CVE-2021-41078
26.10.2021, 13:15
Nameko through 2.13.0 can be tricked into performing arbitrary code execution when deserializing the config file.Enginsight
| Vendor | Product | Version |
|---|---|---|
| nameko | nameko | 𝑥 ≤ 2.13.0 |
| nameko | nameko | 3.0.0:rc1 |
| nameko | nameko | 3.0.0:rc2 |
| nameko | nameko | 3.0.0:rc3 |
| nameko | nameko | 3.0.0:rc4 |
| nameko | nameko | 3.0.0:rc5 |
| nameko | nameko | 3.0.0:rc6 |
| nameko | nameko | 3.0.0:rc7 |
| nameko | nameko | 3.0.0:rc8 |
| nameko | nameko | 3.0.0:rc9 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration