StackRadar

CVE-2021-3749

High

Advisory

Published 1 Sept 2021In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.085
95th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
45
of 17,781 indexed, latest versions
Container images
44
deployed by those charts
Fix available
1 of 1
affected package

axios Inefficient Regular Expression Complexity vulnerability

Carried by container images the latest versions of 45 of 17,781 indexed charts deploy, on 44 images.

Affected packageAffected versionsFixed inImages
axiosnpm0.15.3, 0.16.2, 0.18.0, 0.18.1+4 more0.21.244
OSV records
GHSA-cph5-m8f7-6c5x

Charts affected

45 by stars
ChartLatestAffected imagesRadar Score
redisinsightheywood8-helm-chartsVerified publisher0.4.51 of 1See more

redisinsight heywood8-helm-charts 0.4.5

1 of the 1 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
heywood8/redisinsight:2.28.00bc9ab313d37
axios@0.21.1
0.21.2

Open the chart page →

2,828
backstagedeliveryheroVerified publisher0.1.151 of 2See more

backstage deliveryhero 0.1.15

1 of the 2 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
axios@0.20.0
0.21.2

Open the chart page →

8,213
wikijsgeek-cookbookVerified publisher6.4.21 of 1See more

wikijs geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
axios@0.21.1
0.21.2

Open the chart page →

5,946
zwavejs2mqttgeek-cookbookVerified publisher5.4.21 of 1See more

zwavejs2mqtt geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
zwavejs/zwavejs2mqtt:5.0.215a6040fb468
axios@0.21.1
0.21.2

Open the chart page →

3,476
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-kbn:latest0570b27bb7c2
axios@0.21.1
0.21.2

Open the chart page →

17,896
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
ghcr.io/data-fair/data-fair:3cc9498b64b5b
axios@0.19.2
0.21.2

Open the chart page →

38,346
ranetogabisonfire0.1.21 of 1See more

raneto gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/raneto:version-0.16.6ef768f3df5d0
axios@0.21.1
0.21.2

Open the chart page →

2,519
overseerrgeek-cookbookVerified publisher5.4.21 of 1See more

overseerr geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
ghcr.io/sct/overseerr:1.26.1254d16af8f71
axios@0.21.1
0.21.2

Open the chart page →

3,444
youtubedl-materialgeek-cookbookVerified publisher4.4.21 of 1See more

youtubedl-material geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:4.23720b856bd2f
axios@0.21.1
0.21.2

Open the chart page →

4,410
zigbee2mqttgeek-cookbookVerified publisher9.4.21 of 1See more

zigbee2mqtt geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
koenkk/zigbee2mqtt:1.19.15f9129b1ffbc
axios@0.21.1
0.21.2

Open the chart page →

2,173
elasticinseefrlab2.2.01 of 2See more

elastic inseefrlab 2.2.0

1 of the 2 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
library/kibana:7.17.3e2e2031c15be
axios@0.21.1
0.21.2

Open the chart page →

17,284
open5gsadaptivenetlabVerified publisher1.0.31 of 3See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
axios@0.16.2
0.21.2

Open the chart page →

25,443
fl-orchestrator-guiassist-iot-fl-orchestrator0.1.01 of 3See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
assistiot/fl_orchestrator:api-latest7473d77448e1
axios@0.19.2
0.21.2

Open the chart page →

9,369
slack-notificationscloud-native-toolkit0.1.71 of 1See more

slack-notifications cloud-native-toolkit 0.1.7

1 of the 1 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/slack-notifications:latest041df93e2bac
axios@0.21.1
0.21.2

Open the chart page →

1,545
authfcryptexlabsVerified publisher0.12.131 of 4See more

authf cryptexlabs 0.12.13

1 of the 4 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
cryptexlabs/authf:0.12.11189c07411d7c
axios@0.21.1
0.21.2

Open the chart page →

3,769
amundsenduyet1.1.01 of 7See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
amundsendev/amundsen-frontend:2.1.169e7915e61c1
axios@0.19.0
0.21.2

Open the chart page →

11,174
frontend-charteks-3-tier-app-chart0.1.01 of 1See more

frontend-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
arfath29/3-tier-app-frontend:latest384b3e377f47
axios@0.21.1
0.21.2

Open the chart page →

3,744
iotagent-ulfiware0.1.21 of 1See more

iotagent-ul fiware 0.1.2

1 of the 1 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
fiware/iotagent-ul:1.14.0fe11f55a926d
axios@0.19.2
0.21.2

Open the chart page →

3,337
nightscoutgeek-cookbookVerified publisher1.2.21 of 1See more

nightscout geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
axios@0.19.2
0.21.2

Open the chart page →

4,043
shinobigeek-cookbookVerified publisher1.2.21 of 1See more

shinobi geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
shinobisystems/shinobi:dev3ca746937856
axios@0.21.1
0.21.2

Open the chart page →

4,591
Governify-Falcongovernify0.1.01 of 10See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
governify/collector-dynamic:v1.3.06d3d1a5b46a9
axios@0.21.1
0.21.2

