[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f39Wz1kt6SyaCB6_iNog9u_07xNrxZqmb5xD4UDnirXU":3,"g5a-risk:CVE-2021-42576":112},{"success":4,"data":5,"meta":110},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":52,"references":53,"referencesCount":60,"weaknesses":61,"weaknessesCount":60,"isActivelyExploited":65,"cisaInfo":27,"otxData":27,"relatedBlogPosts":66,"seoMetadata":67,"configurations":92,"relatedVendorCves":108,"notableEvents":109},"CVE-2021-42576","What is CVE-2021-42576?","The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python (in pybluemonday), does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.","The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python (in pybluemonday), does not properly enforce policies associated with the SELECT, ...","2021-10-18T15:15:07.823","2023-08-08T14:22:24.967",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":25,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.01564,[39,39,39,39,39,39,39],"Critical",[43,48],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"microco","bluemonday","*","cpe:2.3:a:microco:bluemonday:*:*:*:*:*:go:*:*",{"vendor":49,"product":50,"version":46,"criteria":51,"vulnerable":4},"python","pybluemonday","cpe:2.3:a:python:pybluemonday:*:*:*:*:*:*:*:*",2,[54],{"url":55,"source":56,"tags":57},"https:\u002F\u002Fdocs.google.com\u002Fdocument\u002Fd\u002F11SoX296sMS0XoQiQbpxc5pNxSdbJKDJkm5BDv0zrX50\u002F","Google",[58,59],"Exploit","Third Party Advisory",1,[62],{"id":63,"name":63,"description":64},"Unknown","NVD-CWE-Other",false,[],{"title":68,"metaDescription":69,"keywords":70,"canonicalUrl":71,"structuredData":72},"What is CVE-2021-42576? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-42576, a critical severity cyber security vulnerability from 2021. The bluemonday sanitizer before 1.0.16 for Go, and befo...","CVE-2021-42576, CVE-2021-42576 vulnerability, CVE-2021-42576 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, microco security, python security, bluemonday vulnerability, pybluemonday vulnerability","\u002Fwhat-is\u002Fcve-2021-42576",{"@context":73,"@type":74,"headline":68,"description":69,"datePublished":10,"dateModified":11,"author":75,"publisher":79,"about":83,"mainEntityOfPage":87,"articleSection":90,"keywords":91},"https:\u002F\u002Fschema.org","TechArticle",{"@type":76,"name":77,"url":78},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":76,"name":77,"url":78,"logo":80},{"@type":81,"url":82},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":84,"name":6,"description":85,"additionalType":86},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":88,"@id":89},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-42576","Cybersecurity","CVE-2021-42576, CVE-2021-42576 vulnerability, CVE-2021-42576 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[93,101],{"Operator":27,"Negate":27,"Nodes":94},[95],{"Operator":96,"Negate":27,"CPEMatch":97},"OR",[98],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":99,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":100,"VersionEndIncluding":27},"77EE6FF5-DC13-4386-AB2E-FB4DB791C6AE","1.0.16",{"Operator":27,"Negate":27,"Nodes":102},[103],{"Operator":96,"Negate":27,"CPEMatch":104},[105],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":106,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":107,"VersionEndIncluding":27},"221C620D-C522-4FD6-B1F9-A98D45B1CB27","0.0.8",[],[],{"lastModified":11,"cacheTime":111,"version":33},1792243519883,{"score":113,"band":114,"action":115,"scoredAt":116},61,"Medium","Plan remediation","2026-10-16T06:52:16.069838+00:00"]