GO-2021-0265
HighAdvisory
Published 25 Oct 2021In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.024
- 83rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 21
- of 17,781 indexed, latest versions
- Container images
- 17
- deployed by those charts
- Fix available
- 1 of 1
- affected package
github.com/tidwall/gjson Vulnerable to REDoS attack
Carried by container images the latest versions of 21 of 17,781 indexed charts deploy, on 17 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v1.2.1, v1.3.0, v1.3.5, v1.6.0+5 more | 1.9.3 | 17 |
- OSV records
- GHSA-ppj4-34rq-v8j9GO-2021-0265
- Also known as
- CVE-2021-42248, CVE-2021-42836, GHSA-c9gm-7rfj-8w5h
Charts affected
21 by stars
Container images carrying it
17 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| minio/ | bd11edda91f3 | github.com/ github.com/ | 1.9.3 1.9.3 | 3 |
| quay.io/ | 4c3b91bebd3d | github.com/ github.com/ | 1.9.3 1.9.3 | 3 |
| alpine/ | a41efe02a041 | github.com/ github.com/ | 1.9.3 1.9.3 | 1 |
| amazon/ | e745d1783c93 | github.com/ github.com/ | 1.9.3 1.9.3 | 1 |
| apache/ | c010ea7d1694 | github.com/ github.com/ | 1.9.3 1.9.3 | 1 |
| juicedata/ | 95008ba63318 | github.com/ github.com/ | 1.9.3 1.9.3 | 1 |
| kubeflowkatib/ | 12a28c8a0b41 | github.com/ github.com/ | 1.9.3 1.9.3 | 1 |
| library/ | 794079a7f241 | github.com/ github.com/ | 1.9.3 1.9.3 | 1 |
| library/ | addb86c0c520 | github.com/ github.com/ | 1.9.3 1.9.3 | 1 |
| mattermost/ | 31078df7a3c8 | github.com/ github.com/ | 1.9.3 1.9.3 | 1 |
| mattermost/ | f2f987dada52 | github.com/ github.com/ | 1.9.3 1.9.3 | 1 |
| minio/ | 053f103f4894 | github.com/ github.com/ | 1.9.3 1.9.3 | 1 |
| minio/ | e2b7b633c250 | github.com/ github.com/ | 1.9.3 1.9.3 | 1 |
| minio/ | f00aa6ef2b72 | github.com/ github.com/ | 1.9.3 1.9.3 | 1 |
| mintel/ | 0e0707b7732b | github.com/ github.com/ | 1.9.3 1.9.3 | 1 |
| oxynozeta/ | a153c386f5af | github.com/ github.com/ | 1.9.3 1.9.3 | 1 |
| stashapp/ | 24dbd7607174 | github.com/ github.com/ | 1.9.3 1.9.3 | 1 |