{"id":"CVE-2021-22053","details":"Applications using both `spring-cloud-netflix-hystrix-dashboard` and `spring-boot-starter-thymeleaf` expose a way to execute code submitted within the request URI path during the resolution of view templates. When a request is made at `/hystrix/monitor;[user-provided data]`, the path elements following `hystrix/monitor` are being evaluated as SpringEL expressions, which can lead to code execution.","aliases":["GHSA-gx3f-hq7p-8fxv"],"modified":"2026-04-12T01:02:04.995747Z","published":"2021-11-19T16:15:07.657Z","references":[{"type":"ADVISORY","url":"https://tanzu.vmware.com/security/cve-2021-22053"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/spring-cloud/spring-cloud-netflix","events":[{"introduced":"4164297a89bada128f3363541abbf4151ecb558b"},{"fixed":"acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9"}],"database_specific":{"extracted_events":[{"introduced":"2.2.0"},{"fixed":"2.2.10"}],"cpe":"cpe:2.3:a:vmware:spring_cloud_netflix:*:*:*:*:*:*:*:*","source":"CPE_FIELD"}}],"versions":["v2.2.0.RELEASE","v2.2.1.RELEASE","v2.2.2.RELEASE","v2.2.3.RELEASE","v2.2.4.RELEASE","v2.2.5.RELEASE","v2.2.6.RELEASE","v2.2.7.RELEASE","v2.2.8.RELEASE","v2.2.9.RELEASE"],"database_specific":{"vanir_signatures":[{"signature_version":"v1","id":"CVE-2021-22053-02c5b996","source":"https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9","target":{"function":"receive","file":"spring-cloud-netflix-hystrix-stream/src/test/java/org/springframework/cloud/netflix/hystrix/stream/StreamSourceTestBase.java"},"digest":{"length":87,"function_hash":"147069515390022856780619286538412467610"},"deprecated":false,"signature_type":"Function"},{"signature_version":"v1","id":"CVE-2021-22053-0d96a799","source":"https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9","target":{"function":"assertData","file":"spring-cloud-netflix-hystrix-stream/src/test/java/org/springframework/cloud/netflix/hystrix/stream/StreamSourceTestBase.java"},"digest":{"length":194,"function_hash":"69546055923522052883667558485253569382"},"deprecated":false,"signature_type":"Function"},{"signature_version":"v1","id":"CVE-2021-22053-11f48a97","source":"https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9","target":{"function":"extractMetrics","file":"spring-cloud-netflix-turbine-stream/src/test/java/org/springframework/cloud/netflix/turbine/stream/TurbineStreamTests.java"},"digest":{"length":229,"function_hash":"3197330944502672651526600620241610180"},"deprecated":false,"signature_type":"Function"},{"signature_version":"v1","id":"CVE-2021-22053-142fe2f0","source":"https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9","target":{"function":"hello","file":"spring-cloud-netflix-hystrix-stream/src/test/java/org/springframework/cloud/netflix/hystrix/stream/StreamSourceTestBase.java"},"digest":{"length":45,"function_hash":"13827504915646211612557782714609800744"},"deprecated":false,"signature_type":"Function"},{"signature_version":"v1","id":"CVE-2021-22053-1ebc7a4f","source":"https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9","target":{"function":"intercept","file":"spring-cloud-netflix-turbine-stream/src/test/java/org/springframework/cloud/netflix/turbine/stream/TurbineStreamTests.java"},"digest":{"length":142,"function_hash":"219376724692126769430533596530332414196"},"deprecated":false,"signature_type":"Function"},{"signature_version":"v1","id":"CVE-2021-22053-23c2fcd3","source":"https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9","target":{"function":"contractVerifierMessageExchange","file":"spring-cloud-netflix-hystrix-stream/src/test/java/org/springframework/cloud/netflix/hystrix/stream/StreamSourceTestBase.java"},"digest":{"length":66,"function_hash":"14253886598330793045104837835542401897"},"deprecated":false,"signature_type":"Function"},{"signature_version":"v1","id":"CVE-2021-22053-278ee57f","source":"https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9","target":{"function":"getStatusText","file":"spring-cloud-netflix-turbine-stream/src/test/java/org/springframework/cloud/netflix/turbine/stream/TurbineStreamTests.java"},"digest":{"length":74,"function_hash":"163313135600569422645478190431452480487"},"deprecated":false,"signature_type":"Function"},{"signature_version":"v1","id":"CVE-2021-22053-27f5e8dd","source":"https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9","target":{"function":"receive","file":"spring-cloud-netflix-hystrix-stream/src/test/java/org/springframework/cloud/netflix/hystrix/stream/StreamSourceTestBase.java"},"digest":{"