CVE-2021-38244: Cbioportal Project Cbioportal

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

A regular expression denial of service (ReDoS) vulnerability exits in cbioportal 3.6.21 and older via a POST request to /ProteinArraySignificanceTest.json.

Affected products

• Cbioportal Project Cbioportal: up to and including 3.6.21

Published 2021-12-16. Last modified 2026-06-17.