StackRadarChart IndexLive demo

CVE-2021-3777

High

Advisory

Published 20 Sept 2021In the index since 8 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.013; 69th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 9; of 17,781 indexed, latest versions
Container images: 9; deployed by those charts
Fix available: 1 of 1; affected package

tmpl vulnerable to Inefficient Regular Expression Complexity which may lead to resource exhaustion

Carried by container images the latest versions of 9 of 17,781 indexed charts deploy, on 9 images.

Affected package	Affected versions	Fixed in	Images
tmplnpm	1.0.4	1.0.5	9

OSV records: GHSA-jgrx-mgxx-jf9v

Charts affected

9 by stars

Chart

Latest

Affected images

Radar Score

browserless-chromesagikazarmark

1 of 1 See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2021-3777.

Container image	Digest	Package	Fixed in
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	tmpl@1.0.4	1.0.5

Open the chart page →

24,488

developer-dashboardcloud-native-toolkit

1 of 1 See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2021-3777.

Container image	Digest	Package	Fixed in
quay.io/ibmgaragecloud/developer-dashboard :v1.4.4	7a4b9fedc724	tmpl@1.0.4	1.0.5

Open the chart page →

25,456

conduction-uiconduction-ui

1 of 6 See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2021-3777.

Container image	Digest	Package	Fixed in
conduction/conduction-ui-app :dev	d591f5e6f2a9	tmpl@1.0.4	1.0.5

Open the chart page →

12,907

1 of 7 See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2021-3777.

Container image	Digest	Package	Fixed in
amundsendev/amundsen-frontend :2.1.1	69e7915e61c1	tmpl@1.0.4	1.0.5

Open the chart page →

11,174

frontend-charteks-3-tier-app-chart

1 of 1 See more

frontend-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3777.

Container image	Digest	Package	Fixed in
arfath29/3-tier-app-frontend :latest	384b3e377f47	tmpl@1.0.4	1.0.5

Open the chart page →

3,744

kubevismario-f

1 of 1 See more

kubevis mario-f 2.0.1

1 of the 1 container images this version deploys carry CVE-2021-3777.

Container image	Digest	Package	Fixed in
ghcr.io/mario-f/kubevis :v1.4.0	763daf9caf8e	tmpl@1.0.4	1.0.5

Open the chart page →

5,287

sample-appmongodb-helm-charts

1 of 2 See more

sample-app mongodb-helm-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-3777.

Container image	Digest	Package	Fixed in
quay.io/mongodb/farm-intro-frontend :0.1	99ccdfd543e1	tmpl@1.0.4	1.0.5

Open the chart page →

6,438

sentence-collectormozilla

1 of 2 See more

sentence-collector mozilla 0.1.2

1 of the 2 container images this version deploys carry CVE-2021-3777.

Container image	Digest	Package	Fixed in
mozilla/sentencecollector :2.0.9	1da6ff5c4895	tmpl@1.0.4	1.0.5

Open the chart page →

6,684

fdi-dotstatsuite-dlmstatcan

1 of 1 See more

fdi-dotstatsuite-dlm statcan 0.3.1

1 of the 1 container images this version deploys carry CVE-2021-3777.

Container image	Digest	Package	Fixed in
siscc/dotstatsuite-data-lifecycle-manager :v14.0.0	b6f9a7c888fc	tmpl@1.0.4	1.0.5

Open the chart page →

3,881

Container images carrying it

9 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
amundsendev/amundsen-frontend :2.1.1	69e7915e61c1	tmpl@1.0.4	1.0.5	1
arfath29/3-tier-app-frontend :latest	384b3e377f47	tmpl@1.0.4	1.0.5	1
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	tmpl@1.0.4	1.0.5	1
conduction/conduction-ui-app :dev	d591f5e6f2a9	tmpl@1.0.4	1.0.5	1
mozilla/sentencecollector :2.0.9	1da6ff5c4895	tmpl@1.0.4	1.0.5	1
siscc/dotstatsuite-data-lifecycle-manager :v14.0.0	b6f9a7c888fc	tmpl@1.0.4	1.0.5	1
ghcr.io/mario-f/kubevis :v1.4.0	763daf9caf8e	tmpl@1.0.4	1.0.5	1
quay.io/ibmgaragecloud/developer-dashboard :v1.4.4	7a4b9fedc724	tmpl@1.0.4	1.0.5	1
quay.io/mongodb/farm-intro-frontend :0.1	99ccdfd543e1	tmpl@1.0.4	1.0.5	1