CVE-2021-33420: Replicator Project Replicator

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

A deserialization issue discovered in inikulin replicator before 1.0.4 allows remote attackers to run arbitrary code via the fromSerializable function in TypedArray object.

Affected products

• Replicator Project Replicator: before 1.0.4 (fixed in 1.0.4)

Published 2022-12-15. Last modified 2026-06-17.