StackRadar

CVE-2021-42771

High

Advisory

Published 20 Oct 2021In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.008
54th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
27
of 17,781 indexed, latest versions
Container images
25
deployed by those charts
Fix available
2 of 2
affected packages

Directory Traversal in Babel

Carried by container images the latest versions of 27 of 17,781 indexed charts deploy, on 25 images.

Affected packageAffected versionsFixed inImages
babelpypi0.9.6, 2.5.1, 2.6.0, 2.7.0+2 more2.9.125
python-babeldeb2.6.0+dfsg.1-12.6.0+dfsg.1-1+deb10u11
OSV records
GHSA-h4m5-qpfp-3mpvDSA-5018-1
Also known as
PYSEC-2021-421

Charts affected

27 by stars
ChartLatestAffected imagesRadar Score
milvusmilvus-helm5.0.271 of 4See more

milvus milvus-helm 5.0.27

1 of the 4 container images this version deploys carry CVE-2021-42771.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.0.79c9947de139d
babel@2.8.0
2.9.1

Open the chart page →

10,670
supersetcloudposse1.2.01 of 1See more

superset cloudposse 1.2.0

1 of the 1 container images this version deploys carry CVE-2021-42771.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
babel@2.7.0
2.9.1

Open the chart page →

5,851
fadicetic0.3.11 of 25See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry CVE-2021-42771.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
babel@2.7.0
2.9.1

Open the chart page →

52,919
deconzgeek-cookbookVerified publisher6.5.21 of 1See more

deconz geek-cookbook 6.5.2

1 of the 1 container images this version deploys carry CVE-2021-42771.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.12.066541bbb78952
babel@2.6.0
python-babel@2.6.0+dfsg.1-1
2.9.1
2.6.0+dfsg.1-1+deb10u1

Open the chart page →

3,555
pgadmin4folio-org1.2.301 of 1See more

pgadmin4 folio-org 1.2.30

1 of the 1 container images this version deploys carry CVE-2021-42771.

Container imageDigestPackageFixed in
dpage/pgadmin4:4.22b1f00b8163cf
babel@2.8.0
2.9.1

Open the chart page →

2,034
octoprinthalkeye0.1.11 of 1See more

octoprint halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-42771.

Container imageDigestPackageFixed in
octoprint/octoprint:1.4.0106c26efcd8a
babel@2.9.0
2.9.1

Open the chart page →

3,608
open-notificatiesopen-zaak0.7.01 of 4See more

open-notificaties open-zaak 0.7.0

1 of the 4 container images this version deploys carry CVE-2021-42771.

Container imageDigestPackageFixed in
openzaak/open-notificaties:1.3.02e65313b9b10
babel@2.7.0
2.9.1

Open the chart page →

2,850
ckanstatcan0.0.351 of 8See more

ckan statcan 0.0.35

1 of the 8 container images this version deploys carry CVE-2021-42771.

Container imageDigestPackageFixed in
statcan/ckan:2.93921305425b8
babel@2.7.0
2.9.1

Open the chart page →

24,930
pghoardwiremindVerified publisher0.8.11 of 1See more

pghoard wiremind 0.8.1

1 of the 1 container images this version deploys carry CVE-2021-42771.

Container imageDigestPackageFixed in
wiremind/pghoard:12-2019-11-264dea42c8166c
babel@2.7.0
2.9.1

Open the chart page →

2,952
radosgwananace-chartsVerified publisher0.3.41 of 1See more

radosgw ananace-charts 0.3.4

1 of the 1 container images this version deploys carry CVE-2021-42771.

Container imageDigestPackageFixed in
ceph/daemon:latest-nautilus90f30824a96e
babel@0.9.6
2.9.1

Open the chart page →

1,650
keystonearzu0.2.291 of 4See more

keystone arzu 0.2.29

1 of the 4 container images this version deploys carry CVE-2021-42771.

Container imageDigestPackageFixed in
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
babel@2.9.0
2.9.1

Open the chart page →

22,568
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2021-42771.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
babel@2.5.1
2.9.1

Open the chart page →

22,891
pghoardcamptocamp35.8.11 of 1See more

pghoard camptocamp3 5.8.1

1 of the 1 container images this version deploys carry CVE-2021-42771.

Container imageDigestPackageFixed in
camptocamp/pghoard:10bff736b15623
babel@2.6.0
2.9.1

Open the chart page →

2,813
supersetcloudnativeapp1.1.61 of 1See more

superset cloudnativeapp 1.1.6

1 of the 1 container images this version deploys carry CVE-2021-42771.

Container imageDigestPackageFixed in
amancevice/superset:0.28.1c8c04bfe3d66
babel@2.6.0
2.9.1

Open the chart page →

5,060
galaxy-stablecloudve2.0.01 of 5See more

galaxy-stable cloudve 2.0.0

1 of the 5 container images this version deploys carry CVE-2021-42771.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
babel@2.5.1
2.9.1

Open the chart page →

70,895
pgadminhalkeye1.0.01 of 1See more

pgadmin halkeye 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-42771.

Container imageDigestPackageFixed in
chorss/docker-pgadmin4:4.115c549cacb8ab
babel@2.7.0
2.9.1

Open the chart page →

2,555
nominatimheywood8-helm-chartsVerified publisher3.10.81 of 3See more

nominatim heywood8-helm-charts 3.10.8

1 of the 3 container images this version deploys carry CVE-2021-42771.

