VDB
ALPINE-CVE-2021-42771
ALPINE-CVE-2021-42771
PUBLISHED
CVSS 7.800000190734863 HIGH
Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading to code execution.
Risk Scores
CVSS v3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alpine:v3.19 | py3-babel | 2.8.0-r3, 0, 2.1.1-r0 |
| Alpine:v3.21 | py3-babel | 2.8.0-r3, 1.3-r0, 2.1.1-r0 |
| Alpine:v3.16 | py3-babel | 0, 2.8.0-r3, 2.8.0-r2 |
| Alpine:v3.18 | py3-babel | 0, 2.1.1-r0, 2.3.4-r0 |
| Alpine:v3.20 | py3-babel | 0, 2.8.0-r3, 2.8.0-r2 |
| Alpine:v3.17 | py3-babel | 0, 2.8.0-r3, 2.8.0-r2 |
| Alpine:v3.22 | py3-babel | 2.8.0-r3, 0, 1.3-r0 |
| Alpine:v3.23 | py3-babel | 1.3-r0, 2.8.0-r3, 2.8.0-r2 |
Timeline
- Oct 20, 2021 CVE Published
- Dec 3, 2025 CVE Updated
- Apr 30, 2026 Distribution Patch