CVE-2021-43961: Sonatype Nexus Repository Manager

Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days.

Sonatype Nexus Repository Manager 3.36.0 allows HTML Injection.

Affected products

• Sonatype Nexus Repository Manager: from 3.0.0, before 3.38.0 (fixed in 3.38.0)

Published 2022-03-17. Last modified 2026-06-17.