CVE-2021-3907

3 advisories.

Go/github.com/cloudflare/cfrpki CVE-2021-3907: low, EPSS 4.20%

Path traversal in github.com/cloudflare/cfrpki/cmd/octorpki

Action: Upgrade github.com/cloudflare/cfrpki to 1.4.3 or later.

go get github.com/cloudflare/cfrpki@v1.4.3

introduced	fixed	last affected
0	1.4.3	-

1.4.3

CVE-2021-3907 · published 2022-02-14T22:52:15Z · modified 2025-01-14T09:41:54.827947Z · JSON

Arbitrary filepath traversal via URI injection

Action: Upgrade github.com/cloudflare/cfrpki to 1.4.4 or later.

go get github.com/cloudflare/cfrpki@v1.4.4

introduced	fixed	last affected
0	1.4.4	-

1.4.4

CVE-2021-3907 · published 2021-11-10T20:08:29Z · modified 2026-02-04T02:22:56.432665Z · JSON

Directory traversal in manifest path extraction in github.com/cloudflare/cfrpki

Action: Upgrade github.com/cloudflare/cfrpki to 1.4.4 or later.

go get github.com/cloudflare/cfrpki@v1.4.4

introduced	fixed	last affected
0	1.4.4	-

1.4.4

CVE-2021-3907 · published 2022-07-15T23:07:18Z · modified 2026-02-04T03:00:30.292123Z · JSON