CVE-2021-42010 — CRLF log injection
Heron versions <= 0.20.4-incubating allows CRLF log injection because of the lack of escaping in the log statements. Please update to version 0.20.5-incubating which addresses t…
Published: 2022-10-24 · CVSS: 9.8 · CVSS 3.1
Heron versions <= 0.20.4-incubating allows CRLF log injection because of the lack of escaping in the log statements. Please update to version 0.20.5-incubating which addresses this issue.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7