Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2021-24035 — CRITICAL severity vulnerability | Release Alert

CVE-2021-24035

9.1

CRITICALCVSS v3

Published

June 11, 2021

CVSS v2

6.4 MEDIUM

Affected

3 projects

Assigned by

[email protected]

Severity scale

010

Description

A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13 could have allowed path traversal attacks that overwrite WhatsApp files.

NPMSDK for interfacing with WhatsApp Business Platform in Typescript or Node.js using the Cloud API, hosted by Meta.

= *, < 2.21.8.13NVD

RubyGemsA Ruby interface to WhatsApp Enterprise API.

= *, < 2.21.8.13NVD

getninjas/whatsapp

GitHub

More on this CVE

NVD↗GitHub Advisory↗

A Ruby interface to WhatsApp Enterprise API.

= *, < 2.21.8.13NVD