CVE-2021-3572
MediumAdvisory
Published 10 Nov 2021In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.7
- base score, highest
- EPSS
- 0.018
- 78th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 376
- of 17,781 indexed, latest versions
- Container images
- 377
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Improper Input Validation in pip
Carried by container images the latest versions of 376 of 17,781 indexed charts deploy, on 377 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| pippypi | 1.5.4, 8.1.1, 8.1.2, 9.0.0+27 more | 21.1 | 365 |
| python-pipdeb | 1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+3 more | 1.5.4-1ubuntu4+esm1, 8.1.1-2ubuntu0.6+esm2, 9.0.1-2.3~ubuntu1.18.04.5+esm2 | 27 |
| python-piprpm | 9.0.3-15.el8, 9.0.3-16.el8, 9.0.3-18.el8, 9.0.3-19.el8 | 0:9.0.3-20.el8 | 35 |
- OSV records
- GHSA-5xp3-jfq3-5q8xRHSA-2021:4455UBUNTU-CVE-2021-3572
- Also known as
- PYSEC-2021-437, USN-4961-2
Charts affected
376 by stars
Container images carrying it
377 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| coderenvs/ | 76fd37fe6830 | pip | 21.1 | 1 |
| conduction/ | 07c44005da9d | pip | 21.1 | 1 |
| conduction/ | e154d5781c8a | pip | 21.1 | 1 |
| conduction/ | ef3a3fb0ad47 | pip | 21.1 | 1 |
| conduction/ | 5f5add2c12e0 | pip | 21.1 | 1 |
| conduction/ | e3546b97faea | pip | 21.1 | 1 |
| conduction/ | 45f20c4cd2fa | pip | 21.1 | 1 |
| conduction/ | 8722700f1768 | pip | 21.1 | 1 |
| conduction/ | c3e5737ae68f | pip | 21.1 | 1 |
| confluentinc/ | f2975d507a2a | pip python-pip | 21.1 0:9.0.3-20.el8 | 1 |
| confluentinc/ | 8f1544df1f48 | pip python-pip | 21.1 0:9.0.3-20.el8 | 1 |
| confluentinc/ | 1bbda887bc53 | pip | 21.1 | 1 |
| confluentinc/ | 3bf359d5e340 | pip | 21.1 | 1 |
| confluentinc/ | 83dbca3efd2a | pip | 21.1 | 1 |
| confluentinc/ | adc392d28a1e | pip | 21.1 | 1 |
| confluentinc/ | c0224a1adf7a | pip | 21.1 | 1 |
| confluentinc/ | c87b1c07fb53 | pip | 21.1 | 1 |
| confluentinc/ | dc9b972db002 | pip | 21.1 | 1 |
| confluentinc/ | 4bc70a83ca6f | pip python-pip | 21.1 0:9.0.3-20.el8 | 1 |
| confluentinc/ | b0b7aa26254a | pip python-pip | 21.1 0:9.0.3-20.el8 | 1 |
| confluentinc/ | 8ec46c27982f | pip | 21.1 | 1 |
| confluentinc/ | ee403d5b9090 | pip python-pip | 21.1 0:9.0.3-20.el8 | 1 |
| confluentinc/ | b651d4b6185a | pip python-pip | 21.1 0:9.0.3-20.el8 | 1 |
| confluentinc/ | 0bec03c1f3ce | pip | 21.1 | 1 |
| confluentinc/ | 5ca5f3269814 | pip | 21.1 | 1 |
| confluentinc/ | 78c190f4472c | pip python-pip | 21.1 0:9.0.3-20.el8 | 1 |
| craigwillis/ | ae317d7e4724 | pip | 21.1 | 1 |
| ctron/ | 8fdea8f76499 | python-pip | 0:9.0.3-20.el8 | 1 |
| daskdev/ | 4ecd7bc35500 | pip | 21.1 | 1 |
| daskdev/ | 052630f5ca04 | pip | 21.1 | 1 |
| datadog/ | 8f20e56b5311 | pip | 21.1 | 1 |
| datadog/ | aad9994de6a7 | pip | 21.1 | 1 |
| datawire/ | 07f8fe4f4f8e | pip | 21.1 | 1 |
| datawire/ | 2beb65062c8b | pip | 21.1 | 1 |
| datawire/ | 9716efbdd24b | pip | 21.1 | 1 |
| dbanda/ | 0ca125e68e53 | pip | 21.1 | 1 |
| dbanda/ | d0e6367876ae | pip | 21.1 | 1 |
| dellemc/ | 148ada9060a9 | pip | 21.1 | 1 |
| dnationcloud/ | dee6376560f5 | pip | 21.1 | 1 |
| dongjiang1989/ | 4bf9ae391948 | pip | 21.1 | 1 |
| dpage/ | a5a656e1d5fd | pip | 21.1 | 1 |
| dpage/ | b1f00b8163cf | pip | 21.1 | 1 |
| drgrove/ | 361721759a2b | pip | 21.1 | 1 |
| dysnix/ | 19951e3e7a32 | pip | 21.1 | 1 |
| elastichq/ | bb3bd22c2b87 | pip | 21.1 | 1 |
| esphome/ | 3f51ec10e823 | pip | 21.1 | 1 |
| fiware/ | 3e3ec88d59ed | pip | 21.1 | 1 |
| fiware/ | 29456835bb2c | pip | 21.1 | 1 |
| flagsmith/ | fd58556339a4 | pip | 21.1 | 1 |
| flyway/ | 45b5d7cdc75a | pip | 21.1 | 1 |