Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.3

Gerapy Remote Code Execution in Versions Prior to 0.9.8

CVE-2021-43857 · published 4 years ago
Summary

Gerapy's distributed crawler management framework has a security weakness in older versions. This means an attacker could potentially execute malicious code on your system if they exploit this issue. Update to version 0.9.8 or later to fix the issue.

What to do
  • Update germey gerapy to version 0.9.8.
  • Update gerapy gerapy to version 0.9.8 or later.
Affected software
Ecosystem VendorProductAffected versions
pip germey gerapy < 0.9.8
Fix: upgrade to 0.9.8
– gerapy gerapy < 0.9.8
cpe:2.3:a:gerapy:gerapy:*:*:*:*:*:*:*:*
Original advisory text
Gerapy is a distributed crawler management framework. Gerapy prior to version 0.9.8 is vulnerable to remote code execution, and this issue is patched in version 0.9.8.
Gerapy is a distributed crawler management framework. Gerapy prior to version 0.9.8 is vulnerable to remote code execution, and this issue is patched in version 0.9.8.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
9.3 Critical
Exploitation
56% chance of attack within 30 days
Type
CWE-78OS Command Injection
Timeline
Published27 Dec 2021
Updated25 Oct 2026
First seen6 Mar 2026
Sources
GHSA-9w7f-m4j4-j3xw · GHSA
CVE-2021-43857 · NVD
Track software like this
Free during beta