Medium severity6.1NVD Advisory· Published Feb 4, 2022· Updated Jun 17, 2026

CVE-2021-43635

Description

A Cross Site Scripting (XSS) vulnerability exists in Codex before 1.4.0 via Notebook/Page name field, which allows malicious users to execute arbitrary code via a crafted http code in a .json file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Codex/Codexdescription
Codex/Codexllm-create
Range: <1.4.0

Patches

Vulnerability mechanics

References

github.com/jcv8000/Codex/issues/8nvdExploitThird Party Advisory
github.com/jcv8000/Codex/releases/tag/v1.4.1nvdRelease NotesThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000