[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2021-21330":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T11:35:27.363Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":24,"aliases":25,"duplicate_of":9,"upstream":29,"downstream":30,"duplicates":50,"related":51,"reserved_at":9,"published_at":57,"modified_at":58,"state":59,"summary":60,"references_raw":69,"kevs":162,"epss":163,"epss_history":166,"metrics":425,"affected":449},"CVE-2021-21330","aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In aiohttp before version 3.7.4 there is an open redirect vulnerability. A maliciously crafted link to an aiohttp-based web-server could redirect the browser to a different website. It is caused by a bug in the `aiohttp.web_middlewares.normalize_path_middleware` middleware. This security problem has been fixed in 3.7.4. Upgrade your dependency using pip as follows \"pip install aiohttp >= 3.7.4\". If upgrading is not an option for you, a workaround can be to avoid using `aiohttp.web_middlewares.normalize_path_middleware` in your applications.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-601","URL Redirection to Untrusted Site ('Open Redirect')","The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.","weakness","Draft","Base","Low",[20],{"id":21,"name":22,"techniques":23},"CAPEC-178","Cross-Site Flashing",[],[],[26,27,28],"GHSA-v6wp-4m6f-gcjg","PYSEC-2021-76","DEBIAN-CVE-2021-21330",[],[31,33,35,37,39,41,43,45,46,48],{"_key":32},"SUSE-SU-2021:1313-1",{"_key":34},"UBUNTU-CVE-2021-21330",{"_key":36},"USN-5386-1",{"_key":38},"SUSE-RU-2022:3275-1",{"_key":40},"OPENSUSE-SU-2024:13209-1",{"_key":42},"DSA-4864-1",{"_key":44},"MGASA-2021-0161",{"_key":28},{"_key":47},"OPENSUSE-SU-2026:11467-1",{"_key":49},"RHSA-2021:4702",[],[52,53,54,55,56],{"_key":32},{"_key":38},{"_key":40},{"_key":44},{"_key":47},"2021-02-26T02:15:15.000Z","2024-08-03T18:09:15.080Z","Modified",{"cisa_kev":61,"cisa_ransomware":61,"cisa_vendor":9,"epss_severity":62,"epss_score":63,"severity":64,"severity_score":65,"severity_version":66,"severity_source":67,"severity_vector":68,"severity_status":59},false,"low",0.01905,"medium",6.1,"v3.1","nvd","CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",[70,80,87,91,97,103,108,112,117,121,125,129,133,137,141,145,149,153,157],{"url":71,"sources":72,"tags":75},"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-v6wp-4m6f-gcjg",[73,67,74],"cve.org","osv_pypi",[76,77,78,79],"X Refsource CONFIRM","Third Party Advisory","WEB","Advisory",{"url":81,"sources":82,"tags":83},"https://github.com/aio-libs/aiohttp/commit/2545222a3853e31ace15d87ae0e2effb7da0c96b",[73,67,74],[84,85,77,78,86],"X Refsource MISC","Patch","FIX",{"url":88,"sources":89,"tags":90},"https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst#374-2021-02-25",[73,67,74],[84,77,78],{"url":92,"sources":93,"tags":94},"https://pypi.org/project/aiohttp/",[73,67,74],[84,95,77,96],"Product","PACKAGE",{"url":98,"sources":99,"tags":100},"https://www.debian.org/security/2021/dsa-4864",[73,67,74],[101,102,77,78,79],"Vendor Advisory","X Refsource DEBIAN",{"url":104,"sources":105,"tags":106},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN3V7CZJRT4QFCVXB6LDPCJH7NAOFCA5/",[73,67],[101,107],"X Refsource FEDORA",{"url":109,"sources":110,"tags":111},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FU7ENI54JNEK3PHEFGCE46DGMFNTVU6L/",[73,67],[101,107],{"url":113,"sources":114,"tags":115},"https://security.gentoo.org/glsa/202208-19",[73,67,74],[101,116,77,78],"X Refsource