Container imageDigestPackageFixed in
mediagis/nominatim:4.2d0eae7b51374
babel@2.8.0
2.9.1

Open the chart page →

14,290
jx-app-anchorejenkins-x0.0.41 of 2See more

jx-app-anchore jenkins-x 0.0.4

1 of the 2 container images this version deploys carry CVE-2021-42771.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.7.1ed9b3badd17c
babel@2.8.0
2.9.1

Open the chart page →

9,854
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2021-42771.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
babel@2.8.0
2.9.1

Open the chart page →

9,005
comacopencord1.0.02 of 9See more

comac opencord 1.0.0

2 of the 9 container images this version deploys carry CVE-2021-42771.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
babel@2.6.0
2.9.1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
babel@2.6.0
2.9.1

Open the chart page →

88,546
comac-platformopencord0.0.171 of 11See more

comac-platform opencord 0.0.17

1 of the 11 container images this version deploys carry CVE-2021-42771.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
babel@2.6.0
2.9.1

Open the chart page →

26,211
atlassian-confluencesomeblackmagic3.4.11 of 1See more

atlassian-confluence someblackmagic 3.4.1

1 of the 1 container images this version deploys carry CVE-2021-42771.

Container imageDigestPackageFixed in
atlassian/confluence-server:7.10.03b9222ab32ef
babel@2.8.0
2.9.1

Open the chart page →

13,605
atlassian-jirasomeblackmagic3.3.21 of 1See more

atlassian-jira someblackmagic 3.3.2

1 of the 1 container images this version deploys carry CVE-2021-42771.

Container imageDigestPackageFixed in
atlassian/jira-software:8.14.037bc46cbec1a
babel@2.8.0
2.9.1

Open the chart page →

13,079
pgadminstakaterVerified publisher0.1.141 of 1See more

pgadmin stakater 0.1.14

1 of the 1 container images this version deploys carry CVE-2021-42771.

Container imageDigestPackageFixed in
dpage/pgadmin4:4.5a5a656e1d5fd
babel@2.6.0
2.9.1

Open the chart page →

2,060
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2021-42771.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
babel@2.8.0
2.9.1

Open the chart page →

13,459
ceph-csi-cephfswikimedia0.1.81 of 5See more

ceph-csi-cephfs wikimedia 0.1.8

1 of the 5 container images this version deploys carry CVE-2021-42771.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
babel@2.5.1
2.9.1

Open the chart page →

10,285
ceph-csi-rbdwikimedia0.1.131 of 6See more

ceph-csi-rbd wikimedia 0.1.13

1 of the 6 container images this version deploys carry CVE-2021-42771.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
babel@2.5.1
2.9.1

Open the chart page →

11,784

Container images carrying it

25 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
amancevice/superset:0.35.212a0a9e66550
babel@2.7.0
2.9.1
2
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
babel@2.6.0
2.9.1
2
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
babel@2.5.1
2.9.1
2
amancevice/superset:0.28.1c8c04bfe3d66
babel@2.6.0
2.9.1
1
anchore/anchore-engine:v0.7.1ed9b3badd17c
babel@2.8.0
2.9.1
1
apachepulsar/pulsar:3.1.016f9fdab3fa6
babel@2.8.0
2.9.1
1
apachepulsar/pulsar:3.0.79c9947de139d
babel@2.8.0
2.9.1
1
atlassian/confluence-server:7.10.03b9222ab32ef
babel@2.8.0
2.9.1
1
atlassian/jira-software:8.14.037bc46cbec1a
babel@2.8.0
2.9.1
1
camptocamp/pghoard:10bff736b15623
babel@2.6.0
2.9.1
1
ceph/daemon:latest-nautilus90f30824a96e
babel@0.9.6
2.9.1
1
chorss/docker-pgadmin4:4.115c549cacb8ab
babel@2.7.0
2.9.1
1
deconzcommunity/deconz:2.12.066541bbb78952
babel@2.6.0
python-babel@2.6.0+dfsg.1-1
2.9.1
2.6.0+dfsg.1-1+deb10u1
1
dpage/pgadmin4:4.5a5a656e1d5fd
babel@2.6.0
2.9.1
1
dpage/pgadmin4:4.22b1f00b8163cf
babel@2.8.0
2.9.1
1
galaxy/galaxy-init:v18.010267bad550e6
babel@2.5.1
2.9.1
1
gethue/hue:4.10.05702b2c37ff9
babel@2.5.1
2.9.1
1
mediagis/nominatim:4.2d0eae7b51374
babel@2.8.0
2.9.1
1
octoprint/octoprint:1.4.0106c26efcd8a
babel@2.9.0
2.9.1
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
babel@2.6.0
2.9.1
1
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
babel@2.9.0
2.9.1
1
openzaak/open-notificaties:1.3.02e65313b9b10
babel@2.7.0
2.9.1
1
statcan/ckan:2.93921305425b8
babel@2.7.0
2.9.1
1
twentycrm/twenty-postgres-spilo:latest2f78405a78be
babel@2.8.0
2.9.1
1
wiremind/pghoard:12-2019-11-264dea42c8166c
babel@2.7.0
2.9.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.