CVE-2021-33806

9.8 criticalEPSS 3.0%

Critical (9.8) in bdew bdlib. EPSS 3.0% chance of exploitation in the next 30 days.

The BDew BdLib library before 1.16.1.7 for Minecraft allows remote code execution because it deserializes untrusted data in ObjectInputStream.readObject as part of its use of Java serialization.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 3.0% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-11-01)
CWE: CWE-502
Published: 2021-06-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

bdew:bdlib

References

https://bdew.net
https://github.com/bdew-minecraft/bdlib/commit/447210530ceec72fb3374efecb0930ed359d2297
https://vuln.ryotak.me/advisories/46
https://www.curseforge.com/minecraft/mc-mods/bdlib/files/3331330
https://bdew.net

Check your stack JSON