GENTOO",{"url":118,"sources":119,"tags":120},"https://nvd.nist.gov/vuln/detail/CVE-2021-21330",[74],[79],{"url":122,"sources":123,"tags":124},"https://github.com/aio-libs/aiohttp",[74],[96],{"url":126,"sources":127,"tags":128},"https://github.com/pypa/advisory-database/tree/main/vulns/aiohttp/PYSEC-2021-76.yaml",[74],[78],{"url":130,"sources":131,"tags":132},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FU7ENI54JNEK3PHEFGCE46DGMFNTVU6L",[74],[78],{"url":134,"sources":135,"tags":136},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN3V7CZJRT4QFCVXB6LDPCJH7NAOFCA5",[74],[78],{"url":138,"sources":139,"tags":140},"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FU7ENI54JNEK3PHEFGCE46DGMFNTVU6L",[74],[78],{"url":142,"sources":143,"tags":144},"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JN3V7CZJRT4QFCVXB6LDPCJH7NAOFCA5",[74],[78],{"url":146,"sources":147,"tags":148},"https://pypi.org/project/aiohttp",[74],[78],{"url":150,"sources":151,"tags":152},"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JN3V7CZJRT4QFCVXB6LDPCJH7NAOFCA5/",[74],[78],{"url":154,"sources":155,"tags":156},"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FU7ENI54JNEK3PHEFGCE46DGMFNTVU6L/",[74],[78],{"url":158,"sources":159,"tags":161},"https://security-tracker.debian.org/tracker/CVE-2021-21330",[160],"osv_debian",[79],[],{"date":164,"score":63,"percentile":165},"2026-09-19",0.78801,[167,171,174,177,180,183,186,189,192,195,198,201,204,207,210,214,217,220,222,225,228,231,233,236,239,241,244,247,250,253,256,259,261,264,266,268,271,274,277,280,283,286,288,291,294,297,300,303,306,309,312,315,318,320,323,326,328,330,333,336,339,342,344,347,350,353,356,359,362,365,368,371,374,377,380,383,386,388,391,394,397,400,403,406,408,411,414,416,419,422],{"date":168,"score":169,"percentile":170},"2025-11-04",0.00486,0.64527,{"date":172,"score":169,"percentile":173},"2025-11-05",0.64506,{"date":175,"score":169,"percentile":176},"2025-11-06",0.64508,{"date":178,"score":169,"percentile":179},"2025-11-07",0.64517,{"date":181,"score":169,"percentile":182},"2025-11-08",0.6452,{"date":184,"score":169,"percentile":185},"2025-11-09",0.64512,{"date":187,"score":169,"percentile":188},"2025-11-10",0.645,{"date":190,"score":169,"percentile":191},"2025-11-11",0.6451,{"date":193,"score":169,"percentile":194},"2025-11-12",0.64533,{"date":196,"score":169,"percentile":197},"2025-11-13",0.6454,{"date":199,"score":169,"percentile":200},"2025-11-14",0.64549,{"date":202,"score":169,"percentile":203},"2025-11-15",0.64545,{"date":205,"score":169,"percentile":206},"2025-11-16",0.64537,{"date":208,"score":169,"percentile":209},"2025-11-17",0.64534,{"date":211,"score":212,"percentile":213},"2025-11-18",0.01102,0.76194,{"date":215,"score":212,"percentile":216},"2025-11-19",0.762,{"date":218,"score":212,"percentile":219},"2025-11-20",0.76211,{"date":221,"score":169,"percentile":203},"2025-11-21",{"date":223,"score":169,"percentile":224},"2025-11-22",0.64551,{"date":226,"score":169,"percentile":227},"2025-11-23",0.64536,{"date":229,"score":169,"percentile":230},"2025-11-24",0.64525,{"date":232,"score":169,"percentile":170},"2025-11-25",{"date":234,"score":169,"percentile":235},"2025-11-26",0.64529,{"date":237,"score":169,"percentile":238},"2025-11-27",0.64535,{"date":240,"score":169,"percentile":182},"2025-11-28",{"date":242,"score":169,"percentile":243},"2025-11-29",0.64493,{"date":245,"score":169,"percentile":246},"2025-11-30",0.64488,{"date":248,"score":169,"percentile":249},"2025-12-01",0.64656,{"date":251,"score":169,"percentile":252},"2025-12-02",0.64673,{"date":254,"score":169,"percentile":255},"2025-12-03",0.64674,{"date":257,"score":169,"percentile":258},"2025-12-04",0.64496,{"date":260,"score":169,"percentile":185},"2025-12-05",{"date":262,"score":169,"percentile":263},"2025-12-06",0.64515,{"date":265,"score":169,"percentile":191},"2025-12-07",{"date":267,"score":169,"percentile":179},"2025-12-08",{"date":269,"score":169,"percentile":270},"2025-12-09",0.64552,{"date":272,"score":169,"percentile":273},"2025-12-10",0.64599,{"date":275,"score":169,"percentile":276},"2025-12-11",0.64617,{"date":278,"score":169,"percentile":279},"2025-12-12",0.64636,{"date":281,"score":169,"percentile":282},"2025-12-13",0.64641,{"date":284,"score":169,"percentile":285},"2025-12-14",0.64642,{"date":287,"score":169,"percentile":279},"2025-12-15",{"date":289,"score":169,"percentile":290},"2025-12-16",0.6465,{"date":292,"score":169,"percentile":293},"2025-12-17",0.64663,{"date":295,"score":169,"percentile":296},"2025-12-18",0.64699,{"date":298,"score":169,"percentile":299},"2025-12-19",0.64714,{"date":301,"score":169,"percentile":302},"2025-12-20",0.64711,{"date":304,"score":169,"percentile":305},"2025-12-21",0.647,{"date":307,"score":169,"percentile":308},"2025-12-22",0.64693,{"date":310,"score":169,"percentile":311},"2025-12-23",0.64698,{"date":313,"score":169,"percentile":314},"2025-12-24",0.64703,{"date":316,"score":169,"percentile":317},"2025-12-25",0.64729,{"date":319,"score":169,"percentile":317},"2025-12-26",{"date":321,"score":169,"percentile":322},"2025-12-27",0.64789,{"date":324,"score":169,"percentile":325},"2025-12-28",0.64706,{"date":327,"score":169,"percentile":308},"2025-12-29",{"date":329,"score":169,"percentile":302},"2025-12-30",{"date":331,"score":169,"percentile":332},"2025-12-31",0.64737,{"date":334,"score":169,"percentile":335},"2026-01-01",0.64929,{"date":337,"score":169,"percentile":338},"2026-01-02",0.64915,{"date":340,"score":169,"percentile":341},"2026-01-03",0.64916,{"date":343,"score":169,"percentile":332},"2026-01-04",{"date":345,"score":169,"percentile":346},"2026-01-05",0.64732,{"date":348,"score":169,"percentile":349},"2026-01-06",0.6473,{"date":351,"score":169,"percentile":352},"2026-01-07",0.6475,{"date":354,"score":169,"percentile":355},"2026-01-08",0.6477,{"date":357,"score":169,"percentile":358},"2026-01-09",0.64774,{"date":360,"score":169,"percentile":361},"2026-01-10",0.64771,{"date":363,"score":169,"percentile":364},"2026-01-11",0.64761,{"date":366,"score":169,"percentile":367},"2026-01-12",0.64746,{"date":369,"score":169,"percentile":370},"2026-01-13",0.64743,{"date":372,"score":169,"percentile":373},"2026-01-14",0.64777,{"date":375,"score":169,"percentile":376},"2026-01-15",0.64794,{"date":378,"score":169,"percentile":379},"2026-01-16",0.64813,{"date":381,"score":169,"percentile":382},"2026-01-17",0.648,{"date":384,"score":169,"percentile":385},"2026-01-18",0.64785,{"date":387,"score":169,"percentile":358},"2026-01-19",{"date":389,"score":169,"percentile":390},"2026-01-20",0.64786,{"date":392,"score":169,"percentile":393},"2026-01-21",0.64797,{"date":395,"score":169,"percentile":396},"2026-01-22",0.64806,{"date":398,"score":169,"percentile":399},"2026-01-23",0.64837,{"date":401,"score":169,"percentile":402},"2026-01-24",0.64845,{"date":404,"score":169,"percentile":405},"2026-01-25",0.64811,{"date":407,"score":169,"percentile":393},"2026-01-26",{"date":409,"score":169,"percentile":410},"2026-01-27",0.64807,{"date":412,"score":169,"percentile":413},"2026-01-28",0.6482,{"date":415,"score":169,"percentile":413},"2026-01-29",{"date":417,"score":169,"percentile":418},"2026-01-30",0.64828,{"date":420,"score":169,"percentile":421},"2026-01-31",0.64831,{"date":423,"score":169,"percentile":424},"2026-02-01",0.64984,[426,433,443,447],{"source":73,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":427,"cvss_v4_0":9},{"baseScore":428,"baseSeverity":429,"vectorString":430,"impactScore":431,"exploitabilityScore":432},3.1,"LOW","CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",2.3,4.1,{"source":67,"cvss_v2_0":434,"cvss_v3_0":9,"cvss_v3_1":439,"cvss_v4_0":9},{"baseScore":435,"baseSeverity":9,"vectorString":436,"impactScore":437,"exploitabilityScore":438},5.8,"AV:N/AC:M/Au:N/C:P/I:P/A:N",4.9,8.6,{"baseScore":65,"baseSeverity":440,"vectorString":68,"impactScore":441,"exploitabilityScore":442},"MEDIUM",4.5,7.2,{"source":74,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":444,"cvss_v4_0":445},{"baseScore":428,"baseSeverity":9,"vectorString":430,"impactScore":431,"exploitabilityScore":432},{"baseScore":431,"baseSeverity":9,"vectorString":446,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",{"source":160,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":448,"cvss_v4_0":9},{"baseScore":65,"baseSeverity":9,"vectorString":68,"impactScore":441,"exploitabilityScore":442},[450,460,465,478,485,493],{"ecosystem":9,"name":451,"vendor":452,"product":451,"cpe_part":453,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":454},"aiohttp","aio-libs","a",[455],{"version":456,"is_range":457,"range_type":73,"version_start":9,"version_start_type":9,"version_end":458,"version_end_type":459,"fixed_in":9},"\u003C 3.7.4",true,"3.7.4","excluding",{"ecosystem":9,"name":451,"vendor":451,"product":451,"cpe_part":453,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":461},[462],{"version":463,"is_range":457,"range_type":464,"version_start":9,"version_start_type":9,"version_end":458,"version_end_type":459,"fixed_in":9},"lt3.7.4","cpe",{"ecosystem":466,"name":467,"vendor":468,"product":467,"cpe_part":9,"purl_type":469,"purl_namespace":468,"purl_name":467,"source":9,"versions":470},"Debian","python-aiohttp","debian","deb",[471,475,476,477],{"version":472,"is_range":457,"range_type":473,"version_start":9,"version_start_type":9,"version_end":474,"version_end_type":459,"fixed_in":9},"lt3_7_4_1","ecosystem","3.7.4-1",{"version":472,"is_range":457,"range_type":473,"version_start":9,"version_start_type":9,"version_end":474,"version_end_type":459,"fixed_in":9},{"version":472,"is_range":457,"range_type":473,"version_start":9,"version_start_type":9,"version_end":474,"version_end_type":459,"fixed_in":9},{"version":472,"is_range":457,"range_type":473,"version_start":9,"version_start_type":9,"version_end":474,"version_end_type":459,"fixed_in":9},{"ecosystem":9,"name":479,"vendor":468,"product":480,"cpe_part":481,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":482},"debian linux","debian_linux","o",[483],{"version":484,"is_range":61,"range_type":464,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.0",{"ecosystem":9,"name":486,"vendor":487,"product":486,"cpe_part":481,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":488},"fedora","fedoraproject",[489,491],{"version":490,"is_range":61,"range_type":464,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"33",{"version":492,"is_range":61,"range_type":464,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"34",{"ecosystem":494,"name":451,"vendor":494,"product":451,"cpe_part":9,"purl_type":495,"purl_namespace":9,"purl_name":451,"source":9,"versions":496},"PyPI","pypi",[497,500],{"version":498,"is_range":457,"range_type":473,"version_start":9,"version_start_type":9,"version_end":499,"version_end_type":459,"fixed_in":9},"lt2545222a3853e31ace15d87ae0e2effb7da0c96b","2545222a3853e31ace15d87ae0e2effb7da0c96b",{"version":501,"is_range":457,"range_type":473,"version_start":9,"version_start_type":9,"version_end":458,"version_end_type":459,"fixed_in":9},"lt3_7_4"]