What’s Vulnerable › Vulnerabilities

CVE-2021-32568: Deserialization of Untrusted Data in zmister2016/mrdoc

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-09-06 · updated 2026-06-17
• Weakness: CWE-502

Description

mrdoc is vulnerable to Deserialization of Untrusted Data

Affected products

• zmister2016/mrdoc: through 0.7.0

References

• https://github.com/zmister2016/mrdoc/commit/bb49e1287700b4e7681eab544c61093821ce72f6
• https://huntr.dev/bounties/04fc04b3-2dc1-4cad-a090-e403cd66b5ad
• https://github.com/zmister2016/mrdoc/commit/bb49e1287700b4e7681eab544c61093821ce72f6
• https://huntr.dev/bounties/04fc04b3-2dc1-4cad-a090-e403cd66b5ad

Get alerted when CVE-2021-32568 or the next vulnerability affects your stack