CVE-2021-34532
MediumAdvisory
Published 25 Aug 2021In the index since 8 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.5
- base score, highest
- EPSS
- 0.012
- 67th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 5
- of 17,781 indexed, latest versions
- Container images
- 7
- deployed by those charts
- Fix available
- 1 of 1
- affected package
ASP.NET Core Information Disclosure Vulnerability
Carried by container images the latest versions of 5 of 17,781 indexed charts deploy, on 7 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| Microsoft.AspNetCore.Authentication.JwtBearernuget | 2.1.2, 3.0.0, 3.1.1, 3.1.2+2 more | 2.1.29, 3.1.18, 5.0.9 | 7 |
- OSV records
- GHSA-q7cg-43mg-qp69
- Also known as
- BIT-aspnet-core-2021-34532
Charts affected
5 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| powershelluniversaldigitalhubVerified publisher | 0.1.2 | 1 of 1See more | 6,940 |
| reservation-appreservation-app | 1.0.9 | 1 of 4See more | 6,639 |
| ConvertServiceWeb-Helm-Buildconvertserviceweb-helm-build | 0.1.1 | 2 of 7See more | 10,091 |
| kafkamagicdysnixVerified publisher | 0.2.3 | 1 of 1See more | 1,906 |
| dotstatsuitestatcan | 0.2.8 | 2 of 6See more | 3,841 |
Container images carrying it
7 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| aidasi/ | 838b5e2080bc | Microsoft.AspNetCore.Authentication.JwtBearer | 3.1.18 | 1 |
| aidasi/ | 5ce8dbff7fdc | Microsoft.AspNetCore.Authentication.JwtBearer | 3.1.18 | 1 |
| digitsy/ | f91d7f56b55d | Microsoft.AspNetCore.Authentication.JwtBearer | 3.1.18 | 1 |
| ironmansoftware/ | 1943c73cce31 | Microsoft.AspNetCore.Authentication.JwtBearer | 2.1.29 | 1 |
| siscc/ | bb1e9a45b6fa | Microsoft.AspNetCore.Authentication.JwtBearer | 3.1.18 | 1 |
| siscc/ | 00d73f06edcf | Microsoft.AspNetCore.Authentication.JwtBearer | 3.1.18 | 1 |
| zbalogh/ | 09a51b809674 | Microsoft.AspNetCore.Authentication.JwtBearer | 5.0.9 | 1 |