# cve.now: X-stream

The newest entries naming X-stream as an affected vendor (up to 200), of 32 in all, 1 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2024-47072](https://cve.now/CVE-2024-47072.md): XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream (CVSS 7.5)
- [CVE-2022-41966](https://cve.now/CVE-2022-41966.md): XStream Denial of Service via stack overflow (CVSS 8.2)
- [CVE-2021-43859](https://cve.now/CVE-2021-43859.md): Denial of Service by injecting highly recursive collections or maps in XStream (CVSS 7.5)
- [CVE-2021-39150](https://cve.now/CVE-2021-39150.md): A Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling (CVSS 8.5)
- [CVE-2021-39152](https://cve.now/CVE-2021-39152.md): A Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling (CVSS 8.5)
- [CVE-2021-39140](https://cve.now/CVE-2021-39140.md): XStream can cause a Denial of Service (CVSS 6.5)
- [CVE-2021-39149](https://cve.now/CVE-2021-39149.md): XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.5)
- [CVE-2021-39148](https://cve.now/CVE-2021-39148.md): XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.5)
- [CVE-2021-39147](https://cve.now/CVE-2021-39147.md): XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.5)
- [CVE-2021-39146](https://cve.now/CVE-2021-39146.md): XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.5)
- [CVE-2021-39145](https://cve.now/CVE-2021-39145.md): XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.5)
- [CVE-2021-39141](https://cve.now/CVE-2021-39141.md): XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.5)
- [CVE-2021-39153](https://cve.now/CVE-2021-39153.md): XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.5)
- [CVE-2021-39151](https://cve.now/CVE-2021-39151.md): XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.5)
- [CVE-2021-39139](https://cve.now/CVE-2021-39139.md): XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.5)
- [CVE-2021-39154](https://cve.now/CVE-2021-39154.md): XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.5)
- [CVE-2021-39144](https://cve.now/CVE-2021-39144.md): XStream is vulnerable to a Remote Command Execution attack (CVSS 8.5, KEV)
- [CVE-2021-29505](https://cve.now/CVE-2021-29505.md): XStream is vulnerable to a Remote Command Execution attack (CVSS 7.5)
- [CVE-2021-21348](https://cve.now/CVE-2021-21348.md): XStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos) (CVSS 5.3)
- [CVE-2021-21349](https://cve.now/CVE-2021-21349.md): A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host (CVSS 6.1)
- [CVE-2021-21350](https://cve.now/CVE-2021-21350.md): XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 5.3)
- [CVE-2021-21351](https://cve.now/CVE-2021-21351.md): XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 5.4)
- [CVE-2021-21341](https://cve.now/CVE-2021-21341.md): XStream can cause a Denial of Service (CVSS 7.5)
- [CVE-2021-21342](https://cve.now/CVE-2021-21342.md): A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host (CVSS 5.3)
- [CVE-2021-21343](https://cve.now/CVE-2021-21343.md): XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights (CVSS 5.3)
- [CVE-2021-21344](https://cve.now/CVE-2021-21344.md): XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 5.3)
- [CVE-2021-21345](https://cve.now/CVE-2021-21345.md): XStream is vulnerable to a Remote Command Execution attack (CVSS 5.8)
- [CVE-2021-21346](https://cve.now/CVE-2021-21346.md): XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 6.1)
- [CVE-2021-21347](https://cve.now/CVE-2021-21347.md): XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 6.1)
- [CVE-2020-26258](https://cve.now/CVE-2020-26258.md): Server-Side Forgery Request can be activated unmarshalling with XStream (CVSS 6.3)
- [CVE-2020-26259](https://cve.now/CVE-2020-26259.md): XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling (CVSS 6.8)
- [CVE-2020-26217](https://cve.now/CVE-2020-26217.md): Remote Code Execution in XStream (CVSS 8.0)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/x-stream
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.