CVE-2021-32673

reg-keygen-git-hash-plugin is a reg-suit plugin to detect the snapshot key to be compare with using Git commit hash. reg-keygen-git-hash-plugin through and including 0.10.15 allow remote attackers to execute of arbitrary commands. Upgrade to version 0.10.16 or later to resolve this issue.

• CWE-94
• CWE-78

• https://github.com/reg-viz/reg-suit/commit/f84ad9c7a22144d6c147dc175c52756c0f444d87Patch, Third Party Advisory
• https://github.com/reg-viz/reg-suit/releases/tag/v0.10.16Release Notes, Third Party Advisory
• https://github.com/reg-viz/reg-suit/security/advisories/GHSA-49q3-8867-5wmpThird Party Advisory
• https://www.npmjs.com/package/reg-keygen-git-hash-pluginProduct, Third Party Advisory
• https://github.com/reg-viz/reg-suit/commit/f84ad9c7a22144d6c147dc175c52756c0f444d87Patch, Third Party Advisory
• https://github.com/reg-viz/reg-suit/releases/tag/v0.10.16Release Notes, Third Party Advisory
• https://github.com/reg-viz/reg-suit/security/advisories/GHSA-49q3-8867-5wmpThird Party Advisory
• https://www.npmjs.com/package/reg-keygen-git-hash-pluginProduct, Third Party Advisory

Published

Jun 8, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-32668TYPO3 is an open source PHP based web content management sys…4.8
• CVE-2021-32669TYPO3 is an open source PHP based web content management sys…5.4
• CVE-2021-3267File Upload vulnerability found in KiteCMS v.1.1 allows a re…7.2
• CVE-2021-32670Datasette is an open source multi-tool for exploring and pub…6.1
• CVE-2021-32671Flarum is a forum software for building communities. Flarum'…10
• CVE-2021-32672Redis is an open source, in-memory database that persists on…4.3
• CVE-2021-32674Zope is an open-source web application server. This advisory…8.8
• CVE-2021-32675Redis is an open source, in-memory database that persists on…7.5
• CVE-2021-32676Nextcloud Talk is a fully on-premises audio/video and chat c…6.5
• CVE-2021-32677FastAPI is a web framework for building APIs with Python 3.6…8.1
• CVE-2021-32678Nextcloud Server is a Nextcloud package that handles data st…5.3
• CVE-2021-32679Nextcloud Server is a Nextcloud package that handles data st…8.8