CVE-2021-23392: Locutus

High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days.

The package locutus before 2.0.15 are vulnerable to Regular Expression Denial of Service (ReDoS) via the gopher_parsedir function.

Affected products

• Locutus Locutus: before 2.0.15 (fixed in 2.0.15)

Published 2021-06-08. Last modified 2026-06-17.