CVE-2021-28121: Virtual Robots.txt Project Virtual Robots.txt

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

Virtual Robots.txt before 1.10 does not block HTML tags in the robots.txt field.

Affected products

• Virtual Robots.txt Project Virtual Robots.txt: before 1.10 (fixed in 1.10)

Published 2021-08-12. Last modified 2026-06-17.