CVE-2021-45029: Apache Shenyu

Critical severity, CVSS 9.8. EPSS: 6% chance of exploitation in the next 30 days.

Groovy Code Injection & SpEL Injection which lead to Remote Code Execution. This issue affected Apache ShenYu 2.4.0 and 2.4.1.

Affected products

• Apache Shenyu: version 2.4.0 only; version 2.4.1 only

Published 2022-01-25. Last modified 2026-06-17.