CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2021-42771
High (7.8). EPSS 0.8% chance of exploitation in the next 30 days. Fixed in babel 2.9.1.
Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading to code execution.
Severity
- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
- CWE
- CWE-22
- Published
- Modified
- Record from
- the NVD, synced
Affected
- debian:debian_linux
- pocoo:babel
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-h4m5-qpfp-3mpv | PyPI | babel | <2.9.1 | 2.9.1 |
| PYSEC-2021-421 | PyPI | babel | <2.9.1 | 2.9.1 |