CVE-2021-23443

This affects the package edge.js before 5.3.2. A type confusion vulnerability can be used to bypass input sanitization when the input to be rendered is an array (instead of a string or a SafeValue), even if {{ }} are used.

• CWE-843

• https://github.com/edge-js/edge/commit/fa2c7fde86327aeae232752e89a6e37e2e469e21Patch, Third Party Advisory
• https://snyk.io/vuln/SNYK-JS-EDGEJS-1579556Exploit, Patch, Third Party Advisory
• https://github.com/edge-js/edge/commit/fa2c7fde86327aeae232752e89a6e37e2e469e21Patch, Third Party Advisory
• https://snyk.io/vuln/SNYK-JS-EDGEJS-1579556Exploit, Patch, Third Party Advisory

Published

Sep 21, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-23438This affects the package mpath before 0.8.4. A type confusio…9.8
• CVE-2021-23439This affects the package file-upload-with-preview before 4.2…6.1
• CVE-2021-2344Vulnerability in the Oracle Coherence product of Oracle Fusi…7.5
• CVE-2021-23440This affects the package set-value before <2.0.1, >=3.0.0 <4…9.8
• CVE-2021-23441Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-23442This affects all versions of package @cookiex/deep. The glob…9.8
• CVE-2021-23444This affects the package jointjs before 3.4.2. A type confus…9.8
• CVE-2021-23445This affects the package datatables.net before 1.11.3. If an…6.1
• CVE-2021-23446The package handsontable before 10.0.0; the package handsont…7.5
• CVE-2021-23447This affects the package teddy before 0.5.9. A type confusio…6.1
• CVE-2021-23448All versions of package config-handler are vulnerable to Pro…9.8
• CVE-2021-23449This affects the package vm2 before 3.9.4 via a Prototype Po…10