CVE-2021-42771: Debian Linux

High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading to code execution.

Affected products

• Debian Debian Linux: version 10.0 only
• Pocoo Babel: before 2.9.1 (fixed in 2.9.1)

Published 2021-10-20. Last modified 2026-06-17.