length":527,"function_hash":"199613895095013015275930686817002651503"},"deprecated":false,"signature_type":"Function"},{"signature_version":"v1","id":"CVE-2021-22053-3f32ec7f","source":"https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9","target":{"function":"assertEvent","file":"spring-cloud-netflix-hystrix-stream/src/test/java/org/springframework/cloud/netflix/hystrix/stream/StreamSourceTestBase.java"},"digest":{"length":88,"function_hash":"21300388223790117613649418462249406717"},"deprecated":false,"signature_type":"Function"},{"signature_version":"v1","id":"CVE-2021-22053-4d143ea5","source":"https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9","target":{"function":"converter","file":"spring-cloud-netflix-hystrix-stream/src/test/java/org/springframework/cloud/netflix/hystrix/stream/StreamSourceTestBase.java"},"digest":{"length":230,"function_hash":"277392907539268457156079163126820017801"},"deprecated":false,"signature_type":"Function"},{"signature_version":"v1","id":"CVE-2021-22053-4f4b80c5","source":"https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9","target":{"function":"main","file":"spring-cloud-netflix-hystrix-stream/src/test/java/org/springframework/cloud/netflix/hystrix/stream/StreamSourceTestBase.java"},"digest":{"length":91,"function_hash":"266551320276803931553020999884098329359"},"deprecated":false,"signature_type":"Function"},{"signature_version":"v1","id":"CVE-2021-22053-590b9fec","source":"https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9","target":{"function":"getBody","file":"spring-cloud-netflix-turbine-stream/src/test/java/org/springframework/cloud/netflix/turbine/stream/TurbineStreamTests.java"},"digest":{"length":74,"function_hash":"163313135600569422645478190431452480487"},"deprecated":false,"signature_type":"Function"},{"signature_version":"v1","id":"CVE-2021-22053-5fd42844","source":"https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9","target":{"function":"contextLoads","file":"spring-cloud-netflix-turbine-stream/src/test/java/org/springframework/cloud/netflix/turbine/stream/TurbineStreamTests.java"},"digest":{"length":623,"function_hash":"282609045887960088608657254384311742654"},"deprecated":false,"signature_type":"Function"},{"signature_version":"v1","id":"CVE-2021-22053-60eaeccc","source":"https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9","target":{"function":"assertOrigin","file":"spring-cloud-netflix-hystrix-stream/src/test/java/org/springframework/cloud/netflix/hystrix/stream/StreamSourceTestBase.java"},"digest":{"length":177,"function_hash":"62734605422891232261275790759535687333"},"deprecated":false,"signature_type":"Function"},{"signature_version":"v1","id":"CVE-2021-22053-7ae43165","source":"https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9","target":{"file":"spring-cloud-netflix-turbine-stream/src/test/java/org/springframework/cloud/netflix/turbine/stream/TurbineStreamTests.java"},"digest":{"line_hashes":["90145254924984011332354932868123807634","220693160014543210602000580773444817323","294972301328507122120809297070298357878","154822196157543491605971020732804520018","137845069407588992741823633241575701625","142068309851829102841995001297333415326","327901771601261165198081007967192888991","313725205405907763392988372389180712887","194295357380623551792232683372592286551","169391854534719243228713010174736057503","126929969500613698455773208306525519137","275308585525858780690795405613333454432","63858272724131377392983923927416201615","113342238756221675528650448930816487313","328677038142019129547850913141613511662","24819524818499563256864742383896403357","242704666992249415754770159793180697111","258944665157598696007305017861323902420","2648815562331205684417831165454512899","273329415841743509030914347507409617562","322323810891557588755087530492154385444","203666559519990706140172097832063882735","335560296575624871025980884489962454139","180856705056887664372230283400451217719","220077382695687994767845685376358008699","336908814082957278586237789345028997180","38320841371144008393814979231371975123","270893542320840938785704679621348157844","246320465417377653638136211153547494040","176733971188591822372653440929039851115","308445914141322662858023778140427222888","144601905844674982354074600737772134416","42037386700337205451521867523403087755","193771725642577539993769300670957239374","24394982154909663730627296717973360278","101376221853373222557090512443758219933","237421036306311247180749618802354152729","92722240337415897286870846521452314624","192256523