# CVEs published 2021-12-04

1 CVE was published on December 4, 2021: 0 critical, 0 high. Days are UTC.

- [CVE-2021-4005](https://cve.now/CVE-2021-4005.md): Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii (CVSS 4.3, firefly-iii/firefly-iii · grumpydictator/firefly-iii)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-12-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.