CVE-2021-28667

    Dashboard / Vulnerabilities / CVE-2021-28667

    CVE-2021-28667

    Published: 18 Mar 2021Last Modified: 9 Jul 2026

    Summary:

    Details: StackStorm before 3.4.1, in some situations, has an infinite loop that consumes all available memory and disk space. This can occur if Python 3.x is used, the locale is not utf-8, and there is an attempt to log Unicode data (from an action or rule name).

    References: https://stackstorm.com/2021/03/10/stackstorm-v3-4-1-security-fix/

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -7a8b13f58b88dba95b1e9bb21432af22b1b6f48a

    Affected versions

    v3.4.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2021-28667 | CVE-DB