Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
lid configuration queries. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000284202 - https://success.trendmicro.com/solution/000284205 - https://success.trendmicro.com/solution/000284206 - https://www.zerodayinitiative.com/advisories/ZDI-21-117/
CVE ID: CVE-2021-25247 State: PUBLISHED Published: 2021-01-27T19:10:26 Last Updated: 2024-08-03T19:56:11.059Z Vendors: Trend Micro Products: Trend Micro HouseCall for Home Networks Problem Types: DLL Hijacking Description: A DLL hijacking vulnerability Trend Micro HouseCall for Home Networks version 5.3.1063 and below could allow an attacker to use a malicious DLL to escalate privileges and perform arbitrary code execution. An attacker must already have user privileges on the machine to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://helpcenter.trendmicro.com/en-us/article/TMKA-10180
CVE ID: CVE-2021-25248 State: PUBLISHED Published: 2021-02-04T19:36:51 Last Updated: 2024-08-03T19:56:11.069Z Vendors: Trend Micro Products: Trend Micro Apex One, Trend Micro OfficeScan, Trend Micro Worry-Free Business Security Problem Types: Out-of-Bounds Read Information Disclosure Description: An out-of-bounds read information disclosure vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security (10.0 SP1 and Services) could allow an attacker to disclose sensitive information about a named pipe. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability
must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000284202 - https://success.trendmicro.com/solution/000284205 - https://success.trendmicro.com/solution/000284206 - https://www.zerodayinitiative.com/advisories/ZDI-21-118/
CVE ID: CVE-2021-25249 State: PUBLISHED Published: 2021-02-04T19:36:52 Last Updated: 2024-08-03T19:56:11.053Z Vendors: Trend Micro Products: Trend Micro Apex One, Trend Micro OfficeScan, Trend Micro Worry-Free Business Security Problem Types: Out-of-Bounds Write Information Disclosure Description: An out-of-bounds write information disclosure vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security (10.0 SP1 and Services) could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerabil
er must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000284202 - https://success.trendmicro.com/solution/000284205 - https://success.trendmicro.com/solution/000284206 - https://www.zerodayinitiative.com/advisories/ZDI-21-119/
CVE ID: CVE-2021-25250 State: PUBLISHED Published: 2021-04-13T12:35:04 Last Updated: 2024-08-03T19:56:11.087Z Vendors: Trend Micro Products: Trend Micro Apex One , Trend Micro OfficeScan Problem Types: Improper Access Control Description: An improper access control vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service and OfficeScan XG SP1 on a sensitive file could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.c
xploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000286019 - https://success.trendmicro.com/solution/000286157 - https://www.zerodayinitiative.com/advisories/ZDI-21-400/
CVE ID: CVE-2021-25251 State: PUBLISHED Published: 2021-02-10T22:00:15 Last Updated: 2024-08-03T19:56:11.086Z Vendors: Trend Micro Products: Trend Micro Security (Consumer) Problem Types: Code Injection Description: The Trend Micro Security 2020 and 2021 families of consumer products are vulnerable to a code injection vulnerability which could allow an attacker to disable the program's password protection and disable protection. An attacker must already have administrator privileges on the machine to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://helpcenter.trendmicro.com/en-us/article/TMKA-10211
CVE ID: CVE-2021-25252 State: PUBLISHED Published: 2021-03-03T15:43:40 Last Updated: 2024-08-03T19:56:11.072Z Vendors: Trend Micro Products: Trend Micro Virus Scan API (VSAPI) Engine Problem Types: Memory Exhaustion Description: Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freeze if exploited by an attacker using a specially crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000285675
CVE ID: CVE-2021-25253 State: PUBLISHED Published: 2021-04-13T12:53:59 Last Updated: 2024-08-03T19:56:11.086Z Vendors: Trend Micro Products: Trend Micro Apex One , Trend Micro OfficeScan Problem Types: Improper Access Control Description: An improper access control vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service and OfficeScan XG SP1 on a resource used by the service could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://succes
in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000286019 - https://success.trendmicro.com/solution/000286157 - https://www.zerodayinitiative.com/advisories/ZDI-21-401/
