StackRadar

CVE-2021-3572

Medium

Advisory

Published 10 Nov 2021In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.7
base score, highest
EPSS
0.018
78th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
376
of 17,781 indexed, latest versions
Container images
377
deployed by those charts
Fix available
3 of 3
affected packages

Improper Input Validation in pip

Carried by container images the latest versions of 376 of 17,781 indexed charts deploy, on 377 images.

Affected packageAffected versionsFixed inImages
pippypi1.5.4, 8.1.1, 8.1.2, 9.0.0+27 more21.1365
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+3 more1.5.4-1ubuntu4+esm1, 8.1.1-2ubuntu0.6+esm2, 9.0.1-2.3~ubuntu1.18.04.5+esm227
python-piprpm9.0.3-15.el8, 9.0.3-16.el8, 9.0.3-18.el8, 9.0.3-19.el80:9.0.3-20.el835
OSV records
GHSA-5xp3-jfq3-5q8xRHSA-2021:4455UBUNTU-CVE-2021-3572
Also known as
PYSEC-2021-437, USN-4961-2

Charts affected

376 by stars
ChartLatestAffected imagesRadar Score
sentry-kubernetescloudnativeapp0.2.01 of 1See more

sentry-kubernetes cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
getsentry/sentry-kubernetes:latest6ac37974fd2a
pip@19.0.3
21.1

Open the chart page →

1,415
supersetcloudnativeapp1.1.61 of 1See more

superset cloudnativeapp 1.1.6

1 of the 1 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
amancevice/superset:0.28.1c8c04bfe3d66
pip@19.0.3
21.1

Open the chart page →

5,060
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
pip@8.1.1
python-pip@8.1.1-2ubuntu0.4
21.1
8.1.1-2ubuntu0.6+esm2

Open the chart page →

77,758
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
pip@19.3.1
21.1

Open the chart page →

25,151
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
python-pip@9.0.3-16.el8
0:9.0.3-20.el8

Open the chart page →

25,456
cloudlaunchcloudve0.6.01 of 5See more

cloudlaunch cloudve 0.6.0

1 of the 5 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
pip@20.0.2
21.1

Open the chart page →

12,457
cloudlaunch-servercloudve0.2.01 of 5See more

cloudlaunch-server cloudve 0.2.0

1 of the 5 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
pip@20.0.2
21.1

Open the chart page →

12,131
cloudlaunchservercloudve0.6.01 of 4See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
pip@20.0.2
21.1

Open the chart page →

11,592
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
pip@20.0.2
21.1

Open the chart page →

16,069
galaxy-stablecloudve2.0.02 of 5See more

galaxy-stable cloudve 2.0.0

2 of the 5 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
pip@10.0.1
python-pip@1.5.4-1ubuntu4
21.1
1.5.4-1ubuntu4+esm1
galaxy/galaxy-stable:v18.018e577a626dfd
pip@1.5.4
python-pip@1.5.4-1ubuntu4
21.1
1.5.4-1ubuntu4+esm1

Open the chart page →

70,895
janisterminalcloudve0.1.01 of 2See more

janisterminal cloudve 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
cloudve/janis-terminal:latestaf56e77ca587
pip@9.0.1
python-pip@9.0.1-2.3~ubuntu1.18.04.1
21.1
9.0.1-2.3~ubuntu1.18.04.5+esm2

Open the chart page →

14,270
terminalmancloudve0.3.41 of 1See more

terminalman cloudve 0.3.4

1 of the 1 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
cloudve/ttyd:latestd79c1c5881c0
pip@20.0.2
21.1

Open the chart page →

13,156
pulsarcnieg1.0.81 of 2See more

pulsar cnieg 1.0.8

1 of the 2 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.6.14db6ff0b4045
pip@20.2.2
21.1

Open the chart page →

16,860
cgrccommongroundregistratiecomponent0.1.01 of 3See more

cgrc commongroundregistratiecomponent 0.1.0

1 of the 3 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
conduction/cgrc-varnish:deve154d5781c8a
pip@9.0.1
21.1

