StackRadarChart IndexLive demo

CVE-2021-43808

Medium

Advisory

Published 8 Dec 2021In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.1; base score, highest
EPSS: 0.008; 54th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 13; of 17,781 indexed, latest versions
Container images: 10; deployed by those charts
Fix available: 2 of 2; affected packages

Laravel Framework XSS in Blade templating engine

Carried by container images the latest versions of 13 of 17,781 indexed charts deploy, on 10 images.

Affected package	Affected versions	Fixed in	Images
laravel/frameworkcomposer	v5.0.35, v5.2.39, v5.5.40, v5.8.38+1 more	6.20.42, 8.75.0	8
illuminate/viewcomposer	v5.1.41, v8.70.2	6.20.42, 8.75.0	2

OSV records: GHSA-66hf-2p6w-jqfw

Charts affected

13 by stars

Chart

Latest

Affected images

Radar Score

cachetdeliveryhero

1 of 2 See more

cachet deliveryhero 1.3.5

1 of the 2 container images this version deploys carry CVE-2021-43808.

Container image	Digest	Package	Fixed in
cachethq/docker :2.3.15	a61ff0f67ea7	laravel/framework@v5.2.39	6.20.42

Open the chart page →

1,896

laravelrenoki-co

1 of 2 See more

laravel renoki-co 1.0.0

1 of the 2 container images this version deploys carry CVE-2021-43808.

Container image	Digest	Package	Fixed in
quay.io/renokico/laravel-helm-demo :0.6.0	3207f957e80c	laravel/framework@v8.37.0	8.75.0

Open the chart page →

6,931

laravel-octanerenoki-co

1 of 1 See more

laravel-octane renoki-co 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-43808.

Container image	Digest	Package	Fixed in
quay.io/renokico/laravel-helm-demo :octane-0.6.0	cad83090c58f	laravel/framework@v8.37.0	8.75.0

Open the chart page →

3,634

cachetadnoctem

1 of 2 See more

cachet adnoctem 0.3.3

1 of the 2 container images this version deploys carry CVE-2021-43808.

Container image	Digest	Package	Fixed in
cachethq/docker :2.3.15	a61ff0f67ea7	laravel/framework@v5.2.39	6.20.42

Open the chart page →

1,896

polrchristianhuth

1 of 2 See more

polr christianhuth 4.3.0

1 of the 2 container images this version deploys carry CVE-2021-43808.

Container image	Digest	Package	Fixed in
ajanvier/polr :2.3.0	91ac61b88c85	illuminate/view@v5.1.41	6.20.42

Open the chart page →

5,904

grocygeek-cookbook

1 of 1 See more

grocy geek-cookbook 8.5.2

1 of the 1 container images this version deploys carry CVE-2021-43808.

Container image	Digest	Package	Fixed in
linuxserver/grocy :version-v3.1.3	291296e66c2a	illuminate/view@v8.70.2	8.75.0

Open the chart page →

1,043

lycheegeek-cookbook

1 of 1 See more

lychee geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2021-43808.

Container image	Digest	Package	Fixed in
lycheeorg/lychee-laravel :v4.3.0	308c0e6231da	laravel/framework@v8.37.0	8.75.0

Open the chart page →

601

cachethelm-charts-nr

1 of 2 See more

cachet helm-charts-nr 1.3.5

1 of the 2 container images this version deploys carry CVE-2021-43808.

Container image	Digest	Package	Fixed in
cachethq/docker :2.3.15	a61ff0f67ea7	laravel/framework@v5.2.39	6.20.42

Open the chart page →

1,896

1 of 3 See more

freescout l4g 0.1.0

1 of the 3 container images this version deploys carry CVE-2021-43808.

Container image	Digest	Package	Fixed in
tiredofit/freescout :php8.2-1.17.72	5b7cc0658f07	laravel/framework@v5.5.40	6.20.42

Open the chart page →

5,332

laravel-chartlaravel-application

1 of 1 See more

laravel-chart laravel-application 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-43808.

Container image	Digest	Package	Fixed in
ibarreche/cloud-back-ci :latest	e16a469c5791	laravel/framework@v5.8.38	6.20.42

Open the chart page →

1,835

podcast-helmpodcastwala-helm

1 of 2 See more

podcast-helm podcastwala-helm 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-43808.

Container image	Digest	Package	Fixed in
shivani446/podcastwala-php :v1	c0d07b7b4c8d	laravel/framework@v5.0.35	6.20.42

Open the chart page →

621

laravel-workerrenoki-co

1 of 1 See more

laravel-worker renoki-co 1.1.0

1 of the 1 container images this version deploys carry CVE-2021-43808.

Container image	Digest	Package	Fixed in
quay.io/renokico/laravel-helm-demo :worker-0.6.0	4b188259267e	laravel/framework@v8.37.0	8.75.0

Open the chart page →

5,687

cachetsergiotocalini

1 of 1 See more

cachet sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-43808.

Container image	Digest	Package	Fixed in
cachethq/docker :2.3.15	a61ff0f67ea7	laravel/framework@v5.2.39	6.20.42

Open the chart page →

1,896

Container images carrying it

10 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
cachethq/docker :2.3.15	a61ff0f67ea7	laravel/framework@v5.2.39	6.20.42	4
ajanvier/polr :2.3.0	91ac61b88c85	illuminate/view@v5.1.41	6.20.42	1
ibarreche/cloud-back-ci :latest	e16a469c5791	laravel/framework@v5.8.38	6.20.42	1
linuxserver/grocy :version-v3.1.3	291296e66c2a	illuminate/view@v8.70.2	8.75.0	1
lycheeorg/lychee-laravel :v4.3.0	308c0e6231da	laravel/framework@v8.37.0	8.75.0	1
shivani446/podcastwala-php :v1	c0d07b7b4c8d	laravel/framework@v5.0.35	6.20.42	1
tiredofit/freescout :php8.2-1.17.72	5b7cc0658f07	laravel/framework@v5.5.40	6.20.42	1
quay.io/renokico/laravel-helm-demo :0.6.0	3207f957e80c	laravel/framework@v8.37.0	8.75.0	1
quay.io/renokico/laravel-helm-demo :worker-0.6.0	4b188259267e	laravel/framework@v8.37.0	8.75.0	1
quay.io/renokico/laravel-helm-demo :octane-0.6.0	cad83090c58f	laravel/framework@v8.37.0	8.75.0	1