CVE ID: CVE-2021-25254 State: PUBLISHED Published: 2025-05-21T06:58:00.753Z Last Updated: 2025-05-21T22:09:29.774Z Vendors: Yandex Products: Browser Lite Problem Types: CWE-116 Description: Yandex Browser Lite for Android before 21.1.0 allows remote attackers to spoof the address bar. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://yandex.com/bugbounty/i/hall-of-fame-browser/
CVE ID: CVE-2021-25255 State: PUBLISHED Published: 2025-05-21T07:04:02.436Z Last Updated: 2025-05-21T14:07:41.883Z Vendors: Yandex Products: Browser Lite Problem Types: CWE-20 Description: Yandex Browser Lite for Android prior to version 21.1.0 allows remote attackers to cause a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://yandex.com/bugbounty/i/hall-of-fame-browser/
CVE ID: CVE-2021-25261 State: PUBLISHED Published: 2022-06-15T19:05:54 Last Updated: 2024-08-03T19:56:11.090Z Vendors: n/a Products: Yandex Browser (Desktop) Problem Types: Privilege escalation Description: Local privilege vulnerability in Yandex Browser for Windows prior to 22.5.0.862 allows a local, low privileged, attacker to execute arbitary code with the SYSTEM privileges through manipulating symlinks to installation file during Yandex Browser update process. Additional Analyst Notes: - CVE Program Container: References: - https://yandex.com/bugbounty/i/hall-of-fame-browser/
CVE ID: CVE-2021-25262 State: PUBLISHED Published: 2025-05-21T07:07:29.310Z Last Updated: 2025-05-21T13:51:43.378Z Vendors: Yandex Products: Browser Problem Types: CWE-116 Description: Yandex Browser for Android prior to version 21.3.0 allows remote attackers to perform IDN homograph attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://yandex.com/bugbounty/i/hall-of-fame-browser/
CVE ID: CVE-2021-25263 State: PUBLISHED Published: 2021-08-17T18:34:04 Last Updated: 2024-08-03T19:56:11.179Z Vendors: n/a Products: Yandex Browser (Desktop) Problem Types: Privilege escalation Description: Local privilege vulnerability in Yandex Browser for Windows prior to 21.9.0.390 allows a local, low privileged, attacker to execute arbitary code with the SYSTEM privileges through manipulating files in directory with insecure permissions during Yandex Browser update process. Additional Analyst Notes: - CVE Program Container: References: - https://yandex.com/bugbounty/i/hall-of-fame-browser/
CVE ID: CVE-2021-25264 State: PUBLISHED Published: 2021-05-17T17:02:09 Last Updated: 2024-08-03T19:56:11.059Z Vendors: Sophos Products: Intercept X for MacOS, Intercept X for MacOS (OPM), Sophos Home for MacOS Problem Types: n/a Description: In multiple versions of Sophos Endpoint products for MacOS, a local attacker could execute arbitrary code with administrator privileges. Additional Analyst Notes: - CVE Program Container: References: - https://community.sophos.com/b/security-blog - https://community.sophos.com/b/security-blog/posts/resolved-lpe-in-endpoint-for-macos-cve-2021-25264
CVE ID: CVE-2021-25265 State: PUBLISHED Published: 2021-03-22T17:24:28 Last Updated: 2024-08-03T19:56:11.097Z Vendors: Sophos Products: Sophos Connect Client Problem Types: n/a Description: A malicious website could execute code remotely in Sophos Connect Client before version 2.1. Additional Analyst Notes: - CVE Program Container: References: - https://community.sophos.com/b/security-blog - https://community.sophos.com/b/security-blog/posts/resolved-rce-in-sophos-connect-client-for-windows-cve-2021-25265
CVE ID: CVE-2021-25266 State: PUBLISHED Published: 2022-04-27T16:45:13 Last Updated: 2024-08-03T19:56:11.058Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Sophos Products: Intercept X for Mobile (Android), Sophos Authenticator (Android) Problem Types: n/a Description: An insecure data storage vulnerability allows a physical attacker with root privileges to retrieve TOTP secret keys from unlocked phones in Sophos Authenticator for Android version 3.4 and older, and Intercept X for Mobile (Android) before version 9.7.3495. Additional Analyst Notes: - CVE Program Container: References: - https://www.sophos.com/en-us/security-advisories/sophos-sa-20220427-ixm-st
Notes: - CVE Program Container: References: - https://www.sophos.com/en-us/security-advisories/sophos-sa-20220427-ixm-storage
CVE ID: CVE-2021-25267 State: PUBLISHED Published: 2022-05-05T18:05:12 Last Updated: 2024-08-03T19:56:11.100Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: Sophos Products: Sophos Firewall Problem Types: n/a Description: Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 19.0 GA. Additional Analyst Notes: - CVE Program Container: References: - https://www.sophos.com/en-us/security-advisories/sophos-sa-20220505-sfos-19-0-0
CVE ID: CVE-2021-25268 State: PUBLISHED Published: 2022-05-05T18:05:13 Last Updated: 2024-08-03T19:56:11.069Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Sophos Products: Sophos Firewall Problem Types: n/a Description: Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from MySophos admin to SFOS admin in Sophos Firewall older than version 19.0 GA. Additional Analyst Notes: - CVE Program Container: References: - https://www.sophos.com/en-us/security-advisories/sophos-sa-20220505-sfos-19-0-0
