StackRadar

CVE-2021-42550

Medium

Advisory

Published 17 Dec 2021In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.6
base score, highest
EPSS
0.044
91st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
239
of 17,781 indexed, latest versions
Container images
183
deployed by those charts
Fix available
1 of 1
affected package

Deserialization of Untrusted Data in logback

Carried by container images the latest versions of 239 of 17,781 indexed charts deploy, on 183 images.

Affected packageAffected versionsFixed inImages
logback-coremaven1.0.11, 1.0.13, 1.1.2, 1.1.3+9 more1.2.9183
OSV records
GHSA-668q-qrv7-99fm

Charts affected

239 by stars
ChartLatestAffected imagesRadar Score
pagesgary-pages1.0.01 of 3See more

pages gary-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
logback-core@1.2.3
1.2.9

Open the chart page →

20,190
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
logback-core@1.2.3
1.2.9

Open the chart page →

18,230
booksonic-airgeek-cookbookVerified publisher6.4.21 of 1See more

booksonic-air geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
logback-core@1.2.3
1.2.9

Open the chart page →

19,215
komgageek-cookbookVerified publisher2.4.21 of 1See more

komga geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
gotson/komga:0.99.49b15ea6bfc30
logback-core@1.2.3
1.2.9

Open the chart page →

12,581
nzbhydra2geek-cookbookVerified publisher10.4.21 of 1See more

nzbhydra2 geek-cookbook 10.4.2

1 of the 1 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
logback-core@1.2.3
1.2.9

Open the chart page →

17,702
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
logback-core@1.1.3
1.2.9

Open the chart page →

27,949
promcordgeek-cookbookVerified publisher5.4.21 of 1See more

promcord geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
biospheere/promcord:latest16d4fd269e66
logback-core@1.2.3
1.2.9

Open the chart page →

1,147
sharrygeek-cookbookVerified publisher5.4.21 of 1See more

sharry geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
eikek0/sharry:1.8.0661ff3ef42cd
logback-core@1.2.3
1.2.9

Open the chart page →

1,419
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.81 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
logback-core@1.2.3
1.2.9

Open the chart page →

34,754
jaegergpg-dev3.3.31 of 5See more

jaeger gpg-dev 3.3.3

1 of the 5 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
library/cassandra:3.11.65aa8400b4b3b
logback-core@1.1.3
1.2.9

Open the chart page →

19,229
opentsdbgradiant-bigdataVerified publisher0.1.71 of 6See more

opentsdb gradiant-bigdata 0.1.7

1 of the 6 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
gradiant/opentsdb:2.4.0c33d53913869
logback-core@1.0.13
1.2.9

Open the chart page →

17,511
supertokensgraphql-hive1.0.01 of 1See more

supertokens graphql-hive 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
supertokens/supertokens-postgresql:3.1418d34c781347
logback-core@1.2.3
1.2.9

Open the chart page →

2,709
ubooquityhalkeye0.1.11 of 1See more

ubooquity halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
linuxserver/ubooquity:2.1.2-ls369932d6759112
logback-core@1.1.3
1.2.9

Open the chart page →

4,303
hapi-fhirhapi-fhirVerified publisher0.1.01 of 1See more

hapi-fhir hapi-fhir 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
polyakov/hapi-fhir-jpaserver-example:latestdbcef69146b8
logback-core@1.1.7
1.2.9

Open the chart page →

6,362
pageshelm-chart-repos-camden1.0.01 of 3See more

pages helm-chart-repos-camden 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
logback-core@1.2.3
1.2.9

Open the chart page →

20,190
springboothelmcharts1.0.01 of 1See more

springboot helmcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
kimb88/hello-world-spring-boot:latest0639155241cb
logback-core@1.2.3
1.2.9

Open the chart page →

6,451
pageshelm-repo1.0.01 of 3See more

pages helm-repo 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
logback-core@1.2.3
1.2.9

Open the chart page →

20,190
todo-apihelm-repo-sharif0.1.01 of 2See more

todo-api helm-repo-sharif 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
pavanelthepu/todo-api:1.0.2f47658e3b24c
logback-core@1.2.3
1.2.9

Open the chart page →

2,544
eoloplanthttpd-eoloplant0.1.01 of 7See more

eoloplant httpd-eoloplant 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
logback-core@1.2.7
1.2.9

Open the chart page →

32,205
skywalking-v1huangchengwu-helm-chart0.1.01 of 4See more

skywalking-v1 huangchengwu-helm-chart 0.1.0

1 of the 4 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
apache/skywalking-ui:8.9.180530f0308a5
logback-core@1.2.3
1.2.9

Open the chart page →

20,650
ibm-microclimateibm-charts0.1.02 of 8See more

ibm-microclimate ibm-charts 0.1.0

2 of the 8 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
logback-core@1.1.11
1.2.9
ibmcom/microclimate-theia:lateste17bdccc5030
logback-core@1.1.11
1.2.9

Open the chart page →

57,669
eoloserverihuertas2021-vmartinp2021-helm0.1.01 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
huertaslopez/i.huertas.2021-v.martinp.2021-planner:2.0.0e2c18bd65472
logback-core@1.2.7
1.2.9

