← All advisories

Critical severity9.8NVD Advisory· Published Jan 25, 2022· Updated Jun 17, 2026

CVE-2021-45029

CVE-2021-45029

Description

Groovy Code Injection & SpEL Injection which lead to Remote Code Execution. This issue affected Apache ShenYu 2.4.0 and 2.4.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.apache.shenyu:shenyu-commonMaven	>= 2.4.0, < 2.4.2	2.4.2

Affected products

2

ghsa-coords
pkg:maven/org.apache.shenyu/shenyu-common
Range: >= 2.4.0, < 2.4.2
Apache/ShenYucpe-rescue
Range: Apache ShenYu (incubating)

Patches

Vulnerability mechanics

References

5

www.openwall.com/lists/oss-security/2022/01/25/8nvdMailing ListThird Party AdvisoryWEB
www.openwall.com/lists/oss-security/2022/01/26/1nvdMailing ListThird Party AdvisoryWEB
github.com/advisories/GHSA-gh38-x2wm-xmc8ghsaADVISORY
lists.apache.org/thread/3zzmwvg3012tg306x8o893fvdcssx639nvdMailing ListVendor AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2021-45029ghsaADVISORY

News mentions

0

No linked articles in our index yet.