.2.0
0.2.2

Open the chart page →

3,564
fluentd-elasticsearchkfirfer13.9.11 of 1See more

fluentd-elasticsearch kfirfer 13.9.1

1 of the 1 container images this version deploys carry CVE-2021-33621.

Container imageDigestPackageFixed in
quay.io/fluentd_elasticsearch/fluentd:v4.2.399079df58561
cgi@0.3.1
0.3.5

Open the chart page →

1,178
danboorumy0nVerified publisher0.0.21 of 1See more

danbooru my0n 0.0.2

1 of the 1 container images this version deploys carry CVE-2021-33621.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
cgi@0.3.1
0.3.5

Open the chart page →

12,791
danbooru-stackmy0nVerified publisher0.0.31 of 4See more

danbooru-stack my0n 0.0.3

1 of the 4 container images this version deploys carry CVE-2021-33621.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
cgi@0.3.1
0.3.5

Open the chart page →

12,791
comacopencord1.0.01 of 9See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2021-33621.

Container imageDigestPackageFixed in
omecproject/onos-progran:1.0.05715e5648aa0
ruby2.3@2.3.1-2~16.04.5
2.3.1-2~ubuntu16.04.16+esm4

Open the chart page →

88,546
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2021-33621.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
ruby2.3@2.3.1-2~16.04.5
2.3.1-2~ubuntu16.04.16+esm4

Open the chart page →

38,865
mastodonrivals-spaceVerified publisher3.1.21 of 3See more

mastodon rivals-space 3.1.2

1 of the 3 container images this version deploys carry CVE-2021-33621.

Container imageDigestPackageFixed in
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
cgi@0.2.1
0.2.2

Open the chart page →

6,026
velero-notificationsvelero-notifications1.1.01 of 1See more

velero-notifications velero-notifications 1.1.0

1 of the 1 container images this version deploys carry CVE-2021-33621.

Container imageDigestPackageFixed in
ghcr.io/simoncaron/velero-notifications:1.0.0d058963d4de7
cgi@0.1.0.1
0.1.0.2

Open the chart page →

1,285
kongwallarmVerified publisher4.6.32 of 7See more

kong wallarm 4.6.3

2 of the 7 container images this version deploys carry CVE-2021-33621.

Container imageDigestPackageFixed in
wallarm/ingress-ruby:4.6.0-1aecdb35c4def
cgi@0.1.0
0.1.0.2
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
cgi@0.1.0
0.1.0.2

Open the chart page →

11,405
kong-previewwallarmVerified publisher4.2.31 of 5See more

kong-preview wallarm 4.2.3

1 of the 5 container images this version deploys carry CVE-2021-33621.

Container imageDigestPackageFixed in
wallarm/ingress-ruby:4.2.1-195ea2632326c
cgi@0.1.0
0.1.0.2

Open the chart page →

2,905

Container images carrying it

26 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
cgi@0.3.1
0.3.5
2
gollumorg/gollum:latest7cd5305a3cf7
cgi@0.1.0
0.1.0.2
1
istio/examples-bookinfo-details-v1:1.17.02b081e3c86dd
cgi@0.1.0
0.1.0.2
1
klausmeyer/docker-registry-browser:1.3.5430a440d95af
cgi@0.1.0
0.1.0.2
1
klausmeyer/docker-registry-browser:1.4.0bdc4c6b8595b
cgi@0.2.0
0.2.2
1
muluder/prograncontrollermcord:0.1.843b597a93da7
ruby2.3@2.3.1-2~16.04.5
2.3.1-2~ubuntu16.04.16+esm4
1
omecproject/onos-progran:1.0.05715e5648aa0
ruby2.3@2.3.1-2~16.04.5
2.3.1-2~ubuntu16.04.16+esm4
1
openproject/community:12.0.2734743d11094
cgi@0.1.0
0.1.0.2
1
pactfoundation/pact-broker:2.101.0.0a3021fc42834
cgi@0.1.0.1
0.1.0.2
1
puppet/puppet-agent:7.14.00b6fd9a6b7da
cgi@0.1.0.1
0.1.0.2
1
uffizzi/app:latest66e9e3937c60
cgi@0.1.0.1
0.1.0.2
1
wallarm/ingress-ruby:4.2.1-195ea2632326c
cgi@0.1.0
0.1.0.2
1
wallarm/ingress-ruby:4.6.0-1aecdb35c4def
cgi@0.1.0
0.1.0.2
1
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
cgi@0.1.0
0.1.0.2
1
ghcr.io/g0dscookie/icinga2:2.13.5da81246ccfc9
cgi@0.1.0
0.1.0.2
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
cgi@0.1.0
ruby2.7@2.7.0-5ubuntu1.5
0.1.0.2
2.7.0-5ubuntu1.8
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
cgi@0.1.0
ruby2.7@2.7.0-5ubuntu1.4
0.1.0.2
2.7.0-5ubuntu1.8
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
cgi@0.1.0
ruby2.7@2.7.0-5ubuntu1.5
0.1.0.2
2.7.0-5ubuntu1.8
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
cgi@0.1.0
ruby2.7@2.7.0-5ubuntu1.5
0.1.0.2
2.7.0-5ubuntu1.8
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
cgi@0.1.0
ruby2.7@2.7.0-5ubuntu1.5
0.1.0.2
2.7.0-5ubuntu1.8
1
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
cgi@0.2.1
0.2.2
1
ghcr.io/simoncaron/velero-notifications:1.0.0d058963d4de7
cgi@0.1.0.1
0.1.0.2
1
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
cgi@0.2.0
0.2.2
1
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
cgi@0.2.0
0.2.2
1
quay.io/fairwinds/yelb-appserver:v0.6.0fae21f06131f
cgi@0.1.0
ruby@2.7.4-1
0.1.0.2
2.7.7
1
quay.io/fluentd_elasticsearch/fluentd:v4.2.399079df58561
cgi@0.3.1
0.3.5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.