CVE-2021-43818
HighAdvisory
Published 13 Dec 2021In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.8
- base score, highest
- EPSS
- 0.025
- 84th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 89
- of 17,781 indexed, latest versions
- Container images
- 96
- deployed by those charts
- Fix available
- 12 of 12
- affected packages
Red Hat Security Advisory: python39:3.9 and python39-devel:3.9 security update
Carried by container images the latest versions of 89 of 17,781 indexed charts deploy, on 96 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| python-chardetrpm | 3.0.4-7.el8 | 0:3.0.4-19.module+el8.4.0+9822+20bf1249 | 44 |
| python-idnarpm | 2.5-5.el8, 2.5-7.el8_10, 2.5-8.el8_10 | 0:2.10-3.module+el8.4.0+9822+20bf1249 | 44 |
| python-pysocksrpm | 1.6.8-3.el8 | 0:1.7.1-4.module+el8.4.0+9822+20bf1249 | 44 |
| python-requestsrpm | 2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_8, 2.20.0-6.el8_10 | 0:2.25.0-2.module+el8.4.0+9822+20bf1249 | 44 |
| python-urllib3rpm | 1.24.2-4.el8, 1.24.2-5.el8, 1.24.2-5.el8_6.1, 1.24.2-5.el8_9.2+3 more | 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1 | 44 |
| python-plyrpm | 3.9-8.el8, 3.9-9.el8 | 0:3.11-10.module+el8.4.0+570+c2eaf144, 0:3.11-10.module+el8.4.0+9822+20bf1249 | 13 |
| python3x-piprpm | 19.3.1-1.module+el8.4.0+8888+89bc7e79, 19.3.1-6.module+el8.7.0+15823+8950cfa7, 20.2.4-3.module+el8.4.0+9822+20bf1249 | 0:20.2.4-7.module+el8.6.0+13003+6bb2c488 | 4 |
| python3x-setuptoolsrpm | 41.6.0-4.module+el8.4.0+8888+89bc7e79, 41.6.0-5.module+el8.5.0+12205+a865257a, 50.3.2-3.module+el8.4.0+9822+20bf1249 | 0:50.3.2-4.module+el8.5.0+12204+54860423 | 4 |
| python-wheelrpm | 0.33.6-5.module+el8.4.0+8888+89bc7e79, 1:0.31.1-2.module+el8.1.0+3724+3c097090 | 1:0.35.1-4.module+el8.5.0+12204+54860423 | 2 |
| python39rpm | 3.9.2-1.module+el8.4.0+10237+bdc77aac | 0:3.9.7-1.module+el8.6.0+12577+62b8d0a1 | 1 |
| lxmlpypi | 3.2.1, 3.6.4, 4.1.0, 4.2.1+12 more | 4.6.5 | 48 |
| lxmldeb | 4.3.2-1 | 4.3.2-1+deb10u4 | 1 |
- OSV records
- GHSA-55x5-fj6c-h6m8RHSA-2022:1763RLSA-2022:1763DSA-5043-1
- Also known as
- PYSEC-2021-852
Charts affected
89 by stars
Container images carrying it
96 by charts deploying them
A fixed version is listed for 12 of the 12 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| quay.io/ | a7dff785d821 | python-chardet python-idna python-ply python-pysocks python-requests python-urllib3 | 0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:3.11-10.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1 | 3 |
| nacos/ | dcf04549c6d7 | lxml | 4.6.5 | 2 |
| ngoduykhanh/ | ba36ab196d3d | lxml | 4.6.5 | 2 |
| weblate/ | 69c160d37a3c | lxml | 4.6.5 | 2 |
| quay.io/ | f7f8228f17cc | lxml | 4.6.5 | 2 |
| quay.io/ | 464a3af4dfe0 | python-chardet python-idna python-ply python-pysocks python-requests python-urllib3 | 0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:3.11-10.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1 | 2 |
| quay.io/ | bb5e052770e5 | python-chardet python-idna python-ply python-pysocks python-requests python-urllib3 | 0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:3.11-10.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1 | 2 |
| akeyless/ | 4ba8900a0061 | python-chardet python-idna python-pysocks python-requests python-urllib3 | 0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1 | 1 |
| alerta/ | 4786b9eaa606 | lxml | 4.6.5 | 1 |
| amazon/ | 1ed00881c937 | lxml | 4.6.5 | 1 |
| amazon/ | 8414d80019b0 | lxml | 4.6.5 | 1 |