Open the chart page →

27,721
itm-mqtt-brokerintelVerified publisher1.0.01 of 1See more

itm-mqtt-broker intel 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
hivemq/hivemq4:dns-4.5.144d194450d48e
logback-core@1.2.3
1.2.9

Open the chart page →

2,653
spring-boot-chartjhidalgo3-githubVerified publisher4.0.01 of 1See more

spring-boot-chart jhidalgo3-github 4.0.0

1 of the 1 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
jhidalgo3/spring-echo-example:lateste08733191ea0
logback-core@1.2.3
1.2.9

Open the chart page →

1,703
kanbanapp-demokanbanapp-demo0.3.01 of 3See more

kanbanapp-demo kanbanapp-demo 0.3.0

1 of the 3 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
sdandey/dandey-apps:kanban-board-kanban-appbef0f599737b
logback-core@1.2.3
1.2.9

Open the chart page →

7,498
kron-aapm-agentkron-aapm-agent1.1.01 of 1See more

kron-aapm-agent kron-aapm-agent 1.1.0

1 of the 1 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
krontechnology/aapm-agent:1.1.07feef7d2ab42
logback-core@1.2.3
1.2.9

Open the chart page →

8,884
tapm-componentkubebb5.7.12 of 3See more

tapm-component kubebb 5.7.1

2 of the 3 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
refar/apm-api:v5.7.1241373fa2972
logback-core@1.2.3
1.2.9
refar/apm-operator-server:v5.7.1e5490f050f9f
logback-core@1.2.3
1.2.9

Open the chart page →

10,264
sonarqubekubesphereVerified publisher6.7.01 of 3See more

sonarqube kubesphere 6.7.0

1 of the 3 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
library/sonarqube:8.9-communityeb2f0be32efd
logback-core@1.2.3
1.2.9

Open the chart page →

2,273
nacoskubesphere-testVerified publisher0.1.11 of 1See more

nacos kubesphere-test 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
nacos/nacos-server:1.4.1fe6e5688cdf3
logback-core@1.2.3
1.2.9

Open the chart page →

4,153
imageboxkyso1.0.01 of 1See more

imagebox kyso 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
kyso/imagebox:latest68091eace89c
logback-core@1.2.3
1.2.9

Open the chart page →

3,833
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
ladeit/ladeit:latest962b665ffe82
logback-core@1.2.3
1.2.9

Open the chart page →

26,356
pageslatif-pages1.0.01 of 3See more

pages latif-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
logback-core@1.2.3
1.2.9

Open the chart page →

20,190
pageslavanya-pages1.0.01 of 3See more

pages lavanya-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
logback-core@1.2.3
1.2.9

Open the chart page →

20,190
pagesliviu884422-pages1.0.01 of 3See more

pages liviu884422-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
logback-core@1.2.3
1.2.9

Open the chart page →

20,190
elastictranscoderluiscajl0.46.04 of 4See more

elastictranscoder luiscajl 0.46.0

4 of the 4 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
elastictranscoder/media:627e21dc963ab3858c6b
logback-core@1.2.3
1.2.9
elastictranscoder/media-storage:f6d861a026208b8c2359
logback-core@1.2.3
1.2.9
elastictranscoder/transcoder:627e21dcb4a0327029e6
logback-core@1.2.3
1.2.9
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
logback-core@1.2.3
1.2.9

Open the chart page →

58,160
lavandaluiscajl0.0.1344 of 5See more

lavanda luiscajl 0.0.134

4 of the 5 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
lavandadelpatio/automated-download-films:0.0.2094e225a5a6f8
logback-core@1.2.3
1.2.9
lavandadelpatio/automated-download-shows:0.0.492de3c3426d2
logback-core@1.2.3
1.2.9
lavandadelpatio/filebot:0.0.671f2ccec8c0d
logback-core@1.2.3
1.2.9
lavandadelpatio/tmdb:0.0.2f36af885e915
logback-core@1.2.3
1.2.9

Open the chart page →

18,248
eoloplantmca-eoloplaner0.1.02 of 7See more

eoloplant mca-eoloplaner 0.1.0

2 of the 7 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
hugohg34/planner:0.0.2171f61e8d7e2
logback-core@1.2.7
1.2.9
hugohg34/toposervice:0.0.2812a03b3f274
logback-core@1.2.7
1.2.9

Open the chart page →

29,588
pulsarv2milvus-helm2.7.81 of 4See more

pulsarv2 milvus-helm 2.7.8

1 of the 4 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
logback-core@1.2.3
1.2.9

Open the chart page →

15,855
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
mintproject/model-catalog-endpoint:29256555a6fbaefae4729d5cd259564708a4ab04ffbb13f20465
logback-core@1.0.11
1.2.9

Open the chart page →

43,341
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
logback-core@1.2.3
1.2.9

Open the chart page →

25,933
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
logback-core@1.2.3
1.2.9

Open the chart page →

15,675
pagesmuthu-pages1.0.01 of 3See more

pages muthu-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
logback-core@1.2.3
1.2.9

