CVE-2021-21269: Keymaker Project Keymaker

Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Keymaker is a Mastodon Community Finder based Matrix Community serverlist page Server. In Keymaker before version 0.2.0, the assets endpoint did not check for the extension. The rust `join` method without checking user input might have made it abe to do a Path Traversal attack causing to read more files than allowed. This is fixed in version 0.2.0.

Affected products

• Keymaker Project Keymaker: before 0.2.0 (fixed in 0.2.0)

Published 2021-01-20. Last modified 2026-06-17.