CVE-2021-33195

PoC —

CVSS 3.1

7.3 high

EPSS

3%p88

Published

Aug 2, 2021 (Aug 2, 2021)

Modified

Jun 17, 2026

Description

Go before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS lookups that do not validate replies from DNS servers, and thus a return value may contain an unsafe injection (e.g., XSS) that does not conform to the RFC1035 format.

Vendors: golang netapp
Products: go, cloud insights telegraf agent
Weakness: CWE-74
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

NVD CVE.org GitHub PoCs EPSS (3.2%)

In the news0 stories

No ingested article mentions this CVE yet.