Open the chart page →

7,572
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
conduction/conduction-ui-varnish:dev5f5add2c12e0
pip@9.0.1
21.1

Open the chart page →

12,907
sumoconsensys0.4.1451 of 4See more

sumo consensys 0.4.145

1 of the 4 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.1.2.amd643bf359d5e340
pip@9.0.3
21.1

Open the chart page →

5,958
contactmoment-componentcontactmoment-component0.1.01 of 4See more

contactmoment-component contactmoment-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
conduction/contactmoment-component-varnish:deve3546b97faea
pip@9.0.1
21.1

Open the chart page →

8,408
cp-helm-chartscp-helm-charts0.6.17 of 8See more

cp-helm-charts cp-helm-charts 0.6.1

7 of the 8 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
pip@9.0.3
python-pip@9.0.3-18.el8
21.1
0:9.0.3-20.el8
confluentinc/cp-enterprise-kafka:6.1.08f1544df1f48
pip@9.0.3
python-pip@9.0.3-18.el8
21.1
0:9.0.3-20.el8
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
pip@9.0.3
python-pip@9.0.3-18.el8
21.1
0:9.0.3-20.el8
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
pip@9.0.3
python-pip@9.0.3-18.el8
21.1
0:9.0.3-20.el8
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
pip@9.0.3
python-pip@9.0.3-18.el8
21.1
0:9.0.3-20.el8
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
pip@9.0.3
python-pip@9.0.3-18.el8
21.1
0:9.0.3-20.el8
confluentinc/cp-zookeeper:6.1.078c190f4472c
pip@9.0.3
python-pip@9.0.3-18.el8
21.1
0:9.0.3-20.el8

Open the chart page →

58,857
couchpotatocronce0.0.11 of 1See more

couchpotato cronce 0.0.1

1 of the 1 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
linuxserver/couchpotato:75e576ee-ls389cd8d5fb1ac
pip@19.0.1
21.1

Open the chart page →

3,871
nfs-provisionerdasmeta1.0.31 of 1See more

nfs-provisioner dasmeta 1.0.3

1 of the 1 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
pip@19.0.3
21.1

Open the chart page →

2,806
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
pip@19.3.1
python-pip@9.0.1-2.3~ubuntu1
21.1
9.0.1-2.3~ubuntu1.18.04.5+esm2

Open the chart page →

27,728
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
pip@20.2.3
python-pip@9.0.1-2.3~ubuntu1.18.04.2
21.1
9.0.1-2.3~ubuntu1.18.04.5+esm2

Open the chart page →

18,863
datacube-processingdatacube-charts0.1.11 of 2See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
opendatacube/pipelines:wofs-1.225d810e8504b8
pip@19.0.3
python-pip@9.0.1-2.3~ubuntu1
21.1
9.0.1-2.3~ubuntu1.18.04.5+esm2

Open the chart page →

22,405
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
pip@19.3.1
python-pip@9.0.1-2.3~ubuntu1
21.1
9.0.1-2.3~ubuntu1.18.04.5+esm2

Open the chart page →

24,335
kube-web-viewdecayofmind0.0.41 of 1See more

kube-web-view decayofmind 0.0.4

1 of the 1 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
hjacobs/kube-web-view:20.10.0b44a9cf81a2f
pip@20.2.3
21.1

Open the chart page →

2,264
mlflowdeliveryheroVerified publisher1.0.101 of 1See more

mlflow deliveryhero 1.0.10

1 of the 1 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
larribas/mlflow:1.9.105ccb0b46bfb
pip@20.1
21.1

Open the chart page →

4,422
prometheus-aws-costs-exporterdeliveryheroVerified publisher0.1.51 of 1See more

prometheus-aws-costs-exporter deliveryhero 0.1.5

1 of the 1 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
nachomillangarcia/prometheus_aws_cost_exporter:lateste4ce056f2d6d
pip@18.0
21.1

