Maven/com.alibaba.nacos:nacos-common CVE-2021-29441, CVE-2021-29442: high
Authentication bypass for specific endpoint
Action: Upgrade com.alibaba.nacos:nacos-common to 1.4.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.1 | - |
Fixed versions
| 1.4.1 |
Sources
- osv: GHSA-xv5h-v7jh-p2qh
- https://nvd.nist.gov/vuln/detail/CVE-2021-29442
- https://github.com/alibaba/nacos/issues/4463
- https://github.com/alibaba/nacos/pull/4517
- https://github.com/advisories/GHSA-36hp-jr8h-556f
CVE-2021-29441, CVE-2021-29442 · published · modified · JSON