032693957729932043772471709596","228260217512517077658647610282135049293","35659311992747751777461003061836005938","119797100765963437890779099817884286592","15926689543997405686450911799625259489","283284801095940523625360991940500896219","7458172040605872996879534579857816178","66876842651700927489242030803723765393","97564072401913195448012844762485003299","25583145874598898618582657222061869807","262165008687088299190841075201413595117","5434294546896129893699001988941215495","14765345149722348487722536088858181885","78237479036118041363840323582927324871","270321532367366022982579225091741191950","77902485896292618381685777080146855307","210288995103810679158639954476825306738","16374803769046094040789070597035738237","133772074417937950084054236410746485892","257935125944374630507063793725436127761","49884269863000014787782411453642670286","150610898632035764406383211383260995591","73081158692186389318904011582428750108","181451582915008655360079189018150312255","302948693043466300891546473534883473712","333672617258394838312932793660877082512","204436055611357200313796894155667099320","211285619466087402193996707533589002494","301098125586750407081571852489690180573","262016200704633311295566429490328893224","166947946974863443660291990655378413757","33182912644677039810997916301659579800","88339247802371102763684079961664865983","64742137665161684029538721924634004804","336646969385074310576767472869452925290","294297777805092618067388413231064719122","82336616230984805875622489251831322793","220884027888050459794073188008898298494","277945791546939720317374780028133432867","277661573421828460391378730644853748790","262586119875169092990446708208835093806","95622803794879004857005777639936566541","144012025510532601374437458723974016890","249809761816122563849268165962618935875","111488957020687446327284173898448756812","307776157546419518314880041443723483133","299630565837243991226877513069445236561","26261522195723081595887117440805879593","30779440197970092919254145444827567010","172151827709444548631362191340512174680","219604717265359222617084033477877567594","161284993587745239789899150423296096515","22224275012404714180733044056179303773","334672793058658255022094959800373807689","219164724685921683249605063979484261848","69312982664535296177258043526773293505","313549435370507117192765250676986323680","12831423852637307330304808019962805","106368413531806607742808103040360119692","242497007412370853294295730505525755514","256785882144412074067587597756301828998","59837888672644298823287927247185319286","166563183960387332575892357723571552914","114785164334162246898189433780298640197","262740597856367534406703607203957642665","35855368906459616198625567627951573956","85783818697471582137034974572910768666","27707338360337837888198494371477948096","75568462624186050610834321175128009348","134379556673375691151791734142716107423","182373425453589072285610330096353203630","236904865716522483851704443752872315652","137219017532449865730507914384497438554","155040019603906063331668158034127956491","55996399588806491533822398930550476294","206356555896915644482412294486751146436","251006384774316115882697697447759349783","337817913701237772249818636792851132510","234184485777759383239505058683341848057","114219754465410113365275679263778258149","199907454443378642888906312734808315022","125050612813281581797530059142762777327","82842495863089117082926377146542112272","113396672167138360195932787600485278403","124513829498203914758347663793588190941","316636935996896973734882107753361606267","207480330583400295227702235223742240201","253899812057785737405744613966997440747","37038933448063846459613842244546807694","141056322149024924511091599404387724550","1150533057489696042999728045497959563","29329931966865968159824759494739849285","71458827222320156992220698344471802351","93461432770308323737212549875972589302","213316785841539582043265605273341417179","25706175893953623246726902681818303734","45045043057693871396040716012448770383","135540763892879452507354487084159772251","108587633537507210242609878158511307392"],"threshold":0.9},"deprecated":false,"signature_type":"Line"},{"signature_version":"v1","id":"CVE-2021-22053-89332d50","source":"https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9","target":{"function":"close","file":"spring-cloud-netflix-turbine-stream/src/test/java/org/springframework/cloud/netflix/turbine/stream/TurbineStreamTests.java"},"digest":{"length":22,"function_hash":"45178275718944758447062834043860974696"},"deprecated":false,"signature_type":"Function"},{"signature_version":"v1","id":"CVE-2021-22053-907e9f7e","source":"https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9","target":{"function":"resolvedDestination","file":"spring-cloud-netflix-hystrix-stream/src/test/java/org/springframework/cloud/netflix/hystrix/stream/StreamSourceTestBase.java"},"digest":{"length":721,"function_hash":"228884836974702528620166921917574402257"},"deprecated":false,"signature_type":"Function"},{"signature_version":"v1","id":"CVE-2021-22053-aca77392","source":"https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9","target":{"function":"createMetricsData","file":"spring-cloud-netflix-hystrix-stream/src/test/java/org/springframework/cloud/netflix/hystrix/stream/StreamSourceTestBase.java"},"digest":{"length":68,"function_hash":"246292551476318380226822692827099592458"},"deprecated":false,"signature_type":"Function"},{"signature_version":"v1","id":"CVE-2021-22053-adf2d721","source":"https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9","target":{"function":"containsMetrics","file":"spring-cloud-netflix-turbine-stream/src/test/java/org/springframework/cloud/netflix/turbine/stream/TurbineStreamTests.java"},"digest":{"length":105,"function_hash":"212273756588899664007932731248660083447"},"deprecated":false,"signature_type":"Function"},{"signature_version":"v1","id":"CVE-2021-22053-ae9e71c4","source":"https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9","target":{"function":"create","file":"spring-cloud-netflix-hystrix-stream/src/test/java/org/springframework/cloud/netflix/hystrix/stream/StreamSourceTestBase.java"},"digest":{"length":118,"function_hash":"227457002733301553544057398011181132723"},"deprecated":false,"signature_type":"Function"},{"signature_version":"v1","id":"CVE-2021-22053-c21e16ec","source":"https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9","target":{"function":"getHeaders","file":"spring-cloud-netflix-turbine-stream/src/test/java/org/springframework/cloud/netflix/turbine/stream/TurbineStreamTests.java"},"digest":{"length":55,"function_hash":"254186825028858415518575788089571891685"},"deprecated":false,"signature_type":"Function"},{"signature_version":"v1","id":"CVE-2021-22053-d12b75cf","source":"https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9","target":{"function":"send","file":"spring-cloud-netflix-hystrix-stream/src/test/java/org/springframework/cloud/netflix/hystrix/stream/StreamSourceTestBase.java"},"digest":{"length":335,"function_hash":"185172091638644197159546896705455783299"},"deprecated":false,"signature_type":"Function"},{"signature_version":"v1","id":"CVE-2021-22053-de92337c","source":"https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9","target":{"function":"extract","file":"spring-cloud-netflix-turbine-stream/src/test/java/org/springframework/cloud/netflix/turbine/stream/TurbineStreamTests.java"},"digest":{"length":451,"function_hash":"105884125516598735245200931990071024799"},"deprecated":false,"signature_type":"Function"},{"signature_version":"v1","id":"CVE-2021-22053-e275f334","source":"https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9","target":{"file":"spring-cloud-netflix-hystrix-stream/src/test/java/org/springframework/cloud/netflix/hystrix/stream/StreamSourceTestBase.java"},"digest":{"line_hashes":["222408691498849221430322516096443031694","264336582674230359631274907716183995101","234850640459308252365397533773846846514","339997800452522575475452399644501962357","174157587823318966288185040767255640519","46170227168932139062625957482480971779","130978820422113207131728075198681537136","547442796719447748481855807714306179","78056666190403992230487245932621805163","238945409155807281660467489080326241226","110207852781199367684050999974510014900","310058352012021973518757005477320923061","277508938306293758785490889043002638031","201392256811906007919332512390620124152","228410155249152542093187727809065607371","15265052246379789765340565166026367874","252309388042159964448751277974025963556","334016824016098042258987293581159835247","302560689811873861304737115483164089239","271056924424184855360155114365643356201","280832059225172491515590999373391198160","299728499750540224303640145288307810385","223329397906571785247037849558461420041","84055235027806099189464956783710279810","213554096272143632619593485582518732970","271327369963863293367125555367419640343","71611449219346938321057197323421611139","83331156734795933584463169335123667504","333576032545432768314404607422047032254","5825657797117372012702358398214685