CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HCVE-2021-22557
High (7.8) in google slo generator. EPSS 1.6% chance of exploitation in the next 30 days. Fixed in slo-generator 2.0.1.
SLO generator allows for loading of YAML files that if crafted in a specific format can allow for code execution within the context of the SLO Generator. We recommend upgrading SLO Generator past https://github.com/google/slo-generator/pull/173
Severity
- EPSS
- 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-78, CWE-94
- Published
- Modified
- Record from
- the NVD, synced
Affected
- google:slo_generator
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-j28r-j54m-gpc4 | PyPI | slo-generator | <2.0.1 | 2.0.1 |
| PYSEC-2021-429 | PyPI | slo-generator | <2.0.1 | 2.0.1 |