CVE-2021-34801: Valine.js Valine

Medium severity, CVSS 5.3. EPSS: 1.7% chance of exploitation in the next 30 days.

Valine 1.4.14 allows remote attackers to cause a denial of service (application outage) by supplying a ua (aka User-Agent) value that only specifies the product and version.

Affected products

Published 2021-06-16. Last modified 2026-06-17.