StackRadar

CVE-2021-42550

Medium

Advisory

Published 17 Dec 2021In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.6
base score, highest
EPSS
0.044
91st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
239
of 17,781 indexed, latest versions
Container images
183
deployed by those charts
Fix available
1 of 1
affected package

Deserialization of Untrusted Data in logback

Carried by container images the latest versions of 239 of 17,781 indexed charts deploy, on 183 images.

Affected packageAffected versionsFixed inImages
logback-coremaven1.0.11, 1.0.13, 1.1.2, 1.1.3+9 more1.2.9183
OSV records
GHSA-668q-qrv7-99fm

Charts affected

239 by stars
ChartLatestAffected imagesRadar Score
pagesgary-pages1.0.01 of 3See more

pages gary-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
logback-core@1.2.3
1.2.9

Open the chart page →

20,190
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
logback-core@1.2.3
1.2.9

Open the chart page →

18,230
booksonic-airgeek-cookbookVerified publisher6.4.21 of 1See more

booksonic-air geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
logback-core@1.2.3
1.2.9

Open the chart page →

19,215
komgageek-cookbookVerified publisher2.4.21 of 1See more

komga geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
gotson/komga:0.99.49b15ea6bfc30
logback-core@1.2.3
1.2.9

Open the chart page →

12,581
nzbhydra2geek-cookbookVerified publisher10.4.21 of 1See more

nzbhydra2 geek-cookbook 10.4.2

1 of the 1 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
logback-core@1.2.3
1.2.9

Open the chart page →

17,702
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
logback-core@1.1.3
1.2.9

Open the chart page →

27,949
promcordgeek-cookbookVerified publisher5.4.21 of 1See more

promcord geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
biospheere/promcord:latest16d4fd269e66
logback-core@1.2.3
1.2.9

Open the chart page →

1,147
sharrygeek-cookbookVerified publisher5.4.21 of 1See more

sharry geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
eikek0/sharry:1.8.0661ff3ef42cd
logback-core@1.2.3
1.2.9

Open the chart page →

1,419
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.81 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
logback-core@1.2.3
1.2.9

Open the chart page →

34,754
jaegergpg-dev3.3.31 of 5See more

jaeger gpg-dev 3.3.3

1 of the 5 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
library/cassandra:3.11.65aa8400b4b3b
logback-core@1.1.3
1.2.9

Open the chart page →

19,229
opentsdbgradiant-bigdataVerified publisher0.1.71 of 6See more

opentsdb gradiant-bigdata 0.1.7

1 of the 6 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
gradiant/opentsdb:2.4.0c33d53913869
logback-core@1.0.13
1.2.9

Open the chart page →

17,511
supertokensgraphql-hive1.0.01 of 1See more

supertokens graphql-hive 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
supertokens/supertokens-postgresql:3.1418d34c781347
logback-core@1.2.3
1.2.9

Open the chart page →

2,709
ubooquityhalkeye0.1.11 of 1See more

ubooquity halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
linuxserver/ubooquity:2.1.2-ls369932d6759112
logback-core@1.1.3
1.2.9

Open the chart page →

4,303
hapi-fhirhapi-fhirVerified publisher0.1.01 of 1See more

hapi-fhir hapi-fhir 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
polyakov/hapi-fhir-jpaserver-example:latestdbcef69146b8
logback-core@1.1.7
1.2.9

Open the chart page →

6,362
pageshelm-chart-repos-camden1.0.01 of 3See more

pages helm-chart-repos-camden 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
logback-core@1.2.3
1.2.9

Open the chart page →

20,190
springboothelmcharts1.0.01 of 1See more

springboot helmcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
kimb88/hello-world-spring-boot:latest0639155241cb
logback-core@1.2.3
1.2.9

Open the chart page →

6,451
pageshelm-repo1.0.01 of 3See more

pages helm-repo 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
logback-core@1.2.3
1.2.9

Open the chart page →

20,190
todo-apihelm-repo-sharif0.1.01 of 2See more

todo-api helm-repo-sharif 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
pavanelthepu/todo-api:1.0.2f47658e3b24c
logback-core@1.2.3
1.2.9

