{"vulnerability": "CVE-2021-2378", "sightings": [{"uuid": "8d56b54f-8607-46e9-a951-63e9148e3fe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-23784", "type": "seen", "source": "https://t.me/cibsecurity/31768", "content": "\u203c CVE-2021-23784 \u203c\n\nThis affects the package tempura before 0.4.0. If the input to the esc function is of type object (i.e an array) it is returned without being escaped/sanitized, leading to a potential Cross-Site Scripting vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-03T21:23:31.000000Z"}, {"uuid": "ab722243-8f43-4543-9c4d-d1b1c2f8cfe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-2378", "type": "seen", "source": "https://t.me/cissp/3872", "content": "CVE-2021-2394 Score 9.8\nCVE-2021-2397 Score 9.8\nCVE-2021-2382 Score 9.8\nCVE-2021-2378 Score 7.5\nCVE-2021-2376 Score 7.5\nCVE-2021-2403 Score 5.3\nhttps://www.oracle.com/security-alerts/cpujul2021.html", "creation_timestamp": "2026-09-01T17:00:45.548313Z"}, {"uuid": "39ad751d-c2b6-4b1c-bbdd-48388dd80d60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-2378", "type": "seen", "source": "https://t.me/cissp/3872", "content": "CVE-2021-2394 Score 9.8\nCVE-2021-2397 Score 9.8\nCVE-2021-2382 Score 9.8\nCVE-2021-2378 Score 7.5\nCVE-2021-2376 Score 7.5\nCVE-2021-2403 Score 5.3\nhttps://www.oracle.com/security-alerts/cpujul2021.html", "creation_timestamp": "2026-09-02T01:04:32.315585Z"}]}