StackRadar

CVE-2021-3664

Medium

Advisory

Published 10 Aug 2021In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.018
78th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
44
of 17,781 indexed, latest versions
Container images
36
deployed by those charts
Fix available
1 of 1
affected package

Open redirect in url-parse

Carried by container images the latest versions of 44 of 17,781 indexed charts deploy, on 36 images.

Affected packageAffected versionsFixed inImages
url-parsenpm1.0.5, 1.2.0, 1.4.4, 1.4.7+1 more1.5.236
OSV records
GHSA-hh27-ffr2-f2jc

Charts affected

44 by stars
ChartLatestAffected imagesRadar Score
chatwootchatwootVerified publisher2.0.241 of 3See more

chatwoot chatwoot 2.0.24

1 of the 3 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v4.15.167ebc751c171
url-parse@1.5.1
1.5.2

Open the chart page →

9,203
misskeyalytiVerified publisher1.0.01 of 1See more

misskey alyti 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
misskey/misskey:12.110.1e08b7c478093
url-parse@1.4.7
1.5.2

Open the chart page →

5,251
wikijsgeek-cookbookVerified publisher6.4.21 of 1See more

wikijs geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
url-parse@1.5.1
1.5.2

Open the chart page →

5,946
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-kbn:latest0570b27bb7c2
url-parse@1.4.7
1.5.2

Open the chart page →

17,896
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-kbn:latest2297b4350211
url-parse@1.4.7
1.5.2

Open the chart page →

10,730
chatwootmaxcrm-chartsVerified publisher1.1.2011 of 4See more

chatwoot maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
url-parse@1.5.1
1.5.2

Open the chart page →

5,940
Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacionVerified publisher1.0.11 of 6See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

1 of the 6 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
fjvela/urjc-fjvela-server:1.0.53c840aebce22
url-parse@1.4.7
1.5.2

Open the chart page →

19,187
testhubteshubVerified publisher0.1.41 of 3See more

testhub teshub 0.1.4

1 of the 3 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
testhubio/testhub-frontend:on-preme86c2db53be8
url-parse@1.4.7
1.5.2

Open the chart page →

7,517
d.vazquezm.2021_helmapphelmVerified publisher1.0.01 of 6See more

d.vazquezm.2021_helm apphelm 1.0.0

1 of the 6 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
davidvmar/urjc-davidvmar-server:1.0.05663f5b24615
url-parse@1.4.7
1.5.2

Open the chart page →

19,745
trifidappuio2.0.21 of 1See more

trifid appuio 2.0.2

1 of the 1 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
zazuko/trifid:2.3.7054be137de70
url-parse@1.5.1
1.5.2

Open the chart page →

2,783
opendistro-esbeeinventor1.15.11 of 3See more

opendistro-es beeinventor 1.15.1

1 of the 3 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch-kibana:1.13.2c740d7a89475
url-parse@1.4.7
1.5.2

Open the chart page →

5,806
daskcloudnativeapp2.2.11 of 2See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
daskdev/dask-notebook:1.1.0052630f5ca04
url-parse@1.4.4
1.5.2

Open the chart page →

29,901
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
url-parse@1.4.7
1.5.2

Open the chart page →

25,456
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
conduction/conduction-ui-app:devd591f5e6f2a9
url-parse@1.5.1
1.5.2

Open the chart page →

12,907
eoloplannerdfa-amm-eoloplannerVerified publisher0.1.01 of 7See more

eoloplanner dfa-amm-eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
url-parse@1.4.7
1.5.2

Open the chart page →

27,550
mergeabledoubanVerified publisher0.2.21 of 1See more

mergeable douban 0.2.2

1 of the 1 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
ghcr.io/leoquote/mergeable:latest451706815103
url-parse@1.4.4
1.5.2

Open the chart page →

4,223
eoloplannerdreyg-jescribanob-chart-eoloplanner0.1.01 of 7See more

eoloplanner dreyg-jescribanob-chart-eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
url-parse@1.4.7
1.5.2

Open the chart page →

24,656
frontend-charteks-3-tier-app-chart0.1.01 of 1See more

frontend-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
arfath29/3-tier-app-frontend:latest384b3e377f47
url-parse@1.5.1
1.5.2

Open the chart page →

3,744
eolicplantseolicplantsVerified publisher0.1.01 of 7See more

eolicplants eolicplants 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
url-parse@1.4.7
1.5.2

Open the chart page →

27,291
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.01 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
url-parse@1.4.7
1.5.2

Open the chart page →

27,256
eolo-plannereolo-planner-repo0.1.01 of 7See more

eolo-planner eolo-planner-repo 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
arturisimo/server-urjc:v1.0d8dc4430531e
url-parse@1.4.7
1.5.2

