Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-39275
9.8
CRITICALCVSS v3
Published
September 16, 2021
CVSS v2
7.5 HIGH
Affected
5 projects
Assigned by
Apache
Severity scale
010
Description
ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache HTTP Server 2.4.48 and earlier.
Crates.io
NPM
RubyGems