284","101773535648839311546959110504780637511","87228277426986676987600319161920963570","332252994751041851453632671757156546875","165050622348662617489044286044330060624","184665270245284577006321264817381384580","278681554717346632593297548629912805950","278311573454808875413167112832312359645","325470798614742385725507103136033971517","128432193640170273113890757644796172","245999571245606441623085930239201442030","36265102626755358673964735459709814367","287779327990796657603197742934569281036","132035274010301935678083572189533475730","329129759155403023346737279299297797420","133471770002725725411083115902896189018","188900180309239302554962399146990180914","169549144741525361252916878118057890333","95149098753791979031954257791334147934","323891339545021177948605963505285610338","100217754730464488168697198657585327590","145439641358278391261236857690966112892","154340977194980410036102550683437509985","102776195788871613499887291427497550957","78166326143504841599058670041962988825","138056019759980589936411929483491991332","6261972536565341248418057699351417299","201290146504705788908733740108017507598","44829803556367895711556527043310023603","42832071484780700707999434397502948115","174048279950097865456338040097752977651","43640726708581251575489706248148385034","154492509760295403089317194656633546032","127539131601857017241231225719901237827","154491864074643073902278714335955953845","288212923963971098708799094371519328898","116979087020172428749715114082032243341","20212433137863034118916597038955111716","65417614017764933662148915860538125844","330684230260997501491683526743093279514","208486751396070536982713635510056308996","329088380984257797168513769621538534331","247968967056162432092631759219478486774","184876713705894646599654563045136088089","203899665356908621636895876354057369158","152343034253151857983641399824273447570","215971593568226313644165787028751384194","29070342244864672531123243225070326225","134084011291769129830506660799274407584","154686563858318608070911950695477026478","222611844683237571592084424757987952158","64552651762731706877256820818414869306","301080347243145831929025082005067954189","203426339289080402585216556224988873872","106896440413315976769532225271619031707","32215045324023739559501689378794890962","302356989825778479147931829970915841209","26023277695465395141751392961542064232","83861527231097759110880537788696575866","313325108013303942829059226290492831888","157056437570022532749019069689505429889","233124274336108042119303592366139579290","313649373809361452513815805798982798025","152931007691720157174395937965614537071","304689237978676062438787700362581280127","326620193768233390802772939921046314347","156528566330821287652436598633467215754","219849679195676872356148397973454149446","149924100230443945109656893091307027407","61278088014012028772238725724189546718","76333115879818590259947889744825163708","148225620028733763936009931793178591278","69043773533432606181062807357605730931","246868491484633236470552484329039091270","11905228690193316406899556023427446102","168938628850711120099134415322052894071","162525683819943468447125488788088318561","298288567551063792361356740822261951079","338740696082427032379925797789091488992","194173758055782845097881244299636621559","120831003248371860480479230724487100451","114694186135962658436561462406184008213","263007951599768059219627039553166019080","96781915234279855520238347583718869973","78848422834167535908670201549881220919","249903201326947433449658030984405442237","243094739002901252632590297808779944884","38552987258332208232827634763103146092","334944410834435632238394195220516183100","87001364407293342968126126892288156363","1629371519237533925193262811043021831","114493347016833479385122989107250991698","211985229113820434938534949507853624881","28625992821694066692953253132940363725","27686510337561686228831571592067429471","175188562690678497618937957486306068583","261567415423002163128771624050911991468","117313684035350866103216509791937828002","242267161198319506800752380232932182133","177615874144798470731054238707907589224","257939192585496050622376530878818942481","84956596515743950844518518656630280932","286687054182527966878923075934758242010","201708924572732590844770370078756805794","159020787274385066049011092554520702106","118988703539672092402188858573489424659","254376014864044734080887348671244062959","328024478709571809379719771702951477145","185646339874662545593231734737669083696","310108014568152828450814530286960118868","225311