Open the chart page →

20,190
Practica_4_helmmy-heml-appVerified publisher0.1.01 of 7See more

Practica_4_helm my-heml-app 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
adagber/planner:v1.0e5c1ed097752
logback-core@1.2.7
1.2.9

Open the chart page →

27,721
pagesnarain1.0.01 of 3See more

pages narain 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
logback-core@1.2.3
1.2.9

Open the chart page →

20,190
pagesnarasimha-pages1.0.01 of 3See more

pages narasimha-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
logback-core@1.2.3
1.2.9

Open the chart page →

20,190
pagesnavin-brixton1.0.01 of 3See more

pages navin-brixton 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
logback-core@1.2.3
1.2.9

Open the chart page →

20,190
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
logback-core@1.0.13
1.2.9

Open the chart page →

55,726
dependency-tracknovum-rgi-charts0.1.81 of 2See more

dependency-track novum-rgi-charts 0.1.8

1 of the 2 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
owasp/dependency-track:3.8.0efc65e702ee1
logback-core@1.2.3
1.2.9

Open the chart page →

3,633
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
logback-core@1.2.3
1.2.9

Open the chart page →

9,005
cdn-remoteopencord0.2.41 of 3See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2021-42550.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
logback-core@1.1.9
1.2.9

Open the chart page →

63,223

Container images carrying it

183 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
rm3l/service-names-port-numbers:0.12.162d1cc4223e5
logback-core@1.2.7
1.2.9
1
robotshop/rs-shipping:latest89753ab48919
logback-core@1.2.3
1.2.9
1
rundeck/rundeck:3.2.74d64fe56f767
logback-core@1.2.3
1.2.9
1
rundeck/rundeck:3.0.16b13e8059ad72
logback-core@1.1.11
1.2.9
1
salaboy/fmtok8s-monolith:v0.1.0f225568e6d03
logback-core@1.2.3
1.2.9
1
scorpiobroker/scorpio:scorpio-aaio_2.1.0db55012043df
logback-core@1.2.7
1.2.9
1
sdandey/dandey-apps:kanban-board-kanban-appbef0f599737b
logback-core@1.2.3
1.2.9
1
seataio/seata-server:1.5.1ee1ed55f4144
logback-core@1.2.7
1.2.9
1
seldonio/apife:0.2.7ba81b17f00eb
logback-core@1.1.11
1.2.9
1
seldonio/apife:0.3.1eea0d3f578ca
logback-core@1.1.11
1.2.9
1
seldonio/cluster-manager:0.2.729e362bb1ba2
logback-core@1.1.11
1.2.9
1
slagattollas/planner-practica:latestcecd95e31486
logback-core@1.2.3
1.2.9
1
slagattollas/toposervice-practica:latestdc63973dae0d
logback-core@1.2.3
1.2.9
1
slamdev/hetzner-irobo:0.0.13ca20c184c55
logback-core@1.2.6
1.2.9
1
someblackmagic/smtp-fake-server:latest0d63ba37a560
logback-core@1.2.3
1.2.9
1
stanislovesid/oracle-host-app:14fe1ed26e194
logback-core@1.2.6
1.2.9
1
thelastpickle/cassandra-reaper:1.3.09c53996c457d
logback-core@1.2.3
1.2.9
1
torrespro/mca-worker:2.0.06d3bd305a1ba
logback-core@1.2.3
1.2.9
1
vientoprojects/kubernetes-monitoring-telegram-bot:latesteb2a71531741
logback-core@1.2.4
1.2.9
1
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
logback-core@1.2.3
1.2.9
1
ghcr.io/eshepelyuk/dckr/cmak-3.0.0.6:1.2.090a34412c6b5
logback-core@1.2.3
1.2.9
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
logback-core@1.2.3
1.2.9
1
ghcr.io/kvaps/linstor-controller:v1.14.000ce11c31087
logback-core@1.2.3
1.2.9
1
ghcr.io/kvaps/linstor-satellite:v1.14.0a573fb9bc809
logback-core@1.2.3
1.2.9
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
logback-core@1.2.3
1.2.9
1
ghcr.io/skyoo2003/digdag:0.0.1821fd6a6f2cd
logback-core@1.1.5
1.2.9
1
ghcr.io/stacksimplify/kube-usermgmt-webapp:1.0.0-mysqldb41b45003c6b6
logback-core@1.2.3
1.2.9
1
ghcr.io/wbstack/queryservice:0.3.6_0.6b83b5b81d4b6
logback-core@1.2.3
1.2.9
1
ghcr.io/wbstack/queryservice-updater:0.3.84_3.97525a57ac3f1
logback-core@1.2.3
1.2.9
1
quay.io/fiware/canis-major:1.5.15bb40472e4ff5
logback-core@1.2.3
1.2.9
1
quay.io/fiware/endpoint-configuration-service:0.4.30dc38a87b844
logback-core@1.2.3
1.2.9
1
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
logback-core@1.2.3
1.2.9
1
quay.io/srcmaxim/gradle-example-app:1.1.37c3fc28746ef
logback-core@1.2.3
1.2.9
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.