Open the chart page →

27,096
iotagent-jsonfiware0.1.21 of 1See more

iotagent-json fiware 0.1.2

1 of the 1 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
fiware/iotagent-json:3.1.0879b21a0d36d
url-parse@1.4.7
1.5.2

Open the chart page →

937
iotagent-ulfiware0.1.21 of 1See more

iotagent-ul fiware 0.1.2

1 of the 1 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
fiware/iotagent-ul:1.14.0fe11f55a926d
url-parse@1.4.7
1.5.2

Open the chart page →

3,337
shinobigeek-cookbookVerified publisher1.2.21 of 1See more

shinobi geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
shinobisystems/shinobi:dev3ca746937856
url-parse@1.5.1
1.5.2

Open the chart page →

4,591
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
ibmcom/microclimate-portal:latested5505e5c7ec
url-parse@1.2.0
1.5.2

Open the chart page →

57,669
indexer-chartindexer-application0.1.01 of 1See more

indexer-chart indexer-application 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
ibarreche/cloud-indexer-ci:latestb7a08274e69f
url-parse@1.4.7
1.5.2

Open the chart page →

3,289
monocularjenkins-x0.6.41 of 4See more

monocular jenkins-x 0.6.4

1 of the 4 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
migmartri/prerender:latest486aacfd5aa9
url-parse@1.0.5
1.5.2

Open the chart page →

4,614
shinobik8s-home-lab-repo2.1.11 of 1See more

shinobi k8s-home-lab-repo 2.1.1

1 of the 1 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
shinobisystems/shinobi:latestc2f5ce2e1067
url-parse@1.5.1
1.5.2

Open the chart page →

4,667
kubevismario-fVerified publisher2.0.11 of 1See more

kubevis mario-f 2.0.1

1 of the 1 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
url-parse@1.5.1
1.5.2

Open the chart page →

5,287
maxcrm-chartsmaxcrm-chartsVerified publisher1.1.2011 of 4See more

maxcrm-charts maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
url-parse@1.5.1
1.5.2

Open the chart page →

5,940
eoloplantmca-eoloplaner0.1.01 of 7See more

eoloplant mca-eoloplaner 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
hugohg34/server:0.0.2503e5d8960ff
url-parse@1.4.7
1.5.2

Open the chart page →

29,588
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
opensearchproject/opensearch-dashboards:1.0.039695180364b
url-parse@1.5.1
1.5.2

Open the chart page →

10,603
standard-application-stackmintel11.4.01 of 12See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
opensearchproject/opensearch-dashboards:1.0.039695180364b
url-parse@1.5.1
1.5.2

Open the chart page →

10,603
sample-appmongodb-helm-charts0.1.01 of 2See more

sample-app mongodb-helm-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
url-parse@1.4.7
1.5.2

Open the chart page →

6,438
monocularmonocular1.4.152 of 5See more

monocular monocular 1.4.15

2 of the 5 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
migmartri/prerender:latest486aacfd5aa9
url-parse@1.0.5
1.5.2
quay.io/helmpack/monocular-ui:v1.10.086b71e90319f
url-parse@1.0.5
1.5.2

Open the chart page →

7,048
smilencsaVerified publisher1.1.01 of 23See more

smile ncsa 1.1.0

1 of the 23 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
socialmediamacroscope/smile_server:0.3.31a528c794270
url-parse@1.5.1
1.5.2

Open the chart page →

109,294
myappp4-helm0.1.01 of 6See more

myapp p4-helm 0.1.0

1 of the 6 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
fjvela/urjc-fjvela-server:1.0.53c840aebce22
url-parse@1.4.7
1.5.2

Open the chart page →

19,720
practica-helmpractica-helm0.1.01 of 7See more

practica-helm practica-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
slagattollas/server-practica:latest6dd8ead8e2b1
url-parse@1.4.7
1.5.2

Open the chart page →

28,484
speedtest-trackersoblivionscall3.0.41 of 1See more

speedtest-tracker soblivionscall 3.0.4

1 of the 1 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
henrywhitaker3/speedtest-tracker:latest47159a940229
url-parse@1.4.7
1.5.2

Open the chart page →

2,460
nordmart-reviewstakaterVerified publisher0.0.61 of 3See more

nordmart-review stakater 0.0.6

1 of the 3 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
url-parse@1.5.1
1.5.2

Open the chart page →

11,554
nordmart-review-instancestakaterVerified publisher1.0.01 of 3See more

nordmart-review-instance stakater 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
url-parse@1.5.1
1.5.2

Open the chart page →

11,554
fdi-dotstatsuite-dlmstatcan0.3.11 of 1See more

fdi-dotstatsuite-dlm statcan 0.3.1

1 of the 1 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
siscc/dotstatsuite-data-lifecycle-manager:v14.0.0b6f9a7c888fc
url-parse@1.5.1
1.5.2

Open the chart page →

3,881
queryservice-gatewaywbstack0.2.01 of 1See more

queryservice-gateway wbstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
ghcr.io/wbstack/queryservice-gateway:2.2ab8e2f583e56
url-parse@1.5.1
1.5.2

Open the chart page →

2,559
opendistro-eswitcom-gmbh1.13.31 of 3See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry CVE-2021-3664.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch-kibana:1.13.2c740d7a89475
url-parse@1.4.7
1.5.2

Open the chart page →

5,806

Container images carrying it

36 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
oscarsotosanchez/server:v1.06e2e1279126b
url-parse@1.4.7
1.5.2
4
amazon/opendistro-for-elasticsearch-kibana:1.13.2c740d7a89475
url-parse@1.4.7
1.5.2
2
chatwoot/chatwoot:v3.1.0d530ab8c1753
url-parse@1.5.1
1.5.2
2
fjvela/urjc-fjvela-server:1.0.53c840aebce22
url-parse@1.4.7
1.5.2
2
migmartri/prerender:latest486aacfd5aa9
url-parse@1.0.5
1.5.2
2
opensearchproject/opensearch-dashboards:1.0.039695180364b
url-parse@1.5.1
1.5.2
2
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
url-parse@1.5.1
1.5.2
2
arfath29/3-tier-app-frontend:latest384b3e377f47
url-parse@1.5.1
1.5.2
1
arturisimo/server-urjc:v1.0d8dc4430531e
url-parse@1.4.7
1.5.2
1
assistiot/cybersecurity-monitoring_id-kbn:latest2297b4350211
url-parse@1.4.7
1.5.2
1
assistiot/cybersecurity-monitoring_ir-kbn:latest0570b27bb7c2
url-parse@1.4.7
1.5.2
1
chatwoot/chatwoot:v4.15.167ebc751c171
url-parse@1.5.1
1.5.2
1
conduction/conduction-ui-app:devd591f5e6f2a9
url-parse@1.5.1
1.5.2
1
daskdev/dask-notebook:1.1.0052630f5ca04
url-parse@1.4.4
1.5.2
1
davidvmar/urjc-davidvmar-server:1.0.05663f5b24615
url-parse@1.4.7
1.5.2
1
fiware/iotagent-json:3.1.0879b21a0d36d
url-parse@1.4.7
1.5.2
1
fiware/iotagent-ul:1.14.0fe11f55a926d
url-parse@1.4.7
1.5.2
1
henrywhitaker3/speedtest-tracker:latest47159a940229
url-parse@1.4.7
1.5.2
1
hugohg34/server:0.0.2503e5d8960ff
url-parse@1.4.7
1.5.2
1
ibarreche/cloud-indexer-ci:latestb7a08274e69f
url-parse@1.4.7
1.5.2
1
ibmcom/microclimate-portal:latested5505e5c7ec
url-parse@1.2.0
1.5.2
1
misskey/misskey:12.110.1e08b7c478093
url-parse@1.4.7
1.5.2
1
shinobisystems/shinobi:dev3ca746937856
url-parse@1.5.1
1.5.2
1
shinobisystems/shinobi:latestc2f5ce2e1067
url-parse@1.5.1
1.5.2
1
siscc/dotstatsuite-data-lifecycle-manager:v14.0.0b6f9a7c888fc
url-parse@1.5.1
1.5.2
1
slagattollas/server-practica:latest6dd8ead8e2b1
url-parse@1.4.7
1.5.2
1
socialmediamacroscope/smile_server:0.3.31a528c794270
url-parse@1.5.1
1.5.2
1
testhubio/testhub-frontend:on-preme86c2db53be8
url-parse@1.4.7
1.5.2
1
zazuko/trifid:2.3.7054be137de70
url-parse@1.5.1
1.5.2
1
ghcr.io/leoquote/mergeable:latest451706815103
url-parse@1.4.4
1.5.2
1
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
url-parse@1.5.1
1.5.2
1
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
url-parse@1.5.1
1.5.2
1
ghcr.io/wbstack/queryservice-gateway:2.2ab8e2f583e56
url-parse@1.5.1
1.5.2
1
quay.io/helmpack/monocular-ui:v1.10.086b71e90319f
url-parse@1.0.5
1.5.2
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
url-parse@1.4.7
1.5.2
1
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
url-parse@1.4.7
1.5.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.