Critical severity9.8NVD Advisory· Published Oct 24, 2022· Updated Jun 17, 2026
CVE-2021-42010
CVE-2021-42010
Description
Heron versions <= 0.20.4-incubating allows CRLF log injection because of the lack of escaping in the log statements. Please update to version 0.20.5-incubating which addresses this issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.apache.heron:heron-apiMaven | < 0.20.5-incubating | 0.20.5-incubating |
Affected products
3- Apache Software Foundation/Apache Heron (Incubating)v5Range: Apache Heron 0.20.4-incubating
Patches
Vulnerability mechanics
References
4- www.openwall.com/lists/oss-security/2022/10/23/2nvdMailing ListThird Party AdvisoryWEB
- github.com/advisories/GHSA-95w5-q9vp-5vrmghsaADVISORY
- lists.apache.org/thread/j65nwr8n7jchngwqptzh100drcr4ry2qnvdMailing ListVendor AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2021-42010ghsaADVISORY
News mentions
0No linked articles in our index yet.