CVE-2021-32814

Skytable is a NoSQL database with automated snapshots and TLS. Versions prior to 0.5.1 are vulnerable to a a directory traversal attack enabling remotely connected clients to destroy and/or manipulate critical files on the host's file system. This security bug has been patched in version 0.5.1. There are no known workarounds aside from upgrading.

• CWE-22
• CWE-22

• https://github.com/skytable/skytable/blob/next/CHANGELOG.md#version-051-2021-03-17Release Notes, Third Party Advisory
• https://github.com/skytable/skytable/commit/38b011273bb92b83c61053ae2fcd80aa9320315c#diff-1cdcf1a793c71ec658782437e4da7e3a37042bc1e2c12545942e9a14679c4b7ePatch, Third Party Advisory
• https://github.com/skytable/skytable/security/advisories/GHSA-2hj9-cxmc-m4g7Third Party Advisory
• https://security.skytable.io/ve/s/00001.htmlPatch, Third Party Advisory
• https://github.com/skytable/skytable/blob/next/CHANGELOG.md#version-051-2021-03-17Release Notes, Third Party Advisory
• https://github.com/skytable/skytable/commit/38b011273bb92b83c61053ae2fcd80aa9320315c#diff-1cdcf1a793c71ec658782437e4da7e3a37042bc1e2c12545942e9a14679c4b7ePatch, Third Party Advisory
• https://github.com/skytable/skytable/security/advisories/GHSA-2hj9-cxmc-m4g7Third Party Advisory
• https://security.skytable.io/ve/s/00001.htmlPatch, Third Party Advisory

Published

Aug 3, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-32809ckeditor is an open source WYSIWYG HTML editor with rich con…5.4
• CVE-2021-3281In Django 2.2 before 2.2.18, 3.0 before 3.0.12, and 3.1 befo…5.3
• CVE-2021-32810crossbeam-deque is a package of work-stealing deques for bui…9.8
• CVE-2021-32811Zope is an open-source web application server. Zope versions…7.2
• CVE-2021-32812Monkshu is an enterprise application server for mobile apps …6.1
• CVE-2021-32813Traefik is an HTTP reverse proxy and load balancer. Prior to…8.1
• CVE-2021-32815Exiv2 is a command-line utility and C++ library for reading,…5.5
• CVE-2021-32816ProtonMail Web Client is the official AngularJS web client f…7.5
• CVE-2021-32817express-hbs is an Express handlebars template engine. expres…6.8
• CVE-2021-32818haml-coffee is a JavaScript templating solution. haml-coffee…5.4
• CVE-2021-32819Squirrelly is a template engine implemented in JavaScript th…8.8
• CVE-2021-3282HashiCorp Vault Enterprise 1.6.0 & 1.6.1 allowed the `remove…7.5