← Database

CVE-2021-42010

CRITICAL CVSS: 9.8 Published: 2022-10-24 Modified: 2026-06-17

Description

Heron versions <= 0.20.4-incubating allows CRLF log injection because of the lack of escaping in the log statements. Please update to version 0.20.5-incubating which addresses this issue.

Affected Platforms

Apache Heron

Weakness Type

CWE-116, CWE-116

References