EUVD-2021-2271

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Tough Rust libraries have a vulnerability in target name sanitization before version 0.12.0, fixed now.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2021-41149	19 Oct 202122:39	–	circl
CNNVD	tough library 路径遍历漏洞	19 Oct 202100:00	–	cnnvd
CVE	CVE-2021-41149	19 Oct 202118:00	–	cve
Cvelist	CVE-2021-41149 Improper sanitization of target names in tough	19 Oct 202118:00	–	cvelist
Github Security Blog	Improper sanitization of target names	19 Oct 202120:16	–	github
NVD	CVE-2021-41149	19 Oct 202118:15	–	nvd
OSV	GHSA-X3R5-Q6MJ-M485 Improper sanitization of target names	19 Oct 202120:16	–	osv
Prion	Code injection	19 Oct 202118:15	–	prion
RedhatCVE	CVE-2021-41149	22 May 202521:21	–	redhatcve
vulnersOsv	tough-kms (>=0.2.0 <=0.3.3), tough-ssm (>=0.5.0 <=0.6.3) +1 more potentially affected by CVE-2021-41149 via tough (>=0.10.0 <=0.11.3)	19 Oct 202120:16	–	vulnersosv

[
  {
    "enisaIdVendor": [
      {
        "id": "a66f0604-50fe-3696-895e-09d15af5d1d5",
        "vendor": {
          "name": "awslabs"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "2c717cfe-c65e-3f7e-91ee-4a99fbf75026",
        "product": {
          "name": "tough"
        },
        "product_version": "< 0.12.0"
      }
    ]
  }
]

Source	Link
github	www.github.com/awslabs/tough/security/advisories/GHSA-x3r5-q6mj-m485
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-41149
github	www.github.com/awslabs/tough/commit/1809b9bd1106d78a51fbea3071aa97a3530bac9a
github	www.github.com/awslabs/tough
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

8High risk

Vulners AI Score8

CVSS 3.18.1 - 8.2

CVSS 28.5

EPSS0.00851

vulnerability target name sanitization rust library update framework