CVE-2021-32832: Rocket.chat

Medium severity, CVSS 6.5. EPSS: 1.6% chance of exploitation in the next 30 days.

Rocket.Chat is an open-source fully customizable communications platform developed in JavaScript. In Rocket.Chat before versions 3.11.3, 3.12.2, and 3.13 an issue with certain regular expressions could lead potentially to Denial of Service. This was fixed in versions 3.11.3, 3.12.2, and 3.13.

Affected products

• Rocket.chat Rocket.chat: before 3.11.3 (fixed in 3.11.3); from 3.12.0, before 3.12.2 (fixed in 3.12.2)

Published 2021-08-30. Last modified 2026-06-17.