358978625941115958070875829239881","168050714316986091874386905085899151576","43920164959883854238899096087032470491","219576519910111171557436639336366628328","18456780242002183878668356521005384536","33091143164019887274504989294720117420","176374558587485341314227272638013248080","268653692007465805334431353562235559286","299510020595723003458433639684758553354","276517477161212355079811502195313759253","57868107235874514055063797412930691139","24735648284985033096433079664408685758","267373420793770858560145798645985984940","207755601945091254250063954064774358720","165741307647131061158395594842040002528","34189915120043675365475810926679095421","180316570699073559982429773760717299109","75800596275658159321550501923187326432","186208998119066671591639251030126409386","311528489179258047074618262726410412136","134791481543290981548997123911495640302","227777173003276018835218355863255933524","71682771482736052003963484953457599658","6089807360111033833114166772592472785","265158330453706106516169532335166575748","313318469130993472965966328141783422304","89856334206181719171922088441328159341","304835978974301437309158401521818306086","329906942971676379778143390996516508611","251759582914531167259367232247728620842","204970926117735208983912209965846693070","54729141470096542568657971955251605083","135188255662261828008734143390581865444","33965333931606731080931958503875492682","103699471306575123464054498902439303668","39052330147909020146610904222451275168","289613734839076128696755815318963952932","227479179792892180484168232533555208542","170361224647780031139632753563411837311","37552992420950331109434071701910773883","262135777316244807973251513204255974188","67083026398427555306087474126973463758"],"threshold":0.9},"deprecated":false,"signature_type":"Line"},{"signature_version":"v1","id":"CVE-2021-22053-e2d47524","source":"https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9","target":{"function":"getRawStatusCode","file":"spring-cloud-netflix-turbine-stream/src/test/java/org/springframework/cloud/netflix/turbine/stream/TurbineStreamTests.java"},"digest":{"length":74,"function_hash":"163313135600569422645478190431452480487"},"deprecated":false,"signature_type":"Function"},{"signature_version":"v1","id":"CVE-2021-22053-eb2bd757","source":"https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9","target":{"function":"createJacksonConverter","file":"spring-cloud-netflix-hystrix-stream/src/test/java/org/springframework/cloud/netflix/hystrix/stream/StreamSourceTestBase.java"},"digest":{"length":170,"function_hash":"253396314502287802855671191785020268833"},"deprecated":false,"signature_type":"Function"},{"signature_version":"v1","id":"CVE-2021-22053-ed2e440b","source":"https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9","target":{"function":"getStatusCode","file":"spring-cloud-netflix-turbine-stream/src/test/java/org/springframework/cloud/netflix/turbine/stream/TurbineStreamTests.java"},"digest":{"length":74,"function_hash":"163313135600569422645478190431452480487"},"deprecated":false,"signature_type":"Function"},{"signature_version":"v1","id":"CVE-2021-22053-f2602f9e","source":"https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9","target":{"function":"NonClosingResponse","file":"spring-cloud-netflix-turbine-stream/src/test/java/org/springframework/cloud/netflix/turbine/stream/TurbineStreamTests.java"},"digest":{"length":51,"function_hash":"216190859915552726671707505792069809036"},"deprecated":false,"signature_type":"Function"},{"signature_version":"v1","id":"CVE-2021-22053-f2831210","source":"https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9","target":{"function":"send","file":"spring-cloud-netflix-hystrix-stream/src/test/java/org/springframework/cloud/netflix/hystrix/stream/StreamSourceTestBase.java"},"digest":{"length":129,"function_hash":"12354929864459087941458055486382457063"},"deprecated":false,"signature_type":"Function"},{"signature_version":"v1","id":"CVE-2021-22053-fa1ba95b","source":"https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9","target":{"function":"PatchedStubMessages","file":"spring-cloud-netflix-hystrix-stream/src/test/java/org/springframework/cloud/netflix/hystrix/stream/StreamSourceTestBase.java"},"digest":{"length":114,"function_hash":"55680073810184157588248523650417666513"},"deprecated":false,"signature_type":"Function"}],"vanir_signatures_modified":"2026-04-12T01:02:04Z","source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-22053.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}