Open the chart page →

2,544
eoloplanthttpd-eoloplant0.1.01 of 7See more

eoloplant httpd-eoloplant 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
logback-core@1.2.7
1.2.9

Open the chart page →

32,205
skywalking-v1huangchengwu-helm-chart0.1.01 of 4See more

skywalking-v1 huangchengwu-helm-chart 0.1.0

1 of the 4 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
apache/skywalking-ui:8.9.180530f0308a5
logback-core@1.2.3
1.2.9

Open the chart page →

20,650
ibm-microclimateibm-charts0.1.02 of 8See more

ibm-microclimate ibm-charts 0.1.0

2 of the 8 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
logback-core@1.1.11
1.2.9
ibmcom/microclimate-theia:lateste17bdccc5030
logback-core@1.1.11
1.2.9

Open the chart page →

57,669
eoloserverihuertas2021-vmartinp2021-helm0.1.01 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
huertaslopez/i.huertas.2021-v.martinp.2021-planner:2.0.0e2c18bd65472
logback-core@1.2.7
1.2.9

Open the chart page →

27,721
itm-mqtt-brokerintelVerified publisher1.0.01 of 1See more

itm-mqtt-broker intel 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
hivemq/hivemq4:dns-4.5.144d194450d48e
logback-core@1.2.3
1.2.9

Open the chart page →

2,653
spring-boot-chartjhidalgo3-githubVerified publisher4.0.01 of 1See more

spring-boot-chart jhidalgo3-github 4.0.0

1 of the 1 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
jhidalgo3/spring-echo-example:lateste08733191ea0
logback-core@1.2.3
1.2.9

Open the chart page →

1,703
kanbanapp-demokanbanapp-demo0.3.01 of 3See more

kanbanapp-demo kanbanapp-demo 0.3.0

1 of the 3 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
sdandey/dandey-apps:kanban-board-kanban-appbef0f599737b
logback-core@1.2.3
1.2.9

Open the chart page →

7,498
kron-aapm-agentkron-aapm-agent1.1.01 of 1See more

kron-aapm-agent kron-aapm-agent 1.1.0

1 of the 1 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
krontechnology/aapm-agent:1.1.07feef7d2ab42
logback-core@1.2.3
1.2.9

Open the chart page →

8,884
tapm-componentkubebb5.7.12 of 3See more

tapm-component kubebb 5.7.1

2 of the 3 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
refar/apm-api:v5.7.1241373fa2972
logback-core@1.2.3
1.2.9
refar/apm-operator-server:v5.7.1e5490f050f9f
logback-core@1.2.3
1.2.9

Open the chart page →

10,264
sonarqubekubesphereVerified publisher6.7.01 of 3See more

sonarqube kubesphere 6.7.0

1 of the 3 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
library/sonarqube:8.9-communityeb2f0be32efd
logback-core@1.2.3
1.2.9

Open the chart page →

2,273
nacoskubesphere-testVerified publisher0.1.11 of 1See more

nacos kubesphere-test 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
nacos/nacos-server:1.4.1fe6e5688cdf3
logback-core@1.2.3
1.2.9

Open the chart page →

4,153
imageboxkyso1.0.01 of 1See more

imagebox kyso 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
kyso/imagebox:latest68091eace89c
logback-core@1.2.3
1.2.9

Open the chart page →

3,833
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
ladeit/ladeit:latest962b665ffe82
logback-core@1.2.3
1.2.9

Open the chart page →

26,356
pageslatif-pages1.0.01 of 3See more

pages latif-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
logback-core@1.2.3
1.2.9

Open the chart page →

20,190
pageslavanya-pages1.0.01 of 3See more

pages lavanya-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
logback-core@1.2.3
1.2.9

Open the chart page →

20,190
pagesliviu884422-pages1.0.01 of 3See more

pages liviu884422-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
logback-core@1.2.3
1.2.9

Open the chart page →

20,190
elastictranscoderluiscajl0.46.04 of 4See more

elastictranscoder luiscajl 0.46.0

4 of the 4 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
elastictranscoder/media:627e21dc963ab3858c6b
logback-core@1.2.3
1.2.9
elastictranscoder/media-storage:f6d861a026208b8c2359
logback-core@1.2.3
1.2.9
elastictranscoder/transcoder:627e21dcb4a0327029e6
logback-core@1.2.3
1.2.9
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
logback-core@1.2.3
1.2.9