Open the chart page →

3,553
rds-downscalerdeliveryheroVerified publisher1.0.51 of 1See more

rds-downscaler deliveryhero 1.0.5

1 of the 1 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
library/python:3.7.0-alpine3.8e12594db7297
pip@18.1
21.1

Open the chart page →

574
testdeploymentapp0.1.01 of 1See more

test deploymentapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
cbanuka/pythonapp:latestc742770d4247
pip@9.0.0
21.1

Open the chart page →

409
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
pip@20.0.2
21.1

Open the chart page →

14,856
design-cataloguedesign-catalogue0.1.01 of 2See more

design-catalogue design-catalogue 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
registry.gitlab.com/open-forms/design-catalogue:latestf21f19346b29
pip@20.3.3
21.1

Open the chart page →

2,770
argocddevtron1.8.11 of 3See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
pip@18.1
21.1

Open the chart page →

10,466
argocddevtron-labs1.8.11 of 3See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
pip@18.1
21.1

Open the chart page →

10,466
uptime-kumadjjudas21Verified publisher1.5.181 of 1See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.12bc6f244ecf27
pip@18.1
21.1

Open the chart page →

4,217
spark-standalonedmwm-bigdataVerified publisher0.1.01 of 2See more

spark-standalone dmwm-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
gradiant/spark:2.4.4-python-alpine97657d56e927
pip@19.3.1
21.1

Open the chart page →

6,147
dnation-kubernetes-linterdnationcloud0.1.21 of 1See more

dnation-kubernetes-linter dnationcloud 0.1.2

1 of the 1 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-linter:0.2.1dee6376560f5
pip@18.1
21.1

Open the chart page →

2,114
docparserdocparser0.1.01 of 4See more

docparser docparser 0.1.0

1 of the 4 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
conduction/docparser-varnish:dev45f20c4cd2fa
pip@9.0.1
21.1

Open the chart page →

8,408
doris-foundationdbdorisVerified publisher25.8.03 of 4See more

doris-foundationdb doris 25.8.0

3 of the 4 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
foundationdb/foundationdb-kubernetes-sidecar:6.3.23-107e0ae17a7ca
pip@19.3.1
21.1
foundationdb/foundationdb-kubernetes-sidecar:6.2.30-19ceb2f948c9f
pip@21.0.1
21.1
foundationdb/foundationdb-kubernetes-sidecar:7.1.38-1da1ee2731024
pip@19.3.1
21.1

Open the chart page →

3,167
drogue-cloud-coredrogue-iotVerified publisher0.7.111 of 22See more

drogue-cloud-core drogue-iot 0.7.11

1 of the 22 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
pip@9.0.3
21.1

Open the chart page →

55,666
drogue-cloud-twindrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-twin drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
pip@9.0.3
21.1

Open the chart page →

6,915
amundsenduyet1.1.03 of 7See more

amundsen duyet 1.1.0

3 of the 7 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
amundsendev/amundsen-frontend:2.1.169e7915e61c1
pip@20.0.2
21.1
amundsendev/amundsen-metadata:2.5.44d98eb21f5f9
pip@20.2.2
21.1
amundsendev/amundsen-search:2.4.099dda9502c3e
pip@20.2.2
21.1

Open the chart page →

11,174
grafana-dashboardsdysnixVerified publisher0.2.21 of 2See more

grafana-dashboards dysnix 0.2.2

1 of the 2 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.10.718feb3906286
pip@21.0.1
21.1

Open the chart page →

5,161
pritunldysnixVerified publisher0.2.71 of 3See more

pritunl dysnix 0.2.7

1 of the 3 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
dysnix/pritunl:v1.29-r819951e3e7a32
pip@20.2.2
21.1

Open the chart page →

5,055
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
pip@20.0.2
21.1

Open the chart page →

25,122
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
flyway/flyway:9.1545b5d7cdc75a
pip@20.0.2
21.1