CVE ID: CVE-2021-25269 State: PUBLISHED Published: 2021-11-26T14:12:47 Last Updated: 2024-08-03T19:56:11.071Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Sophos Products: Intercept X Advanced, Intercept X Advanced for Server, Sophos Exploit Prevention Problem Types: n/a Description: A local administrator could prevent the HMPA service from starting despite tamper protection using an unquoted service path vulnerability in the HMPA component of Sophos Intercept X Advanced and Sophos Intercept X Advanced for Server before version 2.0.23, as well as Sophos Exploit Prevention before version 3.8.3. Additional Analyst Notes: - CVE Program Container: References:
s well as Sophos Exploit Prevention before version 3.8.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.sophos.com/en-us/security-advisories/sophos-sa-20211126-ixa-hmpa-local-dos
CVE ID: CVE-2021-25270 State: PUBLISHED Published: 2021-10-07T23:11:53 Last Updated: 2024-08-03T19:56:11.147Z Vendors: Sophos Products: HitmanPro.Alert Problem Types: n/a Description: A local attacker could execute arbitrary code with administrator privileges in HitmanPro.Alert before version Build 901. Additional Analyst Notes: - CVE Program Container: References: - https://www.sophos.com/en-us/security-advisories/sophos-sa-20211007-hmpa-lpe
CVE ID: CVE-2021-25271 State: PUBLISHED Published: 2021-10-07T23:11:54 Last Updated: 2024-08-03T19:56:11.132Z Vendors: Sophos Products: HitmanPro Problem Types: n/a Description: A local attacker could read or write arbitrary files with administrator privileges in HitmanPro before version Build 318. Additional Analyst Notes: - CVE Program Container: References: - https://www.sophos.com/en-us/security-advisories/sophos-sa-20211007-hmp-lpe
CVE ID: CVE-2021-25273 State: PUBLISHED Published: 2021-07-29T19:17:34 Last Updated: 2024-08-03T19:56:11.066Z Vendors: Sophos Products: Sophos UTM Problem Types: n/a Description: Stored XSS can execute as administrator in quarantined email detail view in Sophos UTM before version 9.706. Additional Analyst Notes: - CVE Program Container: References: - https://community.sophos.com/utm-firewall/b/blog/posts/utm-up2date-9-706-released - http://seclists.org/fulldisclosure/2021/Dec/3
CVE ID: CVE-2021-25274 State: PUBLISHED Published: 2021-02-03T16:49:26 Last Updated: 2024-08-03T19:56:11.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Collector Service in SolarWinds Orion Platform before 2020.2.4 uses MSMQ (Microsoft Message Queue) and doesn't set permissions on its private queues. As a result, remote unauthenticated clients can send messages to TCP port 1801 that the Collector Service will process. Additionally, upon processing of such messages, the service deserializes them in insecure manner, allowing remote arbitrary code execution as LocalSystem. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/en-us/resou
n as LocalSystem. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/full-system-control-with-new-solarwinds-orion-based-and-serv-u-ftp-vulnerabilities/
CVE ID: CVE-2021-25275 State: PUBLISHED Published: 2021-02-03T16:49:08 Last Updated: 2024-08-03T19:56:11.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: SolarWinds Orion Platform before 2020.2.4, as used by various SolarWinds products, installs and uses a SQL Server backend, and stores database credentials to access this backend in a file readable by unprivileged users. As a result, any user having access to the filesystem can read database login details from that file, including the login name and its associated password. Then, the credentials can be used to get database owner access to the SWNetPerfMon.DB database. This gives access to the data collected by SolarWinds appli
o get database owner access to the SWNetPerfMon.DB database. This gives access to the data collected by SolarWinds applications, and leads to admin access to the applications by inserting or changing authentication data stored in the Accounts table of the database. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/full-system-control-with-new-solarwinds-orion-based-and-serv-u-ftp-vulnerabilities/
CVE ID: CVE-2021-25276 State: PUBLISHED Published: 2021-02-03T16:59:55 Last Updated: 2024-08-03T19:56:11.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SolarWinds Serv-U before 15.2.2 Hotfix 1, there is a directory containing user profile files (that include users' password hashes) that is world readable and writable. An unprivileged Windows user (having access to the server's filesystem) can add an FTP user by copying a valid profile file to this directory. For example, if this profile sets up a user with a C:\ home directory, then the attacker obtains access to read or replace arbitrary files with LocalSystem privileges. Additional Analyst Notes: - CVE Program Container