Open the chart page →

58,160
lavandaluiscajl0.0.1344 of 5See more

lavanda luiscajl 0.0.134

4 of the 5 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
lavandadelpatio/automated-download-films:0.0.2094e225a5a6f8
logback-core@1.2.3
1.2.9
lavandadelpatio/automated-download-shows:0.0.492de3c3426d2
logback-core@1.2.3
1.2.9
lavandadelpatio/filebot:0.0.671f2ccec8c0d
logback-core@1.2.3
1.2.9
lavandadelpatio/tmdb:0.0.2f36af885e915
logback-core@1.2.3
1.2.9

Open the chart page →

18,248
eoloplantmca-eoloplaner0.1.02 of 7See more

eoloplant mca-eoloplaner 0.1.0

2 of the 7 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
hugohg34/planner:0.0.2171f61e8d7e2
logback-core@1.2.7
1.2.9
hugohg34/toposervice:0.0.2812a03b3f274
logback-core@1.2.7
1.2.9

Open the chart page →

29,588
pulsarv2milvus-helm2.7.81 of 4See more

pulsarv2 milvus-helm 2.7.8

1 of the 4 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
logback-core@1.2.3
1.2.9

Open the chart page →

15,855
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
mintproject/model-catalog-endpoint:29256555a6fbaefae4729d5cd259564708a4ab04ffbb13f20465
logback-core@1.0.11
1.2.9

Open the chart page →

43,341
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
logback-core@1.2.3
1.2.9

Open the chart page →

25,933
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
logback-core@1.2.3
1.2.9

Open the chart page →

15,675
pagesmuthu-pages1.0.01 of 3See more

pages muthu-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
logback-core@1.2.3
1.2.9

Open the chart page →

20,190
Practica_4_helmmy-heml-appVerified publisher0.1.01 of 7See more

Practica_4_helm my-heml-app 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
adagber/planner:v1.0e5c1ed097752
logback-core@1.2.7
1.2.9

Open the chart page →

27,721
pagesnarain1.0.01 of 3See more

pages narain 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
logback-core@1.2.3
1.2.9

Open the chart page →

20,190
pagesnarasimha-pages1.0.01 of 3See more

pages narasimha-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
logback-core@1.2.3
1.2.9

Open the chart page →

20,190
pagesnavin-brixton1.0.01 of 3See more

pages navin-brixton 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
logback-core@1.2.3
1.2.9

Open the chart page →

20,190
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
logback-core@1.0.13
1.2.9

Open the chart page →

55,726
dependency-tracknovum-rgi-charts0.1.81 of 2See more

dependency-track novum-rgi-charts 0.1.8

1 of the 2 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
owasp/dependency-track:3.8.0efc65e702ee1
logback-core@1.2.3
1.2.9

Open the chart page →

3,633
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
logback-core@1.2.3
1.2.9

Open the chart page →

9,005
cdn-remoteopencord0.2.41 of 3See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
logback-core@1.1.9
1.2.9

