CVE-2021-4329

A vulnerability, which was classified as critical, has been found in json-logic-js 2.0.0. Affected by this issue is some unknown functionality of the file logic.js. The manipulation leads to command injection. Upgrading to version 2.0.1 is able to address this issue. The patch is identified as c1dd82f5b15d8a553bb7a0cfa841ab8a11a9c227. It is recommended to upgrade the affected component. VDB-222266 is the identifier assigned to this vulnerability.

• CWE-77
• CWE-77

• https://github.com/jwadhams/json-logic-js/commit/c1dd82f5b15d8a553bb7a0cfa841ab8a11a9c227Patch
• https://github.com/jwadhams/json-logic-js/pull/98Patch
• https://vuldb.com/?ctiid.222266Permissions Required, Third Party Advisory
• https://vuldb.com/?id.222266Permissions Required, Third Party Advisory
• https://github.com/jwadhams/json-logic-js/commit/c1dd82f5b15d8a553bb7a0cfa841ab8a11a9c227Patch
• https://github.com/jwadhams/json-logic-js/pull/98Patch
• https://vuldb.com/?ctiid.222266Permissions Required, Third Party Advisory
• https://vuldb.com/?id.222266Permissions Required, Third Party Advisory

Published

Mar 5, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-43283An issue was discovered on Victure WR1200 devices through 1.…8.8
• CVE-2021-43284An issue was discovered on Victure WR1200 devices through 1.…7.8
• CVE-2021-43286An issue was discovered in ThoughtWorks GoCD before 21.3.0. …8.8
• CVE-2021-43287An issue was discovered in ThoughtWorks GoCD before 21.3.0. …7.5
• CVE-2021-43288An issue was discovered in ThoughtWorks GoCD before 21.3.0. …5.4
• CVE-2021-43289An issue was discovered in ThoughtWorks GoCD before 21.3.0. …7.5
• CVE-2021-43290An issue was discovered in ThoughtWorks GoCD before 21.3.0. …9.8
• CVE-2021-43293Sonatype Nexus Repository Manager 3.x before 3.36.0 allows a…4.3
• CVE-2021-43294Zoho ManageEngine SupportCenter Plus before 11016 is vulnera…6.1
• CVE-2021-43295Zoho ManageEngine SupportCenter Plus before 11016 is vulnera…6.1
• CVE-2021-43296Zoho ManageEngine SupportCenter Plus before 11016 is vulnera…7.5
• CVE-2021-43297A deserialization vulnerability existed in dubbo hessian-lit…9.8