Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-rrnd-xmhu-hfgc
Vulnerability ID VCID-rrnd-xmhu-hfgc
Aliases CVE-2021-23370
GHSA-p3hc-fv2j-rp68
Summary
Status Published
Exploitability 0.5
Weighted Severity 9.0
Risk 4.5
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.0154 https://api.first.org/data/v1/epss?cve=CVE-2021-23370
epss 0.0154 https://api.first.org/data/v1/epss?cve=CVE-2021-23370
epss 0.0154 https://api.first.org/data/v1/epss?cve=CVE-2021-23370
epss 0.0154 https://api.first.org/data/v1/epss?cve=CVE-2021-23370
cvssv3.1_qr CRITICAL https://github.com/advisories/GHSA-p3hc-fv2j-rp68
cvssv3.1 9.8 https://github.com/nolimits4web/swiper/blob/master/CHANGELOG.md#651-2021-03-29
generic_textual CRITICAL https://github.com/nolimits4web/swiper/blob/master/CHANGELOG.md#651-2021-03-29
cvssv3.1 9.8 https://github.com/nolimits4web/swiper/commit/9dad2739b7474f383474773d5ab898a0c29ac178
generic_textual CRITICAL https://github.com/nolimits4web/swiper/commit/9dad2739b7474f383474773d5ab898a0c29ac178
cvssv3.1 9.8 https://github.com/nolimits4web/Swiper/commit/ec358deab79a8cd2529465f07a0ead5dbcc264ad
generic_textual CRITICAL https://github.com/nolimits4web/Swiper/commit/ec358deab79a8cd2529465f07a0ead5dbcc264ad
cvssv3.1 9.8 https://nvd.nist.gov/vuln/detail/CVE-2021-23370
generic_textual CRITICAL https://nvd.nist.gov/vuln/detail/CVE-2021-23370
cvssv3.1 9.8 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1244698
generic_textual CRITICAL https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1244698
cvssv3.1 9.8 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1244699
generic_textual CRITICAL https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1244699
cvssv3.1 9.8 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBNOLIMITS4WEB-1244697
generic_textual CRITICAL https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBNOLIMITS4WEB-1244697
cvssv3.1 9.8 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1244696
generic_textual CRITICAL https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1244696
cvssv3.1 9.8 https://snyk.io/vuln/SNYK-JS-SWIPER-1088062
generic_textual CRITICAL https://snyk.io/vuln/SNYK-JS-SWIPER-1088062
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2021-23370
https://github.com/nolimits4web/swiper/blob/master/CHANGELOG.md#651-2021-03-29
https://github.com/nolimits4web/swiper/commit/9dad2739b7474f383474773d5ab898a0c29ac178
https://github.com/nolimits4web/Swiper/commit/ec358deab79a8cd2529465f07a0ead5dbcc264ad
https://nvd.nist.gov/vuln/detail/CVE-2021-23370
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1244698
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1244699
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBNOLIMITS4WEB-1244697
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1244696
https://snyk.io/vuln/SNYK-JS-SWIPER-1088062
GHSA-p3hc-fv2j-rp68 https://github.com/advisories/GHSA-p3hc-fv2j-rp68
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/nolimits4web/swiper/blob/master/CHANGELOG.md#651-2021-03-29
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/nolimits4web/swiper/commit/9dad2739b7474f383474773d5ab898a0c29ac178
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/nolimits4web/Swiper/commit/ec358deab79a8cd2529465f07a0ead5dbcc264ad
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2021-23370
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1244698
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1244699
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBNOLIMITS4WEB-1244697
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1244696
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://snyk.io/vuln/SNYK-JS-SWIPER-1088062
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.81766
EPSS Score 0.0154
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-12T01:59:02.382908+00:00 EPSS Importer Import https://epss.cyentia.com/epss_scores-current.csv.gz 38.6.0