Open the chart page →

63,223

Container images carrying it

183 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
apache/skywalking-ui:8.9.180530f0308a5
logback-core@1.2.3
1.2.9
1
arturisimo/planner:v1.0fff9de644941
logback-core@1.2.7
1.2.9
1
assistiot/cybersecurity-monitoring_ir-thv:latestc8b6c7eaa0cd
logback-core@1.2.8
1.2.9
1
atomix/atomix:3.1.127738ff4f5c63
logback-core@1.1.2
1.2.9
1
audig/clamapi:2.1.62c3fe34ee430
logback-core@1.2.3
1.2.9
1
beastob/url-shortener:1.0.299a49885ab33
logback-core@1.2.6
1.2.9
1
binhex/arch-nzbhydra2:3.1.0-1-01fb8952921ab6
logback-core@1.2.3
1.2.9
1
biospheere/promcord:latest16d4fd269e66
logback-core@1.2.3
1.2.9
1
bivas/presto:0.19605545994f806
logback-core@1.2.3
1.2.9
1
chandanteekinavar/findery-market-order-service:1.00cf52bf5ee9a
logback-core@1.2.6
1.2.9
1
choerodon/event-store-service:0.8.03c94c97f6f69
logback-core@1.1.11
1.2.9
1
craigwillis/c2metadata-bd:latestae317d7e4724
logback-core@1.0.13
1.2.9
1
davidvmar/urjc-davidvmar-worker:1.0.10d221e834a21
logback-core@1.2.3
1.2.9
1
dellcloud/category:distributed02fc234353a9
logback-core@1.2.3
1.2.9
1
dellcloud/pages:1.04d2eb25b9225
logback-core@1.2.3
1.2.9
1
dniel/api-posts:master45a667852f2a
logback-core@1.2.3
1.2.9
1
dniel/forwardauth:latestf67129ea1c64
logback-core@1.2.3
1.2.9
1
eikek0/sharry:1.8.0661ff3ef42cd
logback-core@1.2.3
1.2.9
1
elastictranscoder/media:627e21dc963ab3858c6b
logback-core@1.2.3
1.2.9
1
elastictranscoder/media-storage:f6d861a026208b8c2359
logback-core@1.2.3
1.2.9
1
elastictranscoder/transcoder:627e21dcb4a0327029e6
logback-core@1.2.3
1.2.9
1
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
logback-core@1.2.3
1.2.9
1
expediagroup/pitchfork:1.314f2cf61e7de9
logback-core@1.2.6
1.2.9
1
fimperato/sparkvid-api:1.0.5-RELEASE604012b77841
logback-core@1.2.3
1.2.9
1
fjvela/urjc-fjvela-worker:1.0.170cebf67bd66
logback-core@1.2.3
1.2.9
1
folioci/mod-marccat:latest1b57d690d568
logback-core@1.2.3
1.2.9
1
franrobles8/planner:v3.099985392d63c
logback-core@1.2.3
1.2.9
1
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
logback-core@1.2.3
1.2.9
1
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
logback-core@1.2.3
1.2.9
1
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
logback-core@1.2.3
1.2.9
1
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
logback-core@1.2.3
1.2.9
1
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
logback-core@1.2.3
1.2.9
1
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
logback-core@1.2.3
1.2.9
1
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
logback-core@1.2.3
1.2.9
1
gocd/gocd-agent-alpine-3.9:v19.3.053588bd3221f
logback-core@1.2.3
1.2.9
1
gocd/gocd-server:v19.3.02da45cb09d57
logback-core@1.2.3
1.2.9
1
gotson/komga:0.99.49b15ea6bfc30
logback-core@1.2.3
1.2.9
1
gradiant/jmxproxy:3.4.045eceb1bc55c
logback-core@1.2.3
1.2.9
1
gridgain/community:8.9.11d32d182a0e6a
logback-core@1.2.3
1.2.9
1
guacamole/guacamole:1.1.0333a7f40c145
logback-core@1.1.2
1.2.9
1
guacamole/guacamole:1.3.0739cb6820ae8
logback-core@1.2.3
1.2.9
1
hivemq/hivemq4:dns-4.5.144d194450d48e
logback-core@1.2.3
1.2.9
1
huertaslopez/i.huertas.2021-v.martinp.2021-planner:2.0.0e2c18bd65472
logback-core@1.2.7
1.2.9
1
hugohg34/planner:0.0.2171f61e8d7e2
logback-core@1.2.7
1.2.9
1
hugohg34/toposervice:0.0.2812a03b3f274
logback-core@1.2.7
1.2.9
1
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
logback-core@1.1.11
1.2.9
1
ibmcom/microclimate-theia:lateste17bdccc5030
logback-core@1.1.11
1.2.9
1
jhidalgo3/spring-echo-example:lateste08733191ea0
logback-core@1.2.3
1.2.9
1
just1not2/streama:1.10.48a2305192dec
logback-core@1.2.8
1.2.9
1
kimb88/hello-world-spring-boot:latest0639155241cb
logback-core@1.2.3
1.2.9
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.