CVE-2021-4306

A vulnerability classified as problematic has been found in cronvel terminal-kit up to 2.1.7. Affected is an unknown function. The manipulation leads to inefficient regular expression complexity. Upgrading to version 2.1.8 is able to address this issue. The name of the patch is a2e446cc3927b559d0281683feb9b821e83b758c. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-217620.

• CWE-1333

• https://github.com/cronvel/terminal-kit/commit/a2e446cc3927b559d0281683feb9b821e83b758cPatch, Third Party Advisory
• https://github.com/cronvel/terminal-kit/releases/tag/v2.1.8Release Notes, Third Party Advisory
• https://vuldb.com/?ctiid.217620Third Party Advisory
• https://vuldb.com/?id.217620Third Party Advisory
• https://github.com/cronvel/terminal-kit/commit/a2e446cc3927b559d0281683feb9b821e83b758cPatch, Third Party Advisory
• https://github.com/cronvel/terminal-kit/releases/tag/v2.1.8Release Notes, Third Party Advisory
• https://vuldb.com/?ctiid.217620Third Party Advisory
• https://vuldb.com/?id.217620Third Party Advisory

Published

Jan 7, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-43053The Realm Server component of TIBCO Software Inc.'s TIBCO FT…7.5
• CVE-2021-43054The eFTL Server component of TIBCO Software Inc.'s TIBCO eFT…8.8
• CVE-2021-43055The eFTL Server component of TIBCO Software Inc.'s TIBCO eFT…8.8
• CVE-2021-43056An issue was discovered in the Linux kernel for powerpc befo…5.5
• CVE-2021-43057An issue was discovered in the Linux kernel before 5.14.8. A…7.8
• CVE-2021-43058An open redirect vulnerability exists in Replicated Classic …6.1
• CVE-2021-43062A improper neutralization of input during web page generatio…6.1
• CVE-2021-43063A improper neutralization of input during web page generatio…6.1
• CVE-2021-43064A url redirection to untrusted site ('open redirect') in For…6.1
• CVE-2021-43065A incorrect permission assignment for critical resource in F…7.8
• CVE-2021-43066A external control of file name or path in Fortinet FortiCli…7.8
• CVE-2021-43067A exposure of sensitive information to an unauthorized actor…6.5