access to read or replace arbitrary files with LocalSystem privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/full-system-control-with-new-solarwinds-orion-based-and-serv-u-ftp-vulnerabilities/
CVE ID: CVE-2021-25277 State: PUBLISHED Published: 2021-03-19T16:39:35 Last Updated: 2024-08-03T19:56:11.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: FTAPI 4.0 - 4.10 allows XSS via a crafted filename to the alternative text hover box in the file submission component. Additional Analyst Notes: - CVE Program Container: References: - https://www.ftapi.com/release-notes/ - https://github.com/rauschecker/CVEs/tree/main/CVE-2021-25277
CVE ID: CVE-2021-25278 State: PUBLISHED Published: 2021-03-19T16:42:07 Last Updated: 2024-08-03T19:56:11.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: FTAPI 4.0 through 4.10 allows XSS via an SVG document to the Background Image upload feature in the Submit Box Template Editor. Additional Analyst Notes: - CVE Program Container: References: - https://www.ftapi.com/release-notes/ - https://github.com/rauschecker/CVEs/tree/main/CVE-2021-25278
CVE ID: CVE-2021-25281 State: PUBLISHED Published: 2021-02-27T00:00:00 Last Updated: 2024-11-19T15:42:15.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in through SaltStack Salt before 3002.5. salt-api does not honor eauth credentials for the wheel_async client. Thus, an attacker can remotely run any wheel modules on the master. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/saltstack/salt/releases - https://www.saltstack.com/blog/active-saltstack-cve-announced-2021-jan-21/ - https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/ - https://lists.fedoraprojec
/ - https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/ - https://security.gentoo.org/glsa/202103-01 - http://packetstormsecurity.com/files/162058/SaltStack-Salt-API-Unauthenticated-Remote-Command-Execution.html - https://lists.debian.org/debian-lts-announce/2021/1
8/SaltStack-Salt-API-Unauthenticated-Remote-Command-Execution.html - https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html - https://www.debian.org/security/2021/dsa-5011 - https://security.gentoo.org/glsa/202310-22
CVE ID: CVE-2021-25282 State: PUBLISHED Published: 2021-02-27T00:00:00 Last Updated: 2024-08-03T19:56:11.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in through SaltStack Salt before 3002.5. The salt.wheel.pillar_roots.write method is vulnerable to directory traversal. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/saltstack/salt/releases - https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/ - https://lists.fedoraproject.org/archives/list/package-
sts.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/ - https://security.gentoo.org/glsa/202103-01 - http://packetstormsecurity.com/files/162058/SaltStack-Salt-API-Unauthenticated-Remote-Command-Execution.html - https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html - https://www.debian.org/security/2021/dsa-5011 - https://lists.debian.org/debian-lts-announce/2022/01/msg00000.html - https://security.gentoo.or
security/2021/dsa-5011 - https://lists.debian.org/debian-lts-announce/2022/01/msg00000.html - https://security.gentoo.org/glsa/202310-22
CVE ID: CVE-2021-25283 State: PUBLISHED Published: 2021-02-27T00:00:00 Last Updated: 2024-08-03T19:56:11.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in through SaltStack Salt before 3002.5. The jinja renderer does not protect against server side template injection attacks. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/saltstack/salt/releases - https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/ - https://lists.fedoraproject.org/archives/list/pac
%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/ - https://security.gentoo.org/glsa/202103-01 - https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html - https://www.debian.org/security/2021/dsa-5011 - https://security.gentoo.org/glsa/202310-22
CVE ID: CVE-2021-25284 State: PUBLISHED Published: 2021-02-27T00:00:00 Last Updated: 2024-08-03T19:56:11.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in through SaltStack Salt before 3002.5. salt.modules.cmdmod can log credentials to the info or error log level. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/saltstack/salt/releases - https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/ - https://lists.fedoraproject.org/archives/list/package-announc
oraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/ - https://security.gentoo.org/glsa/202103-01 - https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html - https://www.debian.org/security/2021/dsa-5011 - https://lists.debian.org/debian-lts-announce/2022/01/msg00000.html - https://security.gentoo.org/glsa/202310-22