Open the chart page →

9,334
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
pip@9.0.3
21.1

Open the chart page →

14,673
kodiakfikaworks1.1.41 of 2See more

kodiak fikaworks 1.1.4

1 of the 2 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
cdignam/kodiak:v0.54.05a6a55b39cee
pip@19.2.1
21.1

Open the chart page →

3,892
bae-activation-servicefiware0.1.21 of 1See more

bae-activation-service fiware 0.1.2

1 of the 1 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
fiware/bae-activation-service:v0.0.33e3ec88d59ed
pip@10.0.1
21.1

Open the chart page →

3,186
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
pip@20.0.2
21.1

Open the chart page →

64,489
orionfiware1.6.111 of 2See more

orion fiware 1.6.11

1 of the 2 container images this version deploys carry CVE-2021-3572.

Container imageDigestPackageFixed in
quay.io/opencloudio/ibm-mongodb:4.0.24d8c631a6dc43
pip@9.0.3
21.1

Open the chart page →

10,637

Container images carrying it

377 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
pip@20.0.2
21.1
1
public.ecr.aws/perfectscale-io/kube-state-metrics:4.1.14-redhat849e235e2d3e
pip@9.0.3
21.1
1
quay.io/ansible/awx-operator:2.19.17302e0c8e5a7
pip@9.0.3
21.1
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
pip@19.3.1
21.1
1
quay.io/ctrontesting/iofog-controller:latest10df27bc5560
python-pip@9.0.3-19.el8
0:9.0.3-20.el8
1
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
pip@9.0.3
python-pip@9.0.3-19.el8
21.1
0:9.0.3-20.el8
1
quay.io/fiware/orion-ld:1.0.1ea838e5b4051
pip@9.0.3
python-pip@9.0.3-19.el8
21.1
0:9.0.3-20.el8
1
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
pip@9.0.3
21.1
1
quay.io/flomesh/pipy-repo-ubi8:0.70.0-469912fdf6c183
pip@9.0.3
21.1
1
quay.io/flomesh/pipy-ubi8:0.50.0-8824352dca6672
pip@9.0.3
21.1
1
quay.io/flomesh/pipy-ubi8:0.70.0-4635d87a381432
pip@9.0.3
21.1
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
python-pip@9.0.3-16.el8
0:9.0.3-20.el8
1
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
pip@9.0.3
python-pip@9.0.3-19.el8
21.1
0:9.0.3-20.el8
1
quay.io/keycloak/keycloak:20.0.18830f76112b6
pip@9.0.3
21.1
1
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
pip@9.0.3
21.1
1
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
pip@9.0.3
21.1
1
quay.io/kiwigrid/k8s-sidecar:1.10.718feb3906286
pip@21.0.1
21.1
1
quay.io/openshift/origin-cli:4.66722d5041b47
pip@9.0.3
python-pip@9.0.3-16.el8
21.1
0:9.0.3-20.el8
1
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
pip@9.0.3
python-pip@9.0.3-16.el8
21.1
0:9.0.3-20.el8
1
quay.io/openshift/origin-jenkins-agent-base:latestc241c971aef8
pip@9.0.3
21.1
1
quay.io/opsmxpublic/ubi8-oes-db:v3.0.089ee6493af89
pip@9.0.3
python-pip@9.0.3-19.el8
21.1
0:9.0.3-20.el8
1
quay.io/opsmxpublic/ubi8-oes-platform:isd-spin-2025.10.01-a7c191ec-2025112611228ed603ab7417
pip@9.0.3
21.1
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
pip@20.2.4
python-pip@9.0.3-19.el8
21.1
0:9.0.3-20.el8
1
quay.io/stackgres/operator:1.19.1f241b0b20326
pip@20.2.4
21.1
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb:4.4.5cf72810d33f5
pip@9.0.3
python-pip@9.0.3-19.el8
21.1
0:9.0.3-20.el8
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
pip@20.0.2
21.1
1
registry.gitlab.com/open-forms/design-catalogue:latestf21f19346b29
pip@20.3.3
21.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.