Open the chart page →

24,319
irslackdhalkeye0.1.01 of 1See more

irslackd halkeye 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
halkeye/irslackd:latest7638bfba70b0
axios@0.18.1
0.21.2

Open the chart page →

2,064
zigbee2mqtthelm-chart-roeiVerified publisher1.19.01 of 1See more

zigbee2mqtt helm-chart-roei 1.19.0

1 of the 1 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
koenkk/zigbee2mqtt:1.19.15f9129b1ffbc
axios@0.21.1
0.21.2

Open the chart page →

2,173
streamsheetshelm-chartsVerified publisher0.2.34 of 8See more

streamsheets helm-charts 0.2.3

4 of the 8 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
axios@0.21.1
0.21.2
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
axios@0.21.1
0.21.2
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
axios@0.21.1
0.21.2
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
axios@0.21.1
0.21.2

Open the chart page →

89,959
backstagehelm-charts-nr0.1.151 of 2See more

backstage helm-charts-nr 0.1.15

1 of the 2 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
axios@0.20.0
0.21.2

Open the chart page →

8,213
crypto-watchdoghuseyinnurbaki0.1.01 of 1See more

crypto-watchdog huseyinnurbaki 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
hhaluk/crypto-watchdog:0.4.0a6555953d941
axios@0.21.1
0.21.2

Open the chart page →

2,656
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
ibmcom/microclimate-portal:latested5505e5c7ec
axios@0.15.3
0.21.2

Open the chart page →

57,669
ibm-voice-gateway-devibm-charts3.1.01 of 2See more

ibm-voice-gateway-dev ibm-charts 3.1.0

1 of the 2 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
ibmcom/voice-gateway-mr:1.0.5.00762ab1df6c1
axios@0.19.0
0.21.2

Open the chart page →

4,505
backstageirembo-backstage-helmVerified publisher1.0.51 of 3See more

backstage irembo-backstage-helm 1.0.5

1 of the 3 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
roadiehq/community-backstage-image:latestef355bf5b639
axios@0.21.1
0.21.2

Open the chart page →

7,232
yapijoelee2012Verified publisher0.2.01 of 1See more

yapi joelee2012 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
jayfong/yapi:1.10.2163e5d621910
axios@0.18.1
0.21.2

Open the chart page →

6,454
shinobik8s-home-lab-repo2.1.11 of 1See more

shinobi k8s-home-lab-repo 2.1.1

1 of the 1 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
shinobisystems/shinobi:latestc2f5ce2e1067
axios@0.21.1
0.21.2

Open the chart page →

4,667
sqlpadkronkltdVerified publisher0.1.01 of 1See more

sqlpad kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
sqlpad/sqlpad:6.7d3d2f430dffd
axios@0.21.1
0.21.2

Open the chart page →

3,397
tooljetkrzwiatrzyk1.1.11 of 2See more

tooljet krzwiatrzyk 1.1.1

1 of the 2 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
tooljet/tooljet-ce:v1.18.0c85a4720e42e
axios@0.19.2
0.21.2

Open the chart page →

5,410
frontendluiscajl0.1.71 of 1See more

frontend luiscajl 0.1.7

1 of the 1 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
lavandadelpatio/frontend:latest501c3f31e0bc
axios@0.19.2
0.21.2

Open the chart page →

3,651
kommandermesosphere-stable0.39.21 of 29See more

kommander mesosphere-stable 0.39.2

1 of the 29 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
mesosphere/kommander:6.100.13917e82333a9
axios@0.21.1
0.21.2

Open the chart page →

68,284
opsportalmesosphere-stable0.9.51 of 3See more

opsportal mesosphere-stable 0.9.5

1 of the 3 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
mesosphere/kommander:6.100.13917e82333a9
axios@0.21.1
0.21.2

Open the chart page →

7,027
fspiop-transfer-api-svcmojaloop12.0.11 of 3See more

fspiop-transfer-api-svc mojaloop 12.0.1

1 of the 3 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
mojaloop/ml-api-adapter:v11.1.6fb71d233c742
axios@0.21.1
0.21.2

Open the chart page →

11,479
mojaloopmojaloop14.0.01 of 6See more

mojaloop mojaloop 14.0.0

1 of the 6 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
mojaloop/ml-api-adapter:v11.1.6fb71d233c742
axios@0.21.1
0.21.2

Open the chart page →

19,226
sentence-collectormozilla0.1.21 of 2See more

sentence-collector mozilla 0.1.2

1 of the 2 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
mozilla/sentencecollector:2.0.91da6ff5c4895
axios@0.19.2
0.21.2

Open the chart page →

6,684
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
linuxserver/codimd:latestb801bbcf6386
axios@0.19.2
0.21.2

Open the chart page →

27,465
gristrlex0.1.01 of 1See more

grist rlex 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
gristlabs/grist:0.7.96e71b1914a7e
axios@0.18.0
0.21.2

Open the chart page →

5,215
speedtest-trackersoblivionscall3.0.41 of 1See more

speedtest-tracker soblivionscall 3.0.4

1 of the 1 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
henrywhitaker3/speedtest-tracker:latest47159a940229
axios@0.21.1
0.21.2

