CVE-2021-22557

SLO generator allows for loading of YAML files that if crafted in a specific format can allow for code execution within the context of the SLO Generator. We recommend upgrading SLO Generator past https://github.com/google/slo-generator/pull/173

• CWE-94
• CWE-78

• http://packetstormsecurity.com/files/164426/Google-SLO-Generator-2.0.0-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/google/slo-generator/pull/173Exploit, Patch, Third Party Advisory
• http://packetstormsecurity.com/files/164426/Google-SLO-Generator-2.0.0-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/google/slo-generator/pull/173Exploit, Patch, Third Party Advisory

Published

Oct 4, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-2255Vulnerability in the Oracle Service Contracts product of Ora…8.1
• CVE-2021-22550An attacker can modify the pointers in enclave memory to ove…7.8
• CVE-2021-22552An untrusted memory read vulnerability in Asylo versions up …5.5
• CVE-2021-22553Any git operation is passed through Jetty and a session is c…7.5
• CVE-2021-22555A heap out-of-bounds write affecting Linux since v2.6.19-rc1…7.8
• CVE-2021-22556The Security Team discovered an integer overflow bug that al…7.8
• CVE-2021-2256Vulnerability in the Oracle Storage Cloud Software Appliance…10
• CVE-2021-22563Invalid JPEG XL images using libjxl can cause an out of boun…4.4
• CVE-2021-22564For certain valid JPEG XL images with a size slightly larger…5.5
• CVE-2021-22565An attacker could prematurely expire a verification code, ma…6.5
• CVE-2021-22566An incorrect setting of UXN bits within mmu_flags_to_s1_pte_…9.8
• CVE-2021-22567Bidirectional Unicode text can be interpreted and compiled d…3.5