PatchTheCVEunicode vulnerabilities and fixes
Recent CVEs affecting unicode, with upgrade or downgrade steps. 3 tracked.
unicode has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2021-11-01. Highest priority: CVE-2021-42574 (score 58/100).
- CVE-2021-42694 HIGH 8.3 UPGRADE An issue was discovered in the character definitions of the Unicode Specification through 14.0
- CVE-2021-42574 HIGH 8.3 UPGRADE MITIGATE An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0
- CVE-2016-10578 HIGH 8.1 UPGRADE unicode loads unicode data downloaded from unicode.org into nodejs
FAQ
How do I fix unicode vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is unicode being exploited right now?
None of the tracked unicode CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which unicode CVE should I patch first?
CVE-2021-42574 currently ranks highest (58/100): An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0.