Open the chart page →

2,460
fdi-dotstatsuite-dlmstatcan0.3.11 of 1See more

fdi-dotstatsuite-dlm statcan 0.3.1

1 of the 1 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
siscc/dotstatsuite-data-lifecycle-manager:v14.0.0b6f9a7c888fc
axios@0.18.1
0.21.2

Open the chart page →

3,881
trudesktechpreta1.0.01 of 3See more

trudesk techpreta 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
polonel/trudesk:1.2.60cf6513f6fe3
axios@0.21.1
0.21.2

Open the chart page →

4,017
workadventureworkadventure1.1.01 of 9See more

workadventure workadventure 1.1.0

1 of the 9 container images this version deploys carry CVE-2021-3749.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-back:v1.17.764001369dad5
axios@0.19.2
0.21.2

Open the chart page →

16,083

Container images carrying it

44 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
koenkk/zigbee2mqtt:1.19.15f9129b1ffbc
axios@0.21.1
0.21.2
2
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
axios@0.20.0
0.21.2
2
mesosphere/kommander:6.100.13917e82333a9
axios@0.21.1
0.21.2
2
mojaloop/ml-api-adapter:v11.1.6fb71d233c742
axios@0.21.1
0.21.2
2
amundsendev/amundsen-frontend:2.1.169e7915e61c1
axios@0.19.0
0.21.2
1
arfath29/3-tier-app-frontend:latest384b3e377f47
axios@0.21.1
0.21.2
1
assistiot/cybersecurity-monitoring_ir-kbn:latest0570b27bb7c2
axios@0.21.1
0.21.2
1
assistiot/fl_orchestrator:api-latest7473d77448e1
axios@0.19.2
0.21.2
1
cryptexlabs/authf:0.12.11189c07411d7c
axios@0.21.1
0.21.2
1
fiware/iotagent-ul:1.14.0fe11f55a926d
axios@0.19.2
0.21.2
1
governify/collector-dynamic:v1.3.06d3d1a5b46a9
axios@0.21.1
0.21.2
1
gristlabs/grist:0.7.96e71b1914a7e
axios@0.18.0
0.21.2
1
halkeye/irslackd:latest7638bfba70b0
axios@0.18.1
0.21.2
1
henrywhitaker3/speedtest-tracker:latest47159a940229
axios@0.21.1
0.21.2
1
heywood8/redisinsight:2.28.00bc9ab313d37
axios@0.21.1
0.21.2
1
hhaluk/crypto-watchdog:0.4.0a6555953d941
axios@0.21.1
0.21.2
1
ibmcom/microclimate-portal:latested5505e5c7ec
axios@0.15.3
0.21.2
1
ibmcom/voice-gateway-mr:1.0.5.00762ab1df6c1
axios@0.19.0
0.21.2
1
jayfong/yapi:1.10.2163e5d621910
axios@0.18.1
0.21.2
1
lavandadelpatio/frontend:latest501c3f31e0bc
axios@0.19.2
0.21.2
1
library/kibana:7.17.3e2e2031c15be
axios@0.21.1
0.21.2
1
linuxserver/codimd:latestb801bbcf6386
axios@0.19.2
0.21.2
1
mozilla/sentencecollector:2.0.91da6ff5c4895
axios@0.19.2
0.21.2
1
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
axios@0.19.2
0.21.2
1
polonel/trudesk:1.2.60cf6513f6fe3
axios@0.21.1
0.21.2
1
roadiehq/community-backstage-image:latestef355bf5b639
axios@0.21.1
0.21.2
1
shinobisystems/shinobi:dev3ca746937856
axios@0.21.1
0.21.2
1
shinobisystems/shinobi:latestc2f5ce2e1067
axios@0.21.1
0.21.2
1
siscc/dotstatsuite-data-lifecycle-manager:v14.0.0b6f9a7c888fc
axios@0.18.1
0.21.2
1
sqlpad/sqlpad:6.7d3d2f430dffd
axios@0.21.1
0.21.2
1
thecodingmachine/workadventure-back:v1.17.764001369dad5
axios@0.19.2
0.21.2
1
tooljet/tooljet-ce:v1.18.0c85a4720e42e
axios@0.19.2
0.21.2
1
tzahi12345/youtubedl-material:4.23720b856bd2f
axios@0.21.1
0.21.2
1
zwavejs/zwavejs2mqtt:5.0.215a6040fb468
axios@0.21.1
0.21.2
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
axios@0.21.1
0.21.2
1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
axios@0.21.1
0.21.2
1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
axios@0.21.1
0.21.2
1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
axios@0.21.1
0.21.2
1
ghcr.io/data-fair/data-fair:3cc9498b64b5b
axios@0.19.2
0.21.2
1
ghcr.io/linuxserver/raneto:version-0.16.6ef768f3df5d0
axios@0.21.1
0.21.2
1
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
axios@0.21.1
0.21.2
1
ghcr.io/sct/overseerr:1.26.1254d16af8f71
axios@0.21.1
0.21.2
1
quay.io/ibmgaragecloud/slack-notifications:latest041df93e2bac
axios@0.21.1
0.21.2
1
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
axios@0.16.2
0.21.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.