| anchore/ | bde9eedf639d | python-chardet python-idna python-pysocks python-requests python-urllib3 python-wheel python3x-pip python3x-setuptools | 0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1 1:0.35.1-4.module+el8.5.0+12204+54860423 0:20.2.4-7.module+el8.6.0+13003+6bb2c488 0:50.3.2-4.module+el8.5.0+12204+54860423 | 1 |
| anchore/ | ed9b3badd17c | python-wheel | 1:0.35.1-4.module+el8.5.0+12204+54860423 | 1 |
| andrianrf/ | 047a7837651e | python-chardet python-idna python-ply python-pysocks python-requests python-urllib3 | 0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:3.11-10.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1 | 1 |
| apache/ | a7d9970c148f | lxml | 4.6.5 | 1 |
| apache/ | af361b20bec0 | lxml | 4.6.5 | 1 |
| apache/ | 5ac2a4e0f627 | lxml | 4.6.5 | 1 |
| apecloud/ | ff2858eab9cc | python-chardet python-idna python-pysocks python-requests python-urllib3 | 0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1 | 1 |
| bryanalves/ | 42f0a130001d | lxml | 4.6.5 | 1 |
| cloudve/ | af56e77ca587 | lxml | 4.6.5 | 1 |
| datadog/ | 8f20e56b5311 | lxml | 4.6.5 | 1 |
| fiware/ | 3c490a746f65 | python-chardet python-idna python-pysocks python-requests python-urllib3 | 0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1 | 1 |
| galaxy/ | 0267bad550e6 | lxml | 4.6.5 | 1 |
| geoscienceaustralia/ | f4039b45572a | lxml | 4.6.5 | 1 |
| gethue/ | 5702b2c37ff9 | lxml | 4.6.5 | 1 |
| gristlabs/ | 6e71b1914a7e | lxml | 4.6.5 | 1 |
| gurolakman/ | ed8fd2062548 | python-chardet python-idna python-pysocks python-requests python-urllib3 | 0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1 | 1 |
| gurolakman/ | 9abb3882bcbd | python-chardet python-idna python-pysocks python-requests python-urllib3 | 0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1 | 1 |
| gurolakman/ | 6537e8ed8de8 | python-chardet python-idna python-pysocks python-requests python-urllib3 | 0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1 | 1 |
| gurolakman/ | ce23b20a8a17 | python-chardet python-idna python-pysocks python-requests python-urllib3 | 0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1 | 1 |
| gurolakman/ | b22e746edd5d | python-chardet python-idna python-pysocks python-requests python-urllib3 | 0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1 | 1 |
| gurolakman/ | bf18525c5ad9 | python-chardet python-idna python-pysocks python-requests python-urllib3 | 0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1 | 1 |
| gurolakman/ | 8739565c3ea2 | python-chardet python-idna python-pysocks python-requests python-urllib3 | 0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1 | 1 |
| ibmcom/ | 5441dba2fa00 | lxml | 4.6.5 | 1 |
| ibmcom/ | e31ff09e8aad | lxml | 4.6.5 | 1 |
| ibmcom/ | 58548034cf55 | lxml | 4.6.5 | 1 |
| ibmcom/ | d28bf361327a | python-chardet python-idna python-pysocks python-requests python-urllib3 | 0:3.0.4-19.module+el8.4.0+9822+20bf1249 0:2.10-3.module+el8.4.0+9822+20bf1249 0:1.7.1-4.module+el8.4.0+9822+20bf1249 0:2.25.0-2.module+el8.4.0+9822+20bf1249 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1 | 1 |
| improwised/ | 97280b55cbd4 | lxml | 4.6.5 | 1 |
| keitaro/ | 5bf1a45f45c1 | lxml | 4.6.5 | 1 |
| linuxserver/ | 938810eca3d3 | lxml | 4.6.5 | 1 |
| linuxserver/ | 89cd8d5fb1ac | lxml | 4.6.5 | 1 |
| linuxserver/ | c4d2766b9eb7 | lxml | 4.6.5 | 1 |
| linuxserver/ | e48b479c1891 | lxml | 4.6.5 | 1 |
| mariadb/ | 56c5e0908148 | python-ply | 0:3.11-10.module+el8.4.0+570+c2eaf144 | 1 |
| mcronce/ | f820ef2e3c26 | lxml | 4.6.5 | 1 |
| mcronce/ | c03c1c7f5aa9 | lxml | 4.6.5 | 1 |
| microcks/ | e3a3e0c67b09 | lxml | 4.6.5 | 1 |
| mvitale1989/ | 1504ccda06df | lxml | 4.6.5 | 1 |
| nacos/ | fe6e5688cdf3 | lxml | 4.6.5 | 1 |
| ncsapolyglot/ | 438d82cdbdb5 